What's happening in security.
The latest breaches, malware, and privacy stories from BleepingComputer, The Hacker News, Krebs on Security, and Malwarebytes Labs — short excerpts, always linking back to the original source. Last refreshed 28 Oct 2026 · 03:01.
Five election scams to watch out for
Election messages can ask you to register, donate, take a survey, or buy merchandise. Here’s how to check before you click or pay.
Artificial Intimacy: Love and lies in the age of AI
Our latest report reveals how AI is reshaping our relationships, blurring what feels authentic, and creating new ways for intimacy to be exploited.
The web’s having a rough week. Here’s how to browse safely
PHP and Node.js flaws, hacked sites, fake updates, and rogue certificates can put you at risk even on trusted websites. Here’s how to stay safe.
Samsung TVs without mics may listen through soundbars, researcher says
The most startling claim is that a Samsung TV without a built-in microphone may use a connected soundbar or Bluetooth microphone to listen to the room.
Popcorn Time’s forgotten updater left millions of devices exposed to hijacking
The update process for an abandoned streaming app could let attackers take over PCs. If you ever used Popcorn Time, check your devices.
AI Halloween videos: Who’s getting your photos?
Before you turn yourself into a zombie, check who’s getting your photos. Some Halloween AI sites offer little information about who's behind them.
Patient records exposed in Quest breach: What you need to know
Quest Diagnostics says a breach affected personal information and patient records. Here’s what patients need to know and what to do now.
A week in security (October 19 – October 25)
A list of topics we covered in the week of October 19 to October 25 of 2026
Resident Evil maker Capcom warns of phishing after 11.7 million records exposed
Exposed email addresses could put CAPCOM ID users at risk of phishing. Passwords were also changed without permission on 196 accounts.
Crime Stoppers chapter freezes tips after breach breaks anonymity promise
A Crime Stoppers chapter has stopped accepting tips after a breach exposed information about anonymous tipsters.
Facebook’s misleading privacy claims land Meta a $25 billion penalty
Users were misled about who could access their personal information on Facebook. Now Meta has been ordered to pay $25 billion.
Scammers are finding new ways to target your phone. Here are 5 ways to protect yourself
One in three people now tune out scam warnings, and scammers are counting on it.
Woman faces years in prison over a Cash App account she says she never opened
A woman faces up to six years in prison over a Cash App account she says someone opened using her stolen identity.
Delivery bots accused of illegally scanning customers
Two lawsuits allege delivery robots scanned customers’ faces without consent, linked scans to names and addresses, and used them to train AI.
WhatsApp’s chatbot was given hidden instructions to not mention privacy regulators
Hidden instructions told WhatsApp’s chatbot not to suggest privacy regulators to users struggling to delete their accounts.
PHP2Shell: Why many websites had to go offline
Many sites were taken offline so admins could patch two critical PHP flaws that could have let attackers run malicious code on their servers.
Fake Amazon Music x YouTube deal lures creators into a Google login trap
A convincing “creator portal” uses your own YouTube videos and viewing figures to steal your Google login.
Signal bug could let someone keep listening after you hang up
A flaw in Signal’s calling library could let another participant keep hearing you after you hang up. Update your app to get the latest fixes.