Apple’s iOS 26.4.2 fixes a flaw (CVE-2026-28950) that let the FBI recover deleted Signal messages from notification logs. Update now to secure your private chats.
encryption
eSentire TRU uncovers STX RAT, a modular Trojan targeting finance with HVNC, AMSI Ghosting, and advanced encryption. Secure your perimeter—learn how it works.
New research reveals massive security gaps in AI API aggregators. From stolen crypto to leaked tokens, learn why your API hub might be a Man-in-the-Middle trap.
Signal's encryption is solid, but iOS is leaking your data. Learn how the FBI uses notification caches to recover deleted messages and how to stop it.
Microsoft has suspended VeraCrypt’s developer account, blocking critical driver signatures. Without a fix, future Windows updates and system boots are at risk.
Google has moved "Q-Day" to 2029. Discover the radical Android 17 roadmap to implement Post-Quantum Cryptography (PQC) and stop the Quantum Apocalypse.
Telegram's first 2026 update adds AI channel summaries powered by the private Cocoon network and a gorgeous Liquid Glass redesign for iOS.
The Tor Project is developing the Counter Galois Onion (CGO) algorithm to replace the vulnerable Tor1 protocol, enhancing security against tagging attacks and key reuse.
Microsoft revealed "Whisper Leak," a side-channel attack that infers AI chat topics from encrypted traffic (TLS) using packet size/timing patterns. High accuracy risk.
A Microsoft bug is forcing Windows 10/11 users into BitLocker Recovery Mode after updates. Affected Intel-based PCs need the recovery key to regain access to data.
iOS 26.1 drops Nov 3, with 26.2 beta soon after. Public attention focuses on 26.2 delivering US Passport integration in Wallet & RCS End-to-End Encryption.
A Reddit user lost 3TB of data after a Windows reinstall and automatic BitLocker encryption locked their drives without saving the recovery key.
Firefox has upgraded its local password manager encryption from 3DES-CBC to the stronger AES-256-CBC, enhancing user data security.
Following U.S. intervention, the UK government has reportedly dropped its demand for Apple to install a backdoor in iCloud, which could restore Advanced Data Protection.
A critical Ruby JWE vulnerability (CVE-2025-54887, CVSS 9.1) allows attackers to bypass authentication tag validation in AES-GCM, potentially leading to data decryption and integrity loss.
Proton introduces a new, open-source MFA app, Proton Authenticator, designed to separate 2FA codes from passwords for enhanced security with end-to-end encryption.
Trend Micro reports Gunra ransomware has expanded to Linux, employing 100 parallel encryption threads, partial encryption, and stealthy keystore methods to target global enterprises.
The EOL TP-Link Archer C50 router has a critical hardcoded DES key (CVE-2025-6982), allowing attackers to decrypt sensitive configuration files, including admin credentials and Wi-Fi passwords.
Proton introduces Lumo AI Assistant, an end-to-end encrypted AI tool that guarantees no user data is used for training, offers a "Ghost Mode," and runs on open-source models in Europe.
The UK government is reportedly reconsidering its secret demand for an iCloud backdoor after US criticism and Apple's decision to disable Advanced Data Protection for UK users.