Social List - 2026 2025 2024 2023 2021 2020 2019 2018
H AI APT Attack BigBrothers BotNet Congress Cryptocurrency Cyber CyberCrime Exploit Hack ICS Incindent IoT Mobil OS Phishing Ransom Safety Security Social Spam Virus Vulnerebility | 2026 2025 2024 2023
DATE | NAME |
Info | CATEG. |
WEB |
|
13.10.26 |
Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation | The Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8.6 million ($9.62 million) for illegally relaying Grindr users' sensitive data to advertisers. The | Social | The Hacker News |
|
5.10.26 |
Microsoft’s X account hacked in crypto pump-and-dump scheme | On Thursday, unknown attackers hijacked the official Microsoft account on X, which has over 13 million followers, in what appeared to be a pump-and-dump scheme promoting a crypto token. | Social | BleepingComputer |
|
4.10.26 |
Signal adds encypted local backup support to iOS, desktop apps | Signal, the secure messaging app, released version 8.30, completing the rollout of its secure backups feature across all supported operating systems (Android, iOS, Linux, macOS, and Windows). | Social | BleepingComputer |
|
1.10.26 |
Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path | Security researchers have published the first public proof-of-concept for CVE-2026-86950 , an Apple CoreGraphics flaw Apple says may have been | Social | The Hacker News |
|
30.9.26 |
101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent | Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber | Social | The Hacker News |
|
15.9.26 |
Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports | A flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at | Social | The Hacker News |
|
30.8.26 |
Meta agrees to $18 billion settlement over teen social media harms | Meta has reached a proposed settlement worth up to approximately $18 billion with a bipartisan coalition of 52 attorneys generals over allegations that Facebook and Instagram were deliberately designed to encourage compulsive use by children and teenagers. | Social | BleepingComputer |
|
29.8.26 |
WhatsApp adds stronger two-step verification, multiple passkeys | WhatsApp has started rolling out several new account security features, including support for multiple passkeys and stronger two-step verification. | Social | BleepingComputer |
| 27.8.26 | TikTok reaches $400M settlement with US over COPPA violations | The U.S. Department of Justice announced a $400 million settlement with TikTok, ByteDance, and affiliated companies over allegations that they violated the Children's Online Privacy Protection Act (COPPA). | Social | BleepingComputer |
| 25.8.26 | WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android | Meta on Tuesday announced a set of WhatsApp account security features, including support for multiple passkeys to a single account to help users | Social | The Hacker News |
| 23.8.26 | TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit | The U.S. Department of Justice (DoJ) announced on Friday that ByteDance-owned TikTok will pay $400 million to settle a 2024 lawsuit | Social | The Hacker News |
|
20.8.26 |
Telegram Applied for .gram: What It Means for the Threat Landscape | Telegram has applied for the .gram top-level domain through ICANN’s 2026 round. If approved, Telegram usernames could become web-addressable domains with AI-generated websites. | Social | SOCRADAR |
|
16.8.26 |
WhatsApp rolls out new feature that flags potential scam messages | WhatsApp has begun rolling out a new optional "Scam Alert" feature, which uses a local machine learning model to warn users when scammers are targeting them. | Social | BleepingComputer |
|
12.8.26 |
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client | Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken | Social | The Hacker News |
|
31.7.26 |
Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks | Palo Alto Networks' Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch | Social | The Hacker News |
|
27.7.26 |
TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments | Cybersecurity researchers have flagged fresh malicious cyber activity by a threat actor with ties to East Asia targeting government entities in the | Social | The Hacker News |
|
25.7.26 |
Adobe Chrome extension flaw let sites access private WhatsApp chats | The Adobe Acrobat extension for Chrome could be used to access conversations and data rendered in WhatsApp Web without any form of authentication. | Social | BleepingComputer |
|
23.7.26 |
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data | Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over | Social | The Hacker News |
| 11.7.26 | Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws | Details have emerged about three now-patched security flaws in the OpenClaw personal artificial intelligence (AI) assistant that, if | Social | The Hacker News |
| 2.7.26 | WhatsApp rolls out usernames to help users hide their phone number | WhatsApp is finally allowing users to reserve usernames, a privacy feature that lets them hide their phone numbers from people not in their contact list. | Social | BleepingComputer |
| 2.7.26 | U.S. offers $10 million for hackers targeting WhatsApp, Signal users | The U.S. Department of State is offering up to $10 million for information that helps identify or locate members of the UNC5792 and UNC4221 hacker groups, which are linked to Russia's intelligence and military services. | Social | BleepingComputer |
| 29.6.26 | WhatsApp is Finally Getting Usernames to Help Keep Phone Numbers Private | WhatsApp on Monday officially announced the start of global reservations of usernames with an aim to protect the privacy of more | Social | The Hacker News |
| 27.6.26 | FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys | The FBI and CISA have updated their March warning about Russian intelligence phishing Signal accounts, and the operators have added a | Social | The Hacker News |
| 23.6.26 | WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool | Direct messages sent via WhatsApp are being used to distribute malicious Visual Basic Script (VBScript) files that lead to the installation | Social | The Hacker News |
| 21.6.26 | Telegram admits it couldn't police exam-leak channels, India tells court | India's government has told the Delhi High Court that Telegram was warned about two weeks before it was blocked, and that the platform admitted it could not proactively detect the channels selling leaked exam papers. Telegram says it cooperated and the ban is unlawful. | Social | BleepingComputer |
| 21.6.26 | India's Telegram ban hit the UAE too. Here's how to get around it | India has banned Telegram until June 22 after the app was used to circulate leaked exam papers. CEO Pavel Durov accuses telecom Reliance of BGP hijacking that disrupted the app as far away as the UAE. Here's what happened, and how to get around the block with an MTProto proxy. | Social | BleepingComputer |
| 15.6.26 | Sniper Dz Scams Target MENA Users via Fake Facebook Offers and Browser Alerts | Cybersecurity researchers have disclosed details of fraudulent activity targeting users across the Middle East and North Africa by employing various fraudulent Facebook accounts impersonating politicians, public figures, and trusted organizations. | Social | The Hacker News |
| 13.6.26 | WhatsApp says it disrupted new NSO spyware phishing attacks | WhatsApp has detected and stopped spear-phishing campaigns allegedly conducted by the NSO Group after investigating user reports of social engineering attacks. | Social | BleepingComputer |
| 13.6.26 | Over 20,000 Instagram accounts stolen in Meta AI support hack | Meta has revealed that 20,225 Instagram users had their accounts hijacked in a recent incident where attackers used Meta's AI-powered support system to reset passwords. | Social | BleepingComputer |
| 10.6.26 | Meta to Use Off-Site Business Data for Feed and AI Personalization | Meta on Tuesday announced that it will use information shared by other businesses to personalize users' feed and responses from its artificial | Social | The Hacker News |
| 6.6.26 | Instagram users locked out after Meta AI abused to steal accounts | Multiple Instagram users had their accounts hijacked after attackers convinced Meta's AI-powered support tools that they were the legitimate owners. | Social | BleepingComputer |
| 6.6.26 | WordPress malware campaign hides payloads in Steam profiles | Nearly 2,000 WordPress websites were infected with malware that relies on Steam Community profile comments to hide command-and-control (C2) data. | Social | BleepingComputer |
| 4.6.26 | WhatsApp, Slack Notifications Could Hijack Google Gemini on Android | A single poisoned notification from WhatsApp, Slack, SMS, Signal, Instagram, or Messenger could have hijacked Google Gemini's voice | Social | The Hacker News |
| 16.5.26 | Signal adds security warnings for social engineering, phishing attacks | Signal has introduced new in-app confirmations and warning messages as additional safeguards against phishing and social engineering attempts that could lead to various forms of fraud. | Social | BleepingComputer |
| 25.4.26 | UK probes Telegram, teen chat sites over CSAM sharing concerns | Ofcom, the United Kingdom's independent communications regulator, has launched an investigation into Telegram based on evidence suggesting it's being used to share child sexual abuse material (CSAM). | Social | |
| 6.4.26 | LinkedIn secretly scans for 6,000+ Chrome extensions, collects data | A new report dubbed "BrowserGate" warns that Microsoft's LinkedIn is using hidden JavaScript scripts on its website to scan visitors' browsers for installed extensions and collect device data. | Social | |
| 2.4.26 | WhatsApp Alerts 200 Users After Fake iOS App Installed Spyware; Italian Firm Faces Action | Meta-owned messaging platform WhatsApp said it alerted about 200 users who were tricked into installing a bogus version of its iOS app that was infected with spyware. According to reports from Italian newspaper La | Social | The Hacker News |
| 29.3.26 | TikTok for Business accounts targeted in new phishing campaign | Threat actors are targeting TikTok for Business accounts in a phishing campaign that prevents security bots from analyzing malicious pages. | Social | |
| 22.3.26 | FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks | Threat actors affiliated with Russian Intelligence Services are conducting phishing campaigns to compromise commercial messaging applications | Social | The Hacker News |
| 15.3.26 | WhatsApp introduces parent-managed accounts for pre-teens | WhatsApp has begun rolling out parent-managed accounts for pre-teens, allowing parents and guardians to decide who can contact them and which groups they can join. | Social | BleepingComputer |
| 15.3.26 | Meta adds new WhatsApp, Facebook, and Messenger anti-scam tools | Meta is introducing new anti-scam protections across its platforms, deploying systems and user-facing warnings to protect users against scammers. | Social | BleepingComputer |
| 14.3.26 | Meta to Shut Down Instagram End-to-End Encrypted Chat Support Starting May 2026 | Meta has announced plans to discontinue support for end-to-end encryption (E2EE) for chats on Instagram after May 8, 2026. "If you have chats that are | Social | The Hacker News |
| 12.3.26 | Dutch govt warns of Signal, WhatsApp account hijacking attacks | Russian state-sponsored hackers have been linked to an ongoing Signal and WhatsApp phishing campaign targeting government officials, military personnel, and journalists to gain access to sensitive messages. | Social | |
| 11.3.26 | Meta Disables 150K Accounts Linked to Southeast Asia Scam Centers in Global Crackdown | Meta on Wednesday said it disabled over 150,000 accounts associated with scam centers in Southeast Asia as part of a coordinated effort in partnership | Social | The Hacker News |
| 27.2.26 | Meta Files Lawsuits Against Brazil, China, Vietnam Advertisers Over Celeb-Bait Scams | Meta on Thursday said it's taking legal action to tackle scams on its platforms by filing lawsuits against what it calls deceptive advertisers based in Brazil, | Social | The Hacker News |
| 22.2.26 | Telegram channels expose rapid weaponization of SmarterMail flaws | Underground Telegram channels shared SmarterMail exploit PoCs and stolen admin credentials within days of disclosure. Flare explains how monitoring these communities reveals rapid weaponization of CVE-2026-24423 and CVE-2026-23760 tied to ransomware activity. | Social | |
| 21.2.26 | Ireland now also investigating X over Grok-made sexual images | Ireland's Data Protection Commission (DPC), the country's data protection authority, has opened a formal investigation into X over the use of the platform's Grok artificial intelligence tool to generate non-consensual sexual images of real people, including children. | Social | |
| 8.2.26 | EU says TikTok faces large fine over "addictive design" | The European Commission said today that TikTok is facing a fine because its addictive features, including infinite scroll, autoplay, push notifications, and personalized recommendation systems, are breaching the EU's Digital Services Act (DSA). | Social | |
| 7.2.2026 | Researcher reveals evidence of private Instagram profiles leaking photos | A researcher has released detailed evidence showing some Instagram private accounts exposed photo links to unauthenticated visitors. The issue was later fixed, but Meta closed the report as not applicable and did not respond to multiple requests for comment. | Social | |
| 3.2.26 | Researcher reveals evidence of private Instagram profiles leaking photos | A researcher has released detailed evidence showing some Instagram private accounts exposed photo links to unauthenticated visitors. The issue was later fixed, but Meta closed the report as not applicable and did not respond to multiple requests for comment. | Social | |
| 3.2.26 | New Microsoft Teams feature will let you report suspicious calls | Microsoft plans to introduce a call reporting feature in Teams by mid-March, allowing users to flag suspicious or unwanted calls as potential scams or phishing attempts. | Social | |
| 3.2.26 | New WhatsApp lockdown feature protects high-risk users from hackers | Meta has started rolling out a new WhatsApp lockdown-style security feature designed to protect journalists, public figures, and other high-risk individuals from sophisticated threats, including spyware attacks. | Social | |
| 28.1.26 | WhatsApp Rolls Out Lockdown-Style Security Mode to Protect Targeted Users From Spyware | Meta on Tuesday announced it's adding Strict Account Settings on WhatsApp to secure certain users against advanced cyber attacks because of who they | Social | The Hacker News |
| 25.1.26 | Microsoft Teams to add brand impersonation warnings to calls | Microsoft will soon add new fraud protection features to Teams calls, warning users about external callers who attempt to impersonate trusted organizations in social engineering attacks. | Social | |
| 23.1.26 | TikTok Forms U.S. Joint Venture to Continue Operations Under 2025 Executive Order | TikTok on Friday officially announced that it formed a joint venture that will allow the hugely popular video-sharing application to continue operating in the | Social | The Hacker News |
| 22.1.26 | Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading | Cybersecurity researchers have uncovered a new phishing campaign that exploits social media private messages to propagate malicious payloads, likely | Social | The Hacker News |
| 20.1.26 | Tudou Guarantee Marketplace Halts Telegram Transactions After Processing Over $12 Billion | A Telegram-based guarantee marketplace known for advertising a broad range of illicit services appears to be winding down its operations, according to new | Social | The Hacker News |
| 17.1.26 | Convincing LinkedIn comment-reply tactic used in new phishing | Scammers are flooding LinkedIn posts with fake "reply" comments that appear to come from the platform, warning of bogus policy violations and urging users to click external links. Some even abuse LinkedIn's official lnkd.in shortener, making the phishing attempts harder to spot. | Social | |
| 8.1.26 | WhatsApp Worm Spreads Astaroth Banking Trojan Across Brazil via Contact Auto-Messaging | Cybersecurity researchers have disclosed details of a new campaign that uses WhatsApp as a distribution vector for a Windows banking trojan called Astaroth in attacks targeting Brazil. | Social | The Hacker News |