What's happening in security.
The latest breaches, malware, and privacy stories from BleepingComputer, The Hacker News, Krebs on Security, and Malwarebytes Labs — short excerpts, always linking back to the original source. Last refreshed 07 Nov 2026 · 18:40.
Big Tech sues over California plan to limit kids’ scrolling
Social media platforms Google, Meta, and TikTok say California’s law violates their free-speech rights and interferes with parents’ decisions.
Attacks on supermarket and blood storage systems prompt US warning
US agencies have issued a warning about remote access to industrial refrigeration and cold-chain monitoring systems.
Phone return scams: where a real delivery and a fake return end up in a bill for you
Phone return scams are part of a very convincing social engineering method where the criminals get a phone and you get billed.
NIKKE PC launcher compromise put players’ passwords and personal files at risk
Players of Goddess of Victory: NIKKE are being urged to check their PCs after attackers tampered with files used by the game’s Windows launcher.
Scammers use AI-generated images of missing pets to extort owners
Scammers are using AI images to enhance their "I've found your missing pet and want money to return it to you" schemes.
Vizio, Samsung smart TVs seem to ignore tracking opt outs
If you thought that opting out of surveillance on your smart TV would give you your privacy back, think again.
The fake $750 Apple Cash reward that pays out nothing
A fake $750 Apple Cash offer uses scripted checks and fake countdowns. Affiliate marketers earn a commission; you get no reward.
mSecure tells users to change passwords but won’t say why [updated]
mSecure has urged users to protect information stored in its app, but hasn’t explained what happened or whether anyone’s data was exposed.
Chrome 157 fixes 213 security issues, including 7 critical flaws
Your browser may not have updated itself yet. Here’s how to check your version and install the fix manually.
A hidden backdoor put 1.3 million TV boxes to work for criminals
Videostrong planted a backdoor in more than 1.3 million Android set-top boxes and sold criminals access to the resulting botnet.
Hackers put porn on public billboards and claim it was “far too easy”
A hacking group called Leakers$ gained access to remote management software for billboards and used it to show porn.
Revolve card breach: 1.5 million people may be affected
Revolve says shoppers’ saved card details were stolen. A Texas filing suggests as many as 1.5 million people may be affected.
5 stars for sale: Inside the underground fake review trade
Underground sellers offer five-star reviews and charge up to $1,100 to make negative feedback disappear.
Applebee’s customer data exposed by password left in app
A researcher found an embedded password in Applebee’s app that exposed customer data.
A week in security (October 26 – November 1)
A list of topics we covered in the week of October 26 to November 1 of 2026
Fake PDF and search tools hijacked searches for 13.4 million Chrome users
319 Chrome extensions sent search queries through servers controlled by their operators, allowing them to see what users searched for.
Photo ID, bank checks, face scan? The UK’s age-check options
Ofcom has set out four possible age-verification methods for UK’s under-16 social media ban.
Binance hit by largest-ever crypto theft, with $6.3 billion stolen
Attackers stole about $6.3 billion in cryptocurrency from Binance in what analysts say is the largest crypto theft on record.