LIVE · cybersecurity feed
Live wire
Employee benefits platform Paylogix says hackers stole financial and health dataU.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure BreachesCVE-2026-61979 · Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as VulnerableCVE-2024-28224 · A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClawAustralia Warns of Active Exploitation of Critical TeamCity Server FlawCVE-2026-21962 · Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical DataUS sanctions Iranian cyber actors as UK discloses power plant attackHackers target WordPress sites in miniOrange auth bypass attacksFake GTA 6 Extended Look and demo sites deliver an infostealerCVE-2026-63520 · Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
security

Meta adds three new features to keep WhatsApp accounts secure

Meta has added new security enhancements to WhatsApp, this time in the form of stronger two-step verification, additional information about calls from unknown numbers, and the ability to add multiple passkeys to the same account. New account security features (Source: Meta) “On WhatsApp, your conversations belong only to you and the people you’re talking to. It’s why we built end-to-end encryption

zeroday.news ·

WhatsApp has rolled out three new security features aimed at bolstering user account protection. These enhancements include a stronger two-step verification method, additional context for incoming calls from unknown numbers, and the capability to associate multiple passkeys with a single account.

The two-step verification process, which previously relied on a six-digit PIN, has been upgraded to support longer, alphanumeric passwords that can also incorporate special characters. This change is intended to make it more difficult for unauthorized parties to gain access to accounts.

For Android users, WhatsApp will now provide more information when a call is received from a number not saved in the user's contacts. Before the call is answered, the app will display details such as the country of origin for the unregistered number and whether the caller shares any common groups with the recipient. This aims to give users more time to assess the call's legitimacy before engaging, potentially helping to mitigate scam attempts.

Furthermore, WhatsApp has expanded its passkey functionality. While over a billion users have already adopted passkeys for login via fingerprint, Face ID, or screen lock, the platform now allows users to register multiple passkeys to the same account. This is particularly beneficial for individuals who use WhatsApp across different devices or operating systems, such as an Android phone and an iPhone, enabling seamless and secure access from various platforms. Users can manage their passkeys through the "Settings > Account > Passkeys" menu.

These latest security updates follow a series of recent enhancements to WhatsApp's security posture. In June, the platform introduced a warning screen that appears before users open a chat with an unfamiliar phone number, providing details like the country code and shared groups. In May, WhatsApp also launched "Incognito Chat," a feature designed to ensure privacy for conversations with Meta AI, preventing the platform itself from reading them. The company has affirmed its ongoing commitment to developing tools that empower users with greater control over their accounts and enhance overall security.

ShareXLinkedInWhatsAppFacebook

More News

view all →
breach

Sensitive Information Exposed in Nutex Health Data Breach

Nutex Health has informed the SEC that it recently detected unauthorized access and data exfiltration. The post Sensitive Information Exposed in Nutex Health Data Breach appeared first on SecurityWeek.

ai

Linux Foundation takes on TRACE, a hardware-backed runtime evidence specification for AI agents

The Linux Foundation has adopted TRACE, a new hardware-backed specification for generating runtime evidence for AI agents and confidential workloads. Developed by major tech companies, TRACE aims to provide a standardized, cryptographically verifiable record of an AI agent's execution environment, policies, and data handling. This initiative seeks to build trust and enable independent verification of AI operations across different cloud and computing infrastructures.

patch

Production data in testing is still common, and Tricentis’ CISO wants it gone

In this Help Net Security interview, Erika Dean, CISO at Tricentis, talks about keeping production data out of test environments and why she thinks the alternatives are good enough now. She explains how her team caught a prompt injection gap in red-teaming and held a release for a week until it was fixed. Dean describes what gets an AI vendor rejected, mostly vague answers about where data lives a

CVE-2026-60004

CISA Warns of Exploited Gitea Vulnerability

CVE-2026-60004 is a remote code execution vulnerability patched by Gitea developers in late July with the release of version 1.27.1. The post CISA Warns of Exploited Gitea Vulnerability appeared first on SecurityWeek.

vulnerability

AI vulnerability discovery scores the highest impact of 20 emerging risks

Risk managers, auditors and senior executives at 316 companies spent April and May ranking 20 threats they have not yet felt. AI discovery of cyber vulnerabilities came back first, according to Gartner. Three months earlier the same quarterly survey put information integrity risk at the top and left AI vulnerability discovery out of the top five. The exploit step stopped being hard Two things chan

ai

Hottest cybersecurity open-source tools of the month: August 2026

Presented here is a curated selection of noteworthy open-source cybersecurity solutions that have drawn recognition for their ability to enhance security postures across diverse settings. SkillSpector: NVIDIA’s open-source security scanner for AI agent skills SkillSpector is an open-source scanner from NVIDIA that reads an agent skill and tells you whether to install it. Point it at a directory, a