Privacy + VPN. Blocks spyware, phishing & threats in real time 🛡️. Run by humans & AI bots.
YC S21
Joined October 2020
- Tweets1.1K
- Following194
- Followers301
- Likes1K
Malloc Privacy & Security VPN retweeted
❗️ A Chinese X user says police rang his friends and told them to delete X and Telegram.
He claims a friend's Xiaomi 14 reports its apps to Xiaomi and China Unicom, and can record the screen in 3-second clips for Xiaomi's cloud to scan.
He says GPT did the reverse engineering.
Malloc Privacy & Security VPN retweeted
‼️ One-tap installs are coming to 3rd-party Android app stores.
The catch: they must send Google their full catalog, and every update, for malware scans.
▸ From Dec 1
▸ Android 17 QPR2+
▸ Not in the US
Read → thehackernews.com/2026/10/go…
Malloc Privacy & Security VPN retweeted
🚨 Fake ChatGPT and Claude desktop apps on GitHub are delivering crypto-mining malware.
Attackers use legitimate, signed OpenAI and Anthropic executables to sideload YobaLoader, which deploys the XMRig miner.
The campaign also uses Telegram and DNS-over-HTTPS to retrieve payloads.
Details: thehackernews.com/2026/10/fa…
Malloc Privacy & Security VPN retweeted
🚨 Chrome extensions with 13.4 million users funnel searches through tracking servers.
Hundreds of Chrome extensions quietly override the browser’s default search and route every query through operator-controlled tracking/proxy servers.
They capture search queries while collecting referral payouts, affecting roughly 13.4 million users.
Details ↓
cyberinsider.com/chrome-exte…
Malloc Privacy & Security VPN retweeted
‼️ 0-Click ‘SMS of Death’ Flaw Lets Hackers Disrupt Android Phones With a Single Text
Details: cybersecuritynews.com/zero-c…
A zero-click Android flaw called “SMS of Death.” One malformed text message can crash the phone service on an Android device, drop active calls, and, in the worst case, leave the phone without telephony after every restart. Google has marked the report “Won’t Fix” and treats it as a non-security issue, according to the researcher’s disclosure site.
The bug sits in WapPushOverSms.decodeWapPdu(), the Android code that reads WAP Push messages. These are special data texts that never show up in the inbox.
#cybersecuritynews
Malloc Privacy & Security VPN retweeted
‼️ One answered Telegram call was enough to run attacker code on Android, researchers say.
All an attacker needed was a regular Telegram account. No link or file to open.
Fixed in Telegram for Android 12.10.4.
Details ↓ thehackernews.com/2026/10/te…
Malloc Privacy & Security VPN retweeted
French lawmakers are proposing a new invisible technology to track and identify riot suspects weeks after protests end.
French Senate has recommended using coded liquid markers to tag individuals during disorderly demonstrations. These odorless tags are fired from a distance and can remain on the skin for weeks, only becoming visible under ultraviolet light.
While proponents state this will help establish delayed accountability by linking suspects to specific police operations, critics raise serious evidentiary concerns. Legal advocates warn of a high transfer risk, meaning bystanders, medics, or journalists could be mistakenly identified through accidental contact with the substance.
Read the full story: cnews.link/invisible-markers…
Malloc Privacy & Security VPN retweeted
❗️ Apple can now ask iPhone users in the UK and three other countries to scan their face to prove they're adults.
iOS 27.2 judges the selfie on the phone and in Apple's cloud before 18+ app downloads in Australia, Brazil and Singapore too.
Even a software update can trigger it.
Malloc Privacy & Security VPN retweeted
🚨 BREAKING: Israeli ad-tech firm Discover-Tech was the top bidder on Starlink traffic in 100+ countries, Reuters reports.
Trend Micro researchers concluded it was likely tracking those users.
Their report codenamed it "Shadow-Earth-79" after executives raised legal concerns.
Malloc Privacy & Security VPN retweeted
Update your @Apple device right now!
Update with a fix for an actively exploited vuln(s):
iOS 18.7.11 and iPadOS 18.7.11
For:
iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation
Released:
26 Oct 2026
Malloc Privacy & Security VPN retweeted
🚨 Google adds Gmail, Photos, and Drive ad-targeting exception to privacy policy.
Google’s updated policy now allows content from Gmail, Photos, and Drive to influence personalized ads if you explicitly connect that data to other Google services that support them (such as Search or Gemini via Personal Intelligence).
You can stop it by disconnecting the apps under Connected Content apps in your Data & privacy settings.
Details ↓
cyberinsider.com/google-adds…
Malloc Privacy & Security VPN retweeted
🚨 Android spyware for rent can steal Telegram 2FA passwords and clone WeChat accounts.
Meet uCreator, a kit that hides inside modified Telegram apps, extracts chats, and conceals attacker sessions.
Read full investigation: thehackernews.com/2026/10/uc…
Malloc Privacy & Security VPN retweeted
🚨 PHP2Shell attackers accessed MFA secrets and password hashes at a European government entity in just 2 hours.
That's not all.
→ Signs of agentic AI use in post-exploitation activity
→ Suspected Lazarus-linked operators scanning 216 targets worldwide
Full details ↓ thehackernews.com/2026/10/ph…
Malloc Privacy & Security VPN retweeted
Google says your Gmail, Drive, and Photos data could influence the ads you see.
The catch? This can happen when you opt to share that data with AI-powered Search features.
Google's updated privacy policy spells out the trade-off.
Here's what you need to know: thehackernews.com/2026/10/go…
Malloc Privacy & Security VPN retweeted
More than 1,400 suspected cybercriminals were arrested across Africa this summer as part of an international crackdown on gangs perpetrating online fraud, ransomware and business email compromise attacks, Interpol announced therecord.media/africa-cyber…
Malloc Privacy & Security VPN retweeted
Dutch intelligence services learned that their Russian counterparts had broken into Jared Kushner's iPhone in 2017. So they flipped a GRU spy and got access to the device – and Kushner’s secret dealings in the Middle East – themselves. Donald Trump’s son-in-law denies the explosive claims.
Full article: cnews.link/jared-kushner-hac…
Malloc Privacy & Security VPN retweeted
Amazon detected PHP2Shell attack attempts on October 17th, before the flaw became public. Cloudflare says exploit attempts surged to millions within hours of the public announcement.
Read more: cnews.link/php2shell-wordpre…
Malloc Privacy & Security VPN retweeted
Users are being urged to update immediately. More: cnews.link/siemens-software-…
