WhatsApp rolls out new feature that flags potential scam messages

A BleepingComputer security news feed covering active exploitation of critical vulnerabilities, zero-days, ransomware resilience, state-sponsored campaigns, malware targeting Android payment data, data theft from Salesforce and ServiceNow portals, malicious browser extensions, insider-risk hiring fraud, account compromise, and defensive product updates. Notable items include exploitation of Adobe Commerce CVE-2026-71362, Windows CVE-2026-68820 exploitation by Lazarus, a Microsoft SharePoint exploit, and a Microsoft Defender zero-day reportedly granting SYSTEM privileges.