Discord adds end-to-end encryption to voice and video calls by default
2026-05-21T08:51:54Z•0f9c8f7ea0c7cc3daa94d2a1e8b30f9cd6ea89cb6d39bf5fe882c6d15ecddb36
CVE-2026-31635CVE-2026-45585DirtyDecryptPinTheftbitlockercardingdata-leakdiscorddrupalend-to-end encryptionfox-tempestgithub-breachgovernmenthuaweilinuxlocal-privilege-escalationmalware-signingmicrosoftpatch-mitigationsignalsupply-chaintelecom-outagetrojanized-extensionvscodeyellowkey
What happened
A batch of high-impact security stories: Discord enabled end-to-end encryption by default for all voice/video calls; multiple new Linux local privilege escalation flaws (PinTheft and DirtyDecrypt) with public exploit/PoC—Arch Linux especially at risk for PinTheft; Microsoft published mitigations (not a patch) for the YellowKey BitLocker bypass (CVE-2026-45585) recommending disabling autofstx.exe and enforcing TPM+PIN; and Drupal pushed an emergency security update. Major compromises and data dumps: a trojanized VS Code extension led to exfiltration of ~3,800 GitHub internal repositories; card‑
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 0f9c8f7ea0c7cc3daa94d2a1e8b30f9cd6ea89cb6d39bf5fe882c6d15ecddb36
- Enrichment time
- 2026-05-21T08:51:54Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.