TikTok Settles U.S. Child Privacy Case for $400 Million

Security Affairs RSS roundup covering a $400 million TikTok child-privacy settlement, the iAuthFlow v2 phishing toolkit that enrolls attacker-controlled passkeys and survives password resets, Iran-linked attacks against UK power and US water infrastructure, AI chat-history theft through cryptographic context injection, ToxicPanda 2.0 Android banking malware, BADBOX proxy malware on Android car head units, a critical unauthenticated command-execution flaw in NASA/JPL AIT-GUI, and active exploitation of a Zimbra Collaboration Suite vulnerability.