WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators
2026-10-20T13:23:59Z•6217ab39848e7d09d1e822899a0a0bc23757409a11fb78c1b5002fdf1d7f0306
CVE-2026-110936AI securityAPT28ClickFixDLL sideloadingGitHubMicrosoft 365WordPressactive exploitationadversary-in-the-middlebackdoorcloud securitycredential theftmalwarenpmphishingprivilege escalationransomware riskremote access trojanroutersstate-sponsoredsupply chain compromise
What happened
The feed reports multiple significant cybersecurity incidents, including active exploitation of vulnerabilities, software supply-chain compromises, credential theft, cloud tenant breaches, phishing, and state-sponsored APT activity. Notable items include ClickFix exploitation of Siemens Software Center (CVE-2026-110936), Plex2Shell exploitation, hijacked OVHcloud CLI releases, malicious npm packages, compromised ConnectWise Cloud Backup identities affecting Microsoft 365 tenants, and APT28 targeting NATO-related organizations.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 6217ab39848e7d09d1e822899a0a0bc23757409a11fb78c1b5002fdf1d7f0306
- Enrichment time
- 2026-10-20T13:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.