Hardware wallet security promises concentrate on keys never leaving the device, but this breach exposed a different attack surface entirely: order records and delivery addresses. They touch no on-chain asset, yet they link a real name, a home address and a known holding to a single list, and they render an unverifiable data-retention claim hollow.
Eight certificates issued by eMudhra, a widely used certificate authority, were found to rely on compromised keys, prompting emergency updates across browsers, operating systems and software platforms. Cloudflare published an incident note describing the affected certificates and required action, and major technology vendors began blocking the implicated certificate chains. The event is significant because certificate authorities sit at the root of the trust system, so a key compromise undermines the validity of encrypted connections far beyond any single affected site.
Ethereum Layer 2 network Starknet has launched a privacy feature called Shadow Accounts, allowing users to isolate their main wallets from DeFi activity at the account level, making it harder for external observers to directly correlate on-chain behavior between the two. The feature is implemented through account abstraction and privacy routing mechanisms, but on-chain transactions themselves remain visible.
Cryptocurrency hardware wallet manufacturer Trezor issues security warning after its logistics partner suffers a data breach affecting approximately 14,000 customers. The company has initiated emergency response procedures and notified affected users.
Meta’s WhatsApp has officially launched username functionality, allowing users to chat without exchanging phone numbers. The feature will affect over 2 billion users worldwide.
Core Summary Meta has suspended an internal program that tracked employees’ computer usage to collect AI training data, after only two months of operation. The decision came following strong concerns raised by employees and privacy advocates. Overview According to the BBC, Meta had begun tracking employees’ computer activity records as a source for generating AI training data. The practice quickly triggered internal backlash, with workers concerned about privacy invasion and lack of transparency about how data was being used. ...
WhatsApp has launched a fully private incognito mode for AI chatbot conversations, ensuring chats are not used for training or data processing.
Meta smart glasses are criticized as an invasion of privacy, but sales data remains strong.
The US state of Texas has filed accusations against Netflix, alleging the platform illegally collected user data including children’s personal information.
Google Chrome has come under scrutiny after security researchers discovered that the browser is silently downloading AI models to users’ devices without providing a clear consent flow. The finding has sparked renewed debate about tech companies’ approach to user transparency in the age of AI-powered features. According to researchers, Chrome has been quietly downloading machine learning models in the background to power various on-device AI features — including smart text suggestions, image analysis, and autofill enhancements. The downloads occur automatically during browser updates, with no explicit notification or opt-in prompt presented to users. ...