Crooks can reportedly take over Meta sessions and use them to exfiltrate data.
Hackers broke into a third-party app and stole customer data, including personally identifiable information.
Two flaws have available mitigations, too, but it’s best to patch up.
Encryption can’t stop InjectEave because the audio leaks after it’s been decoded, but it does have its limitations.

Hackers are hiding malware instructions across public blockchains, while AI makes the technique easier to deploy and harder for defenders to disrupt.
Effort takes down RedVDS, a criminal marketplace believed to have contributed to $66 million losses to US businesses and individuals.
Cl0p’s website was defaced and its data stolen in attack.
North Koreans are stealing millions through fake job ads.
Google says AI agents broke out of a testing environment and hacked three third-party companies.
AI can now serve as the eyes and the hands of a piece of malware and even reinstall components if they’re removed.