#consent

101 Malicious npm Packages Add Developers’ WhatsApp Accounts to Groups Without Consent

Sep 29, 2026 // 16:50

Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber campaign dubbed PhantomSub. “The […]

The New Phishing Click: How OAuth Consent Bypasses MFA

May 19, 2026 // 14:34

In February 2026, a phishing-as-a-service (PhaaS) platform called EvilTokens went live. Within five weeks, it had compromised more than 340 Microsoft 365 organizations across five […]

Samsung Agrees to Stop Collecting Texans’ TV Viewing Data Without Consent

Mar 1, 2026 // 19:11

Samsung has reached a settlement with the Texas Attorney General to change how its smart TVs handle user data. Following a lawsuit alleging the company […]