An Iranian activist exposed a phishing campaign targeting high-profile users in the Middle East, aiming to steal Gmail and WhatsApp credentials. The hackers used a fake website to capture sensitive information and potentially conduct surveillance on victims. The campaign's timing suggests possible ties to government-backed espionage efforts.

WhatsApp has deactivated 6.8 million accounts that were linked to criminal scam centers worldwide, as reported by its parent company Meta. The crackdown aimed to disrupt these scams, particularly those originating from Cambodia, and was conducted in collaboration with OpenAI.

A former security chief of WhatsApp, Attaullah Baig, has filed a whistleblower lawsuit against Meta, alleging that the company failed to address significant cybersecurity flaws that jeopardized user data privacy. The lawsuit claims that around 1,500 engineers had unrestricted access to personal user information, violating a previous Federal Trade Commission order. Meta has denied the allegations presented in the lawsuit.