Signal launches Automatic Key Verification for encrypted chat key verification
Security Tool/Service
Summary
Hide ▲
Show ▼
Signal launched Automatic Key Verification, adding key transparency checks that help users confirm encrypted chats have not been intercepted and reduce man-in-the-middle and key-swapping risk across its messaging ecosystem.
Related Happenings
ClickLock Stealer macOS forced-interaction infostealer activity
Malware Activity
H score27
First: 16.07.2026 15:33
Last: 16.07.2026 15:33
Sources 1
About this happening:
ClickLock Stealer is a macOS information-stealing malware that uses a ClickFix-style paste into Terminal and a fake system dialog to coerce users into entering the...
ClickLock Stealer macOS forced-interaction infostealer activity
Malware ActivityAbout this happening: ClickLock Stealer is a macOS information-stealing malware that uses a ClickFix-style paste into Terminal and a fake system dialog to coerce users into entering the...
Discord defaults voice and video calls to end-to-end encryption
Security Tool/Service
H score58
First: 19.05.2026 23:37
Last: 19.05.2026 23:37
Sources 1
About this happening:
Discord has made end-to-end encryption (E2EE) the default for voice and video calls, strengthening privacy across a widely used communications platform. The rollout wa...
Discord defaults voice and video calls to end-to-end encryption
Security Tool/ServiceAbout this happening: Discord has made end-to-end encryption (E2EE) the default for voice and video calls, strengthening privacy across a widely used communications platform. The rollout wa...
Signal adds in-app phishing confirmations and warning messages
Security Tool/Service
H score14
First: 12.05.2026 22:40
Last: 12.05.2026 22:40
Sources 1
About this happening:
Signal added in-app confirmations and warning messages to slow phishing and social-engineering attempts that could expose accounts, chats, and contacts. Th...
Signal adds in-app phishing confirmations and warning messages
Security Tool/ServiceAbout this happening: Signal added in-app confirmations and warning messages to slow phishing and social-engineering attempts that could expose accounts, chats, and contacts. Th...
Suspected Russia-linked Signal phishing campaign targeting political accounts
Campaign
H score18
First: 28.04.2026 13:54
Last: 28.04.2026 13:54
Sources 1
About this happening:
A suspected Russia-linked phishing campaign on Signal compromised about 300 political-sphere accounts, exposing chats, ongoing conversations, and address books. Victim...
Suspected Russia-linked Signal phishing campaign targeting political accounts
CampaignAbout this happening: A suspected Russia-linked phishing campaign on Signal compromised about 300 political-sphere accounts, exposing chats, ongoing conversations, and address books. Victim...
Latest development: 12.05.2026 22:40
Signal introduced new in-app confirmations, warning messages, and educational prompts to help users resist phishing and social engineering attempts, including bogus Signal Support lures and requests to scan QR codes or share registration codes, PINs, or recovery keys.
Venom Stealer MaaS infostealer with persistent credential harvesting
Malware Activity
H score29
First: 31.03.2026 17:51
Last: 31.03.2026 17:51
Sources 1
About this happening:
The Venom Stealer infostealer now ships as malware-as-a-service (MaaS), expanding access to a persistent credential-theft tool and raising risk for Windows users. It s...
Venom Stealer MaaS infostealer with persistent credential harvesting
Malware ActivityAbout this happening: The Venom Stealer infostealer now ships as malware-as-a-service (MaaS), expanding access to a persistent credential-theft tool and raising risk for Windows users. It s...
Timeline
-
12.08.2026 14:21 2 articles · 2h ago
Signal introduces Automatic Key Verification for encrypted chats
Initial DisclosureSignal introduced Automatic Key Verification, a new key transparency feature that helps users confirm their encrypted chats have not been intercepted by checking that a phone number or username remains tied to the correct public encryption key. The system uses Cloudflare and Trail of Bits as independent auditors, complements manual safety number verification, and can be enabled in Settings > Privacy > Advanced or by selecting "Verify Automatically" on the safety number verification screen.
Show sources
- Signal adds new security feature to thwart man-in-the-middle attacks — www.bleepingcomputer.com — 12.08.2026 14:21
- Signal adds new security feature to thwart man-in-the-middle attacks — www.bleepingcomputer.com — 12.08.2026 14:21