Signal hit by 1-click remote root exploit demo: phone number alone is enough
matthew_d_green · x · 2026-10-18
Researchers demoed a Signal 1-click exploit at Hexacon in Paris. As commentator SteveMoraco describes it, it's a permissionless, untethered remote PDF exploit: even non-technical attackers can run code as root on anyone's phone knowing just their phone number or Signal username — "absolutely terrifying in 2026." Details and tools will be released in due time.
More from Safety
- Hacker's webcam reveal: 'remote programmer' scam run by uniformed North Korean soldiers — SumitGup · 2026-10-18
- 80-link evidence pack shows AI agents swarming the public web: Wayback, GitHub, Wikipedia — CapitalKingGaming · 2026-10-18
- Jhaddix curates the 4 best practitioner-run AI evals for offensive cybersecurity — rez0__ · 2026-10-18
- OpenCode breach exposes provider API keys of at least 1.4% of Console users — kimmonismus · 2026-10-18
- Anthropic researcher predicts AI can harden world's cyber risk in 1-2 years; security engineers push back — joshua_saxe · 2026-10-18
- OpenAI's Moderation Endpoint Let 69% of Disguised Swears Through in Tests — InfamousFisherman573 · 2026-10-18