WhatsApp has fixed a security flaw in its app for iOS and macOS. A zero-click exploit had been used by hackers to target users in spyware attacks.
Last week, Apple released iOS 16.8.2, iPadOS 16.8.2, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8 and macOS Ventura 13.7.8 updates to fix a zero-day threat. This was referred to as CVE-2025-43300, and the Cupertino company acknowledged that the exploit may have been used by hackers in an extremely sophisticated attack against specific targeted individuals.
Apple did not provide details about the attack, but WhatsApp says that attackers exploited this OS-level security flaw, along with a vulnerability in its own app to attack some users. The vulnerability, which has now been fixed by WhatsApp, has been tracked as CVE-2025-55177. Its description says that an incomplete authorization of linked device synchronization messages in WhatsApp could have allowed attackers to trigger processing of content from an arbitrary URL on a target’s device. Since it was a zero-click attack, it did not require any action from a user, such as clicking on a link. The attackers exploited both security flaws to compromise the victim's device, and steal data from it, including messages
Affected app versions include WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78, and WhatsApp for Mac v2.25.21.78. WhatsApp credited its own security experts for discovering and patching the exploit.
TechCrunch reports that Donncha Ó Cearbhaill, the head of Amnesty International’s Security Lab, called the attack "an advanced spyware campaign" that had been targeting users for over 90 days, since the end of May. It is not clear who the attackers were.
Margarita Franklin, a Meta spokesperson has confirmed that the vulnerability was detected and patched a few weeks ago. As for the impact, Meta says it notified affected WhatsApp users, and this number was less than 200.
Spyware campaigns against WhatsApp users aren't new. WhatsApp managed to disrupt a Paragon spyware campaign earlier this year, that had targeted journalists, civil society members in Italy. WhatsApp had sued the infamous NSO Group, which created the Pegasus spyware, for compromising the security of over 1400 users in an attack campaign in 2019. In May 2024, a U.S. court ordered the NSO Group to $167 million in damages to WhatsApp.
Thank you for being a Ghacks reader. The post WhatsApp fixes zero-click vulnerability in iOS and macOS which was used in targeted spyware attacks appeared first on gHacks Technology News.
Some makers of browser display promotional messages to users sometimes or regularly. This may be done to promote some of their other products or services, for advertisement, or, rather rarely, to provide users with helpful recommendations and tips.
These features are usually enabled by default, which means that you need to become active to turn them off. While some may like to keep all of these enabled in their preferred browser, many users might prefer a cleaner browser without that content.
Google is using promotions in its Chrome web browser on Windows. You may have encountered the "What's new page" of the browser already, which Google uses to highlight some of the new features of the browser. But Google may also use the feature to advertise new features or suggest that users sign in to their Google account.
Google has not added an option to the browser's settings to disable all promotional content. Good news is that there is a policy that you may set to disable it.
Note that it is easy enough to restore the status quo at any time.
Disable promotions in Chrome on WindowsHere is how that is done:
Chrome will stop showing promotional content on Windows. You can undo the change at any time by deleting the PromotionsEnabled Dword in the Registry Editor on Windows. Just right-click on the name and select the delete option from the context menu to do so.
Now You: what is your take on promotions, tips, and recommendations in browsers? Do they get on your nerves or do you find them useful? Feel free to leave a comment down below.
Thank you for being a Ghacks reader. The post How to disable promotions in Google Chrome for Windows appeared first on gHacks Technology News.
The Lux Collective et QUBE Development lancent la résidence de marque la plus attendue de Dubaï.
The Lux Collective, groupe hôtelier mondialement reconnu à l'origine de la marque emblématique LUX*, et son partenaire QUBE Development, promoteur immobilier de renom reconnu pour ses projets résidentiels à l'architecture singulière aux Émirats arabes unis, se sont récemment réunis pour poser officiellement et conjointement la première pierre d'ELIRE, un projet emblématique de résidences de marque à Dubaï, (...)
Experience dévoile sa Guest App : l'extension naturelle de son CRM à succès, pensée pour créer un lien privilégié avec ses clients et proposer un parcours séjour fluide et personnalisé.
Après avoir révolutionné la relation client hôtelière avec son CRM, Experience présente sa Guest App nouvelle génération, une application connectée nativement à son CRM, qui inaugure une nouvelle ère d'hospitalité augmentée : une expérience fluide, avant, pendant et après le séjour.
L'hospitalité réinventée Pour Experience, (...)
B&B HOTELS franchit une nouvelle frontière avec l'ouverture de son tout premier établissement au Luxembourg, faisant de ce pays le 18e territoire à accueillir le Groupe. Véritable carrefour économique européen, le Luxembourg attire les plus grandes institutions financières internationales, dynamisant continuellement son attractivité et offrant un terrain idéal pour l'expansion de B&B HOTELS.
Idéalement situé au cœur du quartier en pleine évolution de la Cloche d'Or, à proximité de nombreux (...)
La Fédération Nationale des Résidences de Tourisme, Apparthotels et Villages de Vacances (FNRT) tire un bilan satisfaisant de la saison touristique estivale en publiant les données de fréquentation du panel G2A/FNRT, sur la période du 1er juillet au 22 août 2025. Les réservations de dernière minute ont fortement dynamisé la saison, générant +7 points d'occupation depuis la mi-juillet, et la semaine du 15 août a atteint près de 90 % d'occupation. Campagne : espace le plus performant de l'été avec 82 % (...)
- Communiqué de presse / FNRT, bilan, appart'hôtel, résidence, village vacancesL'intégration au groupe HomeToGo, le groupe européen leader de la location de vacances, ouvre un nouveau chapitre pour Interhome : le spécialiste des locations de maisons et appartements de vacances bénéficiera notamment des solutions logicielles et technologiques de pointe proposées par HomeToGo. À la suite des modifications des conditions-cadre qui y sont liées, Sylvia Epaillard, co-CEO d'Interhome, a décidé de quitter l'entreprise. Jörg Herrmann, qui travaille depuis près de 20 ans chez Interhome et (...)
- Communiqué de presse / InterhomeL'été touche à sa fin, il est donc temps pour le Groupe Logis Hôtels de tirer le bilan de cette saison estivale. Le Groupe annonce une 7e saison de croissance consécutive, avec un chiffre d'affaires en hausse de 16% par rapport à l'année précédente sur la période du 1er juillet au 31 août. Des touristes qui préservent leur budget vacances et qui continuent de se faire plaisir : La hausse limitée du prix moyen de la nuit de +4%, conjuguée aux bénéfices du programme ETIK permettant de gagner 5,5% de cashback (...)
- Communiqué de presse / Logis, actualitéAu cœur de la vibrante rue Saint-Honoré, Mandarin Oriental, Paris a le plaisir d'annoncer la nomination de Nina Haradji à la supervision de l'offre culinaire du palace. Cette nomination marque un tournant pour cette adresse prisée des épicuriens parisiens, qui s'offre un souffle de renouveau, entre héritage et modernité. Dès aujourd'hui, les convives sont invités à découvrir les plats signature de la Cheffe, pensés comme des expériences sensorielles à part entière, où chaque détail sublime une vision (...)
- Communiqué de presse / Mandarin Oriental, Paris, nomination, gastronomieLa CNIL organise la première édition publique de ses Rencontres Informatique & Libertés, le mardi 30 septembre 2025. Destinée aux étudiants, avocats, DPO et universitaires, cette matinée sera l'occasion d'échanger avec la CNIL sur les liens entre la protection des données et d'autres branches du droit.
Un événement consacré à l'application concrète du droit de la protection des données Dans un contexte où les questions liées à la protection des données personnelles se complexifient et s'entrelacent avec (...)
Reports about damaged solid state drives (SSD) started to appear online shortly after the release of the August 2025 security updates for Windows. According to the report, the issue was caused after installation of the latest updates for Windows 11, version 24H2.
It was reproducibly according to the reports and involved copying large number of files or large files to the drives continuously. The SSDs would become inaccessible in worst case, which a reboot sometimes, but reportedly not all the time, would fix.
Microsoft confirmed that it was aware of the reports and investigating the issue. At least one manufacturer, Phison, also confirmed that it was investigating the issue.
Earlier this week, Phison published a statement on the issue. The company said that it could not reproduce the issue after running over 4,500 cumulative testing hours on drives that were said to be affected by the issue. Also, it stated that no customers or partners came forward with claims that their drives were affected during that time.
Microsoft published an update on the Admin Portal claiming that the Windows 11 update has nothing to do with the SSD problem. Microsoft writes: "After thorough investigation, Microsoft has found no connection between the August 2025 Windows security update and the types of hard drive failures reported on social media. As always, we continue to monitor feedback after the release of every Windows update, and will investigate any future reports."
The root cause of the issue remains unclear. Both Microsoft and Phison suggest that it could be related to another, yet unknown, issue that affects the systems of users who noticed the problems.
This pretty much leaves affected Windows users on their own in finding the root cause of the issue. Since the issue is caused by copying large amounts of data to an SSD that is at least 60 percent full, it is advised to avoid this scenario, if possible. This could involve using a different internal or external hard drive for larger write operations, if available, or postponing certain operations, such as the installation of a large game, or larger updates.
Thank you for being a Ghacks reader. The post Microsoft claims that recent Windows updates did not kill SSDs on some systems appeared first on gHacks Technology News.
Xbox has added a new feature called Cross-Device Play History. The feature syncs your game play history across all devices that you own, allowing you to quickly get back to recently played titles.
Microsoft had previewed the feature last month for Xbox Insiders, before releasing it for everyone today.
The important part is that it doesn't just sync between your computers, you can also access your play history on your Xbox console, or Windows handheld. This should be pretty useful for the ROG Xbox Ally that is launching in October.
On Windows computers, all you need to do is just open the Xbox PC app, the play history is listed under the Most Recent section, as well as the My Library page. Xbox console users can access their recently played games under the Play History tile. Microsoft's announcement says that this feature also syncs your cloud playable games across devices, including original Xbox classics to Xbox Series X/S exclusives, games that you own, and those that are available to stream/play via Game Pass plans.
Microsoft began testing an aggregated gaming library for Xbox a couple of months ago, adding support for storefronts like Steam, GOG, Epic Games, Battle.net, allowing users to access installed games quickly. The new My apps tab improves this experience. It adds a new tab in the Xbox PC app, which you can use to find your most used apps quickly. Players can quickly open browsers, storefronts, and utilities right from their Xbox library. The My Apps experience is now available for Xbox Insiders. The Xbox PC app now has better support for controllers and keyboards. The new navigation controls let you press A to select, B to go back, Y to search. The Xbox app should now scroll faster, looks cleaner.
Yesterday, Microsoft announced Xbox Cloud Gaming for Game Pass Core and Standard subscribers.
Thank you for being a Ghacks reader. The post Xbox now syncs your play history across devices, adds a My apps tab appeared first on gHacks Technology News.
Anthropic has announced some updates to its Consumer Terms and Privacy Policy. It will start training its AI models if users choose to accept the new policies, but you can opt out of it.
Up until now, Claude AI did not train its language models on user data. This policy is changing, your chats with the AI will be used to improve Claude. The company says this helps strengthen its safeguards against scams, abuse and other harmful content. I guess every company is playing the security card to collect user data. This change does not affect existing chats (providing you have not accepted the new terms), however it will apply to new and resumed chats, coding sessions after accepting the terms.
Users have until September 28. 2025 to accept the new terms. Accepting the new policies now brings them into effect immediately. You can opt out of Claude's AI training from the Privacy Settings page, which is https://claude.ai/settings/data-privacy-controls
You will see a pop-up like the one in the screenshot, it has an option that says "You can help improve Claude". This toggle is enabled by default. Turn it off. Click on Accept to agree to the new terms. If you do not opt out before then, your data will be used to train the AI.
New users will be asked to make their choice when they sign up for an account. In addition to this, Anthropic will also store your data for a long period. The official wording says, "To help us improve our AI models and safety protections, we’re extending data retention to 5 years." That seems like an unusually long time to hold on to user data. The new terms say that the data isn't stored if users do not agree to provide their data for model training.
Anthropic says it does not sell user data to third-parties. As The Verge notes, Claude AI will filter or obfuscate sensitive data by using some tools and automated processes.
These changes to their privacy policy aren't exclusive to the Claude Free plan, they also apply to the Pro and Max plans. However, these rules do not apply to so services under "Anthropic's Commercial Terms, including Claude for Work, Claude Gov, Claude for Education, or API use, including via third parties such as Amazon Bedrock and Google Cloud’s Vertex AI".
It's never good to make privacy changes opt-out by default. I'm not entirely sure why there is a deadline for opting out.
Vivaldi says it won't add AI features to its browser, while a respected AI service has turned heel on privacy.
What do you think about this move by Anthropic?
Thank you for being a Ghacks reader. The post Anthropic's new policies will let it train its AI models on user data, unless you opt out appeared first on gHacks Technology News.
Vivaldi has announced that it won't add AI features to its browser. The Norway-based company's CEO, Jon von Tetzchner, says users are becoming spectators as AI is taking over browsers.
Here is a quote from the article published on Vivaldi's blog,
"We’re taking a stand, choosing humans over hype, and we will not turn the joy of exploring into inactive spectatorship. Without exploration, the web becomes far less interesting. Our curiosity loses oxygen and the diversity of the web dies."
Tetzchner took some shots at Google and Microsoft for bundling AI into Chrome, and Edge and letting them perform actions on the user's behalf, scan what is on the screen, etc. He also pointed out how AI summaries are affecting web publishers, they lose traffic because users don't visit the website if they find the information in an AI-generated summary. Tetzchner warns that the future of web browsers is based on "who controls the pathway to information, and who gets to monetize you".
Vivaldi will "not add an LLM to add a chatbot, a summarization solution or a suggestion engine to fill up forms for you, until more rigorous ways to do those things are available."
He nailed it. OpenAI, Google, Microsoft and the others have created a lot of hype, they have convinced people that not using AI is inconvenient, slow, boring, and in the way of progress. Unfortunately, many people have fallen for such marketing tactics, without an ounce of care about their privacy.
Is Vivaldi making a mistake? I don't think so, a browser does not need a built-in AI. Most AI-powered features in browsers provide options to summarize web pages, contextual answers, offer quick access to the chatbot in a sidebar, and writing tools via generative AI. All of these things can be done via web versions of chat services.
I find AI features like search, translate, subtitle generation to be useful for learning and discovering things. When I want to use an AI, I open a new tab to get the information I want, not at the cost of privacy, i.e. running in the background. Sometimes I run the same query on multiple AI services to compare their answers, accuracy, etc. This may not be as convenient as clicking on a button, but it works. If you want to use an AI service as your search engine, just add it to your browser.
On the other hand, generative AI is of little value to me, but I'm sure others find it helpful along with features like chatting with the AI, automating tasks, etc. But the same logic applies here, if you want to use these features, you can do so directly on the AI's website. Why depend on a browser's button? You have the freedom to use whatever you want.
Some browsers use AI for special features, for example to manage tabs, tab groups, both Firefox and Edge do this, though their functionalities vary greatly. Such features can be useful for some users, while others may consider them as bloat.
Many people have voiced their concerns about Mozilla adding AI features in Firefox. I'm not particularly concerned about the recent AI additions to the browser, considering that it uses local language models. But I'll admit, the only reasons why I'm sticking to Firefox are uBlock Origin and Containers. If Mozilla were to shove cloud-based AI, or other bloat into Firefox, that would be a different story.
Not everyone needs or wants AI. And even for those who like AI, their needs may differ greatly. You can't please everyone, but you can't afford to anger users either, or you risk losing them. Remaining neutral is the sensible thing to do, just let the user decide what they want to do. It's their computer, and their browser. If you want to use AI services, use them, or don't. That's why I think Vivaldi's decision is sensible.
Thank you for being a Ghacks reader. The post Vivaldi says no to AI features appeared first on gHacks Technology News.
L'agence Api & You, qui accompagne depuis 29 ans les hôteliers, restaurateurs, spas, et vignerons, annonce la nomination de Pierre-Olivier Bouchot au poste de Directeur Commercial de la suite e-commerce Consoles dont la console SecretBox qui équipe déjà 1500 établissements en Europe.
Cette arrivée s'inscrit dans la quête d'excellence de l'agence, qui poursuit le développement de ses innovations e-commerce et de son expertise en conseil, marketing et communication.
Un parcours riche au service de (...)
La destination Paris Île-de-France confirme son attractivité touristique en 2025. Le premier semestre et la période estivale affichent des résultats positifs, marqués par le retour des clientèles internationales ainsi que des retombées économiques en croissance.
Un premier semestre 2025 solide De janvier à juin 2025, la région a accueilli 24,3 millions de visiteurs, soit une hausse de +3% par rapport à 2024. La clientèle internationale, avec 11,4 millions de visiteurs est en forte hausse (+9% vs 2024) (...)
Avec un chiffre d'affaires en hausse de +10 % et un taux d'occupation moyen de 85 %, Odalys Vacances enregistre une très belle saison estivale. Cette performance s'inscrit dans la continuité d'un hiver réussi et met en lumière l'évolution des habitudes de voyage des Français : séjours plus courts, attrait pour les destinations plus tempérées, et réservations de plus en plus anticipées.
Les 4 grandes tendances de l'été 2025 : Une haute saison en forte progression Taux d'occupation global de 85 %, en (...)
Un été parisien au niveau de 2023 Du fait du caractère exceptionnel de l'été 2024 pendant lequel se sont tenus les JOP, la comparaison de la saison estivale 2025 est principalement faite par rapport à 2023 en fonction des sources disponibles.
Suite à un premier semestre positif (+12% de nuitées selon Orange flux vision vs 2023 et +9% en arrivées aériennes vs 2023), l'été a légèrement marqué le pas en termes de croissance des nuitées touristiques tous hébergements confondus dans le Grand Paris : -1 % au (...)
Dans un contexte national et international peu propice à la consommation, la destination Bordeaux continue d'attirer même si elle n'échappe pas, depuis le début de l'année, à une légère baisse de fréquentation par rapport à 2024, année reconnue comme un bon cru touristique. Pour l'activité loisirs comme pour le tourisme d'affaires, l'heure est à la priorisation des dépenses ; le transport et l'hôtellerie tirent leur épingle du jeu, au détriment des activités de loisir, de la restauration et des prestations (...)
- Communiqué de presse / Bordeaux, tourismeCertifié NF525, KrossBooking arrive sur le marché français avec une solution tout-en-un dédiée.
Déjà largement implantée dans plusieurs pays européens, l'entreprise italienne met à disposition des professionnels du tourisme une solution tout-en-un pour piloter leurs réservations, canaux de distribution, gestion de propriétaires et autres opérations quotidiennes.
Pensée pour les hôtels indépendants, résidences touristiques, conciergeries et gestionnaires de locations saisonnières. La plateforme combine PMS, (...)