- Published
- Source
- WIRED
- Reported by
- 3 publishers
- Filed under
- Data breaches, Attacks
Around 80 pages on WhatsApp’s website exposed instructions that were designed for its chatbot, including “WHAT NOT TO SAY.” Meta says a bug caused the issue.
Think your details were in it?
- Check your email address at Have I Been Pwned – it lists the breaches your details have appeared in.
- Change that service's password, and any other account that used the same one. A password manager makes every password unique.
- Turn on two-step verification, and expect scam messages that quote the leaked details to sound convincing.
More helpHave I Been Pwned (opens in a new tab)NCSC: top tips for staying secure online (opens in a new tab)
Also reported by 2 more publishers
Defender’s notebook
The attacker technique behind this story, in MITRE’s terms – and what to check in your own estate.
LLM Prompt Injection
ExecutionWhat a defender checks
- Treat everything an AI tool reads – email, web pages, documents – as untrusted input.
- Limit the data and tools an AI agent can reach, and give it its own least-privilege identity.
- Log prompts and tool calls into the SIEM so you can investigate.
Build the skillBlue Team Analyst · GenAI & AI Security Monitoring
© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.
MyCyberWay training
Blue Team Specialist
Breaches like this get investigated, not just reported.
Blue Team Specialist takes the Analyst curriculum and adds the investigator's work: one incident owned end to end, hypothesis-led threat hunting with MITRE ATT&CK and KQL, breach analysis, and a root cause report people can act on.
- Scope, attacker path and dwell time
- Threat hunting with ATT&CK and KQL
- Root cause analysis and reporting
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
