Full Daily Digest

The settlement underscores the critical importance of compliance with child privacy laws like COPPA and GDPR. TikTok's failure to implement robust age verification mechanisms and parental controls exposed millions of children to data collection risks. Attack paths include exploiting weak age gates and inadequate parental oversight features. Affected scope spans millions of young users globally, with significant reputational and financial repercussions for TikTok. Mitigation strategies should focus on enhancing age verification technologies, implementing stricter parental controls, and conducting regular audits to ensure compliance with privacy regulations. Organizations must prioritize child safety by adopting a proactive approach to privacy management.

The Hacker News · 2026-08-22 · Policy: TikTok settles for $400 million over U.S. child privacy law violations, accused of unlawfully collecting data from children under 13.

The banking trojans Manic, Grandoreiro, and ToxicPanda 2.0 demonstrate sophisticated evolution in their attack methodologies. Manic leverages offline mesh relay for data exfiltration, blending spyware and banking trojan functionalities. Grandoreiro employs DLL sideloading and anti-analysis techniques to evade detection, targeting Latin America and Europe. ToxicPanda 2.0 introduces automated click-based mechanisms and cloud-based distribution via Amazon AWS, expanding its target list to nearly 350 financial apps. These trojans exploit vulnerabilities in Android and Windows systems, enabling credential theft, remote control, and financial fraud. Mitigation strategies include robust endpoint protection, regular software updates, and user education on phishing and malware risks.

SecurityWeek · 2026-08-22 · Incidents: Banking trojans Manic, Grandoreiro, and ToxicPanda 2.0 evolve with advanced capabilities, targeting financial institutions and users worldwide.