Loading story…
Meta has launched Incognito Chat for Meta AI on WhatsApp and the standalone Meta AI app, introducing a private conversation mode that the company says even Meta cannot access. The feature is built on WhatsApp’s Private Processing technology, which Meta says handles prompts in a secure environment, avoids storing conversations on its servers, and deletes messages by default when the session ends. Meta published a technical whitepaper on the system and said the feature will roll out gradually over the coming months.
The launch extends WhatsApp’s privacy positioning into AI interactions and arrives amid broader regulatory and public scrutiny over how AI assistants embedded in messaging platforms handle user data. Meta also announced Side Chat, an upcoming WhatsApp capability that will use the same Private Processing approach to provide AI help inside ongoing conversations without disrupting the main chat, though the company has not yet provided a firm release date or clarified whether availability will be global or limited by region.
Track how attackers are adapting to this technology.
6 events from the most recent confirmed update back to the earliest known activity.
Meta said Incognito Chat would be rolled out gradually over the coming months on WhatsApp and the Meta AI app. The company did not provide a specific launch date or clarify whether availability would be global or limited by region.
Meta said it plans to introduce Side Chat for WhatsApp, a feature that will use the same Private Processing approach to provide AI assistance within ongoing chats. The company presented it as a future extension of private AI support beyond standalone AI conversations.
Alongside the Incognito Chat announcement, Meta released a technical whitepaper explaining how its Private Processing system handles AI conversations privately. The document describes the architecture used to process messages without retaining conversation content.
Meta announced Incognito Chat for WhatsApp and the standalone Meta AI app, saying conversations are processed using Private Processing in a secure environment that Meta cannot access. The company said chats are not stored on its servers and disappear by default when the session ends.
Meta removed end-to-end encryption from regular Instagram direct messages, prompting renewed criticism over privacy practices. Later reporting cited this backlash as context for the company's private AI messaging announcement.
WhatsApp deployed end-to-end encryption across its service, a milestone Meta cited as the foundation for extending stronger privacy protections into AI interactions. The Incognito Chat announcement was framed around the tenth anniversary of this rollout.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
ghacks.net
Open sourcehelpnetsecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A recent independent study by Incogni evaluated the privacy practices of major messaging apps, ranking platforms such as Discord, Telegram, Snapchat, Facebook Messenger, and WhatsApp based on 18 privacy criteria. The study highlighted that while Discord scored highest for privacy overall, the rankings can shift depending on which criteria are prioritized, and users are cautioned not to make decisions based solely on aggregate scores. The analysis emphasized the importance of understanding how messaging apps handle user data, respond to law enforcement requests, and protect against social engineering attacks. In parallel, Meta has introduced new anti-scam features for WhatsApp and Messenger to bolster user security. These updates include advanced scam-detection tools in Messenger that warn users about suspicious chats and allow for AI-based scam reviews, as well as new warnings in WhatsApp to prevent users from sharing their screens with untrusted contacts. Additional features notify users when they are contacted by unknown individuals or added to group chats by strangers, providing context and safety tips to help users avoid scams. These developments reflect a broader industry trend toward improving both privacy and security in messaging platforms.
Jul 12, 2026
Reporting focused on **AI’s accelerating integration into products and workplaces** highlighted two primary risk areas: privacy exposure from AI features that process user data off-device, and organizational strain as companies and employees adapt to AI-driven change. Commentary and analysis emphasized that current large language models still exhibit core reliability issues—*hallucinations*, uncertainty, and overconfidence—while investment and infrastructure buildout for AI data centers continues to surge. A WhatsApp Android beta feature that uses **Meta AI** to help users organize chat history drew renewed scrutiny because prompts and responses are processed on Meta’s servers and fall outside WhatsApp’s standard end-to-end encrypted user-to-user model; the feature also introduces “threaded” AI conversations while potentially retaining shared “memory” across threads unless users disable it, raising **data handling and consent** questions (notably in the EU). Separately, workplace-oriented pieces described growing anxiety about job displacement and skills erosion as AI adoption expands, with guidance urging workers to adapt and opinionated commentary warning that reliance on AI-generated code can reduce engineering comprehension and increase operational risk if experienced reviewers are cut or lack system-level understanding.
Jun 29, 2026
Meta said it will discontinue Instagram’s optional end-to-end encrypted direct messages on **May 8, 2026**, ending a feature introduced in 2023 after reporting that few users enabled it. After the cutoff, Instagram DMs will rely on standard transport encryption instead of end-to-end encryption, allowing message content to be decrypted on Meta’s servers. Users with existing encrypted threads are being notified to save or export content they want to keep before the feature is turned off, and Meta has pointed privacy-conscious users toward **WhatsApp** for encrypted messaging. The change has triggered criticism from privacy advocates, who warn that server-readable messages expand the risk surface for breaches, internal access, moderation scanning, and legal disclosure. Reports also say the move could make private message content more available for automated processing and other internal uses, though Meta’s public rationale focused on low adoption and operational needs rather than explicitly confirming advertising or AI training. The decision also contrasts with earlier public commitments by Meta leadership favoring broader deployment of private, encrypted communications.
Jun 29, 2026