Money transfer app Duc exposed thousands of driver’s licenses and passports to the open web
An exposed Amazon-hosted server allowed anyone to access reams of customer data without needing a password.
cybersecurity
ICE says it bought Paragon’s spyware to use in drug trafficking cases
The acting director of U.S. Immigration and Customs Enforcement told lawmakers that the use of Paragon spyware is necessary to counter terrorists’ “thriving exploitation of encrypted communications platforms.”
De-fi platform Drift suspends deposits and withdrawals after millions in crypto stolen in hack
Blockchain trackers put the cryptocurrency heist in the hundreds of millions of dollars and is already on track to be the largest crypto theft in 2026 so far.
Apple releases security fix for older iPhones and iPads to protect against DarkSword attacks
The security update protects a raft of older iPhones and iPads from attacks linked to leaked hacking tools called DarkSword.
WhatsApp notifies hundreds of users who installed a fake app made by government spyware maker
The Meta-owned company said it identified around 200 users who were tricked into installing a fake version of WhatsApp that was actually Italian-made spyware.
Hasbro says it was hacked, and may take ‘several weeks’ to recover
The American toy-making giant noted that it was continuing to “implement measures to secure its business operations,” suggesting that the hackers may still be in the company’s systems.
Hacker hijacks Axios open-source project, used by millions, to push malware
A hacker inserted malware in Axios, an open-source web tool downloaded tens of millions of times weekly, in a widespread hack.
Health data giant CareCloud says hackers accessed patients’ medical records
CareCloud, a major provider of medical records storage, said hackers accessed one of its repositories of patient data earlier in March. It provides technology for more than 45,000 providers covering millions of patients.
Apple will hide your email address from apps and websites, but not cops
Demands for Apple customer records by federal agents in recent months underscore the privacy limitations of email.
European Commission confirms cyberattack after hackers claim data breach
The European Union’s top executive body has confirmed a cyberattack after hackers reportedly stole reams of data from the European Commission’s cloud storage.