Apple fixes bug that cops used to extract deleted chat messages from iPhones
The iPhone and iPad bug allowed law enforcement using forensic tools to read messages that had long been deleted by the Signal app.
Security
Anthropic’s Mythos rollout has missed America’s cybersecurity agency
Several US federal agencies are taking up Anthropic’s new cybersecurity model to find vulnerabilities, but one is reportedly not getting in on the action: the nation’s central cybersecurity coordinator. On Tuesday, Axios reported that the Cybersecurity and Infrastructure Security Agency (CISA) didn’t have access to Mythos Preview, which Anthropic has touted as a powerful tool […]
Cosmetics giant Rituals confirms data breach of customer membership records
The cosmetics retailer, which counts 41 million customers in its membership data, declined to provide an accurate total number of customers affected.
UK government says 100 countries have spyware that can hack people’s phones
The U.K.’s cybersecurity chief warned that U.K. businesses and critical infrastructure are underestimating the threat from spyware attacks and other cyberthreats, with more governments having access to the powerful surveillance technology than ever.
Anthropic’s most dangerous AI model just fell into the wrong hands
Anthropic’s Mythos AI model, a powerful cybersecurity tool that the company said could be dangerous in the wrong hands, has been accessed by a “small group of unauthorized users,” Bloomberg reports. An unnamed member of the group, identified only as “a third-party contractor for Anthropic,” told the publication that members of a private online forum […]
Ransomware negotiator pleads guilty to helping ransomware gang
A former employee of a cybersecurity firm pleaded guilty to aiding ransomware criminals to maximize their profits, with the goal of taking a cut of the ransom.
With US spy laws set to expire, lawmakers are split over protecting Americans from warrantless surveillance
Some lawmakers are calling for widespread reforms following years of surveillance scandals and abuses across successive U.S. administrations. But even if the spy law known as Section 702 expires on April 30, the government’s spy powers will not automatically lapse.
North Korea hackers blamed for $290M crypto theft
The hack against Kelp DAO is the largest crypto heist of the year so far.
Mastodon says its flagship server was hit by a DDoS attack
The DDoS attack against Mastodon’s flagship server comes less than a week after Bluesky was targeted with junk web traffic.
App host Vercel says it was hacked and customer data stolen
Vercel blamed its breach on an earlier hack at Context AI, which allowed hackers to hijack a Vercel employee’s account to steal customer data.