Apple alerts exploit developer that his iPhone was targeted with government spyware 

Apple alerts exploit developer that his iPhone was targeted with government spyware 

Earlier this year, a developer was shocked by a message that appeared on his personal phone: “Apple detected a targeted mercenary spyware attack against your iPhone.”   “I was panicking,” Jay Gibson, who asked that we don’t use his real name over fears of retaliation, told TechCrunch.   Gibson, who until recently built surveillance technologies for Western…

Read More
Google says its AI-based bug hunter found 20 security vulnerabilities

Google says its AI-based bug hunter found 20 security vulnerabilities

Google’s AI-powered bug hunter has just reported its first batch of security vulnerabilities.  Heather Adkins, Google’s vice president of security, announced Monday that its LLM-based vulnerability researcher Big Sleep found and reported 20 flaws in various popular open source software. Adkins said that Big Sleep, which is developed by the company’s AI department DeepMind as…

Read More
Hackers exploiting SharePoint zero-day seen targeting government agencies

Hackers exploiting SharePoint zero-day seen targeting government agencies

The hackers behind the initial wave of attacks exploiting a zero-day in Microsoft SharePoint servers have so far primarily targeted government organizations, according to researchers and news reports. Over the weekend, U.S. cybersecurity agency CISA published an alert, warning that hackers were exploiting a previously unknown bug — known as a “zero-day” — in Microsoft’s…

Read More
US government sanctions tech company involved in cyber scams

US government sanctions tech company involved in cyber scams

The U.S. government imposed sanctions on Funnull, a company accused of providing infrastructure for cybercriminals running “pig butchering” crypto scams that have led to $200 million in losses for American victims.  On Thursday, the Treasury’s Office of Foreign Assets Control announced the sanctions, saying Funnull is “linked to the majority of virtual currency investment scam…

Read More
Mysterious hacking group Careto was run by the Spanish government, sources say

Mysterious hacking group Careto was run by the Spanish government, sources say

More than a decade ago, researchers at antivirus company Kaspersky identified suspicious internet traffic of what they thought was a known government-backed group, based on similar targeting and its phishing techniques. Soon, the researchers realized they had found a much more advanced hacking operation that was targeting the Cuban government, among others. Eventually the researchers…

Read More