US cyber agency CISA had to build its incident playbook during the incident, agency reveals

US cyber agency CISA had to build its incident playbook during the incident, agency reveals

U.S. federal cybersecurity agency CISA said it did not have a prepared response plan for how it should handle a cybersecurity incident in May, after an investigative reporter notified the agency that a contractor had publicly exposed sensitive keys and credentials for accessing U.S. government systems. CISA, the Homeland Security unit tasked with defending federal…

Read More
Savi’s app aims to protect consumers from realistic AI scams like kidnappers demanding ransom

Savi’s app aims to protect consumers from realistic AI scams like kidnappers demanding ransom

Brothers Patrick and Ryan Coughlin, each with impressive careers in the tech industry (Patrick worked in national cyber defense, Splunk, and Cisco; and Ryan with consumer products at Apple and Spotify), have launched a new kind of security startup.  Savi Security seeks to protect everyday folks from the new crop of incredibly convincing AI-generated scams,…

Read More
Alibaba reportedly bans employees from using Claude Code

Alibaba reportedly bans employees from using Claude Code

China’s Alibaba will ban employees from using Anthropic’s programming tool Claude Code, starting on July 10, according to multiple reports.  Anthropic already prohibits Chinese companies, as well as foreign entities owned by those companies, from using its models. The company has reportedly been working to close loopholes that allow Chinese users to access Claude. According…

Read More
Politician who investigated spyware abuses had his phone hacked with Pegasus spyware

Politician who investigated spyware abuses had his phone hacked with Pegasus spyware

Security researchers have confirmed that a European politician had his phone hacked with the Pegasus spyware while serving on an investigatory committee probing abuses of the notorious surveillance tool. This has reigniting fresh controversy over governments abusing spyware to collect information about their critics. The researchers at the University of Toronto’s digital rights unit The…

Read More
Polymarket says hackers stole users’ funds

Polymarket says hackers stole users’ funds

Prediction market giant Polymarket confirmed that hackers stole funds from an unspecified number of users after a third party breach. In an X post on Thursday, Polymarket said that a compromise at a third party vendor allowed hackers to inject malicious code into its website “for some users.” The company said it has “contained” the…

Read More
Password manager maker LastPass says hackers stole customer support case data during Klue breach

Password manager maker LastPass says hackers stole customer support case data during Klue breach

Password manager maker LastPass is notifying customers that their personal information and customer support case records were stolen during a recent hack at one of its technology partners, marking the company’s latest data breach in recent years. In an email shared with TechCrunch from an affected customer, LastPass said the breach occurred at market research…

Read More