#cybersecurity

OpenAI has introduced GPT-5.4-Cyber and outlined a three-part cybersecurity strategy that emphasizes controlled access, iterative deployment, and long-term defensive investment rather than a blanket alarm over current mo

Apple removed a fake Ledger app and the rewards app Freecash after reports tied one to major cryptocurrency theft and the other to sensitive data collection, intensifying scrutiny of how App Store review handles fast-ris

A new investigation says attackers used fake Apple pages in a hack-for-hire operation aimed at breaking into iPhones and Android devices, with iCloud backups among the targets.

The FBI says it has dismantled the W3LL phishing operation, seized key domains, and helped detain the alleged developer in Indonesia, targeting a service that enabled large-scale credential theft and fraud.

A breach at monitoring software company Anodot reportedly exposed data from at least a dozen customer organizations after attackers stole cloud access tokens, creating a new multi-company extortion event.

Treasury Secretary Scott Bessent and Federal Reserve Chair Jerome Powell reportedly encouraged major banks to use Anthropic’s Mythos model to detect vulnerabilities, even as the company remains in conflict with the Trump

OpenAI says a compromised third-party developer library touched part of its macOS app-signing workflow, prompting certificate rotation, fresh app builds, and mandatory client updates.

A Treasury meeting with major bank leaders following Anthropic’s latest AI model release points to growing concern that frontier systems are moving cybersecurity risk from theory into financial-sector planning.

Anthropic’s limited release of its Mythos Preview model has triggered a sharp debate over whether AI has crossed a meaningful threshold in offensive cyber capability, or whether the real story is long-neglected software防

A report cited by 9to5Mac says the FBI recovered deleted Signal messages from an iPhone by extracting data from the device’s notification database, underscoring the gap between app-level deletion and device-level traces.

A Trans Day of Visibility event in New York mixed music, social gathering, and operational security training as attendees searched for exposed personal information and worked to remove it from the internet.

Hackers allegedly stole and leaked sensitive Los Angeles Police Department documents, including personnel and internal affairs records, in a breach that officials say affected a digital storage system used by the City

Anthropic has limited access to Claude Mythos Preview to vetted organizations, saying the model can find vulnerabilities at superhuman scale but could also be misused to exploit them.

Anthropic says a preview version of its upcoming Mythos-class AI model will be used by major technology and open-source organizations to identify vulnerabilities in critical software infrastructure.

Authorities and researchers say Russian state-backed hackers compromised thousands of routers to redirect internet traffic and steal passwords and authentication tokens across roughly 120 countries.

Security researchers say a vulnerability in AP Systems microinverters could have allowed remote compromise and coordinated shutdowns across large numbers of internet-connected solar devices.

Lobbyists for major tech firms are backing Colorado legislation that would exempt broadly defined ‘critical infrastructure’ hardware from the state’s right-to-repair law, alarming repair advocates and security experts.

A new administration budget proposal would cut at least $707 million from CISA in 2027, sharply shrinking the agency’s resources as officials say it should refocus on network defense and critical infrastructure.

A new AI News report argues that modern AI systems create attack surfaces traditional security models were not built to handle, pushing security teams toward AI-specific controls and thinking.

A reposting wave after Anthropic’s reported Claude Code source leak has already been used to spread infostealer malware, underscoring how fast developer attention can be weaponized.