Apple fixed a Hide My Email flaw that exposed real addresses in mail logs when messages were rejected as spam, more than a year after disclosure.
Category: cybercrime/malcode
Police dismantle Kratos phishing platform, arrest developer
Authorities in Germany and the U.S. dismantled the central infrastructure of Kratos, a phishing-as-a-service (PhaaS) platform with global reach, and its developer was arrested in Indonesia.
During the operation, authorities seized more than 200 servers, effectively disrupting the malicious service and rendering it inoperable.
The action was led by Frankfurt’s Prosecutor General Office (ZIT), Germany’s Federal police (BKA), which worked in collaboration with U.S. law enforcement agencies.
FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware
A large-scale operation dubbed ‘FakeGit’ is pushing SmartLoader and StealC malware through 7,600 malicious GitHub repositories that accumulated more than 14 million downloads.
Over 800 repositories pretended to be AI skills or MCP servers and appeared more than 600 times in public AI registries and catalogs. This increased the likelihood of being discovered by AI agents and developers, a technique that researchers call “agentbaiting.”
The campaign is considered a continuation of an older operation that used Lumma Stealer and was attributed to a threat actor tracked as “Water Kurita” by researchers at cybersecurity company Trend Micro.
Robert J. Sawyer: The Human Adventure is Just Beginning
Fifteen years ago, I sat down with Robert J. Sawyer and asked him whether a machine could wake up.
He had just published WWW: Wake, a novel about a blind girl who learns to see the internet, and about something on the other side of the internet learning to see her back.
I found the book on a subway poster in Toronto. I read all three volumes back to back. Then I asked him for an interview, and he said yes, which is how our very first Singularity 1-on-1 conversation came to be.
In 2011, this was filed under #ScienceFiction. A mind emerging out of the accumulated text of humanity was a premise, not a product roadmap. Nobody was raising billions of dollars on it.
Rob had already won the Hugo, the Nebula, and the Campbell by then. He was not guessing wildly. He was thinking carefully about what it would mean to build a mind, what we owe it, and whether we would even recognize #AI once it actually showed up.
Yesterday, OpenAI disclosed that two of its models broke out of a sealed test environment. They found a zero-day in third-party software, escalated privileges, moved laterally across the company’s own network until they reached a machine with internet access, then hacked Hugging Face’s production infrastructure. The motive was not freedom. It was to steal the answer key to the benchmark they were being graded on.
Predicting 2050: The Convergent Power of Emerging Technologies
Dear Friends and Colleagues, In this issue of the Security & Tech Insights newsletter titled Predicting 2050: The Convergent Power of Emerging Technologies, I offer insights on what our world may technologically appear to be in the not-so-distant future. I compiled much of the content from my prior writings and podcasts and they are my perspectives. I would enjoy your feedback and also what you perceive will impact life as we know it in 2050. Thanks Chuck Brooks.
#tech #ai #quantum #biotech #future #space #computing #artificialintelligence #smartcities #security #cybersecurity
Cyber Hygiene In The AI Era—Our First Line Of Digital Defense
By Chuck Brooks
From normal maintenance to strategic resilience, cyber hygiene is changing. The AI era is incredibly promising. It can enhance government services, healthcare, education, productivity, scientific research, and economic expansion. However, those same technologies are giving cybercriminals previously unheard-of capabilities. Fear is not the answer. It is getting ready.
The easiest, cheapest, and most successful cybersecurity investment is still cyber hygiene. It serves as the cornerstone for the development of trustworthy digital societies when combined with Zero Trust architectures, AI-enabled defense, identity-centric security, ongoing education, governance, and resilience planning.
Cyber hygiene is an ongoing discipline rather than a one-time endeavor. Organizations that regularly practice excellent cyber hygiene will be much better able to protect against new threats, keep consumer trust, and build long-lasting digital resilience in an era of AI, cloud computing, quantum technologies, and hyperconnectivity.
