Toggle light / dark theme

Get the latest international news and world events from around the world.

Log in for authorized contributors

CloudZ malware abuses Microsoft Phone Link to steal SMS and OTPs

A new version of the CloudZ remote access tool (RAT) is deploying a previously unseen malicious plugin called Pheno that hijacks the Microsoft Phone Link connection to steal sensitive codes from mobile devices.

The malware was discovered in an intrusion that was active since at least January and researchers believe the threat actor’s purpose was to steal credentials and temporary passcodes.

Microsoft Phone Link comes installed on Windows 10 and 11, and allows using the computer to make and take calls, respond to texts, or view notifications received on the mobile device (Android and iOS).

Google now offers up to $1.5 million for some Android exploits

Google overhauls its Android and Chrome vulnerability rewards programs, offering bounties of up to $1.5 million for the most difficult exploits while scaling back payouts for flaws that artificial intelligence (AI) has made easier to find.

The top reward of $1.5 million is reserved for zero-click Pixel Titan M2 security chip full-chain exploits with persistence, the most technically demanding attack scenario in the program, while the same exploits, but without persistence, are also eligible for up to $750,000.

On the Google Chrome side, full-chain browser process exploits on up-to-date operating systems and hardware now come with rewards of up to $250,000, plus an additional $250,128 bonus for successfully exploiting MiraclePtr-protected memory allocations.

Vimeo data breach exposes personal information of 119,000 people

The ShinyHunters extortion gang stole personal information belonging to over 119,000 people after hacking the Vimeo online video platform in April, according to data breach notification service Have I Been Pwned.

Vimeo is a video hosting and streaming platform publicly traded on the Nasdaq stock market, with over 300 million registered users and over 1,100 employees, and reported revenues of $417 million for FY2024.

The company disclosed on April 27 that customer and user data had been accessed without authorization following a recent breach at Anodot, a data anomaly detection company.

Tencent, Alibaba in Talks to Invest in DeepSeek at $20 Billion-Plus Valuation

Chinese tech giants Tencent Holdings and Alibaba Group are in talks to invest in DeepSeek, the AI upstart that recently started fundraising for the first time, according to four people with knowledge of the conversations. DeepSeek, owned by Chinese hedge fund High-Flyer Capital Management, is…

This best-selling book is freaking out national security advisors

Our second video just won a Webby’s People’s Voice Award! → http://bit.ly/3OVCA1i.

Way more thoughts, our curated newsletter, and free books (until we run out) → https://80000hours.org/iabied/

If we build something vastly smarter than us, with goals we don’t share and without knowing how to control it, we lose. That’s the core claim in the book, and I don’t think it’s all that controversial. The real question is whether that’s where we’re headed.

If this matters to you, subscribe to AI in Context. We’re working through it too.

Correction: at 14:18 I say \.

Genome Music: Rare Disease Sequences Turn Into Songs

The performance garnered a huge media attendance, allowing the team to accomplish their goal of bringing attention to SCID. Frishkopf hopes to perform the piece in a concert in the future.

Genome Music Raises Rare Disease Awareness from Concerts to Contests

From a serendipitous idea to physical compositions, Kantipuly and her collaborators have demonstrated the power of music to bring people together and work for a good cause. Recently, the team connected with another composer, Casey McPherson, who also produces genetic music but in more modern styles and the founder of To Cure a Rose, a nonprofit organization focused on developing a cure for a rare genetic disease.

/* */