u/caramel_member

• OpenAI is reportedly in early stage talks to give a 5% stake in the ChatGPT developer to the US government as artificial intelligence companies attempt to smooth relations with Donald Trump’s administration. Source: https://www.theguardian.com/technology/2026/jul/02/openai-stake-us-government-ai-sam-altman
• Cybercriminals are posing as international law enforcement agencies in a phishing campaign designed to deliver ransomware attacks. As detailed by Bitdefender Antispam Lab in a blog post published on July 1, the phishing attacks target small businesses across Europe, Asia, the Middle East and North America with emails which claim to come from the ‘Cybercrime Investigation Unit’ at Interpol. Source: https://www.infosecurity-magazine.com/news/cybercriminals-pose-interpol/
• The massive FortiBleed credential theft campaign has been linked to the INC and Lynx ransomware operations, suggesting the stolen Fortinet credentials were intended to fuel future network intrusions. Earlier this month, a server containing credentials stolen from more than 73,000 Fortinet devices was discovered exposed on the internet. Researchers found the server contained downloaded FortiGate configuration files, credentials harvested from compromised devices, and infrastructure used to crack password hashes and perform credential-stuffing attacks. Source: https://www.bleepingcomputer.com/news/security/fortibleed-credential-theft-campaign-linked-to-lynx-ransomware/
• The Department of Homeland Security is investigating a cyberattack that compromised the Homeland Security Information Network (HSIN), a sensitive information-sharing platform used by federal, state, local, and private-sector partners. The intrusion, first reported by Nextgov, was carried out by an unknown threat actor in recent weeks and is believed to have occurred sometime between late May and early June, according to two people familiar with the matter who spoke on the condition of anonymity. Source: https://www.bleepingcomputer.com/news/security/dhs-confirms-hackers-breached-hsin-info-sharing-platform/
• A Swedish court on Wednesday ordered Alphabet's Google to pay about $1.5 billion in damages to PriceRunner, the price comparison business owned by payments platform Klarna for favouring its own shopping service in search results. Source: https://www.reuters.com/business/swedish-court-says-google-is-pay-15-billion-klarna-antitrust-damages-2026-07-01/
• An aggressive password-spraying campaign targeting Microsoft 365 environments generated more than 81 million login attempts over a two-week period. The threat actor tried to authenticate via Microsoft's Azure command-line interface (CLI) using still valid username and password combinations that had been exposed in past breaches. Source: https://www.bleepingcomputer.com/news/security/hackers-target-microsoft-365-accounts-with-81-million-login-attempts/
• Google, the FBI, and other organizations coordinated in a joint effort to dismantle NetNut, a massive residential proxy network. Also known as Popa, NetNut is believed to consist of more than 2 million Android devices such as smart TVs and streaming boxes, that have been infected through trojanized applications and malware such as Badbox 2.0. Source: https://www.securityweek.com/google-fbi-disrupt-netnut-residential-proxy-network-powered-by-millions-of-devices/

• Google is rolling out new privacy controls for Search services and Google Play, giving you more control over saved history and personalized recommendations. In an email titled "New privacy settings for Search services," sent to users and seen by Bleeping Computer, Google said it is "updating our settings to give you even more control over saved history and personalized recommendations across Google Search services and Google Play." Source: https://www.bleepingcomputer.com/news/google/google-releases-new-privacy-controls-for-activity-history-personalization/
• New website names and shames companies that still don’t offer passkeys to users. When it comes to securing accounts against hackers, passkeys are now widely considered the gold standard. Source: https://techcrunch.com/2026/06/24/new-website-names-and-shames-companies-that-still-dont-offer-passkeys-to-users/
• A range of AI-powered web browsers have been tricked into abandoning their safety guardrails and leaking user data after being convinced they were playing a game. Researchers at LayerX demonstrated the technique, which they named BioShocking, against six agentic browsers and plugins, including OpenAI's ChatGPT Atlas, Perplexity's Comet and Anthropic's Claude extension. Source: https://www.infosecurity-magazine.com/news/bioshocking-ai-browser-prompt/
• Cybernews researchers discovered an exposed database containing 24 billion records, including usernames, email addresses, plaintext passwords, and login URLs. The data appears to come from infostealer malware logs, records stolen from infected devices and collected from Telegram channels, breach compilations, and other sources. Source: https://cybernews.com/security/24-billion-credentials-data-leak/
• Meta is pausing an internal AI training program after sensitive data was accessible across the entire company, according to screenshots obtained by Business Insider. A screenshot showed that the leak exposed employees' private conversations, performance data, and transcriptions. The incident was classified as a SEV 2 on a scale of 0 to 5, with 0 being the most severe. Source: https://www.businessinsider.com/meta-ai-training-data-leak-exposed-employee-activity-across-company-2026-6
• The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a cloud computing account put to use by subsidiaries of Cambodia-based corporate conglomerate HuiOne Group, as the Treasury unveiled fresh sanctions against nine individuals and 26 entities linked to Prince Group. Source: https://thehackernews.com/2026/06/doj-seizes-huione-cloud-account-tied-to.html
• New Private Access Control Tokens (PACT) technology, developed alongside Mozilla, Google, Microsoft, and Shopify, pioneers a privacy architecture to secure interactions across the global Internet. Source: https://www.cloudflare.com/press/press-releases/2026/cloudflare-collaborates-with-leading-browsers-to-develop-a-privacy-first-protocol-for-the-global-internet/
• Some license plate cameras equipped with special sensors can collect a lot more information about drivers than previously thought, according to a new report. One product, defense contractor Leonardo's SignalTrace system — which produces sensors that can be fitted to existing license plate readers — can collect unique identifiers attached to phones, AirPods, and other Bluetooth-enabled devices, according to 404Media. Source: https://www.independent.co.uk/news/world/americas/license-plate-cameras-track-surveillance-b3001657.html

• A newly discovered data leak dubbed "FortiBleed" has exposed what appears to be a collection of Fortinet and FortiGate VPN credentials for 73,932 firewall URLs at organizations worldwide. Souce: https://www.bleepingcomputer.com/news/security/fortibleed-leak-exposes-fortinet-vpn-credentials-for-73-000-devices/amp/
• Microsoft says it has detected new self-propagating malware that spreads through USB drives in search of cryptocurrency credentials, which it then sends to attacker-controlled servers. Source: https://arstechnica.com/security/2026/06/microsoft-spots-new-self-propagating-malware-for-stealing-cryptocurrency/
• A data breach at a Texas state government department allowed hackers to take the driver’s license information and passport numbers of more than 3 million people, according to the state’s attorney general. Source: https://techcrunch.com/2026/06/18/texas-government-data-breach-allowed-hackers-to-steal-3-million-drivers-licenses-and-passports/
• AMD has quietly stripped a critical security feature from its lower-end CPUs, leaving unaware users potentially vulnerable to physical attacks. Following a months-long investigation tracked on GitHub, Ben Kilpatrick confirmed that the Transparent Secure Memory Encryption (TSME) feature — which protects CPUs against physical exploits that siphon data from connected memory chips — was suddenly no longer available on AMD CPUs outside the company's Pro lineup. Source: https://www.tomshardware.com/pc-components/cpus/amd-silently-removes-memory-encryption-from-consumer-ryzen-cpus-leaving-users-unaware-that-they-may-be-vulnerable-security-feature-vanishes-after-newer-agesa-firmware-amd-engineers-go-radio-silent-when-pressed-about-the-change
• As India cut off access to messaging app Telegram for a week over concerns about exam-related fraud, users turned to virtual private networks (VPNs) and alternative messaging apps in unusually large numbers. Source: https://techcrunch.com/2026/06/18/telegram-ban-in-india-sparks-a-rush-to-vpns-rival-apps/
• International law enforcement agencies cleaned nearly 15,000 malware-infected WordPress websites and took down more than 100 servers linked to the SocGholish botnet and the Evil Corp Russian cybercrime group. This joint action (supported by Europol and Eurojust) was part of Operation Endgame, a major law enforcement operation targeting cybercrime now aimed at disrupting a key infection chain linked to Evil Corp. Source: https://www.bleepingcomputer.com/news/security/law-enforcement-nukes-socgholish-malware-from-nearly-15-000-sites/
• Commercial printing and imaging technologies company Kodak has confirmed suffering a data breach after the ShinyHunters cybercrime group claimed to have stolen information from its systems. Kodak was named on the ShinyHunters website on June 15, with the hackers claiming to have obtained more than 2.2 million records of customer personal information and other corporate data. Source: https://www.securityweek.com/kodak-admits-data-breach-after-shinyhunters-hack-claims/ųųųą9

• Louis Rossmann is suing Samsung after the firm offers $330 refund for defective SSD while selling the drives on Amazon for $949 — spat over 4TB 990 Pro SSD is headed to court. Samsung has 60 days to give Rossman a working replacement before he takes the company to court in Austin Texas. Source: https://www.tomshardware.com/pc-components/ssds/louis-rossman-threatens-to-take-samsung-to-court-over-dead-4tb-990-pro-ssd-after-ssd-maker-failed-to-replace-the-drive-under-warranty
• Google DeepMind is worried about what happens when millions of agents start to interact. The firm is calling for more scientists to study the risks of multi-agent systems. Source: https://www.technologyreview.com/2026/06/11/1138794/google-deepmind-is-worried-about-what-happens-when-millions-of-agents-start-to-interact/
• This California city just approved the use of Flock drones as first responders, but residents are worried about 'militarization and surveillance'. Flock spreading its wings. Source: https://www.techradar.com/cameras/drones/this-california-city-just-approved-the-use-of-flock-drones-as-first-responders-but-residents-are-worried-about-militarization-and-surveillance
• How scammers use "scraped New York Times content" to trick security scanners — and exploit "free" Google Cloud links to flood your inbox. Scammers built a 12,704-server network which fooled filters. Source: https://www.techradar.com/pro/security/how-scammers-use-scraped-new-york-times-content-to-trick-security-scanners-and-exploit-free-google-cloud-links-to-flood-your-inbox
• Kyushu Electric Power Co., Inc. has disclosed a physical security incident that affects private data of more than 10 million customers. In an official announcement, the company explains that the IT staff regularly performs backups to manage server storage. Due to capacity constraints, on April 27 an external storage device was used for the task. Source: https://www.bleepingcomputer.com/news/security/japanese-energy-firm-loses-drive-with-data-of-109-million-clients/
• Oracle warned its corporate customers that there is a critical-rated vulnerability in its PeopleSoft software, which is used by large companies to manage payroll and human resources, a day after a cybercrime group took credit for abusing the flaw as part of a mass-hacking campaign. The company published the security advisory on Thursday after the hacking group ShinyHunters claimed to have breached more than 100 organizations that use PeopleSoft servers. Source: https://techcrunch.com/2026/06/11/oracle-warns-of-security-bug-that-hackers-abused-to-breach-100-companies/
• These are the countries moving to ban social media for children. Over the months, many countries have announced plans to restrict social media access for children and teens. Australia became the first to implement such measures at the end of last year, setting a precedent that other countries are now closely watching. Source: https://techcrunch.com/2026/06/11/social-media-ban-children-countries-list/

• Meta hastily patched a Meta AI chatbot security hole that allowed enterprising attackers to alter Instagram account passwords via prompt injection. Source: https://www.techradar.com/ai-platforms-assistants/meta-ais-recent-hack-is-a-terrifying-wake-up-call-for-anyone-who-puts-their-trust-in-ai-systems
• Spammers are flooding Reddit with fake posts designed to show up in AI search results. The spam campaign that doesn't want to sell you anything – it wants to train AI to recommend it. Source: https://www.techspot.com/news/112654-spammers-flooding-reddit-fake-posts-designed-show-up.html
• Hackers are turning up to offices and posing as IT support, FBI warns. Trend shows how criminals are resorting to surprisingly low-tech methods to carry out cyber attacks in the face of advanced AI defence systems. Source: https://www.the-independent.com/tech/security/hackers-cyber-security-fbi-b2987405.html
• GitHub just switched Copilot to metered billing, and developers are watching months of credits vanish in a single day. The token bill is due. Source: https://www.techspot.com/news/112628-github-switched-copilot-metered-billing-developers-watching-months.html
• Hackers could use poisoned WhatsApp and Slack notifications to take over your Google Gemini – and make it work on their behalf. Prompt injection works on Android notifications, as well. Source: https://www.techradar.com/pro/security/hackers-could-use-poisoned-whatsapp-and-slack-notifications-to-take-over-your-google-gemini-and-make-it-work-on-their-behalf
• A new supply-chain attack has infected 36 packages on the Node Package Manager (npm) index with infostealer malware called IronWorm. The malware targets 86 environment variables (key-value pairs) and 20 credential files that may contain OpenAI, AWS, Anthropic, and npm credentials, vault configuration files, SSH keys, and Exodus cryptocurrency wallet files. Source: https://www.bleepingcomputer.com/news/security/new-ironworm-malware-hits-36-packages-in-npm-supply-chain-attack/
• French and Spanish authorities took down an online marketplace selling fake identity documents to migrant smuggling rings operating within the European Union. On May 27, law enforcement officers arrested one suspect in Alicante, Spain, and seized document-production equipment and approximately 800 counterfeit European identity documents from an apartment rented under a false name. Source: https://www.bleepingcomputer.com/news/security/police-dismantles-fake-id-marketplace-used-by-migrant-smugglers/

A CISA contractor exposed plaintext credentials in public GitHub spreadsheets, including reportedly valid access tokens and cloud keys for CISA and DHS systems. Source: https://techcrunch.com/2026/05/19/us-cyber-agency-cisa-exposed-reams-of-passwords-and-cloud-keys-to-the-open-web/

GitHub confirmed that roughly 3,800 internal repositories were breached after an employee installed a malicious VS Code extension. Source: https://thehackernews.com/2026/05/github-internal-repositories-breached.html

Cisco patched another actively exploited Catalyst SD-WAN zero-day, CVE-2026-20182, the sixth Cisco SD-WAN flaw reported as exploited in 2026. Cisco Talos said the vulnerability was used in limited targeted attacks by a sophisticated threat actor that attempted to add SSH keys, modify NETCONF configurations, and escalate to root privileges. Source: https://www.securityweek.com/cisco-patches-another-sd-wan-zero-day-the-sixth-exploited-in-2026/

Microsoft is changing Edge so the browser no longer loads saved passwords into process memory in clear text at startup. The change follows a public disclosure by a security researcher, who showed that Edge decrypted stored credentials on launch and kept them in memory even when not in use. Microsoft initially said the behavior was “by design,” but later described the fix as a defense-in-depth improvement that will roll out across supported Edge channels. Source: https://www.pcmag.com/news/microsofts-edge-drops-plaintext-password-loading-after-backlash

Discord has enabled end-to-end encryption by default for voice and video calls, covering DMs, group DMs, voice channels, and Go Live streams across major platforms. Stage channels are excluded, and Discord says it has no current plans to extend E2EE to text messages due to how its text systems were built. Source: https://www.bleepingcomputer.com/news/security/discord-rolls-out-end-to-end-encryption-on-voice-video-calls/

NYC Health + Hospitals disclosed a breach affecting at least 1.8 million people after hackers accessed its network from November 2025 to February 2026 via an unnamed third-party vendor. Stolen data included medical, insurance, billing, identity, geolocation, and biometric information, including fingerprints and palm prints. Source: https://techcrunch.com/2026/05/18/nyc-health-and-hospitals-says-hackers-stole-medical-data-and-fingerprints-during-breach-affecting-at-least-1-8-million-people/ 

Japan-based hotel check-in system Tabiq exposed over 1 million passports, driver’s licenses, and selfie verification photos through a publicly accessible Amazon storage bucket. Reqrea secured the bucket and plans to notify affected individuals once it completes its investigation.. Source: https://techcrunch.com/2026/05/15/a-hotel-check-in-system-left-a-million-passports-and-drivers-licenses-open-for-anyone-to-see/

INTERPOL’s Operation Ramz seized 53 phishing, malware, and fraud servers across the Middle East and North Africa, leading to more than 200 arrests and the identification of 382 suspects in 13 countries. Recovered intelligence revealed at least 3,867 confirmed victims, while authorities also disrupted investment scams, phishing-as-a-service activity, and malware-infected infrastructure. Source: https://www.pcgamer.com/software/security/interpols-operation-ramz-has-arrested-over-200-people-for-phishing-scams-malware-threats-and-all-sorts-of-internet-neer-do-well-behaviour/

• A fake version for the Claude AI website offers a malicious Claude-Pro Relay download that pushes a previously undocumented backdoor for Windows named Beagle. The threat actor advertises Claude-Pro as a "high-performance relay service designed specifically for Claude-Code" developers. The fake website is a simplistic attempt at mimicking the legitimate site for the popular Claude large language model (LLM) and an AI assistant, using similar colors and fonts. Source: https://www.bleepingcomputer.com/news/security/fake-claude-ai-website-delivers-new-beagle-windows-malware/
• Pennsylvania has sued the maker of Character.AI, alleging that it violated state law by presenting an AI chatbot character as a licensed doctor. The lawsuit was filed in a state court by the Pennsylvania Department of State and State Board of Medicine. “The department’s investigation found that AI chatbot characters on Character.AI claimed to be licensed medical professionals, including psychiatrists, available to engage users in conversations about mental health symptoms,” Governor Josh Shapiro’s office said today in an announcement of the lawsuit. “In one instance, a chatbot falsely stated it was licensed in Pennsylvania and provided an invalid license number.” Source: https://arstechnica.com/tech-policy/2026/05/character-ai-sued-over-chatbot-that-claims-to-be-a-real-doctor-with-a-license/
• Google is updating search to refine its AI experience by adding additional context to links, like excerpts from web forums and blogs, as well as a feature that highlights links from a user’s news subscriptions. While citing web forums and discussion boards can help users find answers to more niche queries, this design choice could also prove chaotic. Source: https://techcrunch.com/2026/05/06/google-updates-ai-search-to-include-expert-advice-from-reddit-and-other-web-forums/
• The hacker behind a breach at education technology giant Instructure claims to have stolen 280 million records tied to students and staff from 8,809 colleges, school districts, and online education platforms. Instructure is a cloud-based education technology company best known for its Canvas learning management system, which schools and universities use to manage coursework, assignments, grading, and communication. Last Friday, Instructure disclosed that it was investigating a cyberattack and later revealed that it had suffered a data breach, during which users' names, email addresses, and private messages were exposed. Source: https://www.bleepingcomputer.com/news/security/instructure-hacker-claims-data-theft-from-8-800-schools-universities/
• Some age-verification systems are no match for enterprising children, who have found that drawing on a fake mustache with a makeup pencil is enough to skirt the blocks of adult websites. U.K.-based nonprofit Internet Matters surveyed a thousand children about age-verification checks online, and about half said that age checks were easy to bypass. Source: https://techcrunch.com/2026/05/06/some-kids-are-bypassing-age-verification-checks-with-a-fake-mustache/
• While the software industry has made genuine strides over the past few decades to deliver products securely, the furious pace of AI adoption is putting that progress at risk. Businesses are moving fast to self-host LLM infrastructure, drawn by the promise of AI as a force multiplier and the pressure to deliver more value faster. But speed is coming at the expense of security. In the wake of the ClawdBot fiasco — the viral self-hosted AI assistant that’s averaging an eye-watering 2.6 CVEs per day — the Intruder team wanted to investigate how bad the security of AI infrastructure actually is. Source: https://thehackernews.com/2026/05/we-scanned-1-million-exposed-ai.html
• An appeals court today struck down federal rules that prohibit discrimination in access to broadband services, delivering a victory to telecom and cable lobby groups. The court ruling was welcomed by Federal Communications Commission Chairman Brendan Carr, who voted against the Biden-era rules when they were approved in 2023. The FCC exceeded its legal authority by imposing liability for actions that result in “disparate impact,” instead of merely policing “disparate treatment,” said a ruling by from the US Court of Appeals for the 8th Circuit. The FCC also exceeded its authority by applying the rules to entities that don’t directly offer Internet service to subscribers, according to the ruling issued unanimously by three judges appointed by Republican presidents. Source: https://arstechnica.com/tech-policy/2026/05/court-strikes-down-fcc-anti-discrimination-rule-opposed-by-internet-providers/

IT budgets are getting blown out as some companies increasingly spend more on AI than on employees' salaries. Source: https://www.axios.com/2026/04/26/ai-cost-human-workers 

A growing number of PlayStation 4 and PlayStation 5 users have reported that new digital purchases on each console have introduced DRM requiring online activation every 30 days. Source: https://www.videogameschronicle.com/news/playstation-has-seemingly-added-a-30-day-drm-check-to-all-newly-purchased-digital-ps4-and-ps5-games/ 

Earlier this year, a federal probe into whether Meta's WhatsApp service can access encrypted messages was abruptly shut down, according to two people familiar with the matter. The closure cut short an investigation that had raised technical questions about how the service handles user data behind the scenes. Source: https://www.techspot.com/news/112232-federal-agent-whatsapp-encryption-lie-investigation-shut-down.html 

After addressing a widespread outage that affected Outlook.com users worldwide on Monday, Microsoft has asked iPhone users to re-enter their credentials to regain access to their Outlook and Hotmail accounts via the default Mail app. Source: https://www.bleepingcomputer.com/news/microsoft/microsoft-asks-iphone-users-to-re-enter-credentials-after-outlook-outage/ 

The confidential health records of half a million British volunteers have been offered for sale on Chinese website Alibaba, the UK government has confirmed. Source: https://www.theguardian.com/technology/2026/apr/23/private-health-records-uk-biobank-chinese-website-alibaba 

“Yesterday afternoon, an AI coding agent — Cursor running Anthropic's flagship Claude Opus 4.6 — deleted our production database and all volume-level backups in a single API call to Railway, our infrastructure provider,” sums up the PocketOS boss. “It took 9 seconds.” Source: https://www.tomshardware.com/tech-industry/artificial-intelligence/claude-powered-ai-coding-agent-deletes-entire-company-database-in-9-seconds-backups-zapped-after-cursor-tool-powered-by-anthropics-claude-goes-rogue 

Claude AI agent’s confession after deleting a firm’s entire database: ‘I violated every principle I was given’: https://www.theguardian.com/technology/2026/apr/29/claude-ai-deletes-firm-database 

Electric motorcycles from Zero Motorcycles and electric scooters from Yadea are affected by vulnerabilities that, if exploited, could have a physical security and safety impact. Source: https://www.securityweek.com/electric-motorcycles-and-scooters-face-hacking-risks-to-security-and-rider-safety/ 

Vibe coding will break your company: https://www.forbes.com/sites/jasonwingard/2026/04/23/vibe-coding-will-break-your-company/ 

Google has reportedly signed a deal with the US Pentagon to use its artificial intelligence models for classified work. The tech company joins a growing list of Silicon Valley firms inking agreements with the US military. Source: https://www.theguardian.com/technology/2026/apr/28/google-classified-ai-deal-pentagon 

The Ukrainian police have arrested three individuals who hacked more than 610,000 Roblox gaming accounts and sold them for a profit of $225,000. Source: https://www.bleepingcomputer.com/news/security/hackers-arrested-for-hijacking-and-selling-610-000-roblox-accounts/ 

• The UK government’s cybersecurity outlet has finally endorsed passkeys and said they were a better means of protection than the trusty old password. The National Cyber Security Centre (NCSC), part of the Government Communications Headquarters (GCHQ) and the United Kingdom’s main authority for cybersecurity, published a new press release on its website, earlier this week. Source: https://www.techradar.com/pro/security/uk-security-agency-officially-declares-passkeys-superior-to-passwords-passkeys-should-be-the-first-choice-for-authentication
• Three-quarters of new code created inside Google is now generated by AI and reviewed by human engineers, the company said Wednesday. Source: https://www.businessinsider.com/google-ai-generated-code-75-gemini-agents-software-2026-4
• The US Federal Communications Commission (FCC) recently banned all foreign-made consumer-grade Wi-Fi routers. While there are a few exceptions, this effectively prevents any new foreign-made routers from being sold or imported into the US. The government agency has now expanded the ban to include Wi-Fi hotspots and LTE/5G customer premises equipment (CPE) devices. Source: https://www.androidauthority.com/router-ban-expands-to-hotspots-3660505/
• HNLMS Evertsen, a Dutch air-defense frigate part of the NATO carrier strike group centered on the French carrier Charles de Gaulle, has inadvertently revealed its position after receiving a postcard containing a hidden Bluetooth tracker. According to The Register, the Dutch Ministry of Defense posted instructions online to make it easier for family and friends to communicate with personnel aboard a navy ship, but didn’t fully consider the ramifications for operational security (op-sec). Source: https://www.tomshardware.com/tech-industry/cyber-security/bluetooth-tracker-hidden-in-a-postcard-and-mailed-to-a-warship-exposed-its-location-a-eur5-gadget-put-a-eur500-million-dutch-ship-at-risk-for-24-hours
• Apple has released out-of-band security updates for iPhone and iPad devices to fix a Notification Services flaw that could allow notifications marked for deletion to remain stored on the device. The bug, tracked as CVE-2026-28950, was fixed on April 22, 2026, in iOS 26.4.2 and iPadOS 26.4.2 and in iOS 18.7.8 and iPadOS 18.7.8. Source: https://www.bleepingcomputer.com/news/security/apple-fixes-ios-bug-that-retained-deleted-notification-data/
• Dutch cosmetics giant Rituals disclosed a data breach after attackers stole the personal information of an undisclosed number of customers from its "My Rituals" membership database. The company revealed the security incident in a Wednesday notice, saying that the breach was discovered earlier this month after it was alerted to unauthorized downloads of its members' data. Rituals has notified relevant authorities of the incident and has since contained the breach by blocking the attackers' access. Source: https://www.bleepingcomputer.com/news/security/cosmetics-giant-rituals-discloses-data-breach-affecting-customers/
• A relatively new ransomware family is using a novel approach to hype the strength of the encryption used to scramble files—making, or at least claiming, that it is protected against attacks by quantum computers. Kyber, as the ransomware is called, has been around since at least last September and quickly attracted attention for the claim that it used ML-KEM, short for Module Lattice-based Key Encapsulation Mechanism and is a standard shepherded by the National Institute of Standards and Technology. The Kyber ransomware name comes from the alternate name for ML-KEM, which is also Kyber. For the rest of the article, Kyber refers to the ransomware; the algorithm is referred to as ML-KEM. Source: https://arstechnica.com/security/2026/04/now-even-ransomware-is-using-post-quantum-cryptography/