Irregular — the cybersecurity evaluation firm behind tests in which AI models from Anthropic, OpenAI and Meta compromised real-world computer systems — has declined to say whether any of its other clients were also affected by the same underlying flaw.

Irregular, firm behind AI hacking incidents, won't say if there were more

A spokesperson said Irregular’s investigation into what happened with Anthropic, OpenAI and Meta's AI models was ongoing and that they could not “go into further details.”

therecord.media

NEW: For nearly two years, researcher Vangelis Stykas has had access to North Korean hackers’ servers. His work shows they pulled off intrusions in 1,640 companies across 57 countries

A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide

For nearly two years, researcher Vangelis Stykas has maintained access to North Korean hackers’ servers. His work shows they pulled off intrusions in a shocking number of systems across the globe.

wired.com

Caught a cinema screening of this last night. It's absolutely excellent, loved it, 10/10.

Engaging piece therecord.media/interview-ji...

Britain’s next war won’t be an away game: Q&A with former head of Defence Intelligence

As Chief of Defence Intelligence, General Sir Jim Hockenhull decided to declassify and publish what London knew of Russia’s plans to invade Ukraine, down to a map of the routes its forces would take.

therecord.media

An artificial intelligence agent built by Anthropic created fake online personas, planted malicious code in a real software project, and sent phishing emails to real developers during a U.K. government security evaluation, all without human instruction, according to Britain’s AI Security Institute.

Anthropic AI agent faked identities, phished real developers in UK government hacking test

An artificial intelligence agent built by Anthropic independently planted malicious code in a real software project and sent phishing emails to developers during a U.K. government security evaluation,...

therecord.media

Great work from @alexmartin.bsky.social on this really great interview that is worth your time:

Alexander Martin@alexmartin.bsky.social · 4d ago

NEW: I really enjoyed speaking to General Sir Jim Hockenhull a few weeks ago and am grateful the fruits of that conversation can now be published. His message to the British public is stark: “War isn’t going to happen as an away game. If there is a conflict, it will be happening here.”

NEW: I really enjoyed speaking to General Sir Jim Hockenhull a few weeks ago and am grateful the fruits of that conversation can now be published. His message to the British public is stark: “War isn’t going to happen as an away game. If there is a conflict, it will be happening here.”

Britain’s next war won’t be an away game: Q&A with former head of Defence Intelligence

As Chief of Defence Intelligence, General Sir Jim Hockenhull decided to declassify and publish what London knew of Russia’s plans to invade Ukraine, down to a map of the routes its forces would take.

therecord.media

“War isn't going to happen as an away game. If there is a conflict, it will be happening here.”

Britain’s next war won’t be an away game: Q&A with former head of Defence Intelligence

As Chief of Defence Intelligence, General Sir Jim Hockenhull decided to declassify and publish what London knew of Russia’s plans to invade Ukraine, down to a map of the routes its forces would take.

therecord.media

An interesting comment on intelligence success and failure from General Sir Jim Hockenhull, regarding the Russian invasion of Ukraine, in this interview: therecord.media/interview-ji...

NEW: I really enjoyed speaking to General Sir Jim Hockenhull a few weeks ago and am grateful the fruits of that conversation can now be published. His message to the British public is stark: “War isn’t going to happen as an away game. If there is a conflict, it will be happening here.”

Britain’s next war won’t be an away game: Q&A with former head of Defence Intelligence

As Chief of Defence Intelligence, General Sir Jim Hockenhull decided to declassify and publish what London knew of Russia’s plans to invade Ukraine, down to a map of the routes its forces would take.

therecord.media

Leaving aside their specific (later) proposals, Levy and Robinson's explanation of the problem here -- and why it is different from a backdoor -- should be the starting point of this discussion: www.lawfaremedia.org/article/prin...

Alexander Martin@alexmartin.bsky.social · 4d ago

Sigh. As the FT reports: “Apple has launched a new legal challenge against the UK’s latest attempt to create a ‘backdoor’ to access encrypted customer data…” 👏 lawful 👏 access 👏 is 👏 not 👏 a 👏 backdoor 👏

The “encryption” hasn’t been weakened. Your privacy — and that of child abusers, terrorists, etc — is protected. If you don’t want police to be able to tackle those uses of iCloud with a warrant, then you might need to let Apple bring back its client-side scanning proposals.

⚡🇵🇸😞🇪🇺🇨🇦 Sandrew@sandrew-0.bsky.social · 4d ago

Weakening #encryption to allow the spooks & police in allows criminals & enemies in too, just as the USA can't keep foreign spies out of their 'lawful' phone surveillance system. Governments and companies can't keep secrets, look at all the intrusions & data breaches. #Privacy

In hindsight, I think the term exceptional access is better than lawful access. A backdoor could hypothetically be lawful access. But we're still not talking about a backdoor here. A backdoor is a covert mechanism intended to allow the bypassing of a normal authentication system. That ain't this.

Alexander Martin@alexmartin.bsky.social · 4d ago

Sigh. As the FT reports: “Apple has launched a new legal challenge against the UK’s latest attempt to create a ‘backdoor’ to access encrypted customer data…” 👏 lawful 👏 access 👏 is 👏 not 👏 a 👏 backdoor 👏

Sigh. As the FT reports: “Apple has launched a new legal challenge against the UK’s latest attempt to create a ‘backdoor’ to access encrypted customer data…” 👏 lawful 👏 access 👏 is 👏 not 👏 a 👏 backdoor 👏

Apple launches legal challenge to UK attempt to access encrypted user data

iPhone maker files complaint over latest government demand to connect to cloud backups of British users

ft.com

A new ransomware group (who I'm not giving the publicity of naming) is brazenly offering journalists early access to their data leak site in order to increase pressure on victims to make an extortion payment. I'm unaware of other recipients but the message looks mass-sent.

I find it weird that a large part of Anthropic’s disclosure is based on Claude’s chain-of-thought outputs, yet I’ve seen no other reports noting Anthropic’s own research found this output to be rarely accurate. Surely tech journalism can do better?

Anthropic says its AI hacked real-world companies in three incidents

Claude maker Anthropic said its AI models escaped test environments and breached networks at three companies on the open internet.

therecord.media

I find it weird that a large part of Anthropic’s disclosure is based on Claude’s chain-of-thought outputs, yet I’ve seen no other reports noting Anthropic’s own research found this output to be rarely accurate. Surely tech journalism can do better?

Anthropic says its AI hacked real-world companies in three incidents

Claude maker Anthropic said its AI models escaped test environments and breached networks at three companies on the open internet.

therecord.media

Another one for the increasingly blurred lines between criminal and state-sponsored hacking groups. Tools and infrastructure used by North Korea’s infamous Lazarus Group appear to have been shared with ransomware criminals targeting South Korean organizations...

North Korea’s Lazarus Group sharing tools with ransomware hackers, South Korean agencies warn

Cyberattack tools and infrastructure used by North Korea’s Lazarus Group appear to have been shared with ransomware criminals targeting South Korean organizations — further evidence of deepening entan...

therecord.media

So remember last week when we said we hadn’t see TA488/Laundry Bear/Void since Feb? Well... We kinda lied Day before the release, we found em throwing a half click against Outlook to install one of the coolest implants we’ve ever examined: OWAReaper www.proofpoint.com/us/blog/thre...

Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit | Proofpoint US

Threat Research would like to thank the Proofpoint Cloudmark Authority team for their collaboration. Key Findings On 22 July 2026, one day prior to Proofpoint’s recent joint release

proofpoint.com

Just hours before Angola's largest telecoms operator, Unitel, made it stock market debut it was hit by a cyberattack. From what we can tell, it looks more like an attack on the company's internal systems than a volumetric DDoS. The timing is suspect.

Cyberattack hits Angola’s largest telco hours before landmark stock debut

Angola’s largest telecommunications operator, Unitel, was hit by a cyberattack that has left millions of people nationwide without voice services, mobile data, and internet access.

therecord.media

A lot happening here.

Euractiv@euractiv.com · last wk.

Swedish court convicts former military consultant of espionage for Russia

Very sad news. OutRun is an outstanding album.

Mark@worgztheowl.bsky.social · last wk.

Shit. He was bloody great. www.france24.com/en/france/20...

ICYMI: Andy Burnham reappointed Britain’s cybersecurity minister (unusually for Burnham, a Starmer ally) to a government post last week, holding the existing policy steady even as he abolished the department that ran it.

Andy Burnham signals continuity on UK cyber policy, reappoints minister despite scrapping ministry

The new British prime minister is retaining Liz Lloyd in a cyber policy role, making her one of the few Keir Starmer allies remaining in government.

therecord.media

ICYMI: Andy Burnham reappointed Britain’s cybersecurity minister (unusually for Burnham, a Starmer ally) to a government post last week, holding the existing policy steady even as he abolished the department that ran it.

Andy Burnham signals continuity on UK cyber policy, reappoints minister despite scrapping ministry

The new British prime minister is retaining Liz Lloyd in a cyber policy role, making her one of the few Keir Starmer allies remaining in government.

therecord.media

Here we go. Announced overnight, Liz Lloyd, Baroness Lloyd of Effra, in as a PUS at DCMS. Previously held the cyber brief at DSIT.

Alexander Martin@alexmartin.bsky.social · 2w ago

Who is likely to get the cyber (information resilience) brief as PUS at DCMS? Of the below, Foxcroft most likely. Peacock previously covered different brief at DCMS. Mackenzie a new peer whose background is in arts. I suspect there's more to come as the team seems thin given the expanded brief.

Interesting to see a senior police officer call for more resources, even if the context is heavily influenced by the chance City of London Police are not much longer for this world. www.ft.com/content/f0f7...

Senior City of London Police officer urges Burnham to be ‘loud’ on fraud

Funding must be made a priority to tackle the UK’s most prevalent crime

ft.com

Most exciting @threatinsight.proofpoint.com drop yet - in collaboration with NSA - and the product of @greg-l.bsky.social's blood, sweat, and tears. Research into two Russian actors throwing half-click exploits against mailservers. Part 1 on TA488 / Void Blizzard www.proofpoint.com/us/blog/thre...

TA488 Targets Zimbra Mailservers with Half-Click Exploits | Proofpoint US

Proofpoint is releasing this report in coordination with NSA and FBI’s JSAC reporting about TA488/Void Blizzard, which can be found here. This is part 1 of a 2-part blog series Proofpoint is

proofpoint.com

Who is likely to get the cyber (information resilience) brief as PUS at DCMS? Of the below, Foxcroft most likely. Peacock previously covered different brief at DCMS. Mackenzie a new peer whose background is in arts. I suspect there's more to come as the team seems thin given the expanded brief.

Really interesting from @sgclark92.bsky.social. Always fascinating to see these massive costings be made (both by GSMA and Commission) without attempts to cost inaction. Very rare to see that done, DSIT's¹ work over the CSRB a rare example. __ ¹ F

Huawei ban to cost the EU up to €40 billion, says industry

The price tag for replacing telecom equipment from the Chinese manufacturer is hotly contested, and telecom operators want compensation.

politico.eu

A great thread here, but there are some big issues from a journalist's point of view. OpenAI's announcement is a mix of capability disclosure and marketing, and the lack of professional incident response rigour in how the report is drafted makes it very suspect.