Do you hold cryptocurrency? Have you received a letter telling you that you must register with a so-called "Digital Asset Compliance Portal"? If so, it's time to hit the brakes, because it sounds like someone is trying to scam you. Read more in my article on the Bitdefender blog.

Fake IRS letters target cryptocurrency holders

Do you hold cryptocurrency? Have you received a letter telling you that you must register with a so-called "Digital Asset Compliance Portal"? If so, it's time to hit the brakes, because it sound...

bitdefender.com

Paul Ducklin shares a LinkedIn post he found with the audience of the "Smashing Security" podcast, discussing the recent news about AI models breaking out of their supposedly-secure environments... Hear more in episode 478 of the "Smashing Security" podcast! pod.link/1195001633/e...

Anthropic not wanting to be left behind by OpenAI, I see... No doubt someone in their marketing department was crying into their coffee that OpenAI got there first...

The $5 million threat: AI Is supercharging phishing attacks. www.fortra.com/blog/5-milli...

The $5 Million Threat: AI Is Supercharging Phishing Attacks| Fortra

IBM's Cost of a Data Breach Report reveals how AI-powered phishing drives higher breach costs. Learn why layered defenses are critical in 2026.

fortra.com

If your vote is undecided in the Clacton by-election this might be the clincher for you

In what some would describe as a "bold move", a group of North Korean hackers have decided to hack... North Korea's central bank! You won't be surprised to hear that NK has not taken kindly to this... Read more in my article on the Bitdefender blog: www.bitdefender.com/en-us/blog/h...

North Korea's elite hackers turned on their own government — and got caught

For years, North Korea's state-trained hackers have been one of the world's most prolific robbers of banks - stealing huge sums of money from foreign financial instituions, draining cryptocu...

bitdefender.com

Possibly my favourite TV programme of all time…. Yes, better than Bagpuss.

Tom Pullin@tom-pullin.bsky.social · last wk.

Full series on iPlayer as of this morning 🐺

Russian disinformation is being designed to be invisible to humans - but highly visible to AI. A sanctioned Russian propaganda operation deliberately crafted websites to *avoid* appearing prominently in search results, but maximised the chances of ChatGPT, Gemini and Claude parroting out their text

GEO for Geopolitics: What happens when AI and information warfare collide

Demos is Britain’s leading cross-party think-tank. We produce original research, publish innovative thinkers and host thought-provoking events.

demos.co.uk

Worst companion since Bonnie Langford?

𝗕𝗥𝗘𝗔𝗞𝗜𝗡𝗚 𝗡𝗘𝗪𝗦: Microsoft has accidentally invented the weekend... on a Thursday.

Great to have @jamesrball.com join me on the latest episode of the "Smashing Security" podcast where he explains how Suno was hacked, revealing awkward details of how it taught its AI to generate music. Plus the hacker suspected of links to the Kremlin, and his love of McDonald's McNuggets...

How 14 orders of chicken McNuggets helped nail a suspected Russian hacker

Listen to How 14 orders of chicken McNuggets helped nail a suspected Russian hacker from Smashing Security wherever you get your podcasts!

pod.link

You can't have failed to hear the news headlines about "rogue" OpenAI models hacking into another AI organisation, Hugging Face. But what has actually happened, who is to blame, and is it as serious as some of the newspaper headlines suggest?

OpenAI's AI "goes rogue" and hacks Hugging Face: what you need to know

You can't have failed to hear the news headlines: "AI agent went rogue and hacked startup by itself, OpenAI reveals", "Firm hacked by rogue OpenAI models says it is 'a wake-up call'", a...

bitdefender.com

"Grok, generate a historically accurate adaptation of a 2,800-year-old poem about a one-eyed giant, a six-headed sea monster, and a witch who turns men into pigs."

Hugging Face tried to use an American AI to defend against OpenAI's rogue AI, but its safety guardrails got in the way. They had to use a Chinese open-source model instead. This is fine... www.theguardian.com/technology/2...

AI agent went rogue and hacked startup by itself, OpenAI reveals

Company behind ChatGPT says agent ‘cheated’ an evaluation by attacking a Hugging Face database

theguardian.com

Ukraine's computer emergency response team, CERT-UA, has warned that the Kremlin-backed Sandworm hacking group is using fake CAPTCHA checks to trick people into compromising their own PCs. www.bitdefender.com/en-us/blog/h...

Ukraine warns fake CAPTCHAs are being used to make you hack yourself

Ukraine's computer emergency response team, CERT-UA, has warned that Russian hackers are using fake CAPTCHA checks to trick people into compromising their own PCs.

bitdefender.com

Google's Gemini lets strangers send messages from your locked Android phone Gemini, Google's AI assistant, is supposed to make life easier for Android smartphone owners. But right now it may also be making life easier for anyone anyone who happens to pick up your phone...

Google's Gemini lets strangers send messages from your locked Android phone

Gemini, Google's AI assistant, is supposed to make life easier for Android smartphone owners.

bitdefender.com

Most of today's ransomware gangs threaten to publish exfiltrated data if victims do not pay a ransom. Anubis, however, can go a step further. There is an optional "wipe mode" built into its code which can permanently erase a file's contents rather than merely encrypting them Read more about Anubis:

Anubis Ransomware - What You Need to Know | Fortra

Learn how the Anubis ransomware group operates, who it targets, how it exploits vulnerabilities like CitrixBleed 2, and the steps organizations can take to defend against attacks.

fortra.com

Geoff White was approached by a scammer offereing to promote his books, but they didn't know who they were dealing with... Hear the whole story on episode 476 of the "Smashing Security" podcast with me and special guest @geoffwhite247.bsky.social of Lazarus Heist fame. #cybersecurity #podcast

Scattered Spider members who hacked TfL from their bedroom, costing £39 million and exposing data on 10 million customers, were sentenced to 5 years and 6 months each today. The NCA had video footage of them doing it. Video footage they had taken themselves! Remember - crime doesn't pay.

Ransomware victims don't imagine their trusted negotiator might be separately sharing details of their cyber-insurance policy and negotiation strategy directly with the attackers themselves. www.bitdefender.com/en-us/blog/h...

The ransomware negotiator who was working for the other side

When a company falls victim to a ransomware attack, it is not uncommon for it to turn to experts for help.

bitdefender.com

Solutions to all the world's problems #cartoon

I’m rather distracted during GB News* presenter Andrew Pierce’s reaction to Ann Widdecombe’s death… by the fact he owns a life-size cardboard cut-out of Margaret Thatcher. * I’m err, not a regular viewer…

Thanks (I think) to @rosesec.bsky.social for joining me on episode 475 of the "Smashing Security" podcast, where she appears to want AI to help cybercriminals cover their tracks... Sheesh! Listen to the full pod in your favourite podcast app or at www.smashingsecurity.com/475

Apple's "Hide My Email" feature turns out to hide rather less than it promises - despite Apple knowing it has a problem for over a year Thanks to @rosesec.bsky.social for joining me on episode 475 of the "Smashing Security" podcast! Find it in all the usual places, or www.smashingsecurity.com/475

Have you received an email from a recruiter at Adobe, Netflix, or OpenAI offering you an exciting new marketing role? Well, before you start brushing up your interview technique, take a closer look at who is really behind it. www.bitdefender.com/en-us/blog/h...

Invited to a "job interview" with Netflix or OpenAI? Beware! Your Google password could be at risk

Have you received an email from a recruiter at Adobe, Netflix, or OpenAI offering you an exciting new marketing role? Well, before you start brushing up your interview technique, take a closer look at...

bitdefender.com

My understanding is that if you are investigated by the parliamentary standards committee you can resign your seat, forcing a by-election... and this suspends the investigation until you're an MP again. Couldn't you then *keep* resigning over and over again... and never have the investigation?

Homer Simpson's Never-Ending Photo of Bart

ALT: Homer Simpson's Never-Ending Photo of Bart

static.klipy.com

Smart glasses with cameras and microphones built-in and facial recognition to come are the latest fad in surveillance tech. For this.weekinsecurity.com, I wrote about why the backlash against smart glasses — aka "pervert glasses" — is justified from a security and privacy perspective. Please share!

Reframing smart glasses as 'pervert glasses'

Smart glasses equipped with cameras, microphones, and AI are a creeping privacy and security nightmare, prompting backlash.

this.weekinsecurity.com

Surely it's actually Christopher Harborne who is paying?

Sarah Taggart@redrosesarah.bsky.social · 4w ago

Via LBC "Nigel Farage says Reform will pay £200,000 bill for Clacton by-election" Omigod pahahahaha! He said he'll buy the election! He said that out loud. Ahahahahaha! He can't even grift properly😂🤣😂🤣

Two arrested over credit card phishing - as the Netherlands is named Europe's worst for payment fraud. Read more in my article on the Bitdefender blog: www.bitdefender.com/en-us/blog/h...

Two arrested over credit card phishing - as the Netherlands is named Europe's worst for payment fraud

Two young men have been arrested in the Netherlands on suspicion of running a phishing operation that harvested the credit card details of unsuspecting victims.

bitdefender.com

🇧🇪🇧🇪 🇧🇪🇧🇪 Mission accomplished, although I suspect the US president will claim it was rigged.