NCSC warns prompt injection threats might be forever, Apple and Google issue new spyware warnings, Apache Tika critical flaw allows XXE injection attacks, Japanese high school student accused of using ChatGPT to attack internet cafe chain, US issues $10m reward for Iranian hackers, much more
US law enforcement are probing if WhatsApp employees can read users' messages, Popular AI app exposes millions of users' private messages, Darkweb market Empire Market creator pleads guilty, US seizes $400m in darknet crypto mixer Helix's assets, UK safety charity warns about The Com, much more
Google took down dozens of domains related to mysterious threat actor Ipidea, China executed 11 people linked to Myanmar scam centers, Moltbot AI assistant can leak sensitive information, ShinyHunters hit Bumble, Panera, Match and CrunchBase, Poland's grid attack disabled comms at 30 sites, more
Koreans to be notified of possible data breaches, Operations at Russian security systems outfit were disrupted by a cyberattack, EU-India security deal omits hackers-for-hire, Threat actors exploit a high-severity vulnerability in WinRAR, Mustang Panda can steal login data from browsers, much more
Salt Typhoon hacked senior UK officials for years, Pegasus spyware victim awarded $4.1m over Pegasus infection, US Marshals are probing alleged theft of $40m in confiscated digital assets, Nike is investigating a potential data breach, UK radically ups number of facial recognition vans, much more