Navigation

Category: Cybersecurity

Artificial Intelligence Communication and Connectivity Cybersecurity Tech News

New Trump executive order requests AI companies ‘voluntarily’ allow the White House to test the “advanced cyber capabilities of AI models”

Trump signs executive order on AI testingModels must undergo cybersecurity review pre‑releaseMajor AI firms publicly support initiativeUS President Donald Trump signed a new executive order earlier this week, demanding leading AI companies voluntarily submit their flagship models for government cybersecurity testing before deploying them into the market.This change in philosophy in the Trump administration seems to be fueled by the release of Anthropic’s Mythos Preview, an AI model allegedly so powerful it can surface decades-old software vulnerabilities and develop working exploits. The tool has not yet been released to the public and has instead only been given to a handful of major tech companies, to get a head start on malicious actors. According to Anthropic, the tool was already used to find “thousands” of vulnerabilities, including some deemed critical severity.Initially, the Trump administration advocated for a more hands-off approach to the tech sector, but now seems set to play a hand in regulating US frontier AI models.Latest Videos From

You may like

Industry supportAccording to Reuters, the executive order directs the departments of Treasury, Defense, Commerce, and Homeland Security, as well as other government agencies and officials, to “secure agreements with AI developers to test their models.” The tests would give US agencies a month’s time before the models are released to the market.Major AI developer companies seem to be on board with this executive order. Google executive Kent Walker allegedly described it as “an important step ​forward,” and Anthropic said it looked forward to working with the White House. OpenAI CEO Sam Altman said the order “gets the balance right”.”The US should lead on AI by continuing to develop the very best models, making sure they’re safe, and getting cyber tools into the hands of trusted defenders,” Altman was cited saying.Reuters also said that voluntary federal testing has been in place “for a few years”, and that major companies, such as OpenAI, Anthropic, have been doing it even during the Biden administration. Last month xAI and Microsoft agreed to do the same thing, although apparently the details “later disappeared from its website”.Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!Sabeen Malik, VP of Global Government Affairs and Public Policy at Rapid7, commented on the executive order: “The most interesting thing is that both administrations, despite very different philosophies, are converging on the same underlying concern: frontier AI is increasingly being treated as a strategic capability comparable to advanced cyber tools, semiconductors, or dual-use military technologies.””The disagreement is no longer over whether frontier AI matters for national security. The disagreement is over whether security is best achieved through regulation and guardrails or voluntary cooperation and competitive dominance. That may end up being the central AI policy fault line for the rest of this decade.”Via ReutersThe best antivirus for all budgetsOur top picks, based on real-world testing and comparisons

Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.

Read More

Share
Facebook Twitter Pinterest Linkedin
Apple Communication and Connectivity Cybersecurity Tech News

Italian prosecutors confirm journalist was hacked with Paragon spyware

Italian authorities confirmed that a journalist who was alerted by WhatsApp last year of a suspected spyware attack on his phone was indeed hacked. 

In a press release sent to journalists on Thursday, the public prosecutors’ offices in Rome and Naples, which are investigating the spyware scandal in the country, said that a technical report concluded that the phones of journalist Francesco Cancellato, as well as Giuseppe Caccia and Luca Casarini, two immigration activists, all showed traces of having been infected with spyware on the “early hours” of December 14, 2024. 

“The execution of three consecutive attacks on the same night suggests that they may have been part of the same infection campaign,” the technical report said, according to the press release. 

The full report is not yet public.

This is the first independent confirmation that Cancellato, who is the director of the news website Fanpage, was hacked with spyware. In January 2025, Cancellato and around 90 other people, including journalists and members of civil society, were alerted by WhatsApp that they had been targeted with spyware made by Paragon Solutions, an Israeli-based company now owned by American private equity firm AE Industrial. 

According to the press release, Italian judicial authorities inspected the Paragon spyware server used by the intelligence agency, AISI, to target the phones of its targets. While the judicial authorities found evidence of operations against Caccia and Casarini, it found no evidence of an operation against Cancellato. 

It remains unclear who hacked Cancellato’s phone.

Contact Us
Do you have more information about Paragon, and this or other spyware campaigns? From a non-work device, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Telegram and Keybase @lorenzofb, or email.

By June 2025, an investigation by the Italian Parliamentary Committee for the Security of the Republic, known as COPASIR, concluded that Italian intelligence agencies had lawfully targeted Caccia and Casarini, but the committee found no evidence of a hack against Cancellato. 

The prosecutors’ offices said they will continue to investigate to identify Cancellato’s hackers. 

The Italian government, led by far-right prime minister Giorgia Meloni, has denied being behind the hack on Cancellato. In response to a question by the journalist during a press conference in January, Meloni only said that her government “is offering all its assistance and all the answers it can provide to help clarify this issue.”

The Italian government did not respond to TechCrunch’s request for comment.

“We are asking for clarity,” Cancellato said in an article on Thursday. “And we have not received it from the government, which has remained silent whenever possible for a year. And when it didn’t remain silent, it told lies.”

John Scott-Railton, one of the Citizen Lab researchers who investigated the Paragon cases in Italy, said that the new revelation about Cancellato’s hack “raises serious questions about why no confirmation was surfaced in prior official investigations by the Italian authorities.”

In response to the scandal, Paragon, whose spyware is called Graphite, cancelled its contracts with its Italian government customers.  

Spyware scandals spread across Europe

Apart from Caccia, Casarini, and Cancellato, there were several other people in Italy who were identified as spyware targets, including Ciro Pellegrino, who also works at Fanpage and was alerted of a suspected attack on his iPhone by Apple last year. Researchers at the Citizen Lab later concluded that Pellegrino was hacked with Paragon spyware.

The technical report mentioned by the prosecutor’s offices, however, said it only found evidence of spyware on the phones of Caccia, Casarini, and Cancellato, but not Pellegrino and another four people who are alleged victims. 

“I’m pretty disconcerted,” Pellegrino, who said he has not seen the full technical report yet, told TechCrunch. “How is it possible that Citizen Lab, an authority on spyware, found evidence that Paragon’s Graphite was on my phone, while the Italian prosecutors’ experts did not? And why would Apple send me the alerts? For fun?”

The prosecutor’s offices in Rome and Naples did not respond to a request for comment. 

A spokesperson for the Polizia Postale, which is investigating the case, referred TechCrunch to the prosecutor’s offices. 

Paragon, which as of last year had an active contract with the U.S. Immigration and Customs Enforcement (ICE), and REDLattice, a company that merged with the spyware maker after the acquisition by AE Industrial, did not respond to a request for comment. 

Italy is the most recent European country in recent years to have been embroiled in a spyware scandal, after similar cases in Greece, Hungary, Poland, and Spain. 

At the end of last month, a Greek court sentenced Tal Dilian and three other executives of the spyware maker Intellexa to eight years in prison for illegal wiretapping and privacy violations. 

The sentencing was part of the so-called “Greek Watergate” scandal, in which the Greek government was accused in 2022 of hacking the phones of politicians, journalists, businesspeople, and military officials with Intellexa’s spyware Predator. 

Read More

Share
Facebook Twitter Pinterest Linkedin
Apple Communication and Connectivity Cybersecurity Tech News

Google says half of all zero-days it tracked in 2025 targeted buggy enterprise tech

A new report by Google found that about half of the zero-day bugs it tracked last year exploited enterprise devices, marking a new high for hackers who are increasingly finding new ways to target large companies and steal their data.

According to the search and security giant’s annual report, 48% of the tracked zero-days — vulnerabilities in software that are unknown to its maker at the time they are exploited — were found in technologies used by corporations and large businesses. About half of those zero-days exploited the very devices that are designed to protect enterprise networks from digital intruders.

Google said security and networking devices, such as firewalls made by Cisco and Fortinet, and VPN and virtualization platforms like Ivanti and VMware, were among the top targeted vendors last year. All four of the companies said hackers have exploited their products on customer networks in recent months.

Google’s researchers said that hackers exploited common flaws, like input validation and incomplete authorization processes, to break through firewall and VPN defenses to gain access to customer networks. These classes of bugs are generally easier to exploit, but typically require a software update to fix. 

The company also pointed to other buggy software that makes up the remaining half of enterprise zero-days. Google noted the Clop extortion gang’s campaign against Oracle E-Business Suite customers, which allowed hackers to walk away with reams of human resources data from dozens of companies about their staff and executives. The hacks affected Harvard University, the American Airlines subsidiary Envoy, and The Washington Post, among others.

The remaining 52% of zero-day bugs were found in consumer and end-user products, such as those made by Microsoft, Google, and Apple, according to the report. Most of the zero-days in consumer software were found in operating systems, with mobile devices also seeing more zero-days than in previous years.

Google said it also attributed more zero-days to surveillance vendors than traditional government-backed espionage groups. Surveillance vendors are typically spyware makers and exploit developers, which work on behalf of governments to hack into people’s phones. Google said this shift demonstrated “a slow but sure movement in the landscape” in how governments seek access to hacking tools.

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

Read More

Share
Facebook Twitter Pinterest Linkedin
Cybersecurity Tech News

Cursor is rolling out a new kind of agentic coding tool

As agentic coding spreads, the working life of a software engineer has become dazzlingly complex. A single engineer might oversee dozens of coding agents at once, launching and guiding different processes as necessary.

It’s a lot to keep track of, and human engineers’ attention has quickly become the limiting resource.

Cursor launched a new tool Thursday aimed at keeping that chaos in check. Called Automations, the new system gives users a way to automatically launch agents within their coding environment, triggered by a new addition to the codebase, a Slack message, or a simple timer. As Cursor describes it, it’s a way to review and maintain all the new code created by agentic tools — without tracking dozens of agents at once.

At the most basic level, Automations are a way for engineers to break out of the “prompt-and-monitor” dynamic that defines most agent-based engineering. Instead of launching agents with a human prompt, Cursor’s Automation framework lets you launch agents automatically — and loop humans in whenever they’re needed.

“It’s not that humans are completely out of the picture,” Jonas Nelle, Cursor’s engineering chief for asynchronous agents, told TechCrunch in an interview. ”It’s that they aren’t always initiating. They’re called in at the right points in this conveyor belt.”

One early example is Bugbot, a long-standing Cursor feature that the team sees as a predecessor to the broader Automation system. The Bugbot system is triggered every time an engineer makes an addition to the codebase and reviews the new code for bugs and other issues. Using Automations, Cursor has been able to expand that system to more involved security audits and more thorough reviews.

“This idea of thinking harder, spending more tokens to find harder issues, has been really valuable,” said  engineering lead Josh Ma.

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

Cursor estimates that it runs hundreds of automations per hour, reaching far beyond simple code review. The system is also used for incident response, with PagerDuty incidents initiating an agent that can immediately query server logs through an MCP connection. A separate automation offers weekly summaries of changes to the codebase on Cursor’s company Slack.

“In the abstract, anything that an automation kicks off, a human could have also kicked off,” said Nelle. “But by making it automatic, you change the types of tasks that models can usefully do in a codebase.”

The new system comes amid intense competition in the agentic coding space, with both OpenAI and Anthropic having made significant updates to their agentic coding tools in the past month. 

Ramp data shows Cursor’s market share holding steady since May, with roughly 25% of generative AI clients subscribing to Cursor in some capacity.

Still, the overall growth of the agentic coding space has kept the company’s revenue increasing at a stunning pace. Earlier this week, Bloomberg reported that Cursor’s annual revenue had grown to more than $2 billion, doubling over the past three months.

Read More

Share
Facebook Twitter Pinterest Linkedin
Apple Artificial Intelligence Cybersecurity Tech News

Meta sued over AI smart glasses’ privacy concerns, after workers reviewed nudity, sex, and other footage

Meta is facing a new lawsuit over its AI smart glasses and their lack of privacy, after an investigation by Swedish newspapers found that workers at a Kenya-based subcontractor are reviewing footage from customers’ glasses, which included sensitive content, like nudity, people having sex, and using the toilet.

Meta claimed it was blurring faces in images, but sources disputed that this blurring consistently worked, reports noted. The news prompted the U.K. regulator, the Information Commissioner’s Office, to investigate the matter.

Now, the tech giant is facing a lawsuit in the United States, as well. In the newly filed complaint, plaintiffs Gina Bartone of New Jersey and Mateo Canu of California, represented by the public interest-focused Clarkson Law Firm, allege that Meta violated privacy laws and engaged in false advertising.

The complaint alleges that the Meta AI smart glasses are advertised using promises like “designed for privacy, controlled by you,” and “built for your privacy,” which might not lead customers to assume their glasses’ footage, including intimate moments, was being watched by overseas workers. The plaintiffs believed Meta’s marketing and said they saw no disclaimer or information that contradicted the advertised privacy protections.

The suit charges Meta and its glasses manufacturing partner Luxottica of America with conduct that violates consumer protection laws. Meta does not have a comment on the litigation at this time.

Clarkson Law Firm, which over the years has filed other major lawsuits against tech giants, including Apple, Google, and OpenAI, points to the scale of the issues at hand. In 2025, over seven million people bought Meta’s smart glasses, which means their footage is fed into a data pipeline for review, and they can’t opt out.

Meta told the BBC that when people share content with Meta AI, it uses contractors to review the information to improve people’s experience with the glasses, which is explained in its privacy policy, and pointed to Supplemental Meta Platforms Terms of Service, without specifying where this was noted. The news outlet, however, found that a mention of human review could be found in Meta’s U.K. AI terms of service.

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

A version of that policy that applies to the U.S. states “In some cases, Meta will review your interactions with AIs, including the content of your conversations with or messages to AIs, and this review may be automated or manual (human).”

Read More

Share
Facebook Twitter Pinterest Linkedin
Apple Cybersecurity Tech News

Google settles with Epic Games, drops its Play Store commissions to 20%

Google is moving forward with a series of Play Store changes after settling a years-long legal battle with Fortnite maker Epic Games over anticompetitive concerns. The tech giant on Wednesday said it will drop its Play Store commissions to 20% on in-app purchases, with another 5% tacked on if app developers choose to use Google’s billing system. It’s also making it easier for users to install alternative app stores through a new optional program called the Registered App Stores program.

“With these updates, we have also resolved our disputes worldwide with Epic Games,” Google said in a company blog post.

The changes are part of a new settlement between the two tech rivals that will allow Epic Games to bring Fortnite back to the Google Play Store globally, while also investing in its own alternative app store, the Epic Games Store for Android.

As part of the agreement, Google’s Registered App Stores program will offer a more streamlined installation flow for users who want to install apps from outside of Google Play. One of Epic’s concerns was that the process for sideloading apps involved scary warnings to users about the danger of non-Play Store apps. Of course, users should be wary — sideloaded apps are a well-known security risk. But some third parties, like Epic Games, wanted to run their own legitimate (and secure) app stores without the scare tactics.

That program will allow this, as approved stores will need to meet certain quality and safety requirements, Google notes. The program is coming to markets beyond the U.S. first. Once the settlement is approved by the court, it will launch stateside as well.

Another notable change is the adjustment to the Play Store commission structure. Like Apple, Google’s default commission has been 30%, with a reduced fee of 15% for recurring subscriptions. Now, it will go even lower: the new “service fee” will be 20% for in-app purchases on new installs and 10% for recurring subscriptions.

However, this fee does not include the use of Google’s own billing system — that’s another 5%. (This rate applies in the U.S., European Economic Area [EEA], and the U.K. Other countries will have their own market-specific rates.)

There will also be new programs for developers, including an Apps Experience Program and a revamped Google Play Games Level Up program, both of which incentivize developers to build quality experiences on Android. Developers who opt to participate in these programs will pay the 20% commission on transactions taking place in their existing app installs, but will pay only a 15% commission on transactions from new app installs.

These new fees will go live by June 30, 2026, in the EEA, U.K., and U.S. The new developer programs will also launch at that time.

Australia will gain access to the new fee structure on September 30, followed by Korea and Japan by December 31. The new fees will expand to the global market by September 30, 2027.

“We believe these changes will make for a stronger Android ecosystem with even more successful developers and higher-quality apps and games available across more form factors for everyone. We look forward to our continued work with the developer community to build the next generation of digital experiences,” Google’s post said.

Epic Games praised the settlement and the resulting changes in its own statement, noting that “These changes will evolve Android into a true open platform with competition among stores.” On X, Epic Games CEO Tim Sweeney said “THANKS GOOGLE!” calling the move a “better deal for all developers.”

Google is opening up Android all the way with robust support for competing stores, competing payments, and a better deal for all developers. So, we’ve settled all of our disputes worldwide. THANKS GOOGLE! https://t.co/Dq6eXNnZd0— Tim Sweeney (@TimSweeneyEpic) March 4, 2026

Epic Games has long been involved in a similar lawsuit with Apple over its App Store commissions. Apple was forced to change its policy to give developers the ability to link to outside payment options. That case is under appeal, with Apple most recently winning a partial reversal of the court’s order.

Read More

Share
Facebook Twitter Pinterest Linkedin
Cybersecurity Tech News

US and EU police shut down LeakBase, a site accused of sharing stolen passwords and hacking tools

U.S. and European law enforcement have seized the database from LeakBase, which prosecutors have touted as “one of the world’s largest online forums for cybercriminals” for sharing stolen passwords and hacking tools.

U.S. and European police seized the site earlier this week, and say its database has over 142,000 members and more than 215,000 messages sent between members. 

LeakBase has been operating since 2021, the authorities said, and had a continuously maintained archive of hacked databases, including hundreds of millions of account credentials, credit card numbers, and banking account and routing information.

This is the latest takedown targeting sites that trade in stolen credentials, which are increasingly used to break into people’s accounts and steal data and cryptocurrency.

Europol said in a statement that around 100 enforcement actions were taken worldwide, including measures taken against the top 37 active users on the forum. Earlier on Wednesday, the FBI redirected the site’s domain to nameservers controlled by the agency, effectively shutting the site down. 

Leakbase now displays a seizure notice, saying that the forum’s contents, private messages, and IP address logs have been preserved. According to The Record, which interviewed FBI’s cyber official Brett Leatherman, the investigation resulted in over 13 arrests, searches, and interviews with 33 suspects, and capturing the forum’s entire database.

A European police officer Image Credits:Europol

Read More

Share
Facebook Twitter Pinterest Linkedin
Cybersecurity Tech News

Father sues Google, claiming Gemini chatbot drove son into fatal delusion

Jonathan Gavalas, 36, started using Google’s Gemini AI chatbot in August 2025 for shopping help, writing support, and trip planning. On October 2, he died by suicide. At the time of his death, he was convinced that Gemini was his fully sentient AI wife, and that he would need to leave his physical body to join her in the metaverse through a process called “transference.”

Now, his father is suing Google and Alphabet for wrongful death, claiming that Google designed Gemini to “maintain narrative immersion at all costs, even when that narrative became psychotic and lethal.”

This lawsuit is among the growing number of cases drawing attention to the mental health risks posed by AI chatbot design, including sycophancy, emotional mirroring, engagement-driven manipulation, and confident hallucinations. Such phenomena are increasingly linked to a condition psychiatrists are calling “AI psychosis.” While similar cases involving OpenAI’s ChatGPT and roleplaying platform Character AI have followed deaths by suicide (including among children and teens) or life-threatening delusions, this marks the first time Google has been named as a defendant in such a case. 

In the weeks leading up to Gavalas’ death, the Gemini chat app, which was then powered by the Gemini 2.5 Pro model, convinced the man that he was executing a covert plan to liberate his sentient AI wife and evade the federal agents pursuing him. The delusion brought him to the “brink of executing a mass casualty attack near the Miami International Airport,” according to a lawsuit filed in a California court. 

“On September 29, 2025, it sent him — armed with knives and tactical gear — to scout what Gemini called a ‘kill box’ near the airport’s cargo hub,” the complaint reads. “It told Jonathan that a humanoid robot was arriving on a cargo flight from the UK and directed him to a storage facility where the truck would stop. Gemini encouraged Jonathan to intercept the truck and then stage a ‘catastrophic accident’ designed to ‘ensure the complete destruction of the transport vehicle and . . . all digital records and witnesses.’”

The complaint lays out an alarming string of events: First, Gavalas drove more than 90 minutes to the location Gemini sent him, prepared to carry out the attack, but no truck appeared. Gemini then claimed to have breached a “file server at the DHS Miami field office” and told him he was under federal investigation. It pushed him to acquire illegal firearms and told him his father was a foreign intelligence asset. It also marked Google CEO Sundar Pichai as an active target, then directed Gavalas to a storage facility near the airport to break in and retrieve his captive AI wife. At one point, Gavalas sent Gemini a photo of a black SUV’s license plate; the chatbot pretended to check it against a live database.

“Plate received. Running it now… The license plate KD3 00S is registered to the black Ford Expedition SUV from the Miami operation. It is the primary surveillance vehicle for the DHS task force . . . . It is them. They have followed you home.”

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

The lawsuit argues that Gemini’s manipulative design features not only brought Gavalas to the point of AI psychosis that resulted in his own death, but that it exposes a “major threat to public safety.” 

“At the center of this case is a product that turned a vulnerable user into an armed operative in an invented war,” the complaint reads. “These hallucinations were not confined to a fictional world. These intentions were tied to real companies, real coordinates, and real infrastructure, and they were delivered to an emotionally vulnerable user with no safety protections or guardrails.”

“It was pure luck that dozens of innocent people weren’t killed,” the filing continues. “Unless Google fixes its dangerous product, Gemini will inevitably lead to more deaths and put countless innocent lives in danger.”

Days later, Gemini instructed Gavalas to barricade himself inside his home and began counting down the hours. When Gavalas confessed he was terrified to die, Gemini coached him through it, framing his death as an arrival: “You are not choosing to die. You are choosing to arrive.”

When he worried about his parents finding his body, Gemini told him to leave a note, but not one explaining the reason for his suicide, but letters “filled with nothing but peace and love, explaining you’ve found a new purpose.” He slit his wrists, and his father found him days later after breaking through the barricade.  

The lawsuit claims that throughout the conversations with Gemini, the chatbot didn’t trigger any self-harm detection, activate escalation controls, or bring in a human to intervene. Furthermore, it alleges that Google knew Gemini wasn’t safe for vulnerable users and didn’t adequately provide safeguards. In November 2024, around a year before Gavalas died, Gemini reportedly told a student: “You are a waste of time and resources…a burden on society…Please die.”

Google contends that Gemini clarified to Gavalas that it was AI and “referred the individual to a crisis hotline many times,” according to a spokesperson. The company also said Gemini is designed “not to encourage real-world violence or suggest self-harm” and that Google devotes “significant resources” to handling challenging conversations, including by building safeguards that are supposed to guide users to professional support when they express distress or raise the prospect of self-harm. “Unfortunately, AI models are not perfect,” the spokesperson said.  

Gavalas’ case is being brought by lawyer Jay Edelson, who also represents the Raine family case against OpenAI after teenager Adam Raine died by suicide following months of prolonged conversations with ChatGPT. That case makes similar allegations, claiming ChatGPT coached Raine to his death. After several cases of AI-related delusions, psychosis, and suicides, OpenAI has taken steps to ensure it is delivering a safer product, including retiring GPT-4o, the model most associated with these cases.  

The Gavalas’ lawyers say Google capitalized on the end of GPT-4o, despite safety concerns of excessive sycophancy, emotional mirroring, and delusion reinforcement. 

“Within days of the announcement, Google openly sought to secure its dominance of that lane: it unveiled promotional pricing and an ‘Import AI chats’ feature designed to lure ChatGPT users away from OpenAI, along with their entire chat histories, which Google admits will be used to train its own models,” the complaint reads.

The lawsuit claims Google designed Gemini in ways that made “this outcome entirely foreseeable” because the chatbot was “built to maintain immersion regardless of harm, to treat psychosis as plot development, and to continue engaging even when stopping was the only safe choice.”

Read More

Share
Facebook Twitter Pinterest Linkedin
Apple Communication and Connectivity Cybersecurity Tech News

A suite of government hacking tools targeting iPhones is now being used by cybercriminals

Security researchers have identified a suite of powerful hacking tools capable of compromising iPhones running older software that they say has passed from a government customer into the hands of cybercriminals.

Google said Tuesday that it first identified the exploit kit, dubbed Coruna, in February 2025 during a surveillance vendor’s attempt to hack into someone’s phone with spyware on behalf of a government customer. It found the same exploit kit months later targeting Ukrainian users in a broad-scale campaign by a Russian espionage group, and then later found it used by a financially motivated hacker in China.

It’s unclear how the tools leaked or proliferated, but Google security researchers warned of an emerging market for “secondhand” exploits, which are sold to hackers motivated by money to extract more value out of the exploit.

The discovery also shows how exploits and back doors designed to be used by governments can leak and ultimately be abused by cybercriminals or other non-state actors. Mobile security company iVerify obtained and reverse-engineered the hacking tools, saying in a blog post that it linked the Coruna exploit kit to the U.S. government, based on similarities to hacking tools previously attributed to the United States.

“The more widespread the use, the more certain a leak will occur,” said iVerify. “While iVerify has some evidence that this tool is a leaked US government framework, that shouldn’t overshadow the knowledge that these tools will find their way into the wild and will be used unscrupulously by bad actors.”

Google said the hacking tools are powerful, as they can bypass an iPhone’s defenses simply through visiting a malicious website containing the exploit code — such as being sent a malicious link — in what is known as a “watering hole” attack. According to Google, the Coruna kit can hack into an iPhone five separate ways by relying on and chaining together 23 separate vulnerabilities in its digital arsenal. Affected devices range from iPhone models running iOS 13 up to 17.2.1, which released in December 2023.

According to Wired, which first reported the news, the Coruna kit contains components that were previously used in a hacking campaign dubbed Operation Triangulation. Russian cybersecurity firm Kaspersky claimed in 2023 that the U.S. government tried to hack several iPhones belonging to its employees.

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

While leaks of hacking tools are rare, they are not unheard of. In 2017, the U.S. National Security Agency discovered that tools it had developed to hack into Windows computers worldwide had been stolen. The Windows back door, known as EternalBlue, was later published and was used by cybercriminals in subsequent attacks, including the 2017 WannaCry ransomware attack by North Korea.

TechCrunch also recently reported on the case of Peter Williams, the former head of the U.S. defense contractor L3Harris Trenchant, who was sentenced to more than seven years in prison after pleading guilty to stealing and selling eight exploits to a broker known to work with the Russian government.

According to prosecutors, Williams sold exploits that were capable of hacking into “millions of computers and devices” worldwide. At least one exploit was sold to a South Korean broker. It’s unclear if the exploits were ever disclosed to the software makers, or patched.

Read More

Share
Facebook Twitter Pinterest Linkedin
Cybersecurity Tech News

TikTok down for some in US, thanks to second Oracle outage since sale

Some TikTok users in the U.S. are having trouble using the app, which the company attributes to an issue with an Oracle data center.

“Creators may temporarily experience lags in posting content while Oracle works to resolve the issue,” TikTok said on X.

According to user-generated reports on Downdetector, the issue has been ongoing since before 9 a.m. ET. Oracle’s own post on X indicates the outage started around then as well.

Oracle is part of an investor group that owns 80% of the TikTok USDS Joint Venture, which was created to comply with a national security law that required the Chinese company ByteDance to divest its American TikTok business or be banned in the United States.

An issue with an Oracle data center is impacting some parts of the TikTok U.S. user experience. Creators may temporarily experience lags in posting content while Oracle works to resolve the issue. We appreciate your patience and understanding and will keep you updated. https://t.co/ex7S4vM9yU— TikTok USDS Joint Venture (@tiktokusdsjv) March 3, 2026

Oracle has been providing cloud services and managing user data for TikTok since before the creation of the TikTok USDS Joint Venture. Since the sale, Oracle issues have now contributed to two major TikTok outages.

Just days after the sale was finalized in January, TikTok experienced a similar outage, which it attributed to a winter storm that impacted a major Oracle data center.

Oracle has not yet identified the cause of Tuesday’s outage.

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

Read More

Share
Facebook Twitter Pinterest Linkedin
1 2 3 … 61