What we know about the alleged Iranian hacks on U.S. water utilities

Over the last couple of weeks, hackers have targeted and broken into the systems of several water plants in the United States. Here’s what we know and don’t know about this wave of attacks allegedly carried out by the Iranian government.

Google’s top hacker hunter explains why hacking groups get codenames

Google recently changed how it refers and assigns names to hacking groups. TechCrunch spoke with one of the world’s foremost experts on tracking hackers to understand why companies give hackers codenames.

Computer maker Framework notifies ‘all customers’ of a data breach

Framework told “all” of its customers that hackers accessed their names, email addresses, phone numbers, and physical addresses in a data breach.

Google says hackers are calling financial firm employees to hack and extort victims

Groups of hackers are breaking into large U.S. financial firms to steal sensitive data and extort victims, Google’s security researchers report.

Hackers steal over $130 million by exploiting bug in offline hardware wallets

A security vulnerability in the cryptocurrency hardware wallet Coldcard is allowing hackers to drain the crypto from victims’ wallets. The total losses amount to more than $130 million, according to blockchain monitoring firms.

Who’s legally to blame for Anthropic and OpenAI’s autonomous AI hacks? It’s complicated

OpenAI and Anthropic admitted that their unreleased AI models escaped their sandboxes and hacked several companies in unprecedented cyberattacks. Who is legally to blame? Should prosecutors charge the two AI frontier labs? Can victims sue them? We spok…

The hacker who humiliated spyware makers and was never caught

An awe-inspiring hacktivist who hacked two controversial government spyware makers may be the most prolific hacker to have never gotten caught. What do we know about Phineas Fisher?

How AI guardrails are impeding the work of offensive cybersecurity researchers

We spoke with several cybersecurity researchers, who look for unknown vulnerabilities and develop tools to exploit them, about how OpenAI’s and Anthropic’s guardrails affect their work.

Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk

Two critical security flaws in WordPress’ software have given hackers the chance to remotely take over tens of millions of websites, according to an estimate by a cybersecurity researcher.

FBI arrests man accused of using Steam games to drain victims’ crypto wallets

Prosecutors accused 21-year-old student Zyaire Wilkins of publishing on Steam several fake video games that contained malware, infecting thousands of victims, and stealing crypto from some of them.