UK security agency officially declares passkeys superior to passwords – passkeys should be the ‘first choice’ for authentication

Passkeys have come a long way in just four years and are now being recommended as the number one authentication method.
…

‘We will reveal their identity photos, names, location, and other’: Experts reveal extraordinary battle between rival ransomware gangs — and how victims can get their data back

A ransomware group is threatening to expose a rival’s members while offering victims decryption, creating a risky and unusual cybercrime conflict.
…

France confirms data breach at government agency that manages citizens’ IDs

The French government agency that issues and manages national IDs, passports, and other documents announced that hackers stole the personal information of an unspecified number of citizens.

Apple fixes bug that cops used to extract deleted chat messages from iPhones

The iPhone and iPad bug allowed law enforcement using forensic tools to read messages that had long been deleted by the Signal app.

Anthropic’s Mythos rollout has missed America’s cybersecurity agency
Anthropic’s Mythos rollout has missed America’s cybersecurity agency

Several US federal agencies are taking up Anthropic’s new cybersecurity model to find vulnerabilities, but one is reportedly not getting in on the action: the nation’s central cybersecurity coordinator. On Tuesday, Axios reported that the Cybersecurity and Infrastructure Security Agency (CISA) didn’t have access to Mythos Preview, which Anthropic has touted as a powerful tool […]

AI Tools Are Helping Mediocre North Korean Hackers Steal Millions

One group of hackers used AI for everything from vibe coding their malware to creating fake company websites—and stole as much as $12 million in three months.

Cosmetics giant Rituals confirms data breach of customer membership records

The cosmetics retailer, which counts 41 million customers in its membership data, declined to provide an accurate total number of customers affected.

UK government says 100 countries have spyware that can hack people’s phones

The U.K.’s cybersecurity chief warned that U.K. businesses and critical infrastructure are underestimating the threat from spyware attacks and other cyberthreats, with more governments having access to the powerful surveillance technology than ever.