Security Roundup: Apple’s Hide My Email Service Fails to Hide Your Email

Plus: Alleged Scattered Spider hacking member extradited, dozens of license plate reader errors, and Indian officials are concerned about WhatsApp’s username rollout.

Security Roundup: Apple’s Hide My Email Service Fails to Hide Your Email

Plus: Alleged Scattered Spider hacking member extradited, dozens of license plate reader errors, and Indian officials are concerned about WhatsApp’s username rollout.

Alibaba bans Claude Code after Anthropic is caught tracking Chinese users with hidden code
Alibaba bans Claude Code after Anthropic is caught tracking Chinese users with hidden code

Alibaba has banned its employees from using Claude Code, Anthropic’s AI-powered coding agent, after security researchers discovered that the tool contained hidden code designed to identify Chinese users. The ban, effective 10 July, follows weeks of esc…

Alibaba bans Claude Code after Anthropic is caught tracking Chinese users with hidden code
Alibaba bans Claude Code after Anthropic is caught tracking Chinese users with hidden code

Alibaba has banned its employees from using Claude Code, Anthropic’s AI-powered coding agent, after security researchers discovered that the tool contained hidden code designed to identify Chinese users. The ban, effective 10 July, follows weeks of esc…

The man who built Pegasus now sells governments the antidote, and Latin America is buying
The man who built Pegasus now sells governments the antidote, and Latin America is buying

Dream, the Israeli AI cybersecurity startup that tripled its valuation to $3 billion this year, is expanding into Latin America. The company is targeting governments aligned with Washington in a region where cyber attacks are reportedly growing 25% ann…

The man who built Pegasus now sells governments the antidote, and Latin America is buying
The man who built Pegasus now sells governments the antidote, and Latin America is buying

Dream, the Israeli AI cybersecurity startup that tripled its valuation to $3 billion this year, is expanding into Latin America. The company is targeting governments aligned with Washington in a region where cyber attacks are reportedly growing 25% ann…

North Korea-linked npm packages impersonate Rollup polyfill tools to steal developer secrets
North Korea-linked npm packages impersonate Rollup polyfill tools to steal developer secrets

Security researchers at JFrog have identified a set of malicious npm packages linked to North Korean threat actors that impersonate legitimate Rollup polyfill tooling to steal developer credentials and enable remote access to compromised machines. The …

North Korea-linked npm packages impersonate Rollup polyfill tools to steal developer secrets
North Korea-linked npm packages impersonate Rollup polyfill tools to steal developer secrets

Security researchers at JFrog have identified a set of malicious npm packages linked to North Korean threat actors that impersonate legitimate Rollup polyfill tooling to steal developer credentials and enable remote access to compromised machines. The …

The emails that broke Anthropic and the Pentagon apart
The emails that broke Anthropic and the Pentagon apart

For months, the fight between Anthropic and the Pentagon looked like a row over access to Claude. Court documents released this week suggest it was about something bigger: who decides how the US military uses frontier AI. The emails came out on Tuesday…

Spain’s LALIGA piracy blocks knocked out 500,000+ innocent websites
Spain’s LALIGA piracy blocks knocked out 500,000+ innocent websites

For much of this year, Spanish internet users have lost access to huge parts of the web on match days. Not pirate streams, but human rights groups, climate charities and business tools. A new report puts hard numbers on the damage, and they are stagger…