RUSSIA HACKED ACTIVIST PHONE WITH SANCTIONED TOOL
■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
Russia allegedly exploited a forensics platform to compromise an activist's phone, even after the tool's maker lost access. Cellebrite says the hardware predates current sanctions and was used without authorization.
■ MORE FROM THE SECURITY DESK
Threat actors are exploiting Shopify's Shop order-tracking app by injecting fake purchase receipts into user accounts. The attacks trick victims into revealing sensitive data or installing remote access malware.
A newly discovered macOS malware called Gaslight uses embedded fake errors and prompt injection strings to evade AI-powered malware analysis systems. The technique represents a new approach to defeating automated security tools.
Password manager LastPass has notified users of yet another security incident involving unauthorized access to customer data. The breach marks the latest in a series of security lapses affecting the popular service.
The Bluekit phishing-as-a-service platform has expanded its capabilities with browser-in-the-middle technology for stealing login credentials. Security researchers identified nearly 70 new hostnames associated with the service over the past week.