Why is it so hard for Americans to understand that essential social services should not discriminate anyone? Free healthcare and free education means they are free for all. That's fair as long as you are taxing the wealthy and you embrace a progressive tax system. www.nytimes.com/2026/03/31/n...

NEW: I spoke to cybersecurity legend Mikko Hyppönen about his decades-long fight against computers viruses first, and then malware — and how computers have gotten safer over time. Mikko also told me why he has decided to now turn his focus to fight another enemy: killer drones.

NEW: CERT-EU accused cybercrime gang TeamPCP of being behind the recent European Commission hack. It also accused ShinyHunters of being behind the leak of the stolen data, which was around 92 gigabytes, and contained full names, email addresses, and some email content.

New, by me: Telehealth giant Hims & Hers confirmed its customer service ticketing system was hacked. A spokesperson said it was a social engineering attack. The hacker stole mostly customer support tickets, including customer names and contact information, but also the contents of customer requests.

FINALLY!

Time to set the record straight. Best kinds of pizza: 1) Neo-Neapolitan 2) Old school Neapolitan 3) Roman-style sliced pizza 4) New York-style sliced pizza 5) Sicilian-style (similar to Detroit style, I am not differentiating) ... 497) New Havan style * (Have never tried Chicago style)

New, by me: A popular Canadian money transfer app exposed thousands of driver's licenses and passports to the open web. Anyone with a link was able to view the data in their browser. The data goes back to September 2020, and was updating daily until the server was secured this week.

NEW: ICE confirms that it's planning to use Paragon's spyware to counter “foreign terrorist organizations’ thriving exploitation of encrypted communication platforms.” ICE's acting director Todd Lyons said the agency will “comply with constitutional requirements,” without specifying what those are.

The security update protects a raft of older iPhones and iPads from attacks linked to leaked hacking tools called DarkSword.

Not a joke: Hasbro was hacked. The American toymaking giant said in an SEC filing that it may take weeks for it to recover. Much of the company's website appears down.

NEW: WhatsApp alerted around 200 users that were tricked into installing a fake app that was actually government spyware. The company accused Italian spyware maker SIO of being behind the app, and announced it plans to send the company "a formal legal demand to stop any such malicious activity."

This weekend I learned that there’s a character limit in Google Docs,that includes the words, suggestions, and comments (including past and resolved comments). And once you hit it, that’s it. You’re locked out. You have to create a copy of the doc to flush all the past comments and keep working.

NEW: Someone hijacked an open-source software development tool to push malware to millions of people. The supply chain attack was stopped in less than three hours, but it's still unclear how many people got hacked. techcrunch.com/2026/03/31/h...

Me on Twitter every other day.

NEW: Medical data giant CareCloud says hackers had access to one of its six environments that stores patients’ electronic health records for around eight hours during a March 16 cyberattack. CareCloud is used by 45,000 doctors, physicians, and therapists to store data on millions of patients.

Thoughts on this take?

NEW: Iranian-linked hackers claim to have breached the personal Gmail account of FBI director Kash Patel, leaking emails and photos. We were able to confirm that at least a portion of the emails are authentic. The U.S. has accused Iran's government of being behind the hacking group Handala.

SCOOP: Apple says it's not aware of anyone using Lockdown Mode getting hacked with spyware, on all kinds of devices. There have already been a couple of documented cases of Lockdown Mode stopping spyware attacks. If you're worried about spyware, you should use turn this security feature on.

In something you don't see everyday, the Apple gave the FBI the real name and email address of one of its customers using Apple's 'Hide My Email' feature. This lets you generate random email addresses to protect your privacy www.404media.co/apple-gives-...

The reason I love this tweet is that it is saying exactly the opposite this dude thinks it is saying.

Who is the Chaouki of the zero-day industry these days?

I love this idea. I keep wondering what the "solve" is for the huge problem of how a customer can expect to pay for independent media, which is often great but not a substitute for a fully actual staffed newsroom. Plus ofc most people have limited budgets. Really hope this takes off and grows.

NEW: We spoke to a few iPhone security experts about what the discovery of DarkSword means to the long-held assumption that iPhones are very hard to hack. The answer is nuanced, and not simple. Apple has made significant strides in making iPhones more secure, but DarkSword may change how we think.

Wikipedia does what is essentially a full ban on AI content: www.404media.co/wikipedia-ba...

Kaspersky has linked Coruna with Operation Triangulation. This somes a few weeks after we reported that L3Harris Trenchant was the company behind some components of Coruna. And we also reported that it was possible Coruna was used in Operation Triangulation. securelist.com/coruna-frame...

NEW: Here's everything you need to know about the new iPhone hacking tool DarkSword. What is DarkSword? How does it work? Where did it come from? How did it leak online? What can you do about it? We break it all down in this explainer.

NEW: Russian state media says police have arrested an unnamed person that's alleged to be the creator and founder of cybercrime forum LeakBase. Europol, which shut down LeakBase earlier this month, said it did not cooperate with Russia on this arrest. techcrunch.com/2026/03/25/r...

Please send me the best Sora obituaries for my schadenfreude needs.

Is this the first ever case of a spyware maker publicly criticizing their own customers? I’m struggling to think of one.

Eat shit, lol, and long live The Onion.

New: Anime streaming service Crunchyroll has confirmed a data breach involving customer service ticket information following an incident with a third-party vendor. techcrunch.com/2026/03/24/c...

He started a war, didn’t know how to win it, was immediately over his head, became quickly overpowered by an enemy he vastly underestimated, and now is trying to sue for peace and then convince you that this was a victory. Dying empires produce leaders like this

SCOOP: Someone has found new samples of the iPhone spyware DarkSword and published them on GitHub, putting millions of iOS users at risk. A cybersecurity researcher told us that the leaked spyware is "way too easy to repurpose" and "we need to expect criminals and others to start deploying this."

New, by me: Russian authorities say they have blocked access to Archive.today, a popular paywall removal site. The sites appear blocked when I checked earlier (thanks @ryanohoro.com for flagging), but was still able to access the sites from other devices and networks.

NEW: Iranian government hackers are using Telegram to steal data in malware attacks against dissidents, journalists, and opposition groups around the world, according to the FBI. The hackers work for Iran’s Ministry of Intelligence and Security (MOIS), the FBI said. techcrunch.com/2026/03/23/f...

Federal immigration officers have been seen at several U.S. airports on Monday after the Trump administration said it would deploy ICE agents to ease security lines amid an ongoing partial government shutdown. Plainclothed agents were filmed making at least one arrest in San Francisco's Airport.

I am convinced now, AI will change the world.

Mueller’s FBI persecuted Muslims nationwide. He was responsible for one of the most egregious, systemic violations of civil rights in the history of the FBI, which is saying a whole lot. This was Mueller’s FBI:

NEW: The U.S. accused Iran's government of being behind hacktivist group Handala, which claimed responsibility for the destructive hack on medical tech giant Stryker. The Justice Department said Handala and other fake hacktivist groups are run by Iran’s Ministry of Intelligence and Security (MOIS).

New, by me: A cyberattack on a vehicle breathalyzer company called Intoxalock has left drivers across the United States stranded and unable to start their cars.

NEW: The FBI has taken down and seized two websites that were run by the pro-Iranian hacktivist group Handala, saying they were used to support "malicious cyber activities." The seizure comes a week after Handala claimed responsibility for the devastating hack of U.S. medical tech giant Stryker.

NEW: Security researchers have found another sophisticated hacking campaign against iPhone users. This one is also by a Russian government group against Ukrainians, and involves stealing personal data and potentially crypto. And it raises the question: are iPhone hacks more common that we think?

My piece in @theatlantic.com on what AI is doing to the information environment during the war in Iran. 175 children buried in Minab. Every fact about their deaths has been documented, verified, and geolocated. None of it has been enough to prevent the doubt from spreading faster than the evidence.

I may have found the only decent application of AI: music recommendation. I asked Gemini to give me bands that sound like two specific albums and it totally nailed it. It recommended exactly what I was looking for.

If you go “America (and Israel) First” and get into a huge mess, you can’t expect the countries that have nothing to do with this, countries you’ve mistreated, threatened, and belittled, to come to your rescue.

You can make fun of a certain BuzzFeed as much as you want. But there was a multi year period where BuzzFeed News was one of the best journalism outlets out there, with a huge team of incredibly talented journalists. It’s a shame they killed that.

If you have to ask yourself: to dox, or not to dox? Then you already have the answer.

Infosec right now:

Tal Dilian, asked by 🇬🇷TV network Mega who #Intellexa’s clients were in Greece & whether he had worked with state services, Greek authorities, private actors or any Greek official: ➡️“We provide technology only to governments & law enforcement agencies.” [Full statement below translated from Greek]

NEW: The FBI is looking for a hacker who published several video games on Steam that were laced with malware in the last two years. The bureau is aslo looking for gamers who fell victim and installed these games on their computers.