Security News This Week: LastPass Users Have Their Data Stolen—Again

Wire search this week they give information on predictive policing software in Bristol, England which has included 23 different types over more than a decade, aims to highlight the possibility that some people may commit crimes or be victimized. The investigation is based on requests from the public and other reports to reveal security tools that have real meaning for the community – but which many in the community know nothing about.

After the information about members of Peter Thiel’s secret group “Dialog”. was revealed last week, the agency said it was a “criminal” who tampered with it. But the evidence shows that many of the members – including about White House intelligence officer and special operations officer-it was accessible to people and feasible appearing due to the default setting of the Dialog page.

When Anthropic and the White House continued to discuss the latest Claude Mythos 5 and Fable 5 strategy, the company’s critics pointed out that Anthropic seems to be rapidly accumulating strength-a process that the company says is essential for AI security and proper development. On Friday evening, the White House issued an authorization for Anthropic make Mythos 5 available again to a select group of US companies and government agencies.

Amidst the chaos, OpenAI this week launched its partial release version of GPT-5.5-Cyber​​​​​​​​​​​​and the full effort – “Patch the Planet” support Open source patching projects and other security features such as AI accelerates bug discovery and application development. And as the AI ​​arms race between China and the US intensifies, WIRED met with several top AI experts in China and found that both sides are worried about the threat of “Chernobyl moment”.

Meanwhile, as the final phase of the World Cup draws closer, the fraud surrounding the biggest football tournament. be hard to see.

And there are many. Every week, we create security and privacy stories that we haven’t covered in depth ourselves. Click on the headlines to read all the stories. And be safe out there

Password manager LastPass has been cracking a lot over the years, and now there’s one more addition to the list. This week, the company customer service of violations that include names, phone numbers, email addresses, physical addresses, customer service data, and marketing-related data. The attack was caused by a hack to the AI ​​intelligence company Klue. The attackers compromised access tokens for Klue customers, including LastPass, and then used them to extract data from Salesforce and other integration platforms. LastPass stressed that the incident was not a breach of its infrastructure and did not affect password vaults.

“We recommend that customers be alert to possible phishing attacks or social engineering efforts, which can take advantage of public contact,” LastPass wrote in customer information. “Always be wary of unsolicited communications, including emails, phone calls, or requests for information.”

John Bolton, the former national security adviser, pleaded guilty Friday to one count of mishandling and illegal storage of national security information. Bolton, 77, made a plea deal that would have allowed him to avoid prison, although the plea agreement calls for a prison term of no more than five years. US District Judge Theodore Chuang in Maryland will rule on the case on October 28. Bolton served in the first Trump administration but later became a staunch critic of President Donald Trump. As part of the deal, Bolton also agreed to pay a $2.25 million fine, but he can drop his plea if Chuang is sentenced to a higher fine or a longer prison sentence than the deal recommends.

Microsoft, Europol, and other partners he announced Wednesday that they compromised Amadey’s infrastructure with StealC infostealers, a malware that is at the center of the cybercriminal universe. The operation was part of Operation Endgame, which targets platforms and tools to support ransom and other cybercrimes. The operation involved identifying, mapping, and capturing and downloading malware, including actions against 326 servers and 142 domains. The operation exposed $47 million in stolen funds and recovered up to 27 million stolen credentials. Microsoft confirmed that this was supported by new methods including AI-assisted analysis that showed Amadey and StealC rely on the same tools and can be linked together.

Australia’s Security and Intelligence Organization (ASIO) said this week it was setting up a group focused on combating international terrorism in complex developments after identifying those involved in the country. “We discovered that government hackers had compromised the network of service providers in Australia,” ASIO chief Mike Burgess said on Wednesday. “ASIO saw that the hackers were planning to do some damage. …

Burgess spoke alongside ASIO’s release annual risk assessment. “In this case, the government-backed group not only gained access to healthcare in Australia, they successfully gained access to information – including login details and passwords – for internet users, including the IT professionals who protect them,” he added.