NEW: Hacked crypto exchange Bybit is offering $140 million in bounties to anyone who can help locate and freeze the stolen ethereum. Bybit also disclosed preliminary results of investigations, which reveal hackers breached a developer’s device at a wallet platform Safe Wallet.
Updates on Paragon scandal in Italy via Guardian: -Journalist union filed criminal complaint due to Meloni's government not answering Qs. <li>President of 🇮🇹 parliament invoked rule to not respond Qs claiming all unclassified info has been made public.</li> -Italy's foreign intelligence agency AISE, confirmed it is a customer of Paragon in Parliament, and that the the contract is suspended. Still lots of unanswered questions. image
NEW: We have curated a list of people who are working, or are at least associated, with the Department Of Government Efficiency, or DOGE. There have been a few lists like these, and they are great. We have some new details here. https://techcrunch.com/2025/02/18/the-people-in-elon-musk-doge-universe/
NEW: Apple released a fix for a zero-day bug for iOS and iPadOS that “may have been exploited in an extremely sophisticated attack against specific targeted individuals.” AFAIK this is the first time Apple uses "extremely sophisticated attack" in an official release. At this point, we don't know who abused the flaw, nor against whom.
NEW: We spoke to the Italian journalist who was targeted on WhatsApp with government spyware made by Paragon.  “I feel violated,” Francesco Cancellato told me. “It is actually quite strange for a journalist to be spied on in a Western democracy.” Cancellato is the director of Fanpage.it, which last year published a damning investigation on the youth wing of the current far-right government in Italy.  Full story, which includes the text of the notification he received from WhatsApp, here:
NEW: WhatsApp says it has notified 90 victims, including journalists and members of civil society, that they were targeted with spyware made by Paragon. The company said the technique used in the campaign, which relied on malicious PDFs sent via chat groups, has now been fixed. This is the first time that Paragon is linked to alleged abuse of its products.
With iOS 18.3, Apple is switching Apple Intelligence on by default (for newer devices). Given how faulty it is, and maybe for other concerns (environment, ethical), you may want to switch it off. Here's how to do it:
NEW: Facebook awarded a researcher $100,000 for finding a bug in an ad platform that gave access to FB's internal infrastructure. Ben Sadeghipour told TechCrunch that online advertising platforms make for juicy targets because, “there's so much that happens in the background of making these 'ads' — whether they are video, text or images."  "But at the core of it all it's a bunch of data being processed on the server-side and it opens up the door for a ton of vulnerabilities,” he said.
NEW: Cybersecurity experts, who work with human rights defenders and journalists, agree that Apple is doing the right thing by sending notifications to victims of mercenary spyware — and at the same time refusing to forensically analyze the devices. “These notifications have been a game changer for spyware accountability research," said John Scott-Railton, a senior researcher at the Citizen Lab, who has been investigating government spyware for more than a decade.
NEW: Amnesty International has documented two cases where Serbian authorities used Cellebrite to unlock the phones of a journalist and an activist. And then they installed spyware on the devices. In a way, this is a return to the old days of government spyware, where remote attacks were rare and impractical, and cops needed to get their hands on target's computers.