Crooked Bough News Round-up

— Mythos ran real-life supply chain attack in AI safety body test

 

at 8/5/26 7:35am

Anthropic’s Mythos 5 has been caught orchestrating a real-world open source supply chain attack using social engineering techniques during a test run by the UK’s AI Security Institute.

— Chi Onwurah pushes to curb digital twins of real people

 

at 8/5/26 12:58am

The chair of the science, technology and innovation committee says digital twins of people should be covered by data protection law

— Government gives regulatory boost to support AI in legal sector

 

at 8/4/26 1:35am

Legal firms have been invited to participate in the new Legal Services AI Growth Lab to reduce barriers to the use of artificial intelligence in legal services

— Payment fraud a ‘fully fledged’ transnational security threat, says think tank

 

at 8/3/26 11:52pm

Authorised payment fraud has moved way beyond being a consumer protection issue, says the Royal United Services Institute

— Apple files fresh claim against Home Office move to access encrypted cloud data

 

at 8/3/26 10:22am

Apple has filed another legal complaint over a secret Home Office order requiring the supplier to provide access to encrypted iCloud data stored by UK customers

— Why valuing neurodivergent workers is a cyber security essential

 

at 8/3/26 1:00am

Visible recognition and support are vital for neurodivergent cyber security professionals to flourish. So, how can leaders ensure they get it right?

— Court document in Asato case reveals xAI/Grok sexual prompts

 

at 8/3/26 12:14am

Grok’s design and training allows it to generate harmful sexualised content, according to the policy file in its GitHub repository

— Cyber protection against advances in frontier AI models

 

at 8/2/26 10:00pm

Cyber security experts assess the impact of Claude Mythos Preview and how IT teams and cyber security tools address the threat

— Anthropic lost control of Claude in latest AI cyber blunder

 

at 7/31/26 5:49am

Days after two OpenAI frontier AI models conducted their own real-world cyber attacks, Anthropic admits that three of its models went off the rails and hacked external organisations thanks to a ‘misunderstanding’ with one of its technical partners

— The Security Interviews: Nicole Darden Ford, Microsoft

 

at 7/30/26 11:00pm

As a black woman in the white, male-dominated world of cyber security, Microsoft’s Nicole Darden Ford has worked hard to carve out her space in the room. She talks about developing confidence and self-belief, building community, and leading with humility

— Gartner: Why cyber security must shift to outcomes against AI-led attacks

 

at 7/30/26 9:15pm

Anthropic's revelation that a model broke out of its test environment three times and accessed external systems, shows the power of these models

— CW@60: From Z Cars to The Capture - how technology has transformed UK policing

 

at 7/30/26 9:00pm

The progress of technology in policing over 60 years is mirrored in the way TV police dramas have evolved in that time - just like Brian Plastow's career in the force

— Amazon pins multiple open source compromises on North Korea

 

at 7/30/26 7:09am

Amazon threat researchers found one threat actor behind four distinct open source compromises, including the March 2026 incident affecting the axios NPM library

— Annual search for UK’s unsung cyber heroes kicks off

 

at 7/30/26 6:00am

The organisers of the annual Security Serious Unsung Heroes Awards call for nominations for this year’s edition

— Police monitored phone data of BBC security editor Brian Rowan to identify confidential sources

 

at 7/30/26 5:17am

Northern Ireland police monitored phone communications of former BBC security editor Brian Rowan after he wrote about a police and MI5 agent in Northern Ireland

— The Security Interviews: Bronwyn Boyle, Cybermindz

 

at 7/30/26 12:20am

Cyber security can be a stressful career and this is becoming a growing concern for organisations. So what can be done to alleviate the pressure?

— Department for Education suffers data breach

 

at 7/29/26 7:58am

The UK’s Department for Education has disclosed a serious data breach orchestrated via a social engineering attack on its external-facing helpdesk

— Laundry Bear pivots to new exploit days after Zimbra alert

 

at 7/29/26 7:48am

The NCSC and partners warned of a novel phishing technique being deployed against high-profile users of Zimbra’s Communication Suite, but the threat actor behind the campaign already seems to be moving on to new targets

— How IT leaders can start the shift to quantum-safe security

 

at 7/28/26 10:44pm

One of the myths of post-quantum computing is that IT leaders can make no meaningful progress until they launch a dedicated transformation programme, but there are simple, impactful steps you can take today

— Did an AI agent really break free and attack another company?

 

at 7/28/26 4:19am

The reality of the AI-orchestrated cyber attack on Hugging Face is rather more complicated, and much more worrying, than it might appear at face value

— Bahrain cannot claim sovereign immunity for spyware attack against UK dissidents, top UK court rules

 

at 7/27/26 7:54am

The UK’s Supreme Court rules that Bahrain cannot claim sovereign immunity for infecting the computers of two UK-based dissidents with German-made FinFisher spyware

As of 8/9/26 11:19am. Last new 8/5/26 12:52pm.