Breaking AI & Tech News Analyzed

French authorities detained European Parliament member Rima Hassan on Thursday, accusing her of "apology for terrorism" after a social‑media post referenced Kozo Okamoto, a participant in the 1972 Ben Gurion Airport attack. The detention, reported by Le Parisien, marks a rare instance where a sitting MEP’s parliamentary immunity appears to have been set aside. According to the newspaper, Hassan had already removed the contentious post from X, but the investigation continued. Police also reported finding a small quantity of synthetic drugs in her possession during the arrest. Jean‑Luc Mélenchon, founder of the left‑wing La France Insoumise (LFI) party, condemned the move on X, stating, "There is no longer parliamentary immunity in France. Intolerable." He and other LFI colleagues argue the action is designed to silence supporters of Palestine. LFI parliamentarians Sophia Chikirou and Mathilde Panot echoed the criticism, accusing the French police and justice system of being weaponised against activists. Panot warned that President Emmanuel Macron’s France is witnessing a "new level" of criminalisation of political opponents. The controversy follows Hassan’s recent denial of entry to Canada, which she described as censorship, and a prior alert by far‑right National Rally politician Matthias Renault to Paris prosecutors about the same X post. Renault welcomed the detention, calling it "the beginning of the end of impunity for the LFI MP." Hassan, a 33‑year‑old French‑Palestinian lawyer elected to the European Parliament in 2024, is a vocal critic of Israel’s war in Gaza and participated in a Gaza‑bound flotilla intercepted by Israeli forces in October 2025. Her advocacy has repeatedly drawn ire from pro‑Israel groups across Europe. While Hassan and her legal team have not responded to Reuters’ requests for comment, the incident raises broader questions about the balance between anti‑terrorism legislation and political freedoms within the EU, especially as debates over Palestine intensify across the continent.

The Anatomy of the DarkSword LeakSecurity researchers have uncovered a significant escalation in iPhone vulnerabilities following the public release of the DarkSword exploit kit on the code-sharing site GitHub. Unlike sophisticated zero-days that require specialized knowledge to deploy, the leaked files are uncomplicated HTML and JavaScript scripts that can be hosted on a server in a matter of minutes. This accessibility has turned a tool previously associated with state-sponsored actors into a potential weapon for any criminal actor.The toolkit specifically targets iPhones and iPads running older versions of Apple’s operating system, such as iOS 18, which have not yet been updated to the latest iOS software. The code is designed to work "out of the box," meaning no iOS expertise is required to execute the attack. Researchers note that the leaked samples share infrastructure with previous campaigns analyzed by iVerify and Google, indicating a continuity in the threat landscape.The Scale of the VulnerabilityThe implications of this leak are vast, given the sheer number of devices potentially affected. According to Apple’s own data, approximately one-quarter of all iPhone and iPad users are still running older operating systems. With over 2.5 billion active devices globally, this suggests that hundreds of millions of users are currently exposed to the capabilities of DarkSword.Targeted Data: The exploit is capable of exfiltrating forensically relevant files, including contacts, messages, call history, and the iOS keychain (which stores Wi-Fi passwords and secrets).Historical Context: DarkSword was previously alleged to be used by Russian government hackers against Ukrainian targets, linking this new leak to geopolitical cyber warfare.From State-Sponsored to Criminal PlaygroundThe ease with which DarkSword can be repurposed has raised alarms within the cybersecurity community. Matthias Frielingsdorf, co-founder of mobile security startup iVerify, described the situation as "bad" and warned that the tool cannot be contained. The transition of such advanced spyware from a restricted government tool to a public commodity lowers the barrier to entry for cybercriminals.Kimberly Samra of Google and security hobbyist matteyeux have independently confirmed that the leaked code is trivial to use. Matteyeux successfully demonstrated the exploit on an iPad mini running iOS 18, proving that the threat is immediate and actionable for malicious actors.The Future of iOS Security and Lockdown ModeApple has responded by issuing an emergency update on March 11 for devices unable to run recent versions of iOS. The company emphasizes that keeping software up to date is the "single most important thing" for security and notes that devices with updated software are not at risk.Furthermore, Apple highlighted that Lockdown Mode would block these specific attacks. As the industry moves forward, the reliance on software updates and hardening features like Lockdown Mode will become increasingly critical in defending against the commoditization of exploit kits like DarkSword.