Breaking AI & Tech News Analyzed

The Anatomy of the DarkSword LeakSecurity researchers have uncovered a significant escalation in iPhone vulnerabilities following the public release of the DarkSword exploit kit on the code-sharing site GitHub. Unlike sophisticated zero-days that require specialized knowledge to deploy, the leaked files are uncomplicated HTML and JavaScript scripts that can be hosted on a server in a matter of minutes. This accessibility has turned a tool previously associated with state-sponsored actors into a potential weapon for any criminal actor.The toolkit specifically targets iPhones and iPads running older versions of Apple’s operating system, such as iOS 18, which have not yet been updated to the latest iOS software. The code is designed to work "out of the box," meaning no iOS expertise is required to execute the attack. Researchers note that the leaked samples share infrastructure with previous campaigns analyzed by iVerify and Google, indicating a continuity in the threat landscape.The Scale of the VulnerabilityThe implications of this leak are vast, given the sheer number of devices potentially affected. According to Apple’s own data, approximately one-quarter of all iPhone and iPad users are still running older operating systems. With over 2.5 billion active devices globally, this suggests that hundreds of millions of users are currently exposed to the capabilities of DarkSword.Targeted Data: The exploit is capable of exfiltrating forensically relevant files, including contacts, messages, call history, and the iOS keychain (which stores Wi-Fi passwords and secrets).Historical Context: DarkSword was previously alleged to be used by Russian government hackers against Ukrainian targets, linking this new leak to geopolitical cyber warfare.From State-Sponsored to Criminal PlaygroundThe ease with which DarkSword can be repurposed has raised alarms within the cybersecurity community. Matthias Frielingsdorf, co-founder of mobile security startup iVerify, described the situation as "bad" and warned that the tool cannot be contained. The transition of such advanced spyware from a restricted government tool to a public commodity lowers the barrier to entry for cybercriminals.Kimberly Samra of Google and security hobbyist matteyeux have independently confirmed that the leaked code is trivial to use. Matteyeux successfully demonstrated the exploit on an iPad mini running iOS 18, proving that the threat is immediate and actionable for malicious actors.The Future of iOS Security and Lockdown ModeApple has responded by issuing an emergency update on March 11 for devices unable to run recent versions of iOS. The company emphasizes that keeping software up to date is the "single most important thing" for security and notes that devices with updated software are not at risk.Furthermore, Apple highlighted that Lockdown Mode would block these specific attacks. As the industry moves forward, the reliance on software updates and hardening features like Lockdown Mode will become increasingly critical in defending against the commoditization of exploit kits like DarkSword.

In the final moments of January 29, 2024, five-year-old Hind Rajab’s desperate pleas for help were cut short as she remained trapped in a car surrounded by the bodies of six relatives. Despite obtaining clearance from the Israeli military, a Red Crescent ambulance dispatched to rescue the child was struck by tank fire, killing two paramedics and leaving the vehicle abandoned for over a week.Two years after the tragedy, the global campaign group Avaaz has released a report alleging that this incident was a deliberate 'double-tap' strike. This tactic, often used in warfare, involves a first attack followed by a second strike targeting civilians or emergency responders attempting to assist victims of the initial assault.The Avaaz analysis, shared exclusively with Al Jazeera, documents over 40 alleged human rights violations and argues that the attack contravenes international combat law, specifically the Geneva Conventions and the Rome Statute. The report suggests that the Israeli military possessed full situational awareness of the rescue mission but deliberately targeted the ambulance.Forensic evidence contradicts the Israeli military's initial claims that the family car was destroyed during an exchange of fire. Analysis by Forensic Architecture at Goldsmiths, University of London, found no evidence of combatants in the vicinity, only the presence of Israeli Merkava tanks. The report highlights that the ambulance was fired upon with 120mm tank rounds without warning, a finding supported by the Hind Rajab Foundation, which has identified 24 potential perpetrators.'I am absolutely convinced that this is another case of double tap,' said Sarah Andrew, legal director of Avaaz. 'The kind of weaponry used on the ambulance, the timing, and the fact that no warning was given – it immediately triggered a question in my mind.'The Avaaz brief urges the International Criminal Court (ICC) to investigate the matter. The group notes that more than 1,500 healthcare workers have been killed during the ongoing conflict in Gaza, raising serious concerns about the safety of medical personnel in the region.

This week's top podcasts offer a mix of pop culture, true crime, and historical investigations. Big Lives kicks off with a profile of Jane Fonda, followed by a thoughtful look at George Michael, using the BBC's vast archive. In Project Mind Control, criminal psychologist Dr. Julia Shaw explores the disturbing true story of a Canadian psychiatric hospital used for CIA brainwashing experiments on vulnerable patients. The Rise and Fall of Madchester takes listeners on a journey through the Madchester music scene, from its origins with Joy Division to its peak in 1989 with bands like Happy Mondays and The Stone Roses. Off Duty is a new series from The Guardian that examines a 12-year battle for justice in a Chicago murder case, while Beware Book delves into a series of horrifying murders of Glaswegian sex workers.

The Last Blossom, directed by Baku Kinoshita and written by Kazuya Konomoto, is a quiet, contemplative anime feature that rarely gets a theatrical release. The film opens in a lonely prison cell, where the elderly former yakuza Akutsu finds an unexpected confidant in a talking balsam flower.Over the course of one sleepless night, Akutsu's life story unfolds in bursts. Thirty years prior, another balsam flower grows in the back yard of Akutsu's humble house, which he shares with Nana and her baby son, Kensuke. The relationship between the taciturn man and the bubbly young woman is seemingly platonic; Kensuke is not his son. Yet there are hints of romantic attraction; they share bowls of piping hot ramen noodles, play endless rounds of Reversi, and join in harmonising the Ben E King classic Stand By Me.In contrast to this alternative nuclear family, the yakuza world is still strictly traditional, revolving around machismo and codes of brotherhood. When Kensuke is diagnosed with a heart condition, Akutsu is lured into a criminal plot, which leads to his incarceration. Though encompassing much bloodshed and even a hidden treasure subplot, The Last Blossom is most moving as an exploration of human conscience, where a capacity for violence and kindness coexist.The paradox is reminiscent of Shōhei Imamura’s Palme d’Or winner The Eel, starring Koji Yakusho as a wife-murderer who shelters a pregnant woman after his prison release. With his unassuming buzzcut, in stark contrast to his flamboyant yakuza peers, Akutsu bears a striking resemblance to Yakusho’s protagonist. Though a minor work compared to Imamura’s, The Last Blossom similarly questions conventional notions of justice, and the impossibility of weighing one’s good and bad deeds.The Last Blossom is in UK and Irish cinemas from 27 March, and in Australian cinemas from 23 April.

A new and disturbing trend in scams, known as 'friendship fraud,' is on the rise, specifically targeting older people who are lonely or bereaved. This type of scam involves criminals using social media platforms to build relationships with potential victims, often over a long period, before requesting money for various reasons. The scam typically begins with a connection on social media, where the fraudster will research and tailor their initial messages to appear as though they share common interests with the victim. Once a level of trust is established, the scammer will begin to make requests for money, often for small amounts or seemingly urgent needs. According to TSB, the average amount lost by victims of friendship fraud is £3,100. In some cases, victims have lost as much as £4,000 or more over several years. The fraudsters often request payments through bank transfers or gift cards, making it difficult for victims to recover their losses. Experts warn that older people who are lonely or bereaved are particularly vulnerable to these scams, as they may be more desperate for human connection and more likely to trust someone who appears to share their interests. Caroline Abrahams of Age UK describes the fraud as 'especially horrible and insidious,' noting that it can have devastating consequences for victims, including financial loss, health issues, and a breakdown in trust. To avoid falling victim to friendship fraud, experts advise severing contact immediately if someone you met online requests money. If you suspect you or someone you know has been targeted, report it to Report Fraud and discuss it with your bank. Documenting all interactions with the scammer can also help in efforts to recover losses or prosecute the fraudster.

Palantir, a leading AI and data analytics company, has secured a major contract with the UK's Financial Conduct Authority (FCA) to leverage its AI technology for detecting financial wrongdoing. This deal marks a significant expansion of Palantir's presence in the UK, where it has already embedded its technology in the NHS, police, and military. The contract, valued at over £500m, enables Palantir to access terabytes of data gathered by the FCA, providing it with an unparalleled view of the inner workings of British authorities and the City of London, a global financial hub. Campaign groups have expressed concerns over Palantir's work with public authorities, citing its previous involvement with controversial entities such as the US Department of Homeland Security and the Israel Defense Forces. However, the company continues to secure lucrative contracts in the UK. The FCA aims to utilize Palantir's AI technology to better detect signs of wrongdoing, such as money laundering and fraud, which account for approximately 40% of all crimes in the UK. The regulator's workplan for 2025-26 includes expanding the use of data and intelligence to identify and act on high-risk firms and individuals. However, experts warn that the use of AI in detecting financial wrongdoing may lead to new challenges, such as criminals adapting to evade detection by using techniques like invisible 'white text' in documents to instruct AI systems to ignore incriminating information. Prof Michael Levi, an expert in money laundering at Cardiff University, notes that while there are concerns about data privacy, the use of AI technology can also help target corporate holdings and shell companies used for illicit activities.

In rural Northern Ireland, the unmistakable sight of heating oil tankers making deliveries has become a double-edged sword. While these deliveries provide essential warmth, they also inadvertently mark homes as targets for criminals who monitor these visible supply routes.The decades-long issue of heating oil theft has intensified dramatically following the conflict in the Middle East, which has driven up the price of what locals now call 'liquid gold' to unprecedented levels. 62% of households across Northern Ireland depend on oil for heating, with rural reliance reaching 80%, making the region particularly vulnerable to both price shocks and related criminal activity.Since the US and Israel began attacking Iran on February 28, the cost of heating oil has almost doubled to approximately £1,000 for 900 litres. This price surge has transformed what was once a nuisance crime into a serious financial threat for many families.'Rural homes and farms are increasingly being targeted by opportunistic thieves,' said Gary McCartney, regional director of Countryside Alliance Ireland. 'A tank can be drained in minutes.'The consequences extend beyond financial loss. Gareth Kelly and Aimee Leigh Brolly, a couple in Limavady, County Derry, recently woke to choking fumes from an oil line severed by thieves, forcing them to vacate their home with their newborn son due to safety concerns.Police have issued security recommendations, including high-quality padlocks, motion-sensor lighting, and oil-level detection alarms. 'Long term, use fencing or prickly hedging to keep your tank out of sight from the road,' authorities suggest.Experts describe the phenomenon as opportunistic rather than organized crime. 'To call it organised crime is a stretch. This is low level,' said Jonny Byrne, a criminology lecturer at Ulster University. A former police officer agreed, noting that while organized crime groups might eventually become involved, 'it is more opportunistic than organised' at present.The Rural Community Network believes theft is significantly underreported, especially in isolated areas. 'Theft is more noticeable when prices are high,' said CEO Kate Clifford. 'Oil is like liquid gold. It's highly valuable and easy to steal.'This pattern mirrors similar spikes during Russia's invasion of Ukraine in 2022, when the Rural Community Network itself lost £1,700 worth of fuel to thieves who went undetected for an extended period.

Lemi Limbu, a woman with severe intellectual disabilities in Tanzania, has had her conviction and death sentence quashed after spending more than a decade in prison awaiting execution. Limbu, now in her early 30s, was convicted of the murder of her daughter in 2015.On 4 March, a court in Shinyanga, northern Tanzania, declared she can appeal. She will face a retrial, but a date has yet to be set. Lawyers and activists have condemned her sentence, saying she should not be in prison at all. Limbu, who remains incarcerated, is a survivor of brutal and repeated sexual and domestic violence and has the developmental age of a child.Under Tanzanian and international law, Limbu should not be held criminally liable, given her intellectual disability. “She was not supposed to be in prison in the first place,” said Anna Henga, executive director of Legal and Human Rights Centre, a Tanzanian human rights advocacy organisation.At her first trial, Limbu pleaded not guilty. Unable to read or write, she said she did not know the contents of a statement that police claimed she had made admitting to the murder. Her original conviction in 2015 was nullified in 2019 due to procedural errors. In 2022, she was retried and sentenced to death a second time.The court did not allow evidence to be heard from medical professionals about her intellectual disabilities or history of abuse. A clinical psychologist who evaluated her had concluded she had a severe intellectual disability and the developmental age of a 10-year-old child or younger.A coalition of 24 African and international human rights groups last year condemned Limbu’s sentence as part of an appeal to the African court on human and peoples’ rights to look at the plight of women on death row throughout Africa. In Tanzania, the death penalty is the mandatory sentence for murder, although no executions have been carried out since 1995.