Breaking AI & Tech News Analyzed

The Anatomy of the DarkSword LeakSecurity researchers have uncovered a significant escalation in iPhone vulnerabilities following the public release of the DarkSword exploit kit on the code-sharing site GitHub. Unlike sophisticated zero-days that require specialized knowledge to deploy, the leaked files are uncomplicated HTML and JavaScript scripts that can be hosted on a server in a matter of minutes. This accessibility has turned a tool previously associated with state-sponsored actors into a potential weapon for any criminal actor.The toolkit specifically targets iPhones and iPads running older versions of Apple’s operating system, such as iOS 18, which have not yet been updated to the latest iOS software. The code is designed to work "out of the box," meaning no iOS expertise is required to execute the attack. Researchers note that the leaked samples share infrastructure with previous campaigns analyzed by iVerify and Google, indicating a continuity in the threat landscape.The Scale of the VulnerabilityThe implications of this leak are vast, given the sheer number of devices potentially affected. According to Apple’s own data, approximately one-quarter of all iPhone and iPad users are still running older operating systems. With over 2.5 billion active devices globally, this suggests that hundreds of millions of users are currently exposed to the capabilities of DarkSword.Targeted Data: The exploit is capable of exfiltrating forensically relevant files, including contacts, messages, call history, and the iOS keychain (which stores Wi-Fi passwords and secrets).Historical Context: DarkSword was previously alleged to be used by Russian government hackers against Ukrainian targets, linking this new leak to geopolitical cyber warfare.From State-Sponsored to Criminal PlaygroundThe ease with which DarkSword can be repurposed has raised alarms within the cybersecurity community. Matthias Frielingsdorf, co-founder of mobile security startup iVerify, described the situation as "bad" and warned that the tool cannot be contained. The transition of such advanced spyware from a restricted government tool to a public commodity lowers the barrier to entry for cybercriminals.Kimberly Samra of Google and security hobbyist matteyeux have independently confirmed that the leaked code is trivial to use. Matteyeux successfully demonstrated the exploit on an iPad mini running iOS 18, proving that the threat is immediate and actionable for malicious actors.The Future of iOS Security and Lockdown ModeApple has responded by issuing an emergency update on March 11 for devices unable to run recent versions of iOS. The company emphasizes that keeping software up to date is the "single most important thing" for security and notes that devices with updated software are not at risk.Furthermore, Apple highlighted that Lockdown Mode would block these specific attacks. As the industry moves forward, the reliance on software updates and hardening features like Lockdown Mode will become increasingly critical in defending against the commoditization of exploit kits like DarkSword.

The Royal Moroccan Football Federation (FRMF) has commended the decision to award its country the 2025 Africa Cup of Nations (AFCON) title, which was initially stripped from Senegal. The FRMF welcomed the decision, stating it reaffirms the primacy of competition regulations and reinforces the conditions necessary for the proper conduct of international tournaments.The Confederation of African Football (CAF) announced on Tuesday that its Appeal Board had awarded the tournament to Morocco, the defeated finalists, on January 18. The final, which Senegal won 1-0 in extra time, was delayed for 14 minutes when the Senegalese players and staff returned to the dressing room in protest against the awarding of an injury-time penalty to Morocco in the second half.The FRMF maintained a clear and consistent position throughout the process, focusing on the strict application of governing regulations. Following its appeal, CAF confirmed that the applicable regulations were not properly enforced. Morocco appealed to CAF to overturn the result immediately after the final, which descended into chaos during and after the protest, and led to a pitch invasion, resulting in 18 Senegalese fans being handed prison sentences.The Senegal Football Federation (FSF) immediately responded to CAF's ruling by saying it would take its own appeal to the Court of Arbitration for Sport. Senegal's government alleged corruption following the decision and called for an independent international investigation into the matter.

The Iranian women's football team was given a hero's welcome in Tehran on Thursday after returning from the Asian Cup in Australia, where some players had sought asylum. The team, including captain Zahra Ghanbari, was greeted by several thousand people in Valiasr Square, waving Iranian flags and cheering.Earlier this month, six players and one backroom staff member sought asylum in Australia, prompting criticism from hardliners in Iran for not singing the national anthem before their first match. However, five of them later changed their minds and returned home with the rest of the team.Activists accused Iranian authorities of pressuring the players' families, including summoning their parents for interrogation, while Tehran alleged that Australia sought to force the athletes to defect. Iranian football federation President Mehdi Taj said on stage, “These athletes are loyal to the homeland, flag, leader and revolution.”The welcome ceremony featured a giant billboard with the slogan “My Choice. My Homeland” and a screen projecting AI-generated images of the players pledging loyalty to the Iranian flag. The team also sang the national anthem, a central feature of the ceremony.Two squad members remain in Australia, but the rest of the team, including the five who initially applied for asylum, arrived in Iran on Wednesday after a long journey home via Malaysia, Oman, and Turkiye. Iranian government spokeswoman Fatemeh Mohajerani told the team, “All Iranians were waiting for you; welcome to Iran.”

In the final moments of January 29, 2024, five-year-old Hind Rajab’s desperate pleas for help were cut short as she remained trapped in a car surrounded by the bodies of six relatives. Despite obtaining clearance from the Israeli military, a Red Crescent ambulance dispatched to rescue the child was struck by tank fire, killing two paramedics and leaving the vehicle abandoned for over a week.Two years after the tragedy, the global campaign group Avaaz has released a report alleging that this incident was a deliberate 'double-tap' strike. This tactic, often used in warfare, involves a first attack followed by a second strike targeting civilians or emergency responders attempting to assist victims of the initial assault.The Avaaz analysis, shared exclusively with Al Jazeera, documents over 40 alleged human rights violations and argues that the attack contravenes international combat law, specifically the Geneva Conventions and the Rome Statute. The report suggests that the Israeli military possessed full situational awareness of the rescue mission but deliberately targeted the ambulance.Forensic evidence contradicts the Israeli military's initial claims that the family car was destroyed during an exchange of fire. Analysis by Forensic Architecture at Goldsmiths, University of London, found no evidence of combatants in the vicinity, only the presence of Israeli Merkava tanks. The report highlights that the ambulance was fired upon with 120mm tank rounds without warning, a finding supported by the Hind Rajab Foundation, which has identified 24 potential perpetrators.'I am absolutely convinced that this is another case of double tap,' said Sarah Andrew, legal director of Avaaz. 'The kind of weaponry used on the ambulance, the timing, and the fact that no warning was given – it immediately triggered a question in my mind.'The Avaaz brief urges the International Criminal Court (ICC) to investigate the matter. The group notes that more than 1,500 healthcare workers have been killed during the ongoing conflict in Gaza, raising serious concerns about the safety of medical personnel in the region.

The United Kingdom has strongly condemned 'reckless Iranian threats' after reports emerged of a missile launch targeting a joint US-UK military base on the Indian Ocean island of Diego Garcia. However, Iran's Ministry of Foreign Affairs has denied any involvement in the alleged missile launch.According to US media reports, two ballistic missiles were fired at the base, with one reportedly failing mid-flight and the other intercepted by a US warship. The incident occurred approximately 4,000km (2,500 miles) from Iran, raising concerns about Iran's missile capabilities.Iran's Foreign Ministry spokesperson, Esmaeil Baghaei, described the missile launches as a 'false flag' operation, suggesting that Israel might have been behind them. This denial comes as the conflict between Iran, the US, and Israel continues to escalate.The UK has condemned the alleged attack, with Foreign Secretary Yvette Cooper stating that the UK would not be drawn into a wider conflict in the Middle East. The UK's Prime Minister, Keir Starmer, noted that the UK would not use a base in Cyprus for Iran-related operations.Israel's military chief, Eyal Zamir, claimed that Iran used 'a two-stage intercontinental ballistic missile with a range of 4,000km' to target the US-UK base. Zamir stated that these missiles pose a threat to European capitals, including Berlin, Paris, and Rome.The incident has significant implications for the ongoing conflict in the Middle East, with analysts suggesting that Iran's missile capabilities could change the calculus of the war for the US and its allies. The conflict has already led to a rise in global oil prices and increased tensions between the US, Israel, and Iran.

In an unexpected turn of events that captured social media attention over the weekend, footballer Jorginho found himself in a public dispute with American pop singer Chappell Roan. The former Chelsea and current Flamengo midfielder took to social media to accuse Roan's security guard of speaking "in an extremely aggressive manner" to his stepdaughter and wife at a São Paulo hotel.Jorginho, whose stepdaughter happens to be actress Jude Law's daughter, claimed that his stepdaughter had merely smiled at Roan while walking past the singer's table during breakfast. Without his fans, "you would be nothing," Jorginho stated in a departure from his typically less confrontational public persona.In response, Roan posted a video denying the allegations and clarifying that the security guard in question was not her personal security. The singer explained she was simply sitting at breakfast when the incident allegedly occurred and expressed regret if the mother and child felt uncomfortable. "I do not hate people who are fans of my music. I do not hate children – that is crazy," Roan stated in the video, which was recorded while she was lying in bed.The controversy quickly escalated when Eduardo Cavaliere, the mayor of Rio de Janeiro, announced a ban on Roan performing at the city's annual Todo Mundo festival. "As long as I'm in charge of our city – this young lady @ChappellRoan will never perform at Todo Mundo no Rio!" he declared, while simultaneously inviting Jorginho's stepdaughter as a guest of honor.Quote of the Day came from Pep Guardiola following Manchester City's recent triumph: "I wanted another yellow card, that was the target. If I cannot celebrate against that team with the way we are playing, then when? Emotions are related to the way we are playing. Give me another yellow card, I'm not yet artificial intelligence. I'm a human being and I want to celebrate."

Alan Ritchson, the star of the hit Amazon Prime Video series Reacher, has been accused of assaulting his neighbor in a suburban neighborhood in Tennessee. A video obtained by TMZ appears to show Ritchson striking the man, identified as Ronnie Taylor, multiple times while his children watch.The alleged incident began on Saturday when Ritchson was reportedly riding his motorbike through the neighborhood at high speeds, revving the engine. Taylor claimed he responded with an obscene gesture, which Ritchson allegedly returned. On Sunday, Ritchson returned to the neighborhood with his two children on their own motorbikes. Taylor said he asked Ritchson to stop, and the situation escalated into a physical altercation.Taylor alleged that Ritchson struck him at least four times, resulting in visible bruising and swelling on his face, as shown in photos obtained by TMZ. However, other sources cited by TMZ countered that Taylor approached Ritchson in an aggressive manner and attempted to interfere with his motorbike, causing the actor to fall and sustain minor injuries.Ritchson is widely recognized for portraying Jack Reacher, a fictional former US army military police officer, in the Amazon Prime Video series. The character is known for his extensive combat experience and intense fights. The show, based on author Lee Child's bestselling crime novels, has been praised for Ritchson's physical performance and closer resemblance to the protagonist's original depiction.The Guardian has contacted Ritchson's representatives for comment.

The Tyne-Wear derby between Newcastle United and Sunderland AFC ended in a 2-1 victory for the visiting team, but the match was overshadowed by reports of racist abuse directed at Sunderland's Lutsharel Geertruida by home fans.The incident occurred early in the second half, prompting referee Anthony Taylor to temporarily halt play in accordance with the Premier League's on-field anti-discrimination protocol. Granit Xhaka, Sunderland's captain, informed Taylor of the alleged abuse, which led to a discussion with both managers and the player involved.The Premier League has launched a full investigation into the incident, with Northumbria Police making one arrest during pre-match skirmishes between rival fans. Newcastle United has condemned the abuse and vowed to work with authorities to identify and hold accountable those responsible.In a statement, Newcastle United said: "We are aware of a report of racism made by a visiting player against someone in the crowd during our Premier League match against Sunderland. Our stance is clear – we do not tolerate discrimination of any form. We will work with the authorities to fully investigate and will ensure any individuals are identified and held accountable."Sunderland AFC also released a statement, expressing their support for Geertruida and condemning the racist abuse: "Sunderland AFC is aware of the reported incident of racist abuse directed at Lutsharel Geertruida during today's fixture at St. James' Park. We stand with Lutsharel, who has our complete backing, and we commend him for displaying bravery and leadership by reporting this incident to the match officials."The incident has highlighted the ongoing issue of racism in football and the need for clubs and authorities to take a strong stance against such behavior.

Palantir, one of the world's biggest tech companies, has been accused of launching an intimidation campaign against a small Swiss magazine, Republik, after it published an investigative report on the company's activities in Switzerland.The report, which was a collaboration between Republik and the independent Swiss research collective WAV, alleged that Palantir had persistently courted Switzerland but had been rejected. The investigation found that Palantir had pitched itself to Switzerland's chancellor during the Covid-19 pandemic to help with data tracking, approached the Swiss army, and met Switzerland's then finance minister, Ueli Maurer.Palantir was not happy with the report and filed a lawsuit in a Swiss commercial court demanding that Republik print a detailed rebuttal. The company claims that the report paints a false and misleading narrative about Palantir and sets back important discourse on European software modernisation.The journalists behind the report say they had interviewed company executives and sent a full list of questions before publication, but that Palantir demanded they print a detailed rebuttal that went beyond the scope of their investigation. The lawsuit has sparked concerns about Palantir's tactics and the impact on journalism, with the European Federation of Journalists claiming that the legal action is an attempt at intimidation aimed at discouraging critical analysis of Palantir's activities."It does feel like an intimidation campaign," says Marguerite Meyer, a journalist who works with WAV. "However, we adhered to all journalistic standards, and had a thorough factcheck done. They are suing for an absurd list of changes."The investigation, which was published in December, gave an account of Palantir's years-long efforts to try to sell itself to the Swiss government. The journalists found that despite Palantir's efforts, no government contracts had been reported."We tried to find out, is there any kind of government agency that uses this software? I mean, they are in Switzerland, eventually some government official maybe thought they could use this Palantir," says Balz Oertli, who is also with WAV.The lawsuit has raised questions about Palantir's influence and the limits of journalistic scrutiny. Swiss law allows the subjects of a story to request a right of reply, but this has caveats: the right of reply has to be concise and stick to the facts of the story."This lawsuit for a right of reply is not about whether Republik was technically inaccurate or not. It is only about whether Palantir is allowed to place its view of the facts alongside that of Republik and whether Republik must publish it," says Dominique Strebel, an expert in media law and the editor-in-chief of Beobachter, another Swiss magazine.