Predictive Policing Under Scrutiny, LastPass Breach, and Global Cyber Strikes
This week in cybersecurity, a deep dive into Bristol's covert predictive policing program raises privacy concerns, while **LastPass** faces another data compromise stemming from a third-party breach. Meanwhile, a global coalition led by **Microsoft** and **Europol** successfully dismantled major infostealer networks, and Australia uncovered nation-state actors poised to sabotage critical infrastructure.
# Predictive Policing: A Decade of Unseen Surveillance
A recent **WIRED** investigation has brought to light a decade-long predictive policing program in Bristol, England. The initiative, utilizing 23 distinct models, aims to forecast an individual's likelihood of committing or falling victim to various crimes. Drawing on public records and extensive reporting, the investigation exposes a complex and largely unknown law enforcement operation with significant community implications.
# **Dialog** Data Exposed: Misconfiguration Not "Criminal" Hack
Following the exposure of members of **Peter Thiel's** private "Dialog" group, the organization initially attributed the breach to a "criminal" hacker. However, evidence now suggests that personal information, including that of a White House intelligence official and an active-duty special operations officer, was publicly accessible due to a website misconfiguration, not a sophisticated hack.
# AI's Ascent: Anthropic's Power Grab and OpenAI's "Patch the Planet"
As **Anthropic** navigates negotiations with the White House for its latest **Claude Mythos 5** and **Fable 5** models, critics point to the company's rapid accumulation of power, which **Anthropic** defends as essential for AI safety. The White House has since granted **Anthropic** permission to restore **Mythos 5** access to a select group of US companies and government agencies.
Simultaneously, **OpenAI** has launched an enhanced version of its limited-release **GPT-5.5-Cyber** model and initiated "Patch the Planet," a comprehensive effort to bolster open-source project security through vulnerability patching. This comes as the AI arms race between China and the US intensifies, with experts from both nations expressing concerns about a potential "Chernobyl moment" in AI development.
# World Cup Scams Evolve
As the World Cup knockout stage approaches, vigilance is key. Scammers are deploying increasingly sophisticated tactics, making it harder to identify fraudulent schemes related to the massive soccer tournament.
# **LastPass** Suffers Another Compromise Via Partner Breach
Password manager **LastPass** has disclosed yet another data breach, this time stemming from a compromise at its partner, AI business intelligence firm **Klue**. Attackers leveraged compromised access tokens for **Klue** customers, including **LastPass**, to exfiltrate data from **Salesforce** and other integrated platforms. The stolen information includes names, phone numbers, email addresses, physical addresses, support case data, and sales-related data. **LastPass** clarifies that its core infrastructure and password vaults remain unaffected, but advises customers to be wary of potential phishing and social engineering attempts.
# Former Trump Adviser **John Bolton** Pleads Guilty to Mishandling Classified Data
**John Bolton**, former national security adviser, has pleaded guilty to one count of mishandling and illegally retaining classified defense information. The plea deal, which recommends a prison sentence of no more than five years and includes a $2.25 million fine, awaits sentencing by US District Judge **Theodore Chuang** in October.
# Global Cyber Strike Disrupts Infostealer Networks
A collaborative effort involving **Microsoft**, **Europol**, and other partners has successfully disrupted the infrastructure of the **Amadey** and **StealC** infostealers. These malware variants are central to the cybercriminal ecosystem, facilitating ransomware and other illicit activities. As part of Operation Endgame, the initiative involved identifying, mapping, and dismantling 326 servers and 142 domains. The operation also flagged approximately $47 million in stolen cryptocurrency and recovered up to 27 million stolen access credentials. **Microsoft** highlighted the crucial role of AI-assisted analysis in identifying shared backend infrastructure, enabling a coordinated takedown.
# Australia Uncovers Nation-State Hackers Poised for Critical Infrastructure Sabotage
Australia's Security and Intelligence Organisation (**ASIO**) has revealed the discovery of nation-state actors embedded within the country's critical infrastructure systems, preparing for potential sabotage. **ASIO** Director-General **Mike Burgess** stated that the hackers had compromised an Australian critical infrastructure provider, acquiring credentials for active users, including IT professionals. This discovery has prompted **ASIO** to establish dedicated teams to counter such sophisticated nation-state cyberattacks, as detailed in their latest annual threat assessment.