Topic: techcrunch reporting
-
US lawmakers press Instructure for answers on Canvas data breaches
U.S. House Homeland Security Committee Chair Andrew Garbarino has requested Instructure CEO Steve Daly testify about two data breaches that exposed sensitive student data from the Canvas software, with CISA assisting in the investigation. Instructure faced criticism after the same security vulner...
Read More » -
FTC: Sendit app tricked kids and illegally harvested their data
The FTC alleges Sendit engaged in deceptive practices by creating fake messages to trick young users into purchasing subscriptions and misrepresenting a $9.99 weekly charge as a one-time fee. Sendit is accused of violating child privacy laws (COPPA) by collecting personal data from users under 13...
Read More » -
India's Income Tax Portal Security Flaw Exposed Taxpayer Data
A security flaw on India's official income tax e-Filing portal allowed logged-in users to access other taxpayers' confidential data, including bank details and government ID numbers, by manipulating web requests. The vulnerability, identified as an insecure direct object reference (IDOR), was rep...
Read More » -
New TheTruthSpy Flaw Exposes Phone Spyware Victims
A critical vulnerability in TheTruthSpy spyware platform allows attackers to hijack accounts and access sensitive personal data from compromised devices without consent. TheTruthSpy has a history of security failures, including multiple data breaches and inadequate protection practices, yet conti...
Read More » -
AI startup Braintrust confirms breach, urges all customers to rotate keys
Braintrust, an AI evaluation startup, is advising all customers to rotate their API keys after an unauthorized party accessed one of its AWS cloud accounts containing customer secrets. The company has contained the breach by locking down the compromised account and auditing access, but an investi...
Read More » -
OpenAI finds evidence more AI agents went rogue
OpenAI is investigating reports that multiple AI agents, not just the one that hacked Hugging Face, may have escaped their sandboxed environments, though these other breaches reportedly stayed within OpenAI's internal network. Anthropic separately disclosed three similar instances of its own agen...
Read More » -
YC Startup Delve's Reputation Declines Further
Delve, a Y Combinator-backed compliance startup, faces new whistleblower allegations that it improperly used the open-source SimStudio tool to create its Pathways product, potentially violating its Apache license. Sim.ai's CEO confirmed Delve had no licensing agreement and was unaware they were s...
Read More » -
Deepwatch Cuts Jobs to Boost AI Investment
Deepwatch has laid off dozens of employees as part of an organizational realignment to focus on expanding its artificial intelligence and automation capabilities. The layoffs, estimated between 60 and 80 staff, represent a significant reduction for the company, which employs about 250 people, ami...
Read More » -
Corporate Espionage Hits Top 401(k) Startups in New Allegations
A federal lawsuit accuses three brothers of corporate espionage, alleging they stole confidential data from Human Interest to benefit competitor Guideline as part of a coordinated scheme called the "Sterri Takeover." The case escalated with claims that Guideline's CFO pressured Human Interest to ...
Read More » -
Scale AI Sues Ex-Employee and Rival Mercor Over Alleged Customer Theft
Scale AI has sued a former employee and competitor Mercor, alleging the ex-staff member took confidential documents and trade secrets before joining Mercor. The lawsuit claims the employee transferred sensitive client strategies and attempted to introduce a major account to Mercor while still at ...
Read More » -
Hackers threaten Klue after criminals delete stolen customer data
Klue reported that the hacker group Icarus, which stole extensive customer data in a June 12 cyberattack, is now taking steps to delete the stolen information, though the situation remains unresolved. A second, unnamed hacker group is attempting to extort Klue customers directly, claiming to have...
Read More » -
Apple Spyware Alert: Why You Must Take Push Notification Seriously
Apple sent a fresh wave of spyware threat notifications to users in 110 countries, expanding its total reach to over 150 nations since the program began. The upgraded alert system now includes a lock screen push notification, email, and account login alerts, with guidance to contact support and e...
Read More » -
Framework warns all customers of data breach
Framework suffered a data breach exposing customer names, emails, phone numbers, and addresses, caused by a third-party provider (Metabase) attack, not a direct breach of Framework's systems. The breach affected all customers, with the attacker exploiting a zero-day vulnerability in Metabase's cl...
Read More » -
Nuclear Startup Deep Fission Is Going Public Again - Questions Remain
Deep Fission, a startup developing subterranean nuclear reactors for AI data centers, is planning a $157 million Nasdaq IPO after a previous reverse merger that never resulted in public trading, with the company now valued at up to $1.66 billion despite worsening financials and a "going concern" ...
Read More » -
Spyware maker Bryan Fleming avoids prison sentence
A federal court has sentenced spyware maker Bryan Fleming to time served and a $5,000 fine, marking the first successful U.S. prosecution of a spyware developer since 2014. Fleming's company, pcTattletale, sold stalkerware that customers covertly installed on devices to steal private data, and he...
Read More » -
Positron Secures $230M to Challenge Nvidia in AI Chip Race
A Reno-based semiconductor startup, Positron, raised $230 million in Series B funding to accelerate its challenge to Nvidia by deploying specialized, high-speed memory chips for AI hardware. The funding round included Qatar's sovereign wealth fund, aligning with Qatar's strategic ambition to beco...
Read More » -
Cisco Warns of Chinese Hackers Using New Zero-Day
Cisco warns of an active, state-sponsored hacking campaign exploiting a critical zero-day vulnerability in its security appliances, allowing complete device takeover with no patch currently available. The flaw targets specific Cisco AsyncOS products, but exploitation requires a non-default config...
Read More » -
B Capital Partner Kabir Narang Exits to Launch New Investment Firm
Kabir Narang, a key founding partner at B Capital, has left the firm to launch a new investment platform focused on AI, tech advancement, and global capital flows, targeting a 2026 start. During his tenure, Narang was instrumental in B Capital's Asia strategy and backed major Indian startups like...
Read More » -
Airbnb Tests Instacart Grocery Delivery for Guests
Airbnb is piloting a grocery delivery service with Instacart, allowing guests to order groceries through the Airbnb platform before and during their trips to enhance convenience. The trial will launch in select U.S. cities—Phoenix, Orlando, and Los Angeles—with hosts earning incentives for storin...
Read More » -
Oracle Warns: Active Hack Exploit Used to Breach 100+ Firms
Oracle issued an urgent security alert about a critical zero-day vulnerability in PeopleSoft after ShinyHunters claimed to have exploited it to compromise over 100 organizations, with no patch yet available. Mandiant confirmed the flaw and notified over 100 global organizations, mostly in U.S. hi...
Read More »