Technology News
Major Lapse: Trump’s Acting Cyber Chief Allegedly Uploaded Sensitive Government Files To ChatGPT
The acting head of the U.S. Cybersecurity and Infrastructure Security Agency (CISA) is under scrutiny for reportedly uploading sensitive “For Official Use Only” government documents to public AI platforms, including ChatGPT. The alleged actions bypassed standard security protocols and automated alerts, creating a potential risk of unauthorized data exposure.
Security Alerts Triggered
Reports indicate that the official’s actions prompted multiple warnings from the government’s automated security systems, which are designed to prevent accidental or malicious leaks of sensitive files. While the acting chief was reportedly allowed limited use of ChatGPT, other staff members were restricted from sharing documents on the platform.
Risk of Data Exposure
Uploading internal documents to large language models (LLMs) carries significant cybersecurity risks. AI platforms can retain and learn from user-submitted data, raising the possibility that confidential information could appear in responses to other users. Even files considered “unclassified” may contain operational details that must remain confidential under government policy.
Previous Controversies and Internal Action
The official’s appointment dates back to the Trump administration. Earlier reports indicated a failed counterintelligence polygraph test, later invalidated by the Department of Homeland Security. Following the incident, six staff members under the official’s supervision were suspended from accessing classified information.
CISA Statement
A CISA spokesperson stated that the official’s ChatGPT usage was limited in scope and duration. The Department of Homeland Security is conducting an investigation to determine the extent of any potential damage caused by the uploads.
Expert Warnings on AI and Sensitive Data
Cybersecurity experts stress that both government officials and private users should exercise extreme caution when uploading sensitive documents—including financial records, medical files, identification documents, or legal agreements—to AI platforms. AI providers often review chat data to improve system performance, which could inadvertently expose confidential information. Once incorporated into AI models, sensitive data may also resurface in responses to unrelated queries.
The incident highlights the ongoing challenges of integrating AI tools in secure environments, emphasizing the need for strict protocols and awareness of potential risks.
Cybersecurity
Anthropic Halts Release of Advanced AI “Claude Mythos” Amid Escalating Cybersecurity Concerns
Anthropic, a leading artificial intelligence research firm, has decided against the public release of its latest AI system, Claude Mythos — internally referred to by the codename Capybara — due to profound cybersecurity risks. The company’s internal assessments, partially revealed through a leaked document, suggest the system dramatically outperforms prior AI models and possesses capabilities that could pose significant dangers if misused.
According to information emerging from internal sources and industry reporting, Claude Mythos marks a substantial leap beyond Anthropic’s previous flagship model, Opus. With dramatically enhanced reasoning, coding, and security analysis capacities, the new system was initially developed to push the boundaries of generative AI. However, the extent of its power has prompted the company to restrict access to only a select group of trusted personnel.
Why Anthropic Is Holding Back
The decision to withhold public distribution centers on serious cybersecurity implications. Internal documents reveal that Claude Mythos is capable of rapidly detecting software vulnerabilities and potentially exploiting them with unprecedented precision. These capabilities extend to advanced password cracking, system penetration, and identification of sensitive data exposures — functions that anthroposophical models have never exhibited at this scale.
Security analysts reviewing the leaked details warn that such features, if accessible to malicious actors, could facilitate large‑scale cyber attacks that are difficult to anticipate or mitigate.
“The risk profile of an AI model increases exponentially with its ability to analyze and exploit systems,” a cybersecurity specialist commented. “Unrestricted use of a system like Claude Mythos could lead to outcomes that are practically uncontrollable.”
Operating in “Defensive Mode”
In response to these concerns, Anthropic has placed Claude Mythos into what it terms a “defensive mode,” effectively limiting the model’s capabilities to controlled research environments. Company leaders have cited previous incidents in which powerful AI technologies were misapplied by hackers, both domestically and internationally, reinforcing the need for cautious rollout strategies.
Within Anthropic, officials emphasize that while Claude Mythos represents a major step forward in AI innovation, its deployment must be governed by strict safeguards. Leaders describe the AI as a potential asset for future technological advancements — but one that also demands a robust framework to prevent harmful use.
Balancing Innovation and Safety
Beyond cybersecurity tasks, Claude Mythos reportedly excels in areas such as complex problem‑solving, predictive analysis of digital threats, and pattern recognition across large data sets. These strengths have many in the tech community optimistic about its future applications — provided access and governance are handled responsibly.
Industry analysts have praised Anthropic’s strategy as an example of measured AI development, prioritizing public safety without stalling progress. The guarded approach reflects a growing trend among AI developers to embed risk awareness into technological breakthroughs.
As conversations around responsible AI usage intensify globally, Claude Mythos stands as both a testament to innovation and a reminder of the challenges inherent in releasing next‑generation artificial intelligence tools.
Cybercrime
Courier Booking Turns Into ‘APK Trap’: Retired Army Officer Loses Lakhs in Cyber Fraud
In a chilling reminder of the growing sophistication of online fraud, a retired Army officer from Chandigarh reportedly lost more than ₹12 lakh after falling victim to a cyber scam disguised as a courier service transaction. Authorities say the incident involved a malicious APK file that compromised his banking credentials, enabling cybercriminals to siphon off funds through unauthorized transactions.
Routine Courier Booking Turns Into Costly Trap
Colonel Rajbir Singh Duggal, 82, was attempting to send a parcel from Chandigarh to Pune when the scam unfolded. While searching online for the contact number of a well-known courier company, he reportedly called a number that appeared legitimate. The person on the other end claimed to be a company executive and guided him through the booking process.
During the conversation, he was instructed to make a small online payment of ₹10 to confirm the pickup. After initially encountering a failed transaction on his SBI account, he completed the payment via his HDFC credit card.
Shortly afterward, the caller directed him to download a mobile application via a link shared on WhatsApp, claiming it was necessary to complete the courier request. Trusting the instructions, the retired officer installed the APK file on his smartphone.
How Malicious APK Files Exploit Mobile Devices
Cybersecurity investigators revealed that the APK file was malware engineered to access sensitive information on the victim’s device. Once installed, the software obtained permissions that allowed it to monitor SMS messages, notifications, and on-screen activity.
Experts note that malicious applications often exploit Android’s accessibility settings. Once granted, these permissions let attackers intercept one-time passwords (OTPs), capture banking credentials, and even conduct financial transactions without the user’s knowledge. In this case, the fraudsters reportedly used stolen OTPs and account details to transfer over ₹12 lakh across multiple accounts.
Expert Warnings: Verify Contacts and Avoid Unknown Apps
Cybercrime specialists stress that scams of this nature combine technical tricks with social engineering. Prof. Triveni Singh, former IPS officer and cybercrime expert, warns that APK files circulated via messaging apps under the guise of courier services or delivery updates can be extremely dangerous.
Experts advise verifying all service contacts directly through official websites or verified mobile apps. They also emphasize that APK files from unknown sources should never be installed, as they can provide attackers full access to personal and financial information stored on smartphones.
Staying Safe in the Digital Age
The incident serves as a stark reminder of the importance of vigilance in online interactions. Avoiding suspicious links, confirming official contacts, and refusing to download unfamiliar applications remain the most effective defenses against cyber fraud.
As mobile banking and digital transactions become increasingly common, experts urge users of all ages to exercise caution and educate themselves about potential online threats.
Cybercrime
Retired Teacher Duped of ₹1.57 Crore by Impersonator Claiming to Be Mark Zuckerberg
A retired teacher from Chakeri, Kanpur, has reportedly fallen victim to a meticulously planned cyber fraud, losing ₹1.57 crore over 13 months to criminals impersonating high-profile personalities, including Facebook CEO Mark Zuckerberg, singer Josh Turner, and Tesla owner Elon Musk. Cybercrime authorities have since frozen ₹30.42 lakh linked to the fraudulent transactions, while investigations continue to trace the remaining funds.
How the Scam Unfolded
Allyson Weems, a retired teacher from Methodist High School in Anandnagar, Chakeri, first came into contact with the fraudsters through social media. The initial communication was from an individual claiming to be Mark Zuckerberg, who convinced her that he could help establish a school business in the city.
Over time, additional impostors posing as Josh Turner and an associate of Elon Musk reached out to her through Facebook and WhatsApp. They offered lucrative investment opportunities and high-paying roles, gradually persuading her to transfer money from her personal savings, retirement funds, and mutual funds into various accounts.
Escalation Through Complex Deception
The fraudsters’ tactics grew increasingly sophisticated. One claimed to represent an organization called “Miracle Givers,” insisting her funds were being shipped via FedEx and demanding additional payments for shipping, customs, and compliance fees. Later, a person claiming to be advocate Ashok Suresh from “Lead India” told her her funds were invested with a company called Wisdom Capital.
The victim was shown a trading account in her name with a balance exceeding ₹2.23 crore and was asked to pay further taxes, verification fees, and stamp duties to access the amount. The scammers promised that the full sum, along with monthly interest, would be released by February 20, 2026. Believing these assurances, she continued depositing substantial sums, eventually losing ₹1.57 crore.
Police Intervention and Ongoing Investigation
After realizing the scam, the retired teacher filed a complaint with the National Cyber Crime Reporting Portal on February 27, 2027. Following the complaint, cyber authorities froze ₹30.42 lakh in accounts associated with the fraudulent transfers. Investigators described the fraud as highly organized, using multiple layers of impersonation and social engineering to exploit the victim’s trust.
Shrawan Kumar Singh, DCP Crime, highlighted that impersonation of high-profile figures is a growing tactic among cybercriminals and stressed the importance of verifying online contacts and investment opportunities. Authorities urged citizens to avoid transferring money to unverified accounts and to remain cautious when approached with unsolicited business proposals.
Lessons for Cybersecurity Awareness
Experts emphasize that even small upfront payments or procedural fees in such schemes often lead to far greater financial losses. Vigilance, verification of contacts, and skepticism toward unsolicited promises from alleged celebrities or high-profile individuals remain the most effective defenses against prolonged cyber fraud.
-
Business3 years agoPot Odor Does Not Justify Probable Cause for Vehicle Searches, Minnesota Court Affirms
-
Business3 years agoNew Mexico cannabis operator fined, loses license for alleged BioTrack fraud
-
Business3 years agoAlabama to make another attempt Dec. 1 to award medical cannabis licenses
-
Business3 years agoWashington State Pays Out $9.4 Million in Refunds Relating to Drug Convictions
-
Business3 years agoMarijuana companies suing US attorney general in federal prohibition challenge
-
Business3 years agoLegal Marijuana Handed A Nothing Burger From NY State
-
Business3 years agoCan Cannabis Help Seasonal Depression
-
Blogs3 years agoCannabis Art Is Flourishing On Etsy
