$1.5B Bybit hack, UK E2E pulled, PayPal phishing emails
Feb 24, 2025
auto_awesome
A hacker successfully stole nearly $1.5 billion from Bybit's crypto wallet, potentially linked to the infamous Lazarus Group. Apple has faced scrutiny as it pulls iCloud end-to-end encryption in the UK, highlighting tensions between privacy and security. Phishing scams targeting PayPal users have exploited the platform's 'New Address' feature. Meanwhile, innovative tools are being developed to enhance suspicious code detection, and Google has launched quantum-resistant digital signatures to bolster security. The future of AI safety research also raises concerns amid staffing cuts.
The Bybit hack, resulting in a theft of nearly $1.5 billion, underscores the persistent vulnerabilities within cryptocurrency security protocols and highlights the increasing sophistication of cyberattacks.
Apple's decision to withdraw iCloud end-to-end encryption in the UK due to government demands illustrates the ongoing clash between user privacy rights and state surveillance initiatives.
Deep dives
Massive Crypto Theft from Bybit
An attacker stole over $1.46 billion from Bybit's Ethereum cold wallet, marking the largest hack in cryptocurrency history and nearly doubling the previous record. The attackers executed a complex scheme that altered a wallet transaction, concealing the fraudulent activity behind a legitimate interface while modifying the underlying smart contract logic. According to the crypto fraud investigator ZachXBT, portions of the stolen Ethereum were quickly dispersed across 48 different addresses. Despite this significant incident, Bybit's CEO reassured clients that all other wallets remained secure and that client assets would be fully backed even in the absence of asset recovery.
Apple's Encryption Policy Change in the UK
Apple has discontinued iCloud end-to-end encryption in the United Kingdom due to government demands for encryption backdoor access under the Investigatory Powers Act, raising concerns about user data security. While this change affects most iCloud services, Apple maintains that its communication tools like iMessage and FaceTime will continue to offer end-to-end encryption protections. The British government's mandate is noted to lack precedent among major democracies, prompting Apple to express disappointment regarding the loss of crucial data safeguards for UK customers. The situation highlights the increasing tension between government surveillance requests and user privacy in the digital age.
Hacker steals nearly $1.5 billion from Bybit crypto wallet
Apple pulls iCloud end-to-end encryption in the UK
PayPal "New Address" feature abused in phishing scam
Huge thanks to our sponsor, Conveyor
It’s 2025. This is your sign to get a trust center if you don’t already have one. Speed up security reviews and reduce the headaches when you can share one link to your trust center and let customers download what they need on demand.Trusted by the world’s top B2B companies, Conveyor’s enterprise-grade trust center is specially designed to handle multiple products, complex orgs, and with AI first so you can even push your customers to self-serve their own AI answers to questionnaires.Learn more at www.conveyor.com.
For the stories behind the headlines, visit CISOseries.com.
Get the Snipd podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share & Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode