Risky Bulletin Risky Bulletin: Second iOS hacking framework found in the wild
Mar 20, 2026
A newly discovered iOS hacking framework being used across multiple countries is revealed. Belgium launches a secure government messaging app to replace foreign services. Japan legalises pre-emptive cyber operations with cabinet approval. AWS clamps down on S3 bucketsquatting to stop hijacks. Breathalyser devices and several crypto platforms suffer disruptive cyberattacks.
AI Snips
Chapters
Transcript
Episode notes
Breathalyser Outage Leaves Users Unable To Start Cars
- A cyber attack disrupted Intoxalock breathalyser devices, preventing them from contacting servers to confirm tests and leaving some court-ordered users unable to start cars.
- The outage lasted about two days affecting compliance and mobility.
BitRefill Compromised By Suspected North Korean Actors
- Suspected North Korean actors breached BitRefill, stealing crypto assets and customer records and attempting to alter gift card inventory.
- Investigators traced the entry point to a compromised employee laptop and linked activity to Lazarus/Blue Noroff patterns.
Supply Chain Attack Stole Millions In Crypto
- A Chinese front company used supply-chain compromises of Electron apps and browser plugins to steal private keys and seed phrases, draining wallets.
- Victims included Trust Wallet users who lost $7 million in December.