Your push notifications are not FBI safe

Amid horrific threats From US President Donald Trump While the United States and Iran were negotiating a ceasefire, the US government warned this week that hackers linked to Iran Carrying out attacks Against US energy and water infrastructure goals. With nearly one in five people in Lebanon displaced by Israeli attacks, so is the government Trying to manage the crisis Without modern digital infrastructure and an emergency system it can barely survive. In addition, WIRED’s analysis looked at Hijacking Syrian government accounts in March and the shortcomings it revealed in Syria’s basic cybersecurity defenses.

Amid growing fears of political violence, a WIRED investigation finds that America’s political candidates are as well Spend more on securityIncluding purchasing equipment such as home alarms and bullet-proof vests. Recent research looking at Telegram groups found that men do as well Share thousands of non-consensual images of women and girlsThey buy spyware to use against their wives and friends, and engage in defamation and sexual assault. At the same time, as governments strive to tackle the growing industrial fraud coming out of Southeast Asia, China has emerged as the largest portBut it is also selective, causing crime syndicates to shift their focus abroad to avoid Chinese targets.

Formally anthropic Announced the new Claude Mythos Preview model This week, it said it would make the model available for now only to a select group of a few dozen leading tech and financial institutions, including Apple, Microsoft, Google and the Linux Foundation. The consortium, called Project Glasswing, will explore Mythos Preview’s advanced hacking capabilities and other cybersecurity capabilities and evaluate the best ways to improve software and hardware defenses before capabilities like those in Mythos Preview spread more widely across other models and inevitably end up in the hands of attackers. Advertisements It sparked controversy About whether Mythos Preview and similar capabilities will be of real importance to cybersecurity says Anthropic. Experts told WIRED that while it may not be a dramatic disaster, it’s important for advocates to come together and use their early access to make changes in how software is developed and how organizations around the world invest in patching.

Finally, a WIRED investigation found just that Nonprofit groups associated with CBP facilities They were selling challenge coins that celebrated the Trump administration’s immigration raids, including one depicting it Charlotte’s Web Figures in riot gear.

And there’s more. Every week we round up security and privacy news that we haven’t covered in depth ourselves. Click on the titles to read the full stories. And stay safe out there.

The FBI recently obtained copies of encrypted Signal messages sent to the defendant’s iPhone because the contents of those messages were included in push notifications, 404 Media reports. Although the Signal app was removed from the phone before it was seized by the FBI, the notifications are still present in the phone’s internal memory.

This issue It affects all applications Which sends push notifications, not just the Signal application, but users of this application can adjust their settings so that the content of the message or the sender’s name does not appear in push notifications. To adjust your notification settings going forward, open the Signal app and go to Settingsthen Notificationsand change the option to Name only or No name or content.

Despite a fragile and disputed ceasefire established in the US-Israel war with Iran, tens of millions of ordinary Iranians remain without regular, reliable internet access. The regime’s Internet blackout, which began during the first hours of the war on February 28, has now reached the 1,000-hour mark, according to NetBlocks Internet monitoring suite. In recent weeks, The internet shutdown became the longest in Iran’s history And one of the longest sanctions in the world – depriving Iranians of accurate news about the war, preventing them from contacting their families and loved ones, and causing further economic damage to the nation. US-based Iranian Digital Rights Project The liquidation clock is detailed How the Iranian regime, while under bombardment during the conflict, described anti-censorship tools as “malicious” and claimed to have arrested individuals using Starlink internet connections to circumvent the ban.

The FBI’s annual cybercrime report typically paints a bleak picture: Year after year, the number of cybercrime reports increases and the amount of money Americans lose rises. Unfortunately, 2025 is no different. Last year, according to FBI Annual ReportThe losses were reported to the Internet Crime Complaint Center Exceeded $20 billion– an increase of 26 percent compared to 2024. More than half of these reported losses ($11.3 billion) were related to cryptocurrency scams, often through Fraudulent investment schemesaccording to the FBI. Business email breaches, technical and customer support scams, personal data breaches, and trust or romance scams make up the other most common crime reports. Crimes mentioning AI resulted in $893 million in losses.

Google this week expanded end-to-end encryption for Gmail to include Android and iOS apps, allowing enterprise users to compose and read E2EE messages natively on mobile for the first time without the need for separate apps or mail gateways. Encrypted emails appear as standard message threads in the Gmail app to recipients using Gmail, while recipients on other providers can access them via a secure browser view. This rollout builds on the client-side encryption model introduced to Google Workspace web users in April 2025, where messages are encrypted with client-controlled keys, preventing Google from accessing their contents. This approach is particularly attractive to organizations with stringent compliance requirements, including HIPAA, export controls, and data sovereignty regulations.

However, access remains limited: This feature is only available to Google Workspace Enterprise Plus customers with Assured Controls or Assured Controls Plus functionality, and is not supported for personal Gmail accounts. Officials should too Explicitly enable Android and iOS clients in the management interface before eligible users can access the feature, which is disabled by default. Users then toggle encryption for each message by clicking the lock icon and choosing “Additional Encryption,” mirroring the web workflow. The offering is available immediately for both Express release and scheduled release Domains.