Cybercrime News For Apr 10, 2026. Hacker Accessed Ex-IDF Chief’s Phone For Years. WCYB Digital Radio
April 10, 2026·3 min
1. WCYB Digital Radio's Cybercrime Radio delivers a daily news bulletin covering six cybercrime incidents from the week of April 10, 2026.
2. The bulletin is read by David Bowie and produced with support from Evolution Equity Partners, an international venture capital investor in cybersecurity and enterprise software.
3. The bulletin's thesis is implicit: the cybercrime threat landscape is expanding across espionage, intimate abuse, financial theft, supply chain attacks, travel data, and AI-driven offense and defense simultaneously.
4. Iranian-linked group Handala claims to have maintained covert access to former Israeli military chief Jose Halevi's personal phone for years, exfiltrating approximately 19,000 files including what CTEK describes as reportedly authentic official and personal images.
5. The Halevi breach remains unverified in full, but the incident is cited as evidence of ongoing cyber espionage tensions between Iran-linked actors and Israeli military targets.
6. AI Forensics researchers identified Telegram communities where thousands of men purchase hacking and surveillance tools specifically to target romantic partners, friends, and former partners.
7. Wired's reporting on the AI Forensics findings noted that the Telegram groups also trade non-consensual images and alleged illegal material, with millions of messages analyzed across the communities.
8. The AI Forensics story is framed as a growing underground ecosystem enabling tech-facilitated intimate partner abuse at commercial scale — moving stalkerware from specialized hacking tools to off-the-shelf purchases.
9. Crypto ATM operator Bitcoin Depot disclosed that attackers stole approximately $3.7 million by transferring more than 50 bitcoin from company wallets; the breach was detected in March and law enforcement was engaged.
10. The Shiny Hunters group breached analytics firm Anodot, stealing authentication tokens that were subsequently used to access Snowflake accounts belonging to more than a dozen of Anodot's customers.
11. TechRadarPro reported that attempts by Shiny Hunters to further expand access via Salesforce accounts were detected and blocked before they succeeded, limiting the scope of the supply chain cascade.
12. EurRail disclosed a data breach affecting over 308,000 individuals, with stolen data including names and passport numbers; the breach originated in December and also impacted the DiscoverEU program.
13. The EurRail incident exposed additional personal, financial, and health-related information tied to DiscoverEU participants, underscoring risks in large interconnected travel data systems.
14. Anthropic announced Project Glasswing, a partnership with major tech firms aimed at defending critical science and technology infrastructure against AI-driven cyber threats.
15. Engadget reported that Project Glasswing uses Anthropic's unreleased Claude Mythos model, which has reportedly already identified thousands of vulnerabilities across major technology platforms.
16. Project Glasswing is framed as part of a broader industry push to deploy AI defensively — using frontier AI models to find and fix vulnerabilities before adversaries can exploit them.
17. The bulletin's format is a rapid-fire summary news read with no guest commentary, analysis, or host editorializing beyond neutral attribution to source outlets.
18. Each story is sourced to a named publication (CTEK, Wired, The Block, TechRadarPro, The Record, Engadget), giving listeners a clear trail for follow-up reporting.
19. Cybersecurity professionals, security operations teams, and technology news followers who want a rapid daily briefing on major incidents would find this format most useful.
20. Listeners seeking in-depth analysis, technical detail, or practitioner interviews would find this bulletin too brief to satisfy their needs.
