Healthcare cybersecurity failures put patient safety at risk, Modat warns

Over 1.2 million internet-connected healthcare devices and systems that expose patient data have been identified in research by Modat. The United States, South Africa, and Australia topped the list, with vulnerable systems including MRI scanners, CT machines, and hospital management platforms.

Using its Modat Magnify platform, the company identified misconfigurations, weak passwords, and unpatched software as common risks. Some devices had no authentication, while others used factory-default passwords such as ‘admin’ or ‘123456’. Sensitive MRI, dental X-ray, and blood test records were accessed.

Modat worked with Health-ISAC and Dutch CERT Z-CERT for responsible disclosure, alerting organisations to secure exposed systems. CEO Soufian El Yadmani said devices should never be open to the internet without safeguards, warning that remote access must be secure.

The research stressed that healthcare cybersecurity is a patient safety issue. Outdated or unprotected devices could enable fraud, extortion, or network breaches. Regular security checks, asset inventories, and monitoring were recommended to reduce risks.

Founded in 2024, Modat uses its Device DNA dataset to catalogue internet-connected devices globally. It aims to help healthcare and other sectors close the gap between rising cyber threats and effective resilience.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

The Browser Company unveils a paid plan for AI browser

The Browser Company has introduced a $20 monthly Pro subscription for Dia, its AI-powered web browser, offering unlimited access to advanced chat and skills features.

Free users will now encounter limits on AI usage, although light users engaging with AI a few times a week can still use the browser without paying. CEO Josh Miller mentioned plans to launch multiple subscription tiers, ranging from $5 to several hundred dollars, based on different feature sets.

The Pro plan was briefly available online before being removed, but it is now accessible again through Dia’s settings. It marks The Browser Company’s first paid offering following its previous success with the Arc browser.

The Browser Company has secured $128 million in funding from investors, including Pace Capital and several prominent tech leaders such as Jeff Weiner and Dylan Field.

The launch comes amid intensifying competition in the AI browser space, with rivals like Perplexity’s Comet, Opera’s upcoming Neon browser, and AI integrations from Google and Microsoft vying for user attention.

The Browser Company’s subscription model aims to capitalise on growing interest in AI-enhanced browsing experiences.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Fintiv accuses Apple for allegedy stealing its trade secrets

US Texas-based company Fintiv, which provides mobile financial services, has filed a legal complaint against Apple, alleging that it stole trade secrets from its predecessor, CorFire, to develop Apple Pay.

The complaint claims that Apple employees held several meetings with CorFire to discuss the implementation of CorFire’s mobile wallet solutions and that CorFire had uploaded proprietary information to a shared site maintained by Apple.

According to the lawsuit, the two companies signed a non-disclosure agreement (NDA), giving Apple access to CorFire’s confidential information, which Apple allegedly misappropriated after abandoning plans for a partnership.

According to the IPWatchdog, Fintiv has been involved in ongoing litigation over its mobile wallet patents. Recently, it lost two key appeals: one against PayPal, which upheld the dismissal of its patent infringement claims, and another against Apple, in which the court confirmed specific patent claims were invalid.

However, in May, Fintiv secured a partial victory when the Federal Circuit reversed a lower court’s ruling that Apple did not infringe one of its patents (US Patent No. 8,843,125), allowing that part of the case to proceed. Apple had not commented publicly as of the article’s publication.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot

Cities embracing Bitcoin for rental payments

Paying rent in Bitcoin is no longer a niche concept, with cities worldwide embracing digital currencies for property leases. Remote workers, nomads, and tenants seeking alternatives to traditional banking are finding it easier to settle monthly payments in Bitcoin.

Blockchain-powered rental platforms and smart contracts have brought speed, security, and transparency to the process, reducing disputes and enabling global accessibility.

Tenants and landlords can choose between direct Bitcoin transfers and indirect payments via third-party services. Direct payments offer lower fees and decentralisation but carry price volatility risks.

Indirect transactions convert cryptocurrency to fiat, protecting landlords from market swings and ensuring regulatory compliance. Both methods are gaining traction as awareness and infrastructure improve.

Cities leading the Bitcoin rental movement include Miami, Lisbon, Berlin, Toronto, and Paris. Each offers varying degrees of direct and intermediary-supported payments, catering to crypto-savvy tenants and forward-thinking landlords.

Beyond these hubs, hotspots like El Zonte in El Salvador and Rosario in Argentina showcase how crypto rentals are gaining ground in emerging markets.

For tenants, the appeal lies in avoiding costly currency conversions, accessing flexible housing, and navigating global moves without banking hurdles.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot

Microsoft Copilot launches GPT-5 Smart Mode for users

Microsoft has upgraded all its Copilot tools with OpenAI’s latest GPT-5 model, now available through a new Smart Mode.

The update brings enhanced speed and better performance across Microsoft 365 Copilot, Azure AI Foundry, GitHub Copilot, and the Windows AI chatbot pre-installed on PCs.

Users can try the Smart Mode via the Copilot website, which can be selected from a model selector below the text input. Notably, a Microsoft account is not required to use this new mode.

The Smart Mode rollout is gradual, and while not yet visible in the Windows Copilot app for everyone, early users have reported that GPT-5 delivers faster and more accurate responses compared to earlier models.

Unlike the free ChatGPT tier that limits queries and switches automatically to older versions after usage caps, Copilot offers fewer restrictions, allowing more extensive use.

Microsoft’s AI Red Team tested GPT-5 thoroughly before release, highlighting its strong safety profile and improved reasoning capabilities.

Microsoft 365 Copilot benefits from GPT-5’s advanced abilities to answer complex questions, maintain coherence over long conversations, assist with email replies, and analyse documents effectively.

GitHub Copilot has also been enhanced with GPT-5, significantly improving reasoning, code quality, and overall user experience. The upgrade positions Microsoft’s AI tools to support developers and professionals across multiple platforms better.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Riverlane deploys Deltaflow 2 QEC in first UK commercial quantum integration

Riverlane has deployed its Deltaflow 2 quantum error correction (QEC) technology in a UK commercial quantum setting for the first time. The system introduces streaming quantum memory, enabling real-time error correction fast enough to preserve data across thousands of operations.

Deltaflow 2 combines a custom QEC chip with FPGA hardware and Riverlane’s software stack, supporting superconducting, spin, trapped-ion, and neutral-atom qubit platforms. It has been integrated with high-performance classical systems and a digital twin for noise simulation and monitoring.

Control hardware from Qblox delivers high-fidelity readout and ultra-low-latency links to enable real-time QEC. The deployment will validate error correction routines and benchmark system performance, forming the basis for future integration with OQC’s superconducting qubits.

The project is part of the UK Government-funded DECIDE programme, which aims to strengthen national capability in quantum error correction. Riverlane and OQC plan to demonstrate live QEC during quantum operations, supporting the creation of logical qubits for scalable systems.

Riverlane is also partnering with Infleqtion, Rigetti Computing, and others through the UK’s National Quantum Computing Centre. The company says growing industry demand reflects QEC’s shift from research to deployment, positioning Deltaflow 2 as a commercially viable, universally compatible tool.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Warner Bros Discovery targets password sharing on Max

Warner Bros. Discovery is preparing to aggressively limit password sharing on its Max streaming platform, beginning next month and escalating throughout 2025. The move aims to turn shared users into paying subscribers, following Netflix and Disney+ strategies.

The company plans to deploy technology that detects unusual login activity, such as access from multiple locations. Users will get gentle warnings before stricter actions like suspensions or paid upgrades are enforced.

The initiative seeks to boost revenue and reduce subscriber churn in an increasingly competitive streaming market.

While concerns remain about user dissatisfaction and possible cancellations, Warner Bros. Discovery is confident that its extensive library of popular content, including HBO, DC, and Discovery titles, will encourage loyalty.

The goal is to create a sustainable revenue model that directly supports investments in original programming.

Industry observers note that Max’s crackdown reflects broader streaming trends, where enforcing account integrity becomes essential to growth. The full impact will be clear by the end of 2025, possibly shaping future subscription management.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot

ShinyHunters breach Google’s Salesforce database

Google has confirmed a data breach during its investigation into the ShinyHunters group, revealing the tech giant was also affected. The attackers accessed a Salesforce database used for storing small business customer information.

The breach exposed business names and contact details during a short window before access was revoked. Google stated no highly sensitive or personal data was compromised.

ShinyHunters used phishing and vishing tactics to trick users into authorising malicious Salesforce apps disguised as legitimate tools. The technique mirrors previous high-profile breaches involving firms like Santander and Ticketmaster.

Google warned the group may escalate operations by launching a data leak site. Organisations are urged to tighten their cybersecurity measures and access controls, train staff and apply multi-factor authentication across all accounts.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

GPT-5 launches with ‘PhD-level performance’

OpenAI has unveiled GPT-5, the latest generation of its widely used ChatGPT tool, offering what CEO Sam Altman described as a ‘huge improvement’ in capability.

Now free to all users, the model builds on previous versions but stops short of the human-like reasoning associated with accurate artificial general intelligence.

Altman compared the leap in performance to ‘talking to a PhD-level expert’ instead of a student.

While GPT-5 does not learn continuously from new experiences, it is designed to excel in coding, writing, healthcare and other specialist areas.

Industry observers say the release underscores the rapid acceleration in AI, with rivals such as Google, Meta, Microsoft, Amazon, and Elon Musk’s xAI investing heavily in the race. Chinese startup DeepSeek has also drawn attention for producing powerful models using less costly chips.

OpenAI has emphasised GPT-5’s safety features, with its research team training the system to avoid deception and prevent harmful outputs.

Alongside the flagship release, the company launched two open-weight models that can be freely downloaded and modified, a move seen as both a nod to its nonprofit origins and a challenge to competitors’ open-source offerings.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

TikTok Shop faces surge in crypto phishing scams

Cybercriminals are increasingly targeting TikTok Shop users through a phishing and malware campaign known as ‘ClickTok‘. The scheme uses fake Meta ads and AI-generated TikTok videos imitating influencers to lure victims to fraudulent domains resembling real sites.

These domains are used to steal credentials and distribute trojanised applications. More than 10,000 fake sites have been identified, luring shoppers with heavily discounted products and urgency tactics such as countdown timers.

Victims are prompted to make payments in Tether, allowing scammers to exploit the irreversible nature of cryptocurrency transactions. The fraudulent storefronts are designed to appear convincing, encouraging rash purchases.

TikTok Shop affiliate members are also being targeted with advance fee scams. Criminals pose as TikTok affiliates on WhatsApp and Telegram, convincing victims to deposit funds into bogus wallets in exchange for fake commission payments.

The report warns that the younger demographic on TikTok, particularly those aged 18 to 34, may be more vulnerable to such schemes. The trend shows scams shifting from Facebook and X to new e-commerce platforms.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot