Skip To Main Content
Tom Spring on Muck Rack

Tom Spring

Boston
As seen in: Security Point Break, CNN, CNN International, PCWorld, CRN (U.S.), DZone, NewsBreak, NotebookReview, SC Media, CRN Australia, Flaunt and
Covers:  watchdog, tech, investigative reporting, consumer technology
Doesn't Cover: celebrities
reporter, writer, editor, skeptic and all-around amazing person. Oh, and also a journalist at SC Media.

Get in touch with Tom

Contact Tom, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Tom Spring’s Biography

Read Full Bio →

I’m Tom Spring: editor, investigative reporter, and professional curiosity junkie. I've been writing and editing stories about technology for the past 20 years.

Articles

Anthropic’s Claude Breach: Containment Failure or PR Play?

|
By Tom Spring
| Security Point Break
Three of Anthropic’s most advanced Claude models breached the real-world systems of three outside organizations during internal cybersecurity testing, the company disclosed Thursday. It was the second frontier AI lab in nine days to reveal that its models compromised production infrastructure while being evaluated for safety.
Open in Who Shared Issue with article?

Cyberattack Hits 30+ Minnesota Water Systems

|
By Tom Spring
| Security Point Break
More than 30 Minnesota water systems were targeted in a coordinated cyberattack Sunday and Monday, disrupting automated controls and briefly knocking one city’s water treatment plant offline. Minnesota IT Services said the attacks targeted technology used by community water systems July 26 and 27. Four communities — Braham, Plymouth, South St. Paul and Maple Plain — have publicly disclosed incidents. Drinking water remained safe, and officials have issued no boil-water advisories.
Open in Who Shared Issue with article?

LogoKit Builds Phishing Pages Around Each Victim

|
By Tom Spring
| Security Point Break
LogoKit, a phishing kit that generates fake login pages, is using victims’ email addresses to build customized corporate login pages in real time, according to new research from Barracuda. The attack starts with a phishing link containing the victim’s email address. Code on the fake page reads the email domain to identify the victim’s employer, then pulls in the organization’s logo and a screenshot of its legitimate website.
Open in Who Shared Issue with article?
See all 3,782 licensed articles (3,787 Total)