According to BlockBeats, on July 28, Apple was sued in the U.S. District Court for the Northern District of California for allegedly failing to effectively prevent cryptocurrency scam apps from appearing on the App Store. Three users accused Apple of having flaws in its security review process, leading them to download fake cryptocurrency wallet apps and lose a total of over $1.8 million.

The lawsuit alleges that the app impersonated the Bitcoin wallet "Sparrow Wallet," but the official Sparrow Bitcoin wallet is not actually available on the iOS platform. Three users suffered losses after transferring Bitcoin to the fake app: one user lost approximately $875,000, another approximately $840,000, and the third approximately $120,000.

The plaintiff argues that Apple has long touted the App Store's rigorous review process as a security advantage, claiming its closed ecosystem reduces the risk of malware and fraud, and therefore should be held responsible for fraudulent apps on its platform. The lawsuit also cites public criticism from the founder of Sparrow Bitcoin Wallet, alleging that Apple previously allowed counterfeit apps to appear on the App Store.

The three plaintiffs requested a jury trial and sought to recover their losses and additional damages, while also demanding that Apple increase risk warnings and security disclosures in the App Store.

Apple responded that impersonating other apps violates App Store rules, and the company will promptly remove such apps. Apple stated that there are currently no Sparrow Wallet clone apps on the App Store. Previously released data from Apple showed that in 2025, its review team rejected over 371,000 app submissions involving impersonation, spam, or misleading users.

According to BlockBeats, on July 28, the number of software security vulnerabilities discovered in popular technology products in 2026 is expected to be roughly double the number discovered in 2025, a surge primarily attributed to the increasing capabilities of artificial intelligence systems.

The U.S. National Vulnerability Database shows that 45,207 vulnerabilities were recorded from January to this Monday, a number approaching the total for the entire year of 2025. Last year, the database recorded a record number of vulnerabilities.

Oracle (ORCL.N) stated that its July monthly software update fixed 1,449 security vulnerabilities, a record high; compared to only 309 fixes in the same period last year.

Microsoft (MSFT.O) disclosed 642 security vulnerabilities in July, also a record high, almost five times the number from the same period last year. Google (GOOG.O) discovered and fixed 433 such vulnerabilities in its most recent Chrome browser update, compared to only 11 in a similar update a year ago.

"We must face the fact that these tools are enhancing people's ability to discover software vulnerabilities," said Gabriel Shapiro, a distinguished AI research scientist at cybersecurity company SentinelOne. Doug Turner, Google Chrome Engineering Director, said that vulnerabilities are being discovered "on an unprecedented scale and at an unprecedented speed," thanks to advancements in AI models and corresponding investments.

According to BlockBeats, on July 28, Microsoft AI launched a new self-developed cybersecurity model, MAI-Cyber-1-Flash. It stated that the model runs on the MDASH platform—a multi-agent framework that can detect and fix vulnerabilities in large-scale codebases.

MDASH reports that its MAI-Cyber-1-Flash + GPT-5.4 model combination outperforms Mythos by 12 points in the CyberGym benchmark. Microsoft AI claims that this model configuration offered in MDASH is 50% cheaper than its previous best offering (GPT-5.4 + 5.4 mini + 5.3 codex). (Jinshi)