America navy has recognized for years that enemies could use location data to track troops’ phones—and it’s additionally lengthy been conscious of straightforward fixes for the drawback. The Pentagon adopted nearly none of those protections, although, regardless of admitting in a letter uncovered this week that US adversaries are really utilizing the knowledge to goal troopers in struggle. In the meantime, US regulation enforcement warned this week about “anti-tech extremism” as AI backlash grows round the nation.
After an almost 90-day web shutdown, connectivity started to trickle back into Iran this week amid inside political energy struggles and ongoing negotiations with the US to finish its struggle with Tehran. Researchers cautioned that it is unclear how in depth the restoration will probably be and whether or not connectivity will solely return briefly.
As cybercriminals and offensive hackers ramp up their use of AI to exploit vulnerabilities and develop hacking instruments, the expertise is additionally radically changing the dynamics of how security researchers hunt for vulnerabilities. And scammers are utilizing actual resort reservation knowledge and different travel details to conduct effective spear-phishing campaigns, probably accessing buyer knowledge from 350 motels and trip leases round the world.
And there’s extra. Every week, we spherical up the safety and privateness information we didn’t cowl in depth ourselves. Click on the headlines to learn the full tales. And keep secure on the market.
Play, a Russian-language ransomware operation that has affected greater than 900 organizations since 2022, posted to its dark-web leak web site on Monday claiming it had pulled “non-public and private confidential knowledge, shoppers’ paperwork, funds, payroll, IDs, taxes,” and different monetary data from MyPillow. The Minnesota-based house items firm is run by Mike Lindell, who is amongst at the very least 10 Republicans in search of the occasion’s nomination for governor of Minnesota in August’s main. Lindell is additionally certainly one of the most prolific backers of Donald Trump’s false claims of victory in the 2020 election.
Play reportedly set a Friday deadline for MyPillow to make contact before publishing the knowledge on-line. Lindell told Straight Arrow News, which broke the story of the ransomware claims on Tuesday, that his firm was not hacked and that allegations that it was are a political hit job.
“This is one other hit job by outdoors sources as a result of I’m working for governor,” Lindell mentioned. “I assure it. We do not have any breaches in our knowledge in any respect.”
Lindell has been on the shedding finish of two latest defamation rulings over his 2020 election claims: A federal jury in Colorado final 12 months discovered that he had defamed Eric Coomer, a former Dominion Voting Techniques director, and ordered Lindell and his media platform, FrankSpeech, to pay $2.3 million in damages; a federal choose in Minnesota individually dominated in September that Lindell had defamed Smartmatic by way of 51 false statements about its voting machines, with damages nonetheless to be set at trial.
In recent times, ransomware teams have turn out to be extra aggressive and ruthless of their efforts to get hold of cash from victims. Most of those prison hackers now focus on stealing knowledge and extorting firms fairly than utilizing malware to lock pc techniques. However in uncommon events, ransomware teams have been seen instantly threatening executives, or contacting individuals named in stolen knowledge, to strive to get hold of cost. The FBI said this week that one ransomware group is going even additional: sending individuals to steal knowledge instantly from firms IRL.
Amongst extra conventional social engineering strategies, the FBI says the Silent Ransom Group (SRG), which is focusing on regulation companies, has despatched individuals to firm places of work to instantly get entry to computer systems. “By sending somebody in particular person to the sufferer’s location to facilitate the intrusion, SRG actors exfiltrate knowledge to an external exhausting drive or USB drive inserted by the risk actor into the sufferer’s pc,” the FBI mentioned in an alert. Safety researchers say the tactic has not been seen before. The FBI did not present any information about who the Russian-speaking ransomware group was sending to conduct its assaults, however researchers consider they may very well be paying freelancers who do not essentially know who they are working for.
The AI surveillance firm BusPatrol, which has put in its cameras in tens of hundreds of US faculty buses, says that it’s going to now flip these cameras into automated license plate readers that may document the location of each automobile a BusPatrol faculty bus passes and make the knowledge out there to regulation enforcement with out a warrant. The initiative would flip the acquainted yellow buses into what 404 Media aptly described as “roaming surveillance automobiles.” BusPatrol expertise, and college bus surveillance tech extra broadly, was initially meant to be used for ticketing automobiles that illegally cross stopped buses—a vital security challenge for youngsters.
College of Chicago sociology professor Rob Vargas discovered this month that the Chicago Police Division was 4 minutes sooner in responding to the most pressing non-gunshot 911 calls in the six-month interval after Mayor Brandon Johnson shut down ShotSpotter gunshot detection tech in 12 neighborhoods in September 2024. Analyzing Chicago metropolis knowledge in addition to knowledge obtained by way of public data requests, Vargas in contrast the time interval with the previous six months throughout which ShotSpotter was nonetheless lively. The info couldn’t be used to assess response occasions for calls particularly associated to gunshots, nevertheless it indicated that ShotSpotter alerts could have been occupying officers with false positives and delaying them in responding to different varieties of vital 911 calls. “It is clear that ShotSpotter wasted officers’ time by sending them on wild-goose chases,” Vargas informed WTTW Information.
Disclaimer: This article is sourced from external platforms. OverBeta has not independently verified the information. Readers are advised to verify details before relying on them.
