network security

Australian police arrest two over TeamPCP hacks targeting Mercor, OpenAI, and others

Medical device maker Boston Scientific says a cyberattack is causing a ‘global disruption’ to its operations

Boston Scientific has confirmed a significant cyberattack causing a “global disruption” to its operations. While the company has not yet disclosed whether medical devices are directly impacted or if customer data was compromised, the incident highlights the increasing vulnerability of critical infrastructure. This event follows a concerning trend, as evidenced by CISA's recent confirmation of hackers targeting over 100 US water systems. Explore further details on related cybersecurity incidents, including the recent Hugging Face breach, for a broader understanding of the current threat landscape.

CISA confirms hackers targeted over 100 US water systems during July

CISA has confirmed a concerning surge in cyberattacks targeting over 100 U.S. water systems throughout July, escalating anxieties surrounding critical infrastructure security. This warning follows a series of suspected attacks linked to Iran-backed actors. The incidents underscore the urgent need for robust cybersecurity measures within vital sectors.

US seizes domains of Chinese botnet used to hack NASA, Justice Department, and the Senate

In a significant victory against cybercrime, the U.S. Justice Department has seized domains linked to a Chinese-backed botnet responsible for breaches targeting NASA, the Justice Department itself, and the Senate. The FBI’s swift action effectively dismantled the network, preventing further unauthorized access to sensitive government systems. This incident underscores the escalating threat of state-sponsored hacking and the importance of robust cybersecurity measures. For further insights into government cybersecurity practices, explore our article, "Senator asks US government watchdog to review how feds use hacking tools."

T-Mobile ‘chopped a cable’ to expel Chinese hackers from its network

T-Mobile proactively secured its network, effectively removing Chinese-backed hackers following early detection of a significant breach attempt. The provider took decisive action, physically severing a compromised cable to isolate and expel the threat. This rapid response demonstrates a commitment to robust network security and protecting user data. For further insights into AI-powered threat detection, explore our article on "Whatsapp Tests on Device ML for Scam Detection with Privacy Preserving Analytics."

Comcast adds motion sensing to millions of its newer routers, with a privacy catch

Comcast is integrating motion sensing directly into millions of its newest routers, offering a compelling alternative to traditional sensors. This innovative feature allows for automated home control and enhanced security without requiring additional hardware. However, users should carefully review the privacy implications—data collection is involved. Explore how this technology shifts the landscape of smart home connectivity. For further insights into the accelerating advancements in AI-powered systems, see our recent article on Etched’s impressive valuation growth.

Bluesky says its recent outage was caused by another DDoS attack

Bluesky, the decentralized social network, experienced another significant disruption this week due to a distributed denial-of-service (DDoS) attack. This marks the latest large-scale assault on the platform this year, highlighting persistent vulnerabilities in online infrastructure. While Bluesky is working to mitigate the impact and strengthen defenses, users experienced intermittent service interruptions. Understanding the broader landscape of online security is crucial; for instance, recent developments in router security, as detailed in our article on "Comcast adds motion sensing," demonstrate evolving privacy considerations.

Brex assumes its AI agents could do anything — so it watches the network, not the code

Brex CEO Pedro Franceschi outlined a blueprint for secure AI agent deployment, addressing a key challenge for enterprises. Departing from vague terminology, Franceschi proposes viewing AI agents as “virtual employees” – entities with email addresses and Slack presence capable of collaborating with human workers. This necessitates a network-centric security approach, exemplified by Brex’s open-source CrabTrap, which monitors network traffic rather than policing code. The company's experience, detailed in Franceschi’s presentation, underscores the importance of proactive AI adoption, even amidst inherent risks.

PSA: Apple’s Private Relay can leak your real IP address

A critical vulnerability has been identified in Apple’s Private Relay, a feature designed to protect user privacy by masking IP addresses. In certain circumstances, the implementation can inadvertently reveal a user’s actual IP address to visited websites. This represents a significant setback for those relying on Private Relay for enhanced online security. For deeper insights into data privacy concerns, explore our recent report on how Android app developers may be unknowingly sharing user location data.

Horizon3 hits $2 billion valuation with $250M Series E as AI threats escalate

Horizon3 has achieved a significant milestone, securing $250 million in Series E funding and reaching a $2 billion valuation. This investment underscores the escalating demand for continuous, AI-powered security validation—a critical shift away from traditional, infrequent penetration testing. As AI threats become increasingly sophisticated, organizations are prioritizing proactive and adaptive security measures. Explore how this trend is reshaping cybersecurity, and delve deeper into AI's role in congressional workflows, as highlighted in our recent article, "Congress’s favorite AI tool? ChatGPT."

Samsung bans smart TV apps that share users’ internet connections with strangers

Samsung has taken decisive action, banning smart TV apps that share users’ internet connections with third parties. Recent security research exposes a growing threat: residential proxy networks leveraging these apps to route traffic through unsuspecting homes. This practice compromises user privacy and security, highlighting the need for robust safeguards. Discover how Samsung is prioritizing user protection, and explore the escalating landscape of AI-driven security challenges—as detailed in our recent article on Horizon3's $2 billion valuation and the increasing demand for AI-powered cybersecurity.

In the Hugging Face breach, OpenAI’s hacker was noisy and fast — but not unstoppable

The recent Hugging Face breach underscored a critical truth: even sophisticated AI firms aren’t immune to traditional cybersecurity vulnerabilities. While the attacker moved swiftly and audibly, experts emphasize that the incident highlights systemic defensive gaps, not inherent AI weaknesses. This serves as a stark reminder that robust, foundational security practices remain paramount. Cybersecurity professionals are increasingly focused on proactive, "forward-deployed" engineering talent – as explored in our recent article, "Forward-deployed engineers are the AI industry’s latest talent obsession" – to address these evolving threats.

Cloudflare Makes Internal DNS Generally Available

Cloudflare has made Internal DNS generally available, simplifying network management by unifying private and public DNS operations on a single platform. This authoritative and recursive DNS service delivers enhanced control and streamlined workflows for private networks. Consolidating DNS infrastructure reduces complexity and improves security, empowering organizations to manage their data more effectively. For deeper insights into the computational demands of modern AI models, explore our recent article, "How Much Does a Local LLM Actually Cost to Run?"

The hacker who humiliated spyware makers and was never caught

Phineas Fisher stands as a uniquely compelling figure in cybersecurity: a hacktivist who has seemingly evaded capture while disrupting two prominent government spyware manufacturers. Their actions, targeting companies like NSO Group and Cytrox, exposed vulnerabilities and released sensitive data, raising critical questions about the ethics of surveillance technology. Considered by many to be the most prolific hacker to have remained unidentified, Fisher’s motivations and methods remain shrouded in mystery.

US government says Iran-linked hackers are disrupting American water and energy providers

A new government advisory highlights a concerning trend: Iranian-linked hackers are actively targeting American water and energy providers, disrupting critical infrastructure. These actors are exploiting existing system vulnerabilities, emphasizing the urgent need for robust cybersecurity measures within these sectors. The advisory serves as a clear call to action for organizations to review and strengthen their defenses. For further context on related security risks, explore our article, "The credential that let OpenAI’s agents into Hugging Face exists in most enterprises right now."

US charges Russian ‘bulletproof’ web hosts over cyberattacks that netted $62M from cybercrime victims

The U.S. Department of Justice has charged three Russian nationals and two web hosting companies with facilitating cybercrime, resulting in over $62 million in losses for victims. This newly unsealed 2024 indictment targets so-called “bulletproof” hosts, known for shielding malicious actors from law enforcement. Accusations include knowingly providing infrastructure for hackers and profiting from their activities. This action underscores a growing effort to disrupt the ecosystem supporting cyberattacks and hold enablers accountable.

Iran abused mobile networks’ vulnerabilities to locate US military in the Middle East, report says

A recent report details a concerning escalation in cyber warfare: Iran reportedly leveraged established vulnerabilities within mobile networks to pinpoint and target U.S. military assets in the Middle East. This exploitation occurred during the critical period leading up to and at the outset of hostilities. Security analysts confirm the sophistication of the tactic, highlighting how known network flaws were weaponized to compromise operational security and directly endanger personnel. This incident underscores the urgent need for enhanced network resilience and proactive threat mitigation.