Tag: nation state
1338 articles
US Agencies Warn of Chinese AI Firms' Large-Scale Model Distillation Attacks
US cybersecurity experts have sounded the alarm on a massive AI heist, revealing that six Chinese tech firms have launched large-scale "distillation attacks" on American AI models, siphoning off billions of tokens since late 2022. This brazen cyber theft, involving millions of requests, is believed to have had the backing of the Chinese government.
FBI Warns AI Bolsters Malicious Hackers, Urges Focus on Cyber Basics
The FBI is sounding the alarm: AI is supercharging malicious hackers, making them faster and more powerful. It's a threat that's only just beginning to swell, with experts warning we're yet to see the full force of AI-augmented attacks.
Australia's Defense Strategy Unfolds Cognitive Weakness
Australia's defence readiness is under scrutiny with a surprising statistic: only half of adults say they'd fight to defend their country if physically able. This raises crucial questions about the nation's cognitive resilience in times of crisis.
US Agencies Warn of China's Industrial-Scale AI Model Distillation Attacks
US agencies are sounding the alarm on China's brazen, large-scale AI model distillation attacks, which systematically extract proprietary tech from US AI models. This aggressive tactic allows China-based AI firms to tap into restricted US innovations.
US Air Force Fortifies Defenses Against AI-Powered Cyber Threats
The US Air Force is stepping up its game against cyber threats with a new defensive playbook that's specifically designed to combat AI-powered attacks. This proactive plan aims to stay one step ahead of evolving threats and protect against the increasingly sophisticated tactics of AI-enabled hackers.
CIA Elevates Cyber Ops to Center of Intelligence Missions
The CIA's cyber operations have taken center stage in intelligence missions, as highlighted by Deputy Director Michael Ellis, who credited the Center of Cyber Intelligence with enabling a flawless intelligence picture that led to the successful apprehension of Nicolás Maduro. Cyber ops proved to be the game-changer, allowing US special forces to pinpoint Maduro's location and apprehend him within minutes of landing.
China Exploits US AI Models with Aggressive Distillation Tactics
China-based AI companies are using sneaky tactics to tap into US AI models, extracting billions of tokens by routing requests through multiple pathways, in clear violation of US terms of use. This aggressive model theft has prompted a joint warning from the NSA, CISA, and FBI.
CIA Cyber Intel Helped Locate, Capture Maduro in Minutes
The CIA's cyber intel team played a starring role in Operation Absolute Resolve, providing the pinpoint-accurate intelligence that enabled US forces to track down and capture Nicolás Maduro in a lightning-fast four minutes. This flawless operation was a game-changer, and it's a testament to the power of the CIA's cyber capabilities.
US Accuses China of Systematic AI Model Distillation
The US has accused China of systematically siphoning off proprietary AI capabilities from American companies through large-scale knowledge distillation campaigns, which have become a core part of China's AI development strategy. This alarming activity, ongoing since late 2022, has prompted a joint advisory from top US agencies.
Houthi Strikes Target Saudi Energy Lifeline
The Houthi rebels launched a massive attack on Saudi Arabia's energy infrastructure, unleashing dozens of ballistic missiles and drones that caused major damage to key facilities, according to Houthi spokesman Brig. Gen. Yahya Saree. The strikes were reportedly in retaliation for Saudi aggression that targeted Houthi-controlled areas with 121 air strikes over just three days.
Iran Captures US Navy's Advanced Underwater Drone
Iran's Islamic Revolutionary Guard Corps pulled off a daring heist, capturing a cutting-edge US underwater drone near the Strait of Hormuz in a stealthy operation. The stunning footage shows the sleek submersible being recovered from the depths and displayed for all to see.
Boston Scientific Revises Outlook as Cyberattack Disrupts Operations
Boston Scientific's operations have been significantly disrupted by a cyberattack, forcing the company to revise its financial outlook and warning investors of a potential material impact on its third-quarter and full-year results. The incident, detected on August 25, has left the company's net sales growth and earnings guidance in jeopardy.
Threat Actors Exploit AI for Large-Scale Credential Harvesting
Threat actors are supercharging their attacks with AI, using it to scale up credential harvesting and launch more sophisticated campaigns. Google Threat Intelligence Group reports that financially motivated and espionage-focused attackers are increasingly turning to AI to target high-value sectors like healthcare, government, and media.
Utilities Face Unseen Network Threats
The water and wastewater sector is under attack, with over 100 compromised systems identified in July alone, often due to vulnerable controllers linked directly to cellular modems. This alarming trend has prompted joint warnings from CISA, the FBI, and the EPA, highlighting the urgent need for utilities to bolster their network defenses.
Microsoft 365 Phishing Op Exposes Thousands of Credentials
A recent phishing operation exposed a staggering 5,137 records from 461 organizations, including 1,032 plaintext passwords and 474 fully authenticated Microsoft 365 sessions that could be easily exploited. This massive haul highlights the alarming vulnerability of sensitive credentials to clever phishing tactics.
Threat Actors Target AI Coding Tools in Software Supply Chain Compromises
Threat actors are increasingly targeting AI coding tools to compromise software supply chains, with financially motivated groups like UNC6780 using malware like Dustmaker to gain initial access to AI environments. This growing trend highlights the need for heightened security measures in modern AI development pipelines.
Google Warns of AI Data Extortion Surge
Google's top analyst warns that AI data has become a prime target for extortionists, with companies willing to pay up to keep their valuable intellectual property under wraps. Attackers are exploiting this vulnerability, as seen in recent breaches at a healthcare firm and an AI media generation company.
Microsoft 365 Targets in Fake IT Call Data Theft, Extortion Scheme
Beware of fake IT calls that can trick you into giving away your Microsoft 365 login credentials - scammers are using a clever vishing scheme to steal account details and hold them for ransom. It starts with a convincing phone call from someone claiming to be from IT, directing you to a fake authentication page.
UN Institutions Face Test on Taiwan's Status.
As the UN General Assembly convenes, a pressing question looms: will institutions like the UN assert their authority to interpret their own rules, or will external forces dictate the terms? The fate of Taiwan's status hangs in the balance, tied to the interpretation of Resolution 2758.
Russians Target Signal Users with Phishing Attacks
Stay vigilant, especially on holidays like Labor Day - even company staff aren't immune to unexpected messages, as Nightwing's CEO recently proved when a message meant for employees somehow made its way to The Register. This incident serves as a reminder to always be cautious when receiving unsolicited messages.
Rogue ScreenConnect Clients Propagate VBScript Worm
A sneaky VBScript worm is spreading rapidly through new ScreenConnect connections, launching a four-stage attack chain that wreaks havoc on unsuspecting hosts. This malicious chain was triggered by three distinct initial access routes, including tech-support scams, phishing, and fake refund forms.
Rhysida Ransomware Gang Publishes Stolen Berlin Government Data
The Rhysida ransomware gang has published stolen data from Berlin's government on the dark web after the city refused to pay a €2m ransom, defying the hackers' ultimatum. Berlin's government had stood firm, prioritizing the safety of its staff and citizens over giving in to blackmail.
North Korea's Lazarus Fractures into Six Cyber Clusters
Meet the six distinct cyber clusters that now make up North Korea's notorious Lazarus group, each with its own unique tactics and targets. A single cryptocurrency theft of $62.5m highlights the alarming intersection of crime, statecraft, and corporate infiltration.
Hackers Exploit MikroTik Router Flaws to Hijack Devices
Hackers are actively exploiting vulnerabilities in MikroTik RouterOS, using a two-step attack dubbed "MikroTrick" to hijack devices, warns Poland's Computer Emergency Response Team. The team has confirmed that the critical severity flaws, tracked as CVE-2026-67276 and CVE-2026-86060, are being used in real-world attacks.