Montenegro has extradited Terraform Labs co-founder Do Kwon to the US, where he faces charges related to investor deception and the collapse of the TerraUSD cryptocurrency. The Montenegrin interior ministry confirmed Kwon was handed over to US law enforcement at Podgorica airport.
Kwon, a South Korean national, was arrested in March 2023 while attempting to leave Montenegro. The Supreme Court recently ruled that legal conditions for extradition were met, prompting Justice Minister Bojan Bozovic to approve the US request. His legal team has appealed the decision at Montenegro’s Constitutional Court.
The former CEO of Terraform Labs is accused of misleading investors about TerraUSD’s stability. The cryptocurrency collapsed in May 2022, triggering an estimated $40 billion in market losses. Kwon and his company are also being sued by the US Securities and Exchange Commission over allegations of fraud involving TerraUSD and Luna.
Stablecoins are digital assets designed to maintain a fixed value, typically pegged to a fiat currency. TerraUSD’s failure undermined trust in their stability and shook the broader cryptocurrency market.
A US Army soldier, Cameron John Wagenius, has been charged with selling and attempting to sell stolen confidential phone records. Arrested on 20 December, Wagenius faces two charges of unlawfully transferring confidential information in a Texas federal court. His rank and station have not been disclosed, though he is reportedly based at Fort Cavazos in Texas.
Authorities allege that Wagenius, known online as ‘Kiberphant0m’, claimed involvement in hacking activities, including phone records linked to high-profile figures. The case is connected to a broader investigation involving hackers accused of stealing sensitive personal and financial information. Prosecutors have revealed the involvement of a hacking group targeting data storage firm Snowflake’s customers.
Cybersecurity researchers identified Wagenius after members of the group issued threats against them. Law enforcement acted swiftly following the tip-off, according to Allison Nixon of Unit 221B. The prosecution is being handled in Seattle, where two co-defendants, Connor Moucka and John Binns, face related charges for extensive data breaches.
The Department of Justice and the FBI have yet to comment on the case. Wagenius has been ordered to appear in Seattle, where the investigation continues.
Russian gas deliveries to Europe via Ukraine ceased on New Year’s Day, concluding decades of reliance on Moscow’s energy dominance. Gazprom confirmed the halt at 0500 GMT, following Ukraine’s refusal to renew a transit agreement. The stoppage, long anticipated, follows a dramatic shift in European energy dynamics spurred by the war in Ukraine.
Alternative supply arrangements by EU nations such as Slovakia and Austria have ensured that the end of Russian gas transit through Ukraine will not affect consumer prices. Hungary remains connected to Russian gas through the TurkStream pipeline, while Moldova’s pro-Russian Transdniestria region is already facing heating shortages due to the cutoff.
The European Union has significantly reduced its dependence on Russian energy, replacing supplies with liquefied natural gas from Qatar and the US, as well as piped gas from Norway. Ukrainian Energy Minister German Galushchenko hailed the decision as historic, stating that Russia would face substantial financial losses as a result.
Both sides are set to incur economic setbacks. Ukraine is losing $800 million annually in transit fees, while Gazprom faces a $5 billion drop in sales. Once dominant in Europe’s energy markets, Russia’s share has plummeted from 35% to near irrelevance, marking the end of an era shaped by Soviet-era pipeline projects.
Sanctions have been imposed by the US on organisations in Iran and Russia accused of attempting to influence the 2024 presidential election. The Treasury Department stated these entities, linked to Iran’s Revolutionary Guard Corps (IRGC) and Russia’s military intelligence agency (GRU), aimed to exploit socio-political tensions among voters.
Russia’s accused group utilised AI tools to create disinformation, including manipulated videos targeting a vice-presidential candidate. A network of over 100 websites mimicking credible news outlets was reportedly used to disseminate false narratives. The GRU is alleged to have funded and supported these operations.
Iran’s affiliated entity allegedly planned influence campaigns since 2023, focused on inciting divisions within the US electorate. While Russia’s embassy denied interference claims as unfounded, Iran’s representatives did not respond to requests for comment.
A recent US threat assessment has underscored growing concerns about foreign attempts to disrupt American democracy, with AI emerging as a critical tool for misinformation. Officials reaffirmed their commitment to safeguarding the electoral process.
Eskom has reconnected the second unit of the Koeberg nuclear power plant to South Africa’s grid following a significant refurbishment, providing a welcome boost to electricity supply. This achievement follows a decade marked by controlled power outages, which have finally given way to nine months of uninterrupted electricity, improving business confidence in the country.
Located near Cape Town, Koeberg remains Africa’s sole commercial nuclear power plant, generating approximately 1,860 megawatts, or 5% of the nation’s electricity. Eskom’s CEO, Dan Marokane, highlighted Koeberg’s role in aligning economic and environmental goals, promoting a sustainable energy future.
In a move to extend the plant’s longevity, the nuclear regulator approved a 20-year extension of Unit 1’s operating licence in July. A similar decision for Unit 2 is anticipated by 2025, underscoring South Africa’s commitment to maintaining and expanding its nuclear energy resources.
Looking ahead, South Africa plans to add 2,500 megawatts of nuclear capacity. Efforts to revive the development of the Pebble Bed Modular Reactor, abandoned over a decade ago, are also under consideration as the nation explores innovative energy solutions.
Chinese hackers have been accused of infiltrating the US Treasury Department in a significant cyber attack. The breach, described as a ‘major incident’, allowed attackers to access employee workstations and unclassified documents, raising concerns over national security. The intrusion reportedly involved a third-party service provider’s compromised security key.
Officials confirmed that BeyondTrust, the affected service provider, had been taken offline. Investigations suggest a China-based Advanced Persistent Threat group was responsible. The Treasury has since partnered with the FBI and other agencies to assess the damage, while third-party forensic investigators are analysing the breach’s full impact.
China’s foreign ministry dismissed the allegations as baseless, reiterating its opposition to hacking. Accusations of Chinese cyber espionage have become more frequent, with recent incidents involving critical infrastructure and telecom companies. Officials claim the Treasury hack sought information rather than financial theft.
The incident comes amidst heightened scrutiny of Chinese cyber activities, with two prominent hacking groups linked to espionage and potential disruption campaigns. A supplemental report on the Treasury breach is expected within 30 days, as investigators continue their inquiries.
Healthcare organizations in the US may face stricter cybersecurity rules to address the growing threat of data breaches. Proposals introduced by the Biden administration seek to prevent sensitive patient information from being leaked through hacking or ransomware attacks. Measures include mandatory encryption and compliance checks to enhance network security.
Data breaches have exposed the healthcare information of over 167 million people in 2023 alone, according to Anne Neuberger, Deputy National Security Advisor for Cyber and Emerging Technology. The updated standards, introduced by the Office for Civil Rights under the Health Insurance Portability and Accountability Act (HIPAA), are estimated to cost $9 billion in the first year and $6 billion annually in subsequent years.
Officials highlighted the rising danger of healthcare cyberattacks, with hacking and ransomware incidents increasing by 89% and 102% respectively since 2019. Hospitals often face operational disruption, while leaked data can lead to blackmail. A 60-day public comment period will allow stakeholders to provide input before finalising the rules.
The new standards are designed to safeguard healthcare networks and protect Americans’ private information, including mental health records. Strengthened cybersecurity is expected to reduce vulnerabilities and ensure the safety of critical healthcare systems.
A series of intrusions targeting Chrome browser extensions has compromised multiple companies since mid-December, experts revealed. Among the victims is Cyberhaven, a California-based data protection company. The breach, confirmed by Cyberhaven on Christmas Eve, is reportedly part of a larger campaign aimed at developers of Chrome extensions across various industries.
Cyberhaven stated it is cooperating with federal law enforcement to address the issue. Browser extensions, commonly used to enhance web browsing, can also pose risks when maliciously altered. Cyberhaven’s Chrome extension, for example, is designed to monitor and secure client data within web-based applications.
Experts identified other compromised extensions, including those involving AI and virtual private networks. Jaime Blasco, cofounder of Texas-based Nudge Security, noted that the attacks appear opportunistic, aiming to harvest sensitive data from numerous sources. Some breaches date back to mid-December, indicating an ongoing effort.
Federal authorities, including the US cyber watchdog CISA, have redirected inquiries to the affected companies. Alphabet, maker of the Chrome browser, has yet to respond to requests for comment.
Smart home cameras have become a staple for security-conscious households, offering peace of mind by monitoring both indoor and outdoor spaces. However, new research by Surfshark exposes alarming privacy concerns, showing that these devices collect far more user data than necessary. Outdoor security camera apps top the list, gathering an average of 12 data points, including sensitive information such as precise location, email addresses, and payment details which is 50% more than other smart devices.
Indoor camera apps are slightly less invasive but still problematic, collecting an average of nine data points, including audio data and purchase histories. Some apps, like those from Arlo, Deep Sentinel, and D-Link, even extract contact information unnecessarily, raising serious questions about user consent and safety. The absence of robust privacy regulations leaves users vulnerable to data breaches, cyberattacks, and misuse of personal information.
Experts recommend limiting data-sharing permissions, using strong passwords, and regularly updating privacy settings to mitigate risks. Options such as enabling local storage instead of cloud services and employing a VPN can further protect against data leaks. While smart cameras bring convenience, they highlight the urgent need for clearer regulations to safeguard consumer privacy in the era of connected technology.
Apple has introduced an ‘Enhanced Visual Search’ feature in iOS 18, allowing users to identify landmarks in photos by matching data with a global database. While convenient, the feature has sparked privacy concerns, as it is enabled by default, requiring users to manually turn it off in settings if they prefer not to share photo data with Apple.
The feature uses on-device machine learning to detect landmarks in photos, creating encrypted ‘vector embeddings’ of image data. These are then sent to Apple for comparison with its database. While the company has reportedly implemented privacy safeguards, such as encrypting and condensing data into machine-readable formats, critics argue the feature should have been opt-in rather than opt-out, aligning with Apple’s usual privacy standards.
This toggle builds on Apple’s earlier ‘Visual Look Up’ tool, which identifies objects like plants or symbols without sending data to Apple’s servers. Privacy advocates suggest that Apple could have maintained this approach for Enhanced Visual Search, questioning why it requires shared data for similar functionality.
The debate highlights ongoing tensions between technological convenience and user privacy, raising questions about how far companies should go in enabling features that require data sharing without explicit consent.
