Cybersecurity Archives | Page 287 of 408 | Digital Watch Observatory

US report highlights China’s growing military capabilities

A US intelligence report has identified China as the top military and cyber threat, warning of Beijing’s growing capabilities in AI, cyber warfare, and conventional weaponry.

The report highlights China’s ambitions to surpass the US as the leading AI power by 2030 and its steady progress towards military capabilities that could be used to capture Taiwan.

It also warns that China could target US infrastructure through cyberattacks and space-based assets.

The findings, presented to the Senate Intelligence Committee, sparked tensions between Washington and Beijing. Chinese officials rejected the report, accusing the US of using outdated Cold War thinking and hyping the ‘China threat’ to maintain military dominance.

China’s foreign ministry also criticised US support for Taiwan, urging Washington to stop backing separatist movements.

Meanwhile, Beijing dismissed accusations that it has failed to curb fentanyl shipments, a key source of US overdose deaths.

The report also notes that Russia, Iran, and North Korea are working to challenge US influence through military and cyber tactics.

While China continues to expand its global footprint, particularly in Greenland and the Arctic, the report points to internal struggles, including economic slowdowns and demographic challenges, that could weaken the Chinese government’s stability.

The intelligence report underscores ongoing concerns in Washington about Beijing’s long-term ambitions and its potential impact on global security.

For more information on these topics, visit diplomacy.edu.

How to protect your business from infostealer malware and credential theft

Cybercriminals stole billions of login credentials last year using infostealer malware, putting businesses worldwide at serious risk.

These malicious tools quietly harvest passwords and session tokens from infected devices, often within minutes.

To fight back, companies must use strong multi-factor authentication, store passwords in dedicated managers, and protect devices with advanced endpoint security.

Simple browser-stored logins are no longer safe, and attackers are getting better at bypassing weak defences.

Reducing session lifespans, using hardware-backed logins, and training staff to spot phishing threats are all key to staying secure.

By combining tech with human vigilance, organisations can stay ahead of attackers and safeguard their systems and data.

For more information on these topics, visit diplomacy.edu.

Does Section 230 of the US Communication Decency Act protect users or tech platforms?

Typically, Section 230 of the US Communication Decency Act is considered to protect tech platforms from liability for the content provided. In a recent article, the Electronic Frontier Foundation argues that Section 230 protects users to participate in digital life.

The piece argues that repealing or altering Section 230 could inadvertently strengthen the position of big tech firms by removing the financial burden of litigation that smaller companies and startups cannot bear. Without these protections, smaller services might crumble under expensive legal challenges, stifling innovation and reducing competition in the digital landscape.

Such a scenario would leave big tech with even greater market dominance, which opponents of Section 230 seem to overlook. Additionally, the article addresses the misconception that eliminating Section 230 would enhance content moderation.

It clarifies that the law enables platforms to implement and enforce their standards without fear of increased liability, encouraging responsible moderation. EFF’s article argues that by allowing users and platforms to self-regulate, Section 230 prevents the US government from overreaching into defining acceptable speech, upholding a cornerstone of democratic values.

For more information on these topics, visit diplomacy.edu.

Anduril confident in Trump-era defence priorities

Anduril, the AI-powered defence start-up founded by Palmer Luckey, is optimistic about the Trump administration’s approach to defence reform.

Company president Christian Brose said the administration’s focus on innovation aligns with Anduril’s work in low-cost autonomous military systems. The firm recently partnered with OpenAI to integrate advanced artificial intelligence into national security missions.

Brose, a former adviser to Senator John McCain, has long criticised traditional defence procurement processes and believes the administration’s willingness to do things differently presents a major opportunity.

The company is expanding its global footprint, with plans to build manufacturing facilities outside the United States. Australia has emerged as a key market, with Anduril’s AI intrusion detection software being trialled at RAAF Base Darwin, where US Marines rotate annually.

The firm is also bidding to produce solid rocket motors for Australia’s Guided Weapons and Explosive Ordnance Enterprise.

Its Ghost Shark autonomous underwater system, developed in collaboration with the Australian Defence Force, is moving towards large-scale production, with a dedicated facility planned in New South Wales.

Autonomous military technology is a growing focus under the AUKUS treaty, which will see Australia invest heavily in nuclear-powered submarines with the support from the United States and the United Kingdom.

Brose emphasised that both crewed and autonomous systems will play a role in modern defence strategies, with the advantage of autonomous platforms being their faster production, larger deployment scale, and lower cost.

Anduril’s continued expansion highlights the increasing demand for AI-driven defence solutions in a rapidly evolving global security landscape.

For more information on these topics, visit diplomacy.edu.

OpenAI unveils new image generator in ChatGPT

OpenAI has rolled out an image generator feature within ChatGPT, enabling users to create realistic images with improved accuracy. The new feature, available for all Plus, Pro, Team, and Free users, is powered by GPT-4o, which now offers distortion-free images and more accurate text generation.

OpenAI shared a sample image of a boarding pass, showcasing the advanced capabilities of the new tool.

Previously, image generation was available through DALL-E, but its results often contained errors and were easily identifiable as AI-generated. Now integrated into ChatGPT, the new tool allows users to describe images with specific details such as colours, aspect ratios, and transparent backgrounds.

The update aims to enhance creative freedom while maintaining a higher standard of image quality.

CEO Sam Altman praised the feature as a ‘new high-water mark’ for creative control, although he acknowledged the potential for some users to create offensive content.

OpenAI plans to monitor how users interact with this tool and adjust as needed, especially as the technology moves closer to artificial general intelligence (AGI).

For more information on these topics, visit diplomacy.edu.

US tightens controls on China’s tech sector amid security fears

The United States has added six subsidiaries of China’s leading cloud computing firm, Inspur Group, along with dozens of other Chinese entities, to its export restriction list.

Washington accuses the companies of aiding China’s military by developing supercomputers and advanced AI technologies. The move is part of a broader strategy to curb China’s progress in high-performance computing, quantum technology, and hypersonic weapons development.

Other companies from Taiwan, Iran, Pakistan, South Africa, and the UAE were also included in the latest restrictions. China has strongly condemned the US decision, calling it an attempt to ‘weaponise trade and technology.’

The Chinese foreign ministry has vowed to take necessary measures to protect its firms, while the Beijing Academy of Artificial Intelligence, which was also targeted, called for the restrictions to be withdrawn.

Companies added to the US Entity List require special licences to access American technology, which are unlikely to be granted. The restrictions could impact major Chinese tech firms linked to AI and computing, such as Huawei and Sugon.

The United States Commerce Department argues that these measures are necessary to prevent China and other countries from using American technology for military applications. Officials insist they will not allow adversaries to strengthen their military capabilities with US-made components.

The latest crackdown follows a 2023 decision to blacklist Inspur Group, which led to scrutiny of its business ties with major US chipmakers such as Nvidia and AMD. Washington also aims to block Iran’s procurement of drone and missile technology as part of its broader national security efforts.

For more information on these topics, visit diplomacy.edu.

China warns US against ‘hegemonic thinking’

China’s foreign ministry has criticised the US for viewing China through a ‘hegemonic mentality’ after Washington labelled it the top military and cyber threat.

Ministry spokesperson Guo Jiakun accused the US of pushing the ‘China threat’ narrative as a means to contain and suppress the country.

The latest exchange highlights ongoing tensions between the two global powers, particularly over security, technology, and military influence. Beijing has consistently rejected US claims regarding cyber espionage and military expansion, arguing that such accusations are politically motivated.

Relations between China and the US have remained strained, with disputes spanning trade, Taiwan, and cybersecurity.

Despite diplomatic efforts to stabilise ties, the two nations continue to challenge each other’s policies and strategic moves on the global stage.

For more information on these topics, visit diplomacy.edu.

Lawmakers demand probe into Trump team’s Signal breach

Top officials from the Trump administration inadvertently included a journalist in an encrypted Signal chat while discussing military plans, leading to concerns over a potential security breach.

The incident has prompted Democratic lawmakers to call for a congressional investigation into the mishandling of classified information. Although US law criminalises the misuse of such data, it remains uncertain if legal provisions were violated in this case.

Signal is a widely trusted encrypted messaging app known for strong privacy protections. The service, instead of storing user messages on its servers, keeps data solely on users’ devices, with an option to automatically delete conversations.

Unlike other platforms, Signal does not track user data, use ads, or affiliate with marketers. Its encryption is independent of any government, and cybersecurity experts consider it highly secure. However, if a device itself is compromised, messages within the app can still be accessed by hackers.

The app was co-founded by Moxie Marlinspike in 2012 and later supported by WhatsApp co-founder Brian Acton, who left WhatsApp over concerns regarding data privacy.

Signal is run by the non-profit Signal Foundation and has grown in popularity, especially among privacy advocates, journalists, and government agencies.

The European Commission and the US Senate have also endorsed its use. However, experts question whether it is appropriate for discussions involving national security matters, given the risk of mobile device vulnerabilities.

Signal saw a significant surge in users in 2021 after WhatsApp introduced a controversial privacy policy update.

Despite its reputation for security, the recent incident with Trump administration officials highlights concerns about the suitability of even the most encrypted platforms for handling sensitive government information.

For more information on these topics, visit diplomacy.edu.

Russian hackers exploit smart home devices for crypto mining and cyberattacks

The Russian Ministry of Internal Affairs has warned citizens that hackers are infecting smart home devices with crypto mining malware.

Officials claim cybercriminals aim to create networks of compromised devices that could also be used for DDoS attacks, surveillance, and even robbery.

To mitigate risks, the ministry advises regularly changing passwords, updating firmware, and purchasing devices from reputable manufacturers.

Crypto-related fraud is also rising in Russia, with criminals posing as brokerage employees to lure victims into fake exchanges.

Prosecutors in Yakutsk are investigating a case where a resident allegedly lost $4,600 to such a scheme. Authorities have launched a criminal case and a broader inquiry into fraudulent crypto operations.

Illegal crypto mining remains a pressing issue, particularly in regions like the North Caucasus and Siberia. Moscow has enforced seasonal bans on crypto mining until 2031, aiming to conserve electricity during peak winter months.

However, officials in Irkutsk report that while 308 MW of power was freed up, the unused capacity provided no tangible benefit to consumers.

Despite concerns, some government officials argue that mining bans are improving energy reliability. Transbaikal authorities claim no legal mining operations remain in the region and have found no evidence of illegal mining activity. Industry experts remain sceptical about the overall impact of these restrictions.

For more information on these topics, visit diplomacy.edu.

Ransomware spreads through online conversion tools

The FBI’s Denver Field Office has issued a national warning over a rising cyber threat involving fake file converter websites. These sites, posing as free tools for tasks like converting documents or media formats, are secretly distributing ransomware and malware while appearing to perform legitimate functions.

According to the FBI, users are lured by services that convert files such as ‘.doc’ to ‘.pdf’ or combine image files, but the downloaded output often contains hidden malware.

A recent case revealed that a site impersonating Convertio delivered RedLine Stealer, a dangerous strain that harvests sensitive data from browsers, crypto wallets, and applications like Telegram and Discord.

Security experts have identified multiple malicious domains involved, with active incidents reported in the US, Denver area, just weeks ago.

The FBI urges the public to avoid unknown converter sites, keep antivirus software updated, and use built-in conversion features within trusted apps.

For more information on these topics, visit diplomacy.edu.