Cybersecurity Archives | Page 289 of 408 | Digital Watch Observatory

Australian police warn of Binance-themed crypto scam targeting users

Australian authorities have issued warnings about a sophisticated scam in which fraudsters impersonate Binance via SMS, tricking users into transferring their crypto assets.

The Australian Federal Police (AFP) revealed that scammers use sender ID spoofing to make fraudulent messages appear in the same thread as legitimate Binance communications.

Victims are falsely informed of a security breach and urged to move their funds to a ‘trust wallet,’ which is controlled by the scammers.

The AFP has identified at least 130 potential victims and launched a campaign to warn them. Cybercrime officials explained that once funds are transferred to the scammers’ wallets, they are swiftly moved across multiple accounts, making recovery difficult.

Similar scams have also targeted users of Coinbase and Gemini, exploiting pre-generated recovery phrases to seize control of wallets.

Binance Chief Security Officer Jimmy Su advised users to verify official communications through Binance’s security tools and website.

The Australian government is taking steps to combat these scams, planning to launch an SMS Sender ID Register in late 2025. The initiative will require telecom providers to verify brand-name messages, reducing the risk of spoofing.

Investment scams remain a significant issue in Australia, with AU$382 million ($269 million) lost in the past year, nearly half of which was crypto-related.

Authorities continue to urge caution, warning users to be sceptical of unsolicited messages and requests for seed phrases or urgent transfers.

For more information on these topics, visit diplomacy.edu.

Cyberattack exploits a flaw in ZoneAlarm’s vsdatant.sys driver

A sophisticated cyberattack has targeted vulnerabilities in the vsdatant.sys driver, a component of Checkpoint’s ZoneAlarm antivirus software, allowing attackers to bypass critical Windows security features.

The driver, released in 2016, has been exploited in a Bring Your Own Vulnerable Driver (BYOVD) attack, enabling attackers to elevate privileges and access sensitive data.

The vsdatant.sys driver operates with high kernel-level privileges, containing long-known vulnerabilities that allow attackers to exploit crafted Interrupt Request Packets (IRPs).

These flaws, affecting versions of the driver prior to 7.0.362, allow for arbitrary code execution by improperly validating arguments passed to system function handlers.

BYOVD attacks have become increasingly common, with attackers leveraging legitimate but vulnerable drivers to bypass security measures undetected.

In this case, attackers were able to disable Windows’ Memory Integrity feature, which is designed to protect critical system processes.

By exploiting flaws in vsdatant.sys, the attackers gained full access to the compromised system, enabling them to steal sensitive information.

To mitigate the risk of such attacks, security experts recommend implementing driver blocklisting, enabling Memory Integrity, and ensuring that all security products are kept up to date.

Users are urged to update their ZoneAlarm installations to the latest version to avoid exposure to these vulnerabilities.

For more information on these topics, visit diplomacy.edu.

Data centre surge exposes vulnerabilities in the US grid

A recent incident in Data Center Alley, a region outside Washington DC housing over 200 data centres, exposed a new vulnerability in the US power grid.

Last summer, 60 data centres unexpectedly disconnected from the grid and switched to on-site generators, causing a surge in excess electricity. However, this triggered the need for grid operators to scale back power output to avoid cascading outages.

The disconnection event, caused by a failed surge protector, forced regulators to address the growing risk of power imbalances due to the rapid expansion of data centres, especially those involved in AI and crypto mining.

As these centres consume increasing amounts of energy, grid operators face new challenges in maintaining stability.

Federal regulators like the North American Electric Reliability Corporation (NERC) are now studying the impact of such events and the risks posed by unannounced data centre disconnections.

The power consumption of data centres has tripled over the last decade and is projected to continue rising, prompting calls for updated reliability standards.

Industry stakeholders, including major tech companies, have expressed concerns about the potential costs and risks of requiring data centres to remain connected during voltage fluctuations.

With the growing presence of large data users, grid operators face a tough balancing act to ensure power stability while accommodating the demands of the data centre industry.

For more information on these topics, visit diplomacy.edu.

Microsoft invests $2.2 billion in Malaysian cloud expansion

Microsoft is set to launch its first cloud region in Malaysia, featuring three data centres in the greater Kuala Lumpur area.

The centres, known as Malaysia West, will begin operations by mid-year, marking a significant step in the company’s $2.2 billion investment in the country.

However, this move is part of Microsoft’s broader plan to expand its cloud and AI services in Southeast Asia. Microsoft estimates the investment will generate $10.9 billion in revenue and create over 37,000 jobs in Malaysia over the next four years.

Laurence Si, managing director of Microsoft Malaysia, stated that the company’s operations in Malaysia remain on track despite concerns over US export controls on semiconductor chips.

Microsoft remains confident in its relationships with stakeholders and its ability to meet its investment commitments.

Local businesses are expected to benefit from enhanced cloud and AI capabilities, with the country aiming to become a leading hub for technological innovation in the region.

For more information on these topics, visit diplomacy.edu.

Ofcom backs broadband competition to expand full-fibre coverage

Britain should maintain competition in the broadband market to boost full-fibre coverage to 96% of premises by 2027 while capping prices on slower-speed services, UK telecoms regulator Ofcom announced on Thursday.

The cap would limit what BT’s Openreach can charge for connections up to 80Mbit/s, an increase from the current 40Mbit/s limit.

Ofcom’s previous measures, including encouraging new providers to use Openreach’s infrastructure, have helped increase full-fibre coverage from under 25% to nearly 70% of homes.

It now proposes keeping high-speed broadband prices free from regulation until 2031 while ensuring affordability for those relying on older copper-fibre connections.

In rural areas where commercial networks are less viable, Ofcom plans to support Openreach in expanding full-fibre access. The regulator’s consultation on these proposals will run until June 12, with final decisions expected in March 2026. BT shares rose 0.5% following the announcement.

For more information on these topics, visit diplomacy.edu.

Baidu dismisses claims of leaked user information

Chinese tech giant Baidu has denied claims of an internal data breach after the teenage daughter of a senior executive was accused of sharing users’ personal information online.

The controversy erupted when internet users alleged that the daughter of Baidu vice president Xie Guangjun had posted private details, including phone numbers, following an online dispute.

Baidu insisted that neither employees nor executives have access to user data and claimed the information came from illegally obtained ‘doxing databases’ on foreign platforms.

The company has filed a police report regarding false claims, including allegations that Xie had given his daughter access to Baidu’s databases.

Xie apologised, stating that the data had been sourced from overseas social networking sites.

The case comes amid ongoing crackdown in China on data privacy breaches, with stricter laws in place to prevent unauthorised sharing of personal details.

The controversy has impacted investor confidence, with Baidu’s shares falling more than 4% in Hong Kong trading.

For more information on these topics, visit diplomacy.edu.

New HP printers designed to withstand quantum computing attacks

HP has introduced the 8000 Series printers, designed to protect against future cyber threats posed by quantum computing.

Announced at the Amplify 2025 event, the new models include the HP Color LaserJet Enterprise MFP 8801, Mono MFP 8601, and LaserJet Pro Mono SFP 8501. These printers are built to resist sophisticated attacks that could exploit vulnerabilities at the firmware level.

To enhance security, HP has integrated quantum-resistant cryptography within the printers’ ASIC chips. These chips provide digital signature verification, reducing the risk of unauthorised firmware modifications and potential data breaches.

HP emphasised that, without these safeguards, printers could be fully compromised by malicious firmware updates, allowing attackers to gain persistent control over the devices.

The new printers are also designed to integrate seamlessly with Zero Trust network architectures, reinforcing security within enterprise environments.

By incorporating advanced cryptographic measures, HP aims to future-proof its printing solutions against emerging cybersecurity threats.

For more information on these topics, visit diplomacy.edu.

Amazon considers further appeal after losing GDPR case

Amazon has lost its appeal against a €746 million fine imposed by Luxembourg’s data protection regulator for breaching EU privacy laws.

The country’s administrative court upheld the penalty in a ruling on 18 March, siding with the National Commission for Data Protection (CNPD), which found Amazon had unlawfully processed personal data under the General Data Protection Regulation (GDPR).

The fine remains the largest issued under the EU privacy rules.

The CNPD also ordered Amazon to implement corrective measures, although enforcement will be suspended during the appeal period.

Amazon criticised the decision, arguing the fine was based on subjective legal interpretations without prior guidance from regulators. The company confirmed it is considering further legal action.

Europe has taken a strict stance on data privacy violations, with GDPR setting a global benchmark for consumer protections.

The ruling against Amazon reinforces the EU’s commitment to holding major tech companies accountable for their handling of personal data.

For more information on these topics, visit diplomacy.edu.

Nvidia holds back on optical technology for GPUs

Nvidia’s CEO, Jensen Huang, has s tated that a promising new chip technology, co-packaged optics, is not yet reliable enough for use in the company’s flagship GPUs.

The technology, which uses laser beams to transfer data via fiber optic cables instead of traditional copper, is more energy-efficient and faster.

However, Huang emphasized that copper connections remain ‘orders of magnitude’ more reliable than today’s optical alternatives, making them the preferred choice for now.

Speaking at Nvidia’s annual developer conference in San Jose, Huang announced that the company will use co-packaged optics in two upcoming networking chips designed for server switches, increasing their energy efficiency by three and a half times.

These switch chips will be released later this year and into 2026, marking a gradual technological step forward. However, Huang clarified that Nvidia currently has no plans to implement optical connections between GPUs, as reliability remains a key priority for its AI-focused customers like OpenAI and Oracle.

Silicon Valley startups such as Ayar Labs, Lightmatter, and Celestial AI have invested heavily in co-packaged optics, seeing it as essential for building more powerful AI systems. Nvidia itself has backed some of these ventures, despite Huang’s cautious approach.

While optical connections could eventually help AI models process complex tasks more efficiently, Nvidia is prioritizing proven technology for its near-term roadmap, ensuring stability in an industry preparing to invest hundreds of billions in AI infrastructure.

For more information on these topics, visit diplomacy.edu.

Google acquires Wiz in $32 billion deal

Google has finalized a $32 billion acquisition of Israeli cybersecurity firm Wiz, sealing the deal just weeks after Donald Trump’s inauguration.

The agreement, a significant increase from Google’s initial $23 billion offer, was aided by the expectation of a friendlier antitrust review under the new administration, sources familiar with the negotiations said.

Wiz had considered an IPO before returning to the negotiating table, with new Chief Financial Officer Fazal Merchant playing a key role in shaping the deal alongside CEO Assaf Rappaport.

Google’s cloud chief, Thomas Kurian, was also instrumental in the agreement, which includes an unusually high $3.2 billion breakup fee should regulatory issues derail the transaction.

With Wiz boasting 70% annual revenue growth and over $700 million in annualized revenue, Google viewed the premium price as justified.

However, concerns remain over potential antitrust scrutiny, particularly given Google’s ongoing legal battles with the US Department of Justice over its dominance in search and ad technology.

For more information on these topics, visit diplomacy.edu.