Palantir and Anduril team up for defence AI

Palantir Technologies and Anduril Industries have joined forces to optimise defence data for AI training. Palantir’s platform will organise and label sensitive defence data for model training, while Anduril’s systems will manage the retention and distribution of this information for national security applications.

The collaboration highlights challenges in deploying AI for defence, where sensitive data complicates model training. Anduril recently partnered with OpenAI to integrate advanced AI into security missions, underscoring its commitment to autonomous defence solutions.

Palantir, a key player in the AI boom, continues to see robust demand from governments and businesses seeking advanced software solutions.

Former WEX head detained in Warsaw

Polish authorities have detained Dmitry V., the former head of Russia’s crypto exchange WEX, in Warsaw following an extradition request from the US Department of Justice. During his tenure at WEX, Dmitry V. was suspected of fraud and money laundering. He is facing potential extradition to the US, where charges could carry a maximum 20-year prison sentence.

Dmitry V. has been linked to WEX, a successor to BTC-e, once Russia’s largest cryptocurrency platform before its collapse in 2018. The exchange was infamous for lax identity checks and ties to high-profile crypto hacks, including the Mt. Gox breach. Around $450 million remains unaccounted for from WEX, which had processed over $9 billion in transactions during its operation.

This is not Dmitry V.’s first arrest; he was previously detained in Poland in 2021 and later apprehended by Interpol in Croatia in 2022. His history also includes a 2019 arrest in Italy, which was short-lived due to errors in the extradition process.

Bill targets Huawei, ZTE in US telecoms overhaul

The US House of Representatives is preparing to vote on a defence bill proposing $3 billion for telecom companies to replace equipment from Chinese firms Huawei and ZTE. The legislation aims to address security concerns posed by Chinese technology in American wireless networks. A previous allocation of $1.9 billion was deemed insufficient for the programme, which the Federal Communications Commission (FCC) estimates will cost nearly $5 billion.

The initiative, known as the ‘rip and replace’ programme, targets rural carriers reliant on the equipment, which could lose connectivity if funding gaps persist. FCC Chair Jessica Rosenworcel warned that insufficient funding might force some rural networks to shut down, endangering services such as 911 emergency calls. Rural regions face significant risks without immediate support for the removal and replacement of insecure telecoms infrastructure.

The proposed funding would also cover up to $500 million for regional technology hubs, supported by revenue from an FCC spectrum auction. Advocates emphasise the importance of securing connectivity while maintaining services for millions of Americans. Competitive Carriers Association CEO Tim Donovan welcomed the proposed funding, calling it critical for network security and consumer access.

Pavel Durov faces Paris court over Telegram allegations

Pavel Durov, founder of Telegram, appeared in a Paris court on 6 December to address allegations that the messaging app has facilitated criminal activity. Represented by his lawyers, Durov reportedly stated he trusted the French justice system but declined to comment further on the case.

The legal proceedings stem from charges brought against Durov in August, accusing him of running a platform that enables illicit transactions. Following his arrest at Le Bourget airport, he posted a $6 million bail and has been barred from leaving France until March 2025. If convicted, he could face up to 10 years in prison and a fine of 500,000 euros.

Industry experts fear the case against Durov reflects a broader crackdown on privacy-preserving technologies in the Web3 space. Parallels have been drawn with the arrest of Tornado Cash developer Alexey Pertsev, raising concerns over government overreach and the implications for digital privacy.

Blue Yonder hit by data theft in cyberattack

Supply chain software company Blue Yonder is investigating claims of data theft after the ‘Termite’ ransomware group threatened to release stolen data. The Arizona-based company, which serves major clients like DHL, Starbucks, and Walgreens, was hit by a ransomware attack on 21 November. While Blue Yonder initially confirmed a cyberattack, it did not disclose the perpetrators.

The Termite group, which recently claimed responsibility for the breach on its dark web leak site, claims to have stolen 680 gigabytes of data, including documents, reports, and email lists. The group, believed to be a rebranded version of the Babuk ransomware gang, has threatened to release the data soon. Blue Yonder is working with cybersecurity experts to investigate the breach and has notified impacted customers, though it has not confirmed specific details about the stolen data.

The attack has caused operational disruptions for some clients, including UK supermarkets Morrisons and Sainsbury’s, and US company Starbucks, which was forced to manually calculate employee pay. The full extent of the attack on Blue Yonder’s 3,000+ customers remains unclear.

UN Cybercrime Convention raises human rights concerns in the Arab region

The imminent adoption of a new UN cybercrime convention by the General Assembly has sparked significant concerns over its implications for global digital rights, particularly in the Arab region. Critics argue that the convention, as currently drafted, lacks sufficient human rights safeguards, potentially empowering authoritarian regimes to suppress dissent both domestically and internationally.

In the Arab region, existing cybercrime laws often serve as tools to curb freedom of expression, with vague terms criminalising online speech that might undermine state prestige or harm public morals. These restrictions contravene Article 19 of the International Covenant on Civil and Political Rights, which requires limitations on expression to be lawful, necessary, and proportionate.

Such ambiguity in legal language fosters an environment of self-censorship, as individuals remain uncertain about the legal interpretation of their online content. The convention’s broad scope further alarms international cooperation in cases potentially infringing human rights. It allows for the collection of electronic evidence for ‘serious crimes,’ which are vaguely defined and could include acts like defamation or expressions of sexual orientation—punishable by severe penalties in some countries.

That provision risks enabling extensive surveillance and data-sharing among nations with weak human rights records. In the Arab region, existing cybercrime laws already permit intrusive surveillance and mass data collection without adequate safeguards, threatening individuals’ privacy rights. Countries like Tunisia and Palestine lack mechanisms to notify individuals after surveillance, removing their ability to seek redress for legal violations and exacerbating privacy concerns.

In light of these issues, Access Now and civil society organisations are urging UN member states to critically evaluate the convention and resist voting for its adoption in its current form. They recommend thorough national discussions to assess its human rights impacts and call for stronger safeguards in future negotiations.

Why does it matter?

Arab states are encouraged to align their cybercrime laws with international standards and engage civil society in discussions to demonstrate a genuine commitment to human rights. The overarching message is clear: without comprehensive reforms, the convention risks further eroding digital rights and undermining freedom of expression worldwide. It is imperative to ensure that any international treaty robustly protects human rights rather than enabling their violation under the guise of combating cybercrime.

International Red Cross sets guidelines for AI use

The International Committee of the Red Cross (ICRC) has introduced principles for using AI in its operations, aiming to harness the technology’s benefits while protecting vulnerable populations. The guidelines, unveiled in late November, reflect the organisation’s cautious approach amid growing interest in generative AI, such as ChatGPT, across various sectors.

ICRC delegate Philippe Stoll emphasised the importance of ensuring AI tools are robust and reliable to avoid unintended harm in high-stakes humanitarian contexts. The ICRC defines AI broadly as systems that perform tasks requiring human-like cognition and reasoning, extending beyond popular large language models.

Guided by its core principles of humanity, neutrality, and independence, the ICRC prioritises data protection and insists that AI tools address real needs rather than seeking problems to solve. That approach stems from the risks posed by deploying technologies in regions poorly represented in AI training data, as highlighted by a 2022 cyberattack that exposed sensitive beneficiary information.

Collaboration with academia is central to the ICRC’s strategy. Partnerships like the Meditron project with Switzerland’s EPFL focus on AI for clinical decision-making and logistics. These initiatives aim to improve supply chain management and enhance field operations while aligning with the organisation’s principles.

Despite interest in AI’s potential, Stoll cautioned against using off-the-shelf tools unsuited to specific local challenges, underscoring the need for adaptability and responsible innovation in humanitarian work.

Former ASML worker accused of selling secrets

A Rotterdam court is set to hold a pretrial hearing on Monday concerning a former Russian employee of ASML accused of stealing intellectual property from the Dutch semiconductor equipment maker. The suspect, a 43-year-old Russian national, allegedly profited by selling company manuals, including those of ASML’s Mapper subsidiary, to Russian buyers, according to Dutch media reports.

ASML, which acquired Mapper in 2019, confirmed its awareness of the case and said it had filed a formal complaint, declining further comment during ongoing legal proceedings. The suspect is reportedly in custody, though details of the arrest remain unclear.

Mapper, a Dutch firm focused on developing E-beam lithography technology, was integrated into ASML following its 2019 bankruptcy. While Mapper’s product did not succeed, its engineers joined ASML’s chip-measuring business, helping to bolster the company’s capabilities. This acquisition eased concerns about sensitive technology falling into foreign hands, a priority for both the Dutch government and the US military.

Court ruling threatens TikTok ban in US

A US federal appeals court has upheld a law requiring TikTok’s Chinese parent company, ByteDance, to sell its US operations by 19 January or face a nationwide ban. The ruling marks a significant win for the Justice Department, citing national security concerns over ByteDance’s access to Americans’ data and its potential to influence public discourse. TikTok plans to appeal to the Supreme Court, hoping to block the divestment order.

The decision reflects bipartisan efforts to counter perceived threats from China, with Attorney General Merrick Garland calling it a vital step in preventing the Chinese government from exploiting TikTok. Critics, including the ACLU, argue that banning the app infringes on First Amendment rights, as 170 million Americans rely on TikTok for creative and social expression. The Chinese Embassy denounced the ruling, warning it could damage US-China relations.

Unless overturned or extended by President Biden, the law could also set a precedent for restricting other foreign-owned apps. Meanwhile, TikTok’s rivals, such as Meta and Google, have seen gains in the wake of the decision, as advertisers prepare for potential shifts in the social media landscape.

EU orders TikTok to freeze election-related data in Romania

The European Union has directed TikTok to retain data related to Romania’s elections under the Digital Services Act, citing concerns over foreign interference. The move follows pro-Russia ultranationalist Calin Georgescu’s unexpected success in the presidential race’s first round, raising alarm about coordinated social media promotion.

Declassified documents revealed TikTok’s role in amplifying Georgescu’s profile via coordinated accounts and paid algorithms, despite his claim of no campaign spending. Romania‘s security agencies have flagged these efforts as ‘hybrid Russian attacks,’ accusations Russia denies.

TikTok stated its cooperation with the EU in addressing concerns and pledged to establish facts amid allegations. Romania’s runoff presidential vote is seen as pivotal for the country’s EU alignment.