Ericsson partners with MasOrange for ORAN technologies

Ericsson has signed a 5G deal with Spain’s largest telecom operator, MasOrange, to enhance its network using Open Radio Access Network (ORAN) technologies. This marks Ericsson’s first such agreement in Europe following a significant $14 billion, five-year deal with AT&T in the United States last year. ORAN technology is designed to reduce costs by employing cloud-based software and equipment from multiple suppliers rather than relying on a single provider.

Jenny Lindqvist, Ericsson’s senior vice president, noted that this partnership aligns with industry trends and is crucial for scaling Open RAN technology. She emphasised that Europe is still in the early stages of 5G deployment compared to other regions. MasOrange, formed from the merger of the Spanish unit of France’s Orange and local competitor MasMovil, serves over 30 million mobile customers.

While Ericsson did not disclose the specifics of the deal with MasOrange, a source indicated it would involve around 10,000 sites. The agreement aims to meet the growing demand for 5G services across urban and rural areas, as well as large venues like stadiums.

China claims discovery of spy gear in territorial waters

China’s Ministry of State Security announced the discovery of foreign spying devices in its waters, including underwater ‘lighthouses’ that could potentially guide foreign submarines. The ministry revealed on its official WeChat account that it had retrieved several types of devices hidden on the ocean floor, gathering real-time data from within China’s claimed territorial waters.

This revelation comes amid rising tensions in the South China Sea, where China and the Philippines dispute territory, increasing the risk of a broader confrontation potentially involving the US. China’s recent military drills around Taiwan have also heightened concerns, as the US and Taiwan have condemned Beijing’s actions.

China claims nearly all of the South China Sea, overlapping areas claimed by other Southeast Asian nations, and has maintained it will not renounce using force over Taiwan. A new phase in the submarine arms race between China and the US and its allies is underway, with Beijing projected to field nuclear-armed submarines by the decade’s end. The ministry affirmed its commitment to defending China’s maritime sovereignty and addressing threats of foreign espionage in its waters.

US finalising rules to curb investment in China’s AI and defence tech

The Biden administration announced on Monday new rules restricting US investments in specific technology sectors in China, including AI, semiconductors, and quantum computing, citing national security concerns. These rules, effective from 2 January, aim to prevent US capital and expertise from aiding China’s development of military and intelligence capabilities. Issued under an executive order from August 2023, the regulations will be managed by the Treasury’s new Office of Global Transactions.

The targeted technologies are considered crucial to future military and cyber defence. Treasury officials note that US investments often include more than money—managerial support, network access, and intellectual expertise—that could benefit Chinese advancements in sensitive sectors. A senior Treasury official, Paul Rosen, emphasised that these restrictions curb potential US involvement in developing cutting-edge technologies for adversarial nations.

The US Commerce Secretary Gina Raimondo has previously highlighted the importance of these measures, viewing them as essential to slowing China’s progress in military technologies. The new regulations allow for investments in publicly traded Chinese securities; however, existing rules still restrict transactions involving certain Chinese firms deemed to support military development.

Additionally, the rules respond to recent criticism from the House Select Committee on China, which has scrutinised American index providers for funnelling US investments into Chinese companies linked to military advancements. With these regulations, the administration underscores its intent to protect US interests by limiting China’s access to critical technology expertise and capital.

Delta blames CrowdStrike for flight chaos in lawsuit

Delta Air Lines has filed a lawsuit against CrowdStrike in Georgia, accusing the cybersecurity company of causing a global outage in July that disrupted travel for 1.3 million passengers. The airline claims a faulty software update forced by CrowdStrike led to the mass cancellation of 7,000 flights over five days, resulting in losses exceeding $500 million.

The airline alleges that CrowdStrike’s software update caused more than 8.5 million Microsoft Windows-based systems to crash worldwide, affecting multiple industries, including banks and healthcare. Delta insists that better testing could have prevented the failure, criticising CrowdStrike for deploying the update without adequate checks. The incident prompted an investigation by the US Transportation Department.

CrowdStrike has rejected Delta’s claims, calling them ‘misinformation’ and blaming the airline’s outdated IT infrastructure for the extended disruption. It also questioned why Delta was hit harder than other airlines, implying the carrier’s slow recovery reflected deeper internal issues rather than software faults alone.

Delta has been using CrowdStrike’s products since 2022 and argues that it has invested heavily in advanced technology for its operations. In its lawsuit, Delta seeks compensation for direct financial losses, lost profits, legal fees, and damage to its reputation, maintaining that CrowdStrike should be held accountable.

US and Nigeria strengthen ties to combat crypto misuse

The United States and Nigeria have launched the Bilateral Liaison Group on Illicit Finance and Cryptocurrencies to counter cybercrime and misuse of digital assets. Led by the US Department of Justice and Nigerian authorities, this new initiative aims to strengthen both countries’ capabilities in investigating and prosecuting cyber and crypto-related financial crimes as digital finance expands globally.

The group’s formation comes soon after the release of Tigran Gambaryan, Binance’s head of financial crime compliance, who was detained in Nigeria since February on money laundering charges. His release due to health concerns follows rising tensions, and this new collaboration may help ease strained relations as both nations work toward secure cyberspace operations.

Aligned with US goals for global cyber enforcement, this liaison group aims to streamline coordination between the two countries’ enforcement bodies. This joint effort underscores the importance of cross-border cooperation to address the unique challenges posed by digital assets in the fight against financial crime.

US Commerce Department IoT panel recommends privacy labels for vehicles

The Commerce Department’s IoT Advisory Board has recommended that car dealers display privacy disclosures on vehicle windshields, urging government agencies and Congress to mandate this requirement. The report, developed with the officials from the National Institute of Standards and Technology (NIST), suggests including easy-to-understand privacy information on vehicle windshields, such as whether vehicles collect personal data and options for universal opt-outs.

This initiative aims to enhance consumer protection amid growing concerns over data privacy in connected cars. The board noted automakers often need to inform consumers about data practices adequately. Despite opposition from the Alliance for Automotive Innovation, the recommendation was adopted after a briefing highlighted the potential benefits of such labelling for consumer awareness.

“So many consumers tell us they had no idea their car is ‘a smartphone on wheels’ that can transmit data to the manufacturer and other companies,” said Amico, who runs Privacy4Cars, a privacy technology company which helps consumers and businesses better understand data privacy concerns related to connected cars. 

The report will be considered by a federal working group tasked with determining whether legislation or executive action is needed to implement the recommendations, including regulating third-party data sharing and simplifying privacy policies. The advisory board emphasised that this initiative could set a global standard for IoT device privacy. A few countries, e.g. Singapore, have created comprehensive standards around consumer Internet of Things devices, such as cybersecurity labelling schemes.

Four REvil ransomware members sentenced to over four years in prison

Four members of the REvil ransomware gang were sentenced to prison in Russia for hacking and money laundering. Artem Zayets received 4.5 years, Alexey Malozemov got 5 years, while Daniil Puzyrevsky and Ruslan Khansvyarov were sentenced to 5.5 and 6 years, respectively. Puzyrevsky, considered the leader, may face additional fines.

The St Petersburg Garrison Military Court’s decisions followed arrests of 14 individuals in early 2022, based on US tips, with authorities seizing over 426 million rubles (about $4.38 million), $600,000, and €500,000 in cash, along with cryptocurrency and luxury vehicles. The gang was linked to significant breaches at companies like JBS and Kaseya before disbanding in 2021.

REvil (Ransomware Evil) is ransomware that emerged around 2019. It is known for its sophisticated attacks and targeted operations against various organisations worldwide. It has been allegedly involved in several high-profile cases at the Colonial Pipeline in May 2021, which led to the shutdown of the largest fuel pipeline in the US, causing fuel shortages and panic buying. The company paid approximately $4.4 million in ransom.

Linux creator supports removing Russian kernel maintainers

Linux creator Linus Torvalds has expressed support for removing several Russian maintainers from the Linux kernel project. This decision, announced by prominent developer Greg Kroah-Hartman, has sparked debate within the Linux community. The removals affect 11 Russian developers, largely due to compliance with new sanctions, though specific details of the removals still need to be fully clarified.

Responding to the concerns, Torvalds stated, “If you haven’t heard of Russian sanctions yet, you should try reading the news sometime,” emphasising that the changes will not be reversed.

The Linux kernel, the operating system’s core, is managed by maintainers who oversee code submissions and updates. Kroah-Hartman noted that those removed may return if they provide documentation proving independence from sanctioned entities, especially organisations associated with the Russian government.

This action has stirred reactions among developers, with some accusing the decision-makers of acting contrary to Linux’s open-source principles. Others warned that the decision could lead to future uncertainties about the participation of maintainers in sanctioned regions.

Responding to criticism, Torvalds dismissed the objections as originating from “Russian troll factories” and reaffirmed his stance, citing his opposition to Russian aggression. The move follows broader trends in the tech industry, where major US companies, like Docker Hub and GitHub, have imposed restrictions on Russian users, reflecting the impact of international sanctions on open-source software projects.

Biden’s national security memorandum prioritises AI regulation and international collaboration

President Biden signed a landmark national security memorandum to strengthen how AI is employed across defence and intelligence operations. The directive outlines strict protections on AI use, preventing autonomous systems from making high-stakes decisions like nuclear launches and immigration rulings. Jake Sullivan, the national security adviser, highlighted the need for the US to maintain its competitive edge in AI to safeguard national security.

‘Few technologies will be as critical to our future security as AI,’ Sullivan said at the National Defense University in Washington. He underscored the administration’s aim to roll out AI protections faster than other global powers and underscored a balance between open market competition and secure innovation.

The memorandum also directs federal agencies to bolster the security and diversity of chip supply chains and prioritise gathering intelligence on foreign AI operations targeting the US sector. These insights will support AI developers in protecting their products from adversarial threats.

However, with many recommendations set to take effect post-2025, it’s uncertain if the next administration will uphold these regulations. Experts emphasise that while AI is kept out of nuclear launch decisions, it still influences the data presidents receive, raising questions about reliance on AI for critical decision-making.

In the meantime, the administration will convene a global safety summit in San Francisco next month to address AI risks and foster international cooperation. This move adds to Biden’s executive order from last year, which aimed to limit AI’s risks to consumers, workers, and minority groups.

Chinese hackers reportedly target US political figures’ communications in major cybersecurity breach

Chinese hackers infiltrated Verizon’s phone systems to target devices used by individuals connected to Kamala Harris’s campaign, according to a source. Reports also indicated attempts to breach phones linked to Donald Trump and JD Vance, although Reuters could not confirm this.

Investigators are working to establish whether any communications from Trump or Vance were compromised. While the Trump campaign did not verify the targeting, it acknowledged the issue and criticised Harris, claiming her leadership emboldened cyberattacks from China and Iran.

The Chinese embassy in Washington denied involvement, asserting that China does not interfere in US elections and opposes cyberattacks in any form. The Harris campaign did not provide an immediate response to requests for comment.

The FBI and the US Cybersecurity and Infrastructure Security Agency are currently investigating the incident. Verizon confirmed it was aware of a sophisticated cyberattack aimed at US telecommunications and said it is cooperating with law enforcement.