New Kimwolf Android botnet linked to a record-breaking DDoS attacks

Cybersecurity researchers have uncovered a rapidly expanding Android botnet known as Kimwolf, which has already compromised approximately 1.8 million devices worldwide.

The malware primarily targets smart TVs, set-top boxes, and tablets connected to residential networks, with infections concentrated in countries including Brazil, India, the US, Argentina, South Africa, and the Philippines.

Analysis by QiAnXin XLab indicates that Kimwolf demonstrates a high degree of operational resilience.

Despite multiple disruptions to its command-and-control infrastructure, the botnet has repeatedly re-emerged with enhanced capabilities, including the adoption of Ethereum Name Service to harden its communications against takedown efforts.

Researchers also identified significant similarities between Kimwolf and AISURU, one of the most powerful botnets observed in recent years. Shared source code, infrastructure, and infection scripts suggest both botnets are operated by the same threat group and have coexisted on large numbers of infected devices.

AISURU has previously drawn attention for launching record-setting distributed denial-of-service attacks, including traffic peaks approaching 30 terabits per second.

The emergence of Kimwolf alongside such activity highlights the growing scale and sophistication of botnet-driven cyber threats targeting global internet infrastructure.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

AI reshapes media in North Macedonia with new regulatory guidance

A new analysis examines the impact of AI on North Macedonia’s media sector, offering guidance on ethical standards, human rights, and regulatory approaches.

Prepared in both Macedonian and English, the study benchmarks the country’s practices against European frameworks and provides actionable recommendations for future regulation and self-regulation.

The research, supported by the EU and Council of Europe’s PRO-FREX initiative and in collaboration with the Agency for Audio and Audiovisual Media Services (AVMU), was presented during Media Literacy Days 2025 in Skopje.

It highlights the relevance of EU and Council of Europe guidelines, including the Framework Convention on AI and Human Rights, and guidance on responsible AI in journalism.

AVMU’s involvement underlines its role in ensuring media freedom, fairness, and accountability amid rapid technological change. Participants highlighted the need for careful policymaking to manage AI’s impact, protecting media diversity, journalistic standards, and public trust online.

The analysis forms part of broader efforts under the Council of Europe and the EU’s Horizontal Facility for the Western Balkans and Türkiye, aiming to support North Macedonia in aligning media regulation with European standards while responsibly integrating AI technologies.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot

Healthcare faces growing compliance pressure from AI adoption

AI is becoming a practical tool across healthcare as providers face rising patient demand, chronic disease and limited resources.

These AI systems increasingly support tasks such as clinical documentation, billing, diagnostics and personalised treatment instead of relying solely on manual processes, allowing clinicians to focus more directly on patient care.

At the same time, AI introduces significant compliance and safety risks. Algorithmic bias, opaque decision-making, and outdated training data can affect clinical outcomes, raising questions about accountability when errors occur.

Regulators are signalling that healthcare organisations cannot delegate responsibility to automated systems and must retain meaningful human oversight over AI-assisted decisions.

Regulatory exposure spans federal and state frameworks, including HIPAA privacy rules, FDA oversight of AI-enabled medical devices and enforcement under the False Claims Act.

Healthcare providers are expected to implement robust procurement checks, continuous monitoring, governance structures and patient consent practices as AI regulation evolves towards a more coordinated national approach.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

US platforms signal political shift in DSA risk reports

Major online platforms have submitted their 2025 systemic risk assessments under the Digital Services Act as the European Commission moves towards issuing its first fine against a Very Large Online Platform.

The reports arrive amid mounting political friction between Brussels and Washington, placing platform compliance under heightened scrutiny on both regulatory and geopolitical fronts.

Several US-based companies adjusted how risks related to hate speech, misinformation and diversity are framed, reflecting political changes in the US while maintaining formal alignment with EU law.

Meta softened enforcement language, reclassified hate speech under broader categories and reduced visibility of civil rights structures, while continuing to emphasise freedom of expression as a guiding principle.

Google and YouTube similarly narrowed references to misinformation, replaced established terminology with less charged language and limited enforcement narratives to cases involving severe harm.

LinkedIn followed comparable patterns, removing references to earlier commitments on health misinformation, civic integrity and EU voluntary codes that have since been integrated into the DSA framework.

X largely retained its prior approach, although its report continues to reference cooperation with governments and civil society that contrasts with the platform’s public positioning.

TikTok diverged from other platforms by expanding disclosures on hate speech, election integrity and fact-checking, likely reflecting its vulnerability to regulatory action in both the EU and the US.

European regulators are expected to assess whether these shifts represent genuine risk mitigation or strategic alignment with US political priorities.

As systemic risk reports increasingly inform enforcement decisions, subtle changes in language, scope and emphasis may carry regulatory consequences well beyond their formal compliance function.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Instacart faces FTC scrutiny over AI pricing tool

US regulators are examining Instacart’s use of AI in grocery pricing, after reports that shoppers were shown different prices for identical items. Sources told Reuters the Federal Trade Commission has opened a probe into the company’s AI-driven pricing practices.

The FTC has issued a civil investigative demand seeking information about Instacart’s Eversight tool, which allows retailers to test different prices using AI. The agency said it does not comment on ongoing investigations, but expressed concern over reports of alleged pricing behaviour.

Scrutiny follows a study of 437 shoppers across four US cities, which found average price differences of 7 percent for the same grocery lists at the same stores. Some shoppers reportedly paid up to 23 percent more than others for identical items, according to the researchers.

Instacart said the pricing experiments were randomised and not based on personal data or individual behaviour. The company maintains that retailers, not Instacart, set prices on the platform, with the exception of Target, where prices are sourced externally and adjusted to cover costs.

The investigation comes amid wider regulatory focus on technology-driven pricing as living costs remain politically sensitive in the United States. Lawmakers have urged greater transparency, while the FTC continues broader inquiries into AI tools used to analyse consumer data and set prices.

Would you like to learn more about AI, tech, and digital diplomacy? If so, ask our Diplo chatbot!

Russia considers restoring Roblox access after compliance talks

Roblox has signalled willingness to comply with Russian law, opening the possibility of the platform being unblocked in Russia following earlier access restrictions.

Roskomnadzor stated that cooperation could resume if Roblox demonstrates concrete steps instead of declarations towards meeting domestic legal requirements.

The regulator said Roblox acknowledged shortcomings in moderating game content and ensuring the safety of user chats, particularly involving minors.

Russian authorities stressed that compliance would require systematic measures to remove harmful material and prevent criminal communication rather than partial adjustments.

Access to Roblox was restricted in early December after officials cited the spread of content linked to extremist and terrorist activity.

Roskomnadzor indicated that continued engagement and demonstrable compliance could allow the platform to restore operations under the regulatory oversight of Russia.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

New AI model analyses X-rays to predict ageing and disease risk

AI may offer a new way to assess how quickly the body is aging by analysing chest X-rays, according to research published in The Journals of Gerontology. The CXR-Age AI model detected age-related changes in the heart, lungs, and health more accurately than DNA-based epigenetic clocks.

Researchers compared CXR-Age to two biological age measures, Horvath Age and DNAm PhenoAge, using data from 2,097 adults in the Project Baseline Health Study, a US multi-site initiative exploring health and disease over time.

CXR-Age showed strong links with early signs of heart and lung aging, frailty, and proteins associated with neuroinflammation, while DNA clocks displayed weaker or no correlations, particularly in middle-aged adults.

Findings suggest that AI applied to routine medical imaging could help clinicians identify individuals at risk of age-related diseases before symptoms appear. AI metrics like CXR-Age could enhance traditional assessments and support personalised preventive healthcare.

The study concludes that machine learning and medical imaging have the potential to advance understanding of organ-specific aging, offering a promising tool for monitoring cardiopulmonary health and supporting early interventions.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot

UNDP and UNESCO support AI training for judiciary

UNESCO and UNDP have partnered to enhance judicial capacity on the ethical use of AI. A three-day Bangkok training, supported by the Thailand Institute of Justice, brought together 27 judges from 13 Asia-Pacific countries to discuss the impact of AI on justice and safeguards for fairness.

Expert sessions highlighted the global use of AI in court administration, research, and case management, emphasising opportunities and risks. Participants explored ways to use AI ethically while protecting human rights and judicial integrity, warning that unsupervised tools could increase bias and undermine public trust.

Trainers emphasised that AI must be implemented with careful attention to bias, transparency, and structural inequalities.

Judges reflected on the growing complexity of verifying evidence in the age of generative AI and deepfakes, and acknowledged that responsible AI can improve access to justice, support case reviews, and free time for substantive decision-making.

The initiative concluded with a consensus that AI adoption in courts should be guided by governance, transparency, and ongoing dialogue. The UNDP will continue to collaborate in advancing ethical, human rights-focused AI in regional judiciaries.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot

UN member states adopt WSIS+20 outcome document

The WSIS+20 review process – dedicated to reviewing progress made in the implementation of outcomes of the World Summit on the Information Society, 20 years after their adoption – finalised in New York, with the adoption of an outcome document at the end of a dedicated high-level meeting of the General Assembly. Following several months of consultations and negotiations, the document takes stock of progress made towards the WSIS vision of a people-centred, inclusive, and development-oriented information society, while identifying areas where further efforts and strengthened cooperation remain necessary.

The outcome document contains several provisions on the WSIS architecture, reaffirming existing mechanisms and introducing some adjustments aimed at strengthening implementation, coherence, and follow-up. One significant decision made as part of the WSIS+20 process concerns the Internet Governance Forum (IGF). Established in 2005 with a time-bound mandate that was renewed in 2010 and 2015, the IGF is now made a permanent forum of the United Nations. This decision reflects broad support among member states and was widely welcomed by non-governmental stakeholders as well.

In addition to making the IGF permanent, the outcome document introduces several measures intended to enhance its functioning and impact. The IGF is called upon to improve its work modalities and to broaden participation, particularly by governments and stakeholders from developing countries and underrepresented communities. It is invited to reinforce intersessional work, strengthen support for national and regional IGF initiatives, and apply innovative, inclusive, transparent, and agile collaboration methods.

The document also calls for the strengthening of the IGF Secretariat and requests the Secretary-General to submit a proposal to the General Assembly to ensure sustainable funding for the Forum. The IGF is further requested to report annually on progress to the Commission on Science and Technology for Development (CSTD) and to report its outcomes to relevant UN entities and processes, with a call for the UN Group on the Information Society (UNGIS), action line facilitators, the WSIS Forum, and other relevant bodies to take IGF outcomes into account in their work.

One interesting point negotiated among member states concerned the establishment of a governmental segment at the IGF. Some member states viewed this track as an important element towards fostering more dialogue among governments on digital governance issues (for some, it was also a response to the call for enhanced cooperation in the Tunis Agenda).

Others were concerned that such a segment would shift away from the IGF’s multistakeholder nature (despite the fact that the IGF, at the moment, has dedicated tracks for various groups such as parliamentarians). The final text is meant to be a compromise: The Forum is called upon to work on ‘establishing and facilitating a dialogue among Governments with the participation of all stakeholders’. 

Beyond the IGF, member states agreed that the WSIS Forum should continue to be held on an annual basis and invited the UNGIS to enhance its agility, efficiency, and effectiveness, as well as to expand its membership.

Additional provisions aim to strengthen coherence across UN digital processes. Action line facilitators are requested to develop targeted implementation roadmaps linking WSIS action lines with relevant Sustainable Development Goal targets and Global Digital Compact (GDC) commitments. Furthermore, UNGIS is requested to prepare a joint implementation roadmap to strengthen coherence between WSIS and the GDC, to be presented to CSTD in 2026. The Secretary-General is requested to submit a biennial report on WSIS implementation progress, to be considered by CSTD and ECOSOC, and the General Assembly is requested to convene a further high-level review of WSIS outcomes in 2035.

Throughout the WSIS+20 process, many discussions focused on the interplay between WSIS and GDC processes and the need to avoid duplication and enhance synergies. This is recognised in the outcome document, and several provisions – in particular those related to the implementation roadmaps, coupled with other elements describing roles for the UN Secretary-General, CSTD, the Economic and Social Council, and the General Assembly – offer important pathways in this regard. Moving forward, the key will be in how these provisions are implemented.

Substantively, the outcome document places the closure of digital divides at the core of the WSIS+20 agenda. It addresses multiple and intersecting dimensions of digital exclusion, including accessibility and equal access, inclusion of people in vulnerable situations and those in underserved, rural, and remote areas, affordability and quality of connectivity, multilingualism, cultural diversity, and the commitment to connect all schools to the Internet. The document emphasises that digital inclusion requires more than connectivity alone and must be supported by skills development, enabling environments, and respect for human rights.

The document also underscores the importance of fostering an open, fair, and non-discriminatory environment for digital development, including in the context of the digital economy. It highlights the need for predictable and transparent policy, legal, and regulatory frameworks, calls for technical assistance and technology transfer to developing countries on mutually agreed terms, and reiterates the call for states to refrain from unilateral economic measures not in line with international law. Environmental sustainability is also covered, with commitments to leverage digital technologies for sustainability while addressing energy use, critical mineral resources, e-waste management, and the development of international standards for sustainable digital products.

Human rights and ethical considerations are reaffirmed as foundational to the information society. The outcome document reiterates that the same rights apply online and offline, commits to safeguards to prevent and address adverse human rights impacts of digital technologies, and calls on the private sector to respect human rights throughout the technology lifecycle. It addresses concerns related to violence, hate speech, discrimination, misinformation and disinformation, cyberbullying, and child sexual exploitation and abuse, while emphasising information integrity, media freedom, privacy, freedom of expression, and the need to refrain from internet shutdowns and unlawful surveillance practices.

Capacity development and financing are treated as enablers of implementation. The document highlights the need to strengthen digital skills, policy and technical expertise, and institutional capacity, including in relation to emerging technologies such as AI. It invites the International Telecommunication Union – as Secretariat of UNGIS, and working with WSIS Action Line facilitators and other group members – to establish an internal task force to assess gaps and challenges in financial mechanisms for digital development and to report recommendations to CSTD in 2027.

It also calls on the Inter-Agency Working Group on Artificial Intelligence to map existing UN capacity-building initiatives, identify gaps, and address them, including through the establishment of an AI capacity-building fellowship for government officials and research programmes. These elements were subject to substantive discussions during the negotiations, with some members supporting them as important for building more capacities in AI, and others expressing concerns over potential duplication with existing work.

The outcome document reinforces the importance of monitoring and measurement, requesting a systematic review of existing ICT indicators and methodologies; the Partnership on Measuring ICT for Development is requested to conduct this review, in cooperation with action line facilitators and with the support of the Statistical Commission, and to report to CSTD in 2027. Finally, the document reaffirms the role of CSTD, ECOSOC, and the General Assembly in overall WSIS follow-up and review. 


Read more:

UN reviews global digital progress at WSIS+20

The UN General Assembly’s 66th plenary meeting marked the twentieth anniversary review of the World Summit on the Information Society (WSIS), taking stock of global progress on digital transformation and the challenges that remain. Delegations highlighted how digital technologies have become central to development, governance, and economic growth, while warning that deep inequalities continue to limit who can benefit from them.

Speakers repeatedly pointed to stark connectivity gaps between and within countries. While internet access is nearly universal in high-income states, less than a quarter of people in low-income countries are connected, with persistent rural-urban and gender divides.

Representatives from the least developed countries and small island states emphasised that limited digital access has a direct impact on education, healthcare, economic opportunities, and effective public administration.

Internet governance was another focal point, with broad support for formally establishing the Internet Governance Forum as a permanent UN body. Many countries defended the multistakeholder model as essential to keeping the internet open and resilient, although some raised concerns about the need for stronger participation by developing countries and questioned whether the current framework provides states with sufficient influence.

AI emerged as a defining issue for the next phase of digital cooperation. While several countries outlined national and regional AI strategies, others warned that the concentration of computing power and infrastructure in a few countries could create new global divides. Calls grew for ethical, responsible, and inclusive AI governance, alongside stronger international dialogue and cooperation.

Human rights in the digital space featured prominently throughout the debate. Delegations reaffirmed that the rights people enjoy offline must be protected online, raising concerns about internet shutdowns, surveillance, online violence, and threats to journalists and civil society.

Cybersecurity was also framed as a development and trust issue, with warnings about cybercrime, attacks on critical infrastructure, and risks to children and young people online.

Looking ahead, speakers emphasised the need to align WSIS outcomes with the sustainable development goals and the Global Digital Compact while addressing financing, capacity development, and environmental sustainability. The review highlighted both the progress made in global digital development and to significant challenges that remain, as governments grapple with the rapid pace of technological change and the increasing political, social, and economic stakes of the digital future.

Diplo and the Geneva Internet Platform will provide just-in-time reporting from the high-level meeting. Bookmark this page.

For more details about WSIS and the 20-year review, consult our WSIS+20 process dedicated page.

Would you like to learn more about AI, tech and digital diplomacyIf so, ask our Diplo chatbot!