Network security

Two charged after pensioner loses over £100,000 in cryptocurrency fraud

Two men have been charged in connection with a cryptocurrency fraud that saw a 75-year-old man from Aberdeenshire lose more than £100,000. The case, reported to police in July, led to an extensive investigation by officers from the north east division CID.

Following inquiries, officers travelled to Coventry and Mexborough on Tuesday, working alongside colleagues from West Midlands Police and South Yorkshire Police.

The coordinated operation resulted in the arrests of two men, aged 36 and 54, who have now been charged in relation to the fraud allegations.

Police have not yet disclosed details of how the scam was carried out, but cryptocurrency frauds often involve fake investment schemes, phishing scams, or fraudulent trading platforms that lure victims into handing over money with promises of high returns.

Many scams also exploit a lack of regulation in the digital currency sector, making it difficult for victims to recover lost funds.

Authorities have urged the public to remain vigilant and report any suspicious financial activity, particularly scams involving cryptocurrencies.

For more information on these topics, visit diplomacy.edu.

Judge allows Musk’s DOGE to keep accessing government data

A US federal judge has denied a request to temporarily block Elon Musk’s Department of Government Efficiency (DOGE) from accessing data from seven federal agencies or making further workforce cuts. The lawsuit, brought by 14 Democratic attorneys general, argued that DOGE was overstepping its authority by reshaping agencies and obtaining vast amounts of government information. However, Judge Tanya Chutkan ruled that the plaintiffs failed to prove immediate harm, allowing DOGE to continue operations.

Despite this decision, the judge acknowledged serious constitutional concerns regarding Musk’s authority. She noted that Musk had not been nominated by the US President Trump or confirmed by the Senate, raising potential violations of the Appointments Clause. In her ruling, Chutkan also criticised the Trump administration’s legal arguments, suggesting inconsistencies in its justification for DOGE’s powers.

While the restraining order was denied, the states can still pursue their case, potentially seeking a preliminary injunction to halt DOGE’s access to federal data. New Mexico Attorney General Raúl Torrez vowed to continue the legal fight, accusing Musk of destabilising government functions and acting without proper oversight. The battle over DOGE’s legitimacy is expected to intensify in the coming months.

For more information on these topics, visit diplomacy.edu.

Young people rely on social media for political news

A growing number of young Europeans are turning to social media platforms like TikTok, Instagram, and YouTube as their primary news source, surpassing traditional outlets such as TV and print media. According to the latest European Parliament Youth Survey, 42% of people aged 16 to 30 rely on social media for news about politics and social issues. This shift highlights changing preferences toward fast-paced, accessible content but also raises concerns about the growing risk of disinformation among younger generations.

Younger users, especially those aged 16 to 18, are more likely to trust platforms like TikTok and Instagram, while those aged 25 to 30 tend to rely more on Facebook, online press, and radio for their news. However, the rise of social media as a news source has also led to increased exposure to fake news. A report from the Reuters Institute revealed that 27% of TikTok users struggle to identify misleading content, while Instagram has faced criticism for relaxing its fact-checking systems.

Despite being aware of the risks, young Europeans continue to engage with social media for news. A significant 76% of respondents reported encountering fake news in the past week, yet platforms like Instagram remain the most popular news sources. This trend is impacting trust in political institutions, with many young people expressing scepticism toward the EU and skipping elections due to a lack of information.

The reliance on social media for news has shifted political discourse, as fake news and AI-generated content have been used to manipulate public opinion. The constant exposure to sensationalised false information is also having psychological effects, increasing anxiety and confusion among young people and pushing some to avoid news altogether.

For more information on these topics, visit diplomacy.edu.

Google faces backlash from privacy advocates over new tracking rules

Google has introduced changes to its online tracking policies, allowing fingerprinting, a technique that collects data such as IP addresses and device information to help advertisers identify users. The new rules mark a shift in Google’s approach to online tracking.

Google states that these data signals are already widely used across the industry and that its goal is to balance privacy with the needs of businesses and advertisers. The company previously restricted fingerprinting for ad targeting but now argues that evolving internet usage—such as browsing from smart TVs and gaming consoles—has made conventional tracking methods, like cookies, less effective. The company also emphasises that users continue to have choices regarding personalised ads and that it encourages responsible data use across the industry.

Critics argue that fingerprinting is harder for users to control compared to cookies, as it does not rely on locally stored files but rather collects real-time data about a user’s device and network. Some privacy advocates believe this change marks a shift toward tracking methods that provide users with fewer options to opt out.

Martin Thomson, an engineer at Mozilla, noted that by allowing fingerprinting, Google has given itself—and the advertising industry it dominates—permission to use a form of tracking that people can’t do much to stop. Lena Cohen, staff technologist at the Electronic Frontier Foundation, expressed similar concerns, stating that fingerprinting could make user data more accessible to advertisers, data brokers, and law enforcement.

The UK’s Information Commissioner’s Office (ICO) has raised concerns over fingerprinting, stating that it could reduce users’ ability to control how their information is collected. In a December blog post, Stephen Almond, the ICO’s Executive Director of Regulatory Risk, wrote that this change irresponsible, and that advertisers and businesses using this technology will need to demonstrate compliance with privacy and data laws.

Google responded that it welcomes further discussions with regulators and highlighted that IP addresses have long been used across the industry for fraud prevention and security.

For more information on these topics, visit diplomacy.edu.

Europol chief warns trust in law enforcement at risk

Law enforcement agencies must ensure public understanding of the need for expanded investigative powers to effectively combat the increasing scale and complexity of cybercrime, Europol’s chief Catherine De Bolle stated at the Munich Cyber Security Conference.

De Bolle emphasised that cybercriminal activity is not only growing in volume but also evolving in sophistication, leveraging both traditional telecom infrastructure and advanced digital tools, including dark web marketplaces. In response, she underscored the necessity for law enforcement agencies to strengthen their technical capabilities. However, she noted that implementing large-scale investigative measures must be balanced with maintaining public confidence in state institutions.

Her remarks followed those of Sir Jeremy Fleming, former director of the UK’s cyber intelligence agency GCHQ, who spoke about the importance of maintaining public trust in intelligence operations.

De Bolle further stressed the need for stronger collaboration between government agencies, private sector entities, and international organisations to address cyber threats effectively. As cybercrime and state-sponsored cyber activities increasingly overlap, she advocated for a shift away from fragmented approaches, calling for ‘multilateral responses’ to improve collective cybersecurity readiness.

For more information on these topics, visit diplomacy.edu.

Rising foreign cyber threats test Philippine security

The Philippines has reported attempts by foreign actors to infiltrate government intelligence systems, though no breaches have occurred, according to Cyber Minister Ivan Uy.

Advanced Persistent Threats (APTs), often linked to state-backed groups, have persistently targeted the nation but failed to compromise its cybersecurity defences.

Uy highlighted that some threats, described as ‘sleepers’, had been embedded in systems before being uncovered through government cybersecurity measures. He expressed concerns about such threats operating undetected for extended periods.

Efforts to trace the origins of these attacks are challenging, as hackers often leave misleading evidence. Diplomatic cooperation and intelligence sharing with the military and international allies have become key tools in countering these threats.

Last year, the government successfully thwarted cyberattacks allegedly originating in China, including attempts to breach systems related to maritime security. Uy noted that global cyber conflicts resemble a ‘non-kinetic World War III’, with nations and organisations exploiting digital vulnerabilities for strategic or financial gain.

In addition to cyberattacks, the Philippines is grappling with rising misinformation, deepfakes, and ‘fake news media outlets’ ahead of its mid-term elections in May.

The ministry has deployed tools to counter these risks, emphasising their potential to harm democracies reliant on informed public opinion during elections.

For more information on these topics, visit diplomacy.edu.

Pro-Russian hackers target Italian banks and airports in cyber attack

A wave of cyber attacks hit around 20 Italian websites, including those of banks and airports, in an incident linked to rising tensions between Rome and Moscow.

Italy‘s cybersecurity agency attributed the attacks to the pro-Russian hacker group Noname057(16), which targeted websites such as Intesa Sanpaolo, Banca Monte dei Paschi, Iccrea Banca, and Milan’s Linate and Malpensa airports. Authorities reported no major disruptions.

The attack followed recent remarks by Italian President Sergio Mattarella, who compared Russia‘s war on Ukraine to Nazi Germany‘s expansionism.

Moscow condemned the statement, while Italian Prime Minister Giorgia Meloni defended it. The hackers cited Mattarella’s comments as motivation for their actions, according to Italy’s cybersecurity agency.

Noname057(16) previously claimed responsibility for a cyber attack on Italy in December, which targeted around 10 institutional websites. Some of the affected organisations declined to comment on the latest breach, while others reported no operational impact. Italian authorities continue to monitor the situation.

For more information on these topics, visit diplomacy.edu.

Meta plans the world’s longest undersea cable

Meta has announced plans for Project Waterworth, an ambitious 50,000km subsea cable system set to be the longest in the world. The infrastructure project aims to enhance global connectivity by linking the United States, India, Brazil, South Africa, and other regions. Designed with 24 fiber pairs, the system will offer significantly higher data capacity, supporting Meta’s growing AI-driven services and contributing to digital inclusion and economic growth in key markets.

The tech giant has been at the forefront of undersea cable development for over a decade, collaborating on more than 20 similar projects. With most of the world’s internet traffic reliant on such cables, concerns over security have intensified, particularly as geopolitical tensions rise. In response to recent incidents, NATO has increased surveillance of critical maritime infrastructure, while the UK is reassessing its ability to safeguard its undersea network against potential threats.

Meta plans to lay sections of the cable at depths of up to 7,000 meters and employ advanced burial techniques in high-risk areas to minimise risks. This move follows recent disruptions, such as the damage to Tonga’s undersea cable, which left much of the island in a digital blackout. Meanwhile, Meta’s decision to scale back fact-checking on Facebook and Instagram has drawn criticism, highlighting the broader implications of its expanding digital footprint.

For more information on these topics, visit diplomacy.edu.

France’s ANSSI and international partners advocate risk-based approach for secure AI systems

The French National Cybersecurity Agency (ANSSI) has released new guidance on securing AI systems, emphasising a risk-based approach to AI deployment. Several international partners, including Canada, Singapore, Germany, Italy, Norway, the United Kingdom, Estonia and others, have co-signed the document.

The publication highlights the growing integration of AI across sectors and the need for organisations to assess and mitigate associated risks, particularly as they adopt large language models (LLMs).

ANSSI outlines key security challenges specific to AI, including vulnerabilities in data integrity, supply chain risks, and the potential for AI systems to be exploited as attack vectors. The report identifies major risks such as:

  • Compromises in AI hosting and management infrastructure
  • Supply chain attacks targeting AI components
  • Interconnections between AI and IT systems increasing attack surfaces
  • Long-term loss of control over AI-driven processes
  • Malfunctions affecting AI system reliability

To address these challenges, the document advocates for a structured approach to AI security, recommending that organisations:

  • Align AI system autonomy with risk assessments and operational criticality
  • Map AI supply chains and monitor interconnections with IT infrastructure
  • Implement continuous monitoring and maintenance of AI systems
  • Anticipate regulatory and technological developments impacting AI security
  • Strengthen training and awareness on AI-related risks

The publication also advises against using AI for automating critical actions without safeguards, urging organisations to conduct dedicated risk analyses and assess security measures at every stage of the AI system lifecycle.

For more information on these topics, visit diplomacy.edu.

Singapore unveils new AI governance initiatives to strengthen global safety standards

The Singapore government introduced three new AI governance initiatives to promote safety and global best practices. The initiatives include the Global AI Assurance Pilot, which focuses on testing generative AI applications; a joint testing report with Japan to enhance AI safety across different linguistic environments; and the publication of the Singapore AI Safety Red Teaming Challenge evaluation report, aimed at addressing AI performance across languages and cultures.

The announcement was made by Josephine Teo, Singapore’s Minister for Digital Development and Information, at the AI Action Summit (AIAS) in Paris. During her speech, Minister Teo emphasised Singapore’s commitment to fostering international collaboration on AI safety, noting the importance of understanding public concerns and ensuring AI systems are tested for safety and responsibility. She also highlighted the role of private sector partnerships in shaping AI use cases and risk management strategies.

The new initiatives include practical efforts to ensure AI models, particularly large language models (LLMs), are secure and culturally sensitive. The AI Assurance Pilot, for instance, will bring together global AI assurance vendors and companies deploying real-life GenAI applications to establish future standards for AI governance. The joint testing report with Japan aims to improve the safety of LLMs across multiple languages, addressing potential gaps in non-English safeguards. Additionally, the Red Teaming Challenge provided insights into AI performance and cultural bias, with participants testing LLMs for issues such as violent crime and privacy violations.

For more information on these topics, visit diplomacy.edu.