Diriyah Co. partner with SAFCSP to strengthen cybersecurity

The Diriyah Company has partnered with the Saudi Federation for Cybersecurity, Programming, and Drones (SAFCSP) to enhance the city’s digital security and align with the goals of Saudi Vision 2030. That collaboration aims to protect Diriyah’s digital infrastructure as it transforms into a cultural and heritage hub.

As part of the agreement, Diriyah Co. will join BugBounty, the Middle East’s first cybersecurity research platform, to identify and address software vulnerabilities. Additionally, the partnership includes initiatives such as conferences, workshops, and public awareness campaigns to foster a culture of cybersecurity.

To further strengthen capabilities, SAFCSP will provide Diriyah Co. access to its professional database for recruiting cybersecurity specialists. It will also offer specialised training programs to employees and identify top-performing students for advanced training opportunities.

The partnership supports innovation and collaboration across government and private sectors by integrating advanced cybersecurity measures and prioritising talent development. These efforts aim to create a secure and sustainable digital future for Diriyah, empowering the next generation with advanced technology and driving cultural, economic, and technological growth in line with Saudi Vision 2030.

Microsoft warns of Windows 11 bug blocking security updates

Manually created Windows 11 installer media for October and November 2024 patches could leave systems unable to install future security updates. The issue impacts USB or CD installers for version 24H2 and may affect businesses, schools, and PC enthusiasts.

Microsoft clarified that systems receiving October and November updates via Windows Update or the Update Catalog remain unaffected. However, media-created installations require rebuilding with the December 2024 update, followed by a full reinstallation. Microsoft recommends ensuring December’s patch is included in new installation media.

The company acknowledged the issue on its known problems page and is actively developing a permanent fix. Other bugs in version 24H2 have also emerged, affecting audio devices, Outlook with outdated Google Workspace Sync, and certain Ubisoft games.

India wedding planners linked to crypto money laundering

Indian tax authorities have uncovered a complex money laundering scheme involving hawala networks and cryptocurrency transactions in Jaipur. The investigation, triggered by raids on local wedding planners, led to the seizure of $2 million (₹20 crores) in cash and jewellery. Officials also recovered three crypto wallets linked to the operation, including one tied to a major global exchange.

The scheme involved clients making unreported cash payments exchanged for cryptocurrencies like Bitcoin and Tether through hawala operators in Gujarat and Rajasthan. Hawala, an illegal payment system, allows funds to be transferred abroad without moving money physically. Authorities believe the perpetrators exploited crypto exchanges with weak KYC policies or intermediaries to launder funds.

Records of these activities, including WhatsApp messages, emails, and spreadsheets, reveal the network extends beyond Jaipur to cities like Mumbai, Hyderabad, and Delhi. The operation also implicated resorts, hotels, and event service providers who accepted cash or bank payments. The tax department plans further raids across India to tackle tax evasion in the wedding and events industry.

OpenAI services suffer second outage in December

OpenAI’s ChatGPT, Sora, and developer API experienced a significant outage on Thursday, disrupting services for over four hours. The issue began around 11 a.m. PT, with partial recovery reported by 2:05 p.m. PT. By 3:16 p.m. PT, OpenAI stated that Sora was operational, though ChatGPT users might still encounter issues accessing their chat history.

According to OpenAI’s status page, the outage was caused by one of their upstream providers, but the company did not provide further details. This marks the second major outage for OpenAI’s services in December. Two weeks ago, a similar incident attributed to a telemetry service malfunction resulted in a six-hour disruption, a notably longer downtime than usual.

Interestingly, popular platforms utilising OpenAI’s API, such as Perplexity and Siri’s Apple Intelligence integration, appeared unaffected during the outage, as confirmed by their status pages and independent testing. OpenAI is actively working to ensure full restoration of its services while addressing the root causes behind these recurring disruptions.

Woman loses life savings in shocking scam

Elder fraud scams are becoming increasingly sophisticated, as illustrated by a recent case where an 82-year-old woman lost her life savings to criminals posing as the FBI. After depleting her accounts, the scammers coerced her into withdrawing funds via a Bitcoin machine and kept her isolated in a hotel under the guise of ‘protection.’ Despite her family’s intervention, the scammers struck again, convincing her to hand over $20,000 by exploiting false hopes of recovering a promised reward.

Elderly individuals are prime targets for such schemes, often due to their savings, trust in others, and unfamiliarity with modern technology. Fraudsters employ tactics like intimidation, urgency, and psychological manipulation to exploit their victims. According to recent statistics, seniors lose billions annually to scams, with the emotional toll leaving many feeling ashamed and fearful.

To combat these threats, experts recommend verifying unsolicited requests, limiting personal information sharing, using strong security measures, and reporting suspicious activity. Education and vigilance are key to protecting vulnerable individuals and ensuring scammers are outsmarted.

Social media platforms face penalties over child safety

The UK government is intensifying efforts to safeguard children online, with new measures requiring social media platforms to implement robust age verification and protect young users from harmful content. Technology Secretary Peter Kyle highlighted the importance of ‘watertight’ systems, warning that companies failing to comply could face significant fines or even prison terms for executives.

The measures, part of the Online Safety Act passed in 2023, will see platforms penalised for failing to address issues such as bullying, violent content, and risky stunts. Ofcom, the UK‘s communications regulator, is set to outline further obligations in January, including stricter ID verification for adult-only apps.

Debate continues over the balance between safety and accessibility. While some advocate for bans similar to Australia‘s under-16 restrictions, teenagers consulted by Kyle emphasised the positive aspects of social media, including learning opportunities and community connections. Research into the impact of screen time on mental health is ongoing, with new findings expected next year.

India launches AI-driven consumer protection initiatives

The Indian government has launched several initiatives to strengthen consumer protection, focusing on leveraging technology and enhancing online safety. Key developments include the introduction of the AI-enabled National Consumer Helpline, the e-Maap Portal, and the Jago Grahak Jago mobile application, all designed to expedite the resolution of consumer complaints and empower citizens to make informed choices.

The government of India also highlighted the significant progress made through the three-tier consumer court system, resolving thousands of disputes this year. In the realm of e-commerce, major platforms like Reliance Retail, Tata Sons, and Zomato pledged to enhance online shopping security, reflecting the government’s commitment to ensuring consumer confidence in the digital marketplace.

The e-Daakhil Portal has been expanded nationwide, achieving 100% adoption in states like Karnataka, Punjab, and Rajasthan, making it easier for consumers to file complaints online. The Consumer Protection Authority (CCPA) is also drafting new guidelines to regulate surrogate advertising and has already taken action against 13 companies for non-compliance with existing rules.

The importance of these initiatives was underscored at the National Consumer Day event, where key officials, including Minister of State for Consumer Affairs B L Verma and TRAI Chairman Anil Kumar Lahoti, were present. The event highlighted the government’s ongoing efforts to foster a safer and more transparent consumer environment, especially in the rapidly evolving digital landscape.

Japan Airlines restores systems after cyberattack

Japan Airlines (JAL) announced on Thursday that its systems have returned to normal following a cyberattack that disrupted domestic and international flights earlier in the day. The attack, which began at 7:24 a.m., caused malfunctions in internal and external systems, forcing the airline to suspend same-day ticket sales temporarily. The issue was resolved after shutting down a malfunctioning router.

JAL confirmed that no customer data was leaked and there was no damage from computer viruses. The company resumed ticket sales for flights departing on Thursday once the systems stabilised. Meanwhile, ANA Holdings, Japan’s other major airline, reported no signs of a similar attack on its operations.

The incident comes shortly after American Airlines briefly grounded all flights on Christmas Eve due to a network hardware glitch, highlighting ongoing challenges airlines face with system vulnerabilities during peak travel periods.

Google Maps timeline shifts to local storage

Google is introducing major updates to its Maps Timeline feature, shifting towards enhanced privacy by storing location history locally on users’ devices. This change means that any unbacked location history data will be automatically deleted after three months unless users take action to save it. Notifications regarding the update will provide a six-month window to back up data, urging users to preserve personal memories or valuable travel records before permanent deletion.

To save Timeline data, users can utilise Google’s export tools on their devices or through the web. This process allows users to maintain access to their past location history while ensuring it remains private and under their control. However, some users have reported unexpected deletions, emphasising the importance of regular backups to avoid data loss.

These updates are part of the US-based tech giant’s broader efforts to address privacy concerns by limiting the storage of sensitive data on its servers. While this move enhances data security, users are encouraged to take proactive steps to back up important information, explore privacy features like incognito mode, and consider additional tools such as VPNs to protect their online activity.

Mexican cartel scams timeshare owners

The FBI is warning timeshare owners about a telemarketing scam linked to the Jalisco New Generation Cartel, one of Mexico’s most dangerous criminal groups. This sophisticated operation targets individuals, particularly older adults, with offers to buy their timeshares at inflated prices. Victims are tricked into paying fees for taxes, processing, or other fabricated expenses, often losing tens of thousands of dollars.

The scam employs advanced tactics, including impersonation of legitimate businesses and government agencies, as well as the use of fraudulent websites. Call centres operated by the cartel facilitate these schemes, preying on vulnerable individuals while funding broader criminal activities, including drug trafficking. The scammers often re-victimise those they have already defrauded by promising to recover losses in exchange for additional payments.

To avoid falling prey to such fraud, experts advise verifying buyers and companies, avoiding upfront fees, and consulting professionals before proceeding with transactions. Reporting suspicious activity to the authorities is critical in combating these scams and protecting others.