Network security Archives | Page 157 of 211

White House introduces Cyber Trust Mark for smart devices

The White House unveiled a new label, the Cyber Trust Mark, for internet-connected devices like smart thermostats, baby monitors, and app-controlled lights. This new shield logo aims to help consumers evaluate the cybersecurity of these products, similar to how Energy Star labels indicate energy efficiency in appliances. Devices that display the Cyber Trust Mark will have met cybersecurity standards set by the US National Institute of Standards and Technology (NIST).

As more household items, from fitness trackers to smart ovens, become internet-connected, they offer convenience but also present new digital security risks. Anne Neuberger, US Deputy National Security Advisor for Cyber, explained that each connected device could potentially be targeted by cyber attackers. While the label is voluntary, officials hope consumers will prioritise security and demand the Cyber Trust Mark when making purchases.

The initiative will begin with consumer devices like cameras, with plans to expand to routers and smart meters. Products bearing the Cyber Trust Mark are expected to appear on store shelves later this year. Additionally, the Biden administration plans to issue an executive order by the end of the president’s term, requiring the US government to only purchase products with the label starting in 2027. The program has garnered bipartisan support, officials said.

UN’s ICAO targeted in alleged cyberattack

The International Civil Aviation Organization (ICAO) is investigating a potential cybersecurity breach following claims that a hacker accessed thousands of its documents. The United Nations agency, which sets global aviation standards, confirmed it is reviewing reports of an incident allegedly linked to a known cybercriminal group.

A post on a popular hacking forum dated 5 January suggested that 42,000 ICAO documents had been compromised, including sensitive personal data. Samples of the leaked information reportedly contain names, dates of birth, home addresses, email contacts, phone numbers, and employment details, with some records appearing to belong to ICAO staff.

ICAO has not confirmed whether the alleged breach is genuine or the extent of any possible data exposure. In response to media inquiries, the agency declined to provide further details beyond its official statement acknowledging the ongoing investigation.

Taiwan sees sharp rise in cyberattacks linked to China

Cyberattacks on Taiwan’s government departments doubled in 2024, reaching an average of 2.4 million attacks per day, according to the island’s National Security Bureau. Most of the attacks were attributed to Chinese cyber forces, with key targets including telecommunications, transportation, and defence. The report highlighted the increasing severity of China’s hacking activities, noting that many of the attacks were timed to coincide with Chinese military drills around Taiwan.

Taiwan has long accused Beijing of using cyberwarfare as part of broader “grey-zone harassment” efforts, which also include military exercises and surveillance balloons. The latest report detailed how China’s cyber forces employed advanced hacking techniques, such as distributed denial-of-service (DDoS) attacks and social engineering, in an attempt to steal confidential government data. These attacks were aimed at disrupting Taiwan’s infrastructure, including highways and ports, and gaining strategic advantages in politics, military affairs, and technology.

China has not responded to the allegations, though it routinely denies involvement in hacking operations. However, Taiwan’s findings come amid growing international concerns over Chinese cyber activities, with the United States recently accusing Chinese hackers of stealing sensitive documents from the US Treasury Department. Taiwan’s government has warned that Beijing’s cyber threats are intensifying and pose a growing risk to national security.

Chinese hackers breach multiple US telecom firms

Recent reports reveal that Chinese hackers have compromised a broader range of US telecommunications companies than previously known. In addition to earlier breaches involving AT&T and Verizon, the cyberattacks have now been found to affect Charter Communications, Consolidated Communications, Windstream, Lumen Technologies, and T-Mobile. The hacking group, identified as Salt Typhoon and linked to Chinese intelligence, exploited vulnerabilities in network devices from security vendors such as Fortinet and Cisco Systems.

The Wall Street Journal reports that US National Security Adviser Jake Sullivan informed telecommunications and technology executives in a confidential meeting in late 2023 that these hackers had developed the capability to disrupt critical US infrastructure, including ports and power grids. While companies like AT&T and Verizon have stated that their networks are now secure and that they are collaborating with law enforcement, concerns persist about the extent and impact of these breaches.

China has denied involvement in these cyber activities, accusing the United States of disseminating disinformation. Nonetheless, the revelations have intensified discussions about national security and the resilience of US critical infrastructure against sophisticated cyber threats. The situation underscores the ongoing challenges in safeguarding sensitive communications and infrastructure from state-sponsored cyber espionage.

OpenAI confident in AGI but faces safety concerns

OpenAI CEO Sam Altman has stated that the company believes it knows how to build AGI and is now turning its focus towards developing superintelligence. He argues that advanced AI could significantly boost scientific discovery and economic growth. While AGI is often defined as AI that outperforms humans in most tasks, OpenAI and Microsoft also use a financial benchmark—$100 billion in profits—as a key measure.

Despite Altman’s optimism, today’s AI systems still struggle with accuracy and reliability. OpenAI has previously acknowledged that transitioning to a world with superintelligence is far from certain, and controlling such systems remains an unsolved challenge. The company has, however, recently disbanded key safety teams, leading to concerns about its priorities as it seeks further investment.

Altman remains confident that AI will soon make a significant impact on businesses, suggesting that AI agents could enter the workforce and reshape industries in the near future. He insists that OpenAI continues to balance innovation with safety, despite growing scepticism from former staff and industry critics.

Windows 10 users face security risks as support ends

Security concerns are mounting as Windows 10 sees a rise in market share while Windows 11 adoption declines. Microsoft will officially end free security updates and support for Windows 10 on 14 October 2025, leaving millions of users vulnerable unless they upgrade or pay for extended security updates.

Experts warn that continuing to use Windows 10 beyond its support period poses risks of cyberattacks, data breaches, and ransomware. Microsoft strongly recommends switching to Windows 11, which is designed to meet modern security demands, or choosing an alternative operating system.

Cybersecurity professionals urge users not to delay, with ESET‘s Thorsten Urbanski stressing the urgency of upgrading before the deadline to avoid a security crisis. The transition period is quickly closing, making early action essential for those relying on Windows 10.

UK develops first quantum clock for military use

The Ministry of Defence announced that the UK is developing its first quantum clock, a cutting-edge device designed to enhance military intelligence and reconnaissance. Created by the Defence Science and Technology Laboratory, the clock boasts unparalleled precision, losing less than one second over billions of years.

By leveraging quantum mechanics to measure atomic energy fluctuations, the technology reduces reliance on vulnerable GPS systems, offering greater resilience against disruption by adversaries. That marks the UK’s debut in building such a device, with deployment anticipated within five years.

While not the world’s first quantum clock (similar technology was pioneered in the US 15 years ago), the UK effort highlights a growing global race in quantum advancements. Quantum clocks hold potential beyond military applications, impacting satellite navigation, telecommunications, and scientific research.

Countries like the United States and China are heavily investing in quantum technology, seeing its transformative potential. Future UK research aims to miniaturise the quantum clock for broader applications, including integration into military vehicles and aircraft, underscoring its strategic importance in defence and industry.

US weighs new restrictions on Chinese drones amid security concerns

Due to national security concerns, the US Commerce Department announced plans to consider new rules restricting or banning Chinese-made drones. The proposed regulations, open for public comment until 4 March, aim to safeguard the drone supply chain against potential threats from China and Russia.

Officials warn that adversaries could exploit these devices to access sensitive US data remotely. China dominates the US commercial drone market, with DJI, the world’s largest drone manufacturer, accounting for more than half of all sales.

The Biden administration has already taken steps to curb Chinese drone activity. In December, President Joe Biden signed legislation requiring an investigation into whether drones from companies like DJI and Autel Robotics pose unacceptable security risks.

If unresolved within a year, these companies may be barred from launching new products in the US. Additionally, DJI has faced scrutiny over alleged ties to Beijing’s military and accusations of violating the Uyghur Forced Labor Prevention Act, claims the company denies.

US Commerce Secretary Gina Raimondo hinted at measures similar to those targeting Chinese vehicles, focusing on drones with Chinese or Russian components. While DJI disputes allegations of data transmission and surveillance risks, US lawmakers remain concerned.

The evolving landscape underscores Washington’s broader efforts to address perceived security vulnerabilities in Chinese technology.

Albania’s TikTok ban: Balancing youth protection with free speech and economic impact

In Tirana, Albania, Ergus Katiaj, a small business owner who relies on TikTok to market his nighttime delivery service for snacks, cigarettes, and alcohol, faces an uncertain future. The Albanian government has announced a year-long ban on the social media platform, a move aimed at curbing youth violence.

The ban follows a tragic incident in November where a 14-year-old boy was fatally stabbed, reportedly after an online clash with a peer. Prime Minister Edi Rama said the decision, announced on 21 December, is to protect young people, but critics argue it threatens free speech and commerce ahead of the May elections.

The ban aligns Albania with a growing list of countries imposing restrictions on TikTok due to concerns over harmful content and its ties to China-based parent company ByteDance. However, business owners like Katiaj fear significant financial losses, as TikTok has been a vital tool for free marketing.

Rights groups and opposition leaders, such as Arlind Qori of the Bashke party, worry the ban sets a troubling precedent for political censorship, particularly in a country where protests against the jailing of political opponents were met with harsh government responses last year.

TikTok has called for urgent clarification from the Albanian government, asserting that reports indicate the videos linked to the tragic incident were uploaded to another platform. Meanwhile, the debate continues, with some viewing the ban as a protective measure for youth and others as an overreach limiting commerce and dissent.

For many, like Katiaj, the ban underscores the broader challenges of balancing public safety with democratic freedoms in Albania.

Malaysia tightens social media oversight with new licensing law

Malaysia’s communications regulator has granted licenses to Tencent’s WeChat and ByteDance’s TikTok under a new social media law designed to combat rising cybercrime. The law, effective from 1 January, mandates that platforms and messaging services with over 8 million users in Malaysia must obtain a license or face legal consequences.

While messaging app Telegram is close to completing the licensing process, Meta Platforms, the owner of Facebook, Instagram, and WhatsApp, has just started compliance steps. Other major platforms face scrutiny under the law. X, formerly known as Twitter, claims its user base in Malaysia falls below the 8 million threshold, a claim currently under review by authorities.

Alphabet’s YouTube has not applied for a license, citing concerns about how the law applies to its video-sharing features. The regulator emphasised that non-compliance could lead to investigations and regulatory actions.

The move follows a surge in harmful online content earlier this year, prompting Malaysian authorities to urge tighter monitoring from social media companies. Content related to online scams, child exploitation, cyberbullying, and sensitive topics such as race, religion, and royalty is classified as harmful.

Platforms like TikTok, Facebook, and YouTube reportedly have millions of active users in Malaysia. TikTok has over 28 million users aged 18 and above, highlighting the region’s high stakes of regulatory compliance.