US judiciary faces potential election-year cyber risks, judge warns

A US federal judge has warned key members of the judiciary to remain vigilant against potential cyberattacks by foreign actors that could target election-related litigation. Judge Michael Scudder, who chairs the judiciary’s IT committee, highlighted the risks during a US Judicial Conference meeting, stressing the need for heightened security during the election season to guard against misinformation and interference attempts.

Scudder referenced recent warnings from United States intelligence agencies, which pointed to foreign adversaries using the upcoming elections as an opportunity to undermine trust in the government. He mentioned that while no current cyber threats targeting the judiciary have been identified, the courts could be at risk, especially with the possibility of election-related cases emerging in the near future.

The federal judiciary has faced cyberattacks before, with three foreign actors breaching the document-filing system in 2020. The incident led to changes in how sensitive documents are handled in lower courts. Scudder urged his colleagues to remain cautious, given that election-related litigation may again come before the courts in the upcoming election cycle.

Cybersecurity remains a concern across all branches of government, as both political campaigns and judicial systems are seen as targets for potential foreign interference. Intelligence agencies have reported recent cyber operations by foreign countries, including Iran, aimed at disrupting US elections.

Vietnam faces US-China rivalry over undersea cable expansion

The United States is pushing Vietnam to avoid using Chinese firm HMN Technologies in its plan to build 10 new undersea cables by 2030, amid concerns over national security and sabotage. Vietnam’s current cables, essential for global internet connectivity, have suffered repeated failures, prompting the government to prioritise new projects.

Washington is lobbying Hanoi to select more experienced and trusted suppliers for the cables, citing concerns about espionage and security threats linked to HMN Technologies, which the US views as associated with Chinese tech giant Huawei. The US has also raised concerns about possible sabotage of Vietnam’s current subsea cables.

Vietnamese authorities have remained open to working with Chinese firms, but United States officials have stressed that choosing HMN Tech could discourage American companies from investing in Vietnam. Meanwhile, Vietnam’s top telecoms company, Viettel, is already planning a cable with Singapore, bypassing disputed waters in the South China Sea.

The US and China are vying for influence in Vietnam as the Southeast Asian nation looks to expand its undersea cable infrastructure. Both countries are heavily invested in Vietnam, with subsea cables becoming a critical element in the broader US-China technology rivalry.

GSMA and the Linux Foundation to drive global telecom API innovation

Through their collaborative CAMARA project, GSMA and the Linux Foundation have launched the first official release of a series of open-source network APIs called ‘Meta-Release Fall24’.

The initial release contains 25 APIs across 13 subprojects designed to simplify and standardise access to essential telecom network functions. Among the APIs are stable versions like Location Verification, One-time Password SMS, and Number Verification, which have been thoroughly vetted for quality and consistency.

Additionally, the release introduces new APIs such as Call Forwarding Signal, Carrier Billing Refund, and Connectivity Insights, signalling CAMARA’s commitment to continuous innovation and expansion of its API offerings. Security and interoperability have been prioritised in this release, including a profile based on OAuth 2.0 and OpenID standards.

By ensuring that the APIs are secure and compatible across different systems, CAMARA sets a robust foundation for operators to deploy these solutions confidently in their networks. Furthermore, the CAMARA community is dedicated to providing twice-yearly updates to maintain the relevance and stability of these APIs, ensuring that telecom operators can seamlessly plan and manage the deployment of new capabilities.

GSMA and the Linux Foundation have rallied over 1,100 contributors and nearly 400 organisations, including major telecom players like Deutsche Telekom, Ericsson, and Vodafone, behind CAMARA. Selected as the API specification hub for a new global telecom venture launching in 2025, CAMARA promotes a unified approach to API development.

Taiwan’s new rules to combat telecom fraud

Taiwan’s government is taking decisive action to combat telecom fraud through new regulations proposed by the Ministry of Digital Affairs. These regulations focus on the stringent management of four-digit telephone numbers beginning with ’19,’ typically allocated to government agencies and charitable organisations.

The primary goal is to safeguard these critical numbers from misuse. To this end, the government plans to impose penalties on telecom operators who breach the Fraud Hazard Prevention Act, including limiting the number of phone numbers they can receive. This measure aims to deter fraudulent activities effectively. Furthermore, organisations in Taiwan will need to obtain government approval before making any changes to the use of these numbers and must return them if their usage changes. To ensure compliance, the Ministry will conduct random inspections to monitor the proper use of these numbers.

Taiwan’s government is also enhancing its anti-fraud efforts by proposing amendments to the Subsidy, Reward, and Assistance Regulations for Promoting Industry Innovation. These changes will allow the Ministry to offer financial support, including subsidies and rewards, to digital industries developing technologies to prevent fraud. By encouraging technological innovation in this field, the government aims to strengthen fraud prevention measures and protect individuals and organisations against telecom-related fraud.

Australian police arrest alleged crime app mastermind

Australian authorities have charged a Sydney man with creating and managing an encrypted messaging app, Ghost, allegedly used by global crime networks. The man, 32, was arrested in western Sydney and appeared in court on Wednesday, facing multiple charges related to the platform’s role in organised crime. Ghost is said to have been used by syndicates from Australia, the Middle East, and South Korea for drug trafficking and contract killings.

Police, in collaboration with international forces, carried out extensive raids across Australia and beyond, with searches also conducted in Italy, Ireland, Sweden, and Canada. Up to 50 Australians allegedly involved with Ghost are now facing charges, with significant prison terms expected. More arrests are anticipated in both Australia and abroad.

Authorities have made a breakthrough by cracking Ghost’s encryption, preventing the deaths or serious injuries of 50 individuals in Australia. This marks the first time an Australian has been accused of running a global criminal messaging platform, a major milestone in the country’s fight against organised crime.

The Australian Federal Police Deputy Commissioner highlighted the complex nature of dismantling encrypted communication platforms. The success in accessing evidence from Ghost represents a major achievement in efforts to disrupt global criminal activity.

Tanzania embraces AI to tackle rising cybercrime

Tanzanian President Samia Suluhu Hassan has called for the integration of AI into the strategies of the Tanzania Police Force to address the escalating threat of cybercrime. Speaking at the 2024 Annual Senior Police Officers’ Meeting and the 60th Anniversary of the Tanzania Police Force, President Samia emphasised that in today’s digital age, leveraging advanced technology is crucial for effectively combating online threats. She highlighted the necessity for the police to adapt technologically to stay ahead of sophisticated cybercriminals, underlining the importance of embracing these advancements.

In her address, President Samia also drew attention to a troubling surge in cybercrime, with incidents increasing by 36.1% from 2022 to 2023. She noted that crimes such as fraud, false information dissemination, pornography distribution, and harassment have become more prevalent, with offenders frequently operating from outside Tanzania. The President’s remarks underscore the urgency of adopting advanced technological tools to address these growing challenges effectively and to enhance the police’s capability to counteract such threats.

Furthermore, President Samia emphasised the need to maintain peace and stability during the upcoming local government and general elections. She tasked the police with managing election-related challenges, including defamatory statements and misinformation, without resorting to internet shutdowns. President Samia underscored that while elections are temporary, safeguarding a stable environment is essential for ongoing development and progress by stressing the importance of preserving national peace amidst political activities.

US to host global AI safety summit in November

The United States is set to host a global AI safety summit in November, focusing on international cooperation for AI safety. The summit will take place in San Francisco on 20-21 November, with Commerce Secretary Gina Raimondo and Secretary of State Anthony Blinken overseeing the event. The gathering will include representatives from multiple countries, such as Australia, Canada, Japan, and the European Union, all part of the International Network of AI Safety Institutes.

The summit’s primary objective is to promote collaboration in ensuring the safe and secure development of AI technologies. Generative AI, which can generate text, images, and videos, has raised concerns over potential job loss, electoral manipulation, and broader risks to society. Addressing these issues, the summit will bring together technical experts to share knowledge and develop strategies for global AI safety.

Raimondo first introduced the idea of the International Network of AI Safety Institutes at the AI Seoul Summit in May, where countries agreed to prioritise safety and innovation in AI development. The upcoming event in US will mark the first formal gathering of this group, ahead of the larger AI Action Summit scheduled for Paris in February 2024.

The Biden administration has already made strides in AI regulation, with President Biden signing an executive order last year. The order requires developers of AI systems posing national security or public health risks to submit safety test results before releasing their products to the public.

CISA launches FOCAL plan to strengthen federal cybersecurity

The American Cybersecurity and Infrastructure Security Agency (CISA) has introduced the Federal Civilian Executive Branch (FCEB) Operational Cybersecurity Alignment (FOCAL) Plan, a key initiative designed to enhance federal cybersecurity across over 100 FCEB agencies. That plan establishes a framework for coordinated support and services, aiming to reduce cyber risks through a unified defence strategy.

The FOCAL Plan prioritises five key areas to advance operational cybersecurity: Asset Management, which focuses on understanding and managing the cyber environment and interconnected assets; Vulnerability Management, aimed at proactively protecting against threats and assessing defensive capabilities; Defensible Architecture, which emphasises building resilient infrastructure; Cyber Supply Chain Risk Management (C-SCRM), to identify and mitigate risks from third parties; and Incident Detection and Response, designed to enhance Security Operations Centers (SOCs) in managing and limiting the impact of security incidents.

The US Cybersecurity and Infrastructure Security Agency (CISA) also notes that while the FOCAL Plan is tailored for federal agencies, it provides valuable insights for public and private sector organisations. It is a practical guide for developing effective cybersecurity strategies and improving coordination across enterprise security capabilities. Rather than offering an exhaustive checklist, the FOCAL Plan prioritises key actions that will drive significant advancements in cybersecurity and alignment goals within the federal sector.

Russian telecom consortium warns of impractical import substitution targets

Russia’s Telecommunication Technologies Consortium (TT Consortium), which includes Rostech, Rostelecom, and Element, has raised serious concerns about the country’s new import substitution requirements for telecom equipment. The consortium has formally communicated to the Ministry of Industry and Trade and the Ministry of Digital Transformation that the proposed targets for domestic components are unachievable.

According to the TT Consortium, the domestic market in Russia needs more suitable alternatives to many foreign components, making the mandated thresholds for domestic content impractical. Furthermore, the consortium has warned of potential severe repercussions if the stringent regulations are adopted in their current form. They fear the resolution could lead to the suspension of decisions recognising telecom equipment as domestic starting 1 December 2024. Consequently, this could result in no domestic telecom equipment being available, disrupting supply chains and impacting key sectors, including government operations and critical information infrastructure.

Additionally, the Telecommunication Technologies Consortium has criticised the draft government decree’s ambitious targets, which require telecom equipment to include 10% domestic components by 2026, 30% by 2028, and 60% by 2030. Manufacturers within the consortium argue that redesigning equipment to meet these requirements is daunting, given the current state of domestic component availability. They assert that such redesigns could lead to significant operational disruptions and hinder their ability to supply essential equipment to government clients and critical infrastructure entities.