A recent cybersecurity breach involving US healthcare platform ConnectOnCall has compromised sensitive information belonging to more than 910,000 patients. The telehealth service, owned by Phreesia, experienced unauthorised access between February and May 2024, exposing names, phone numbers, medical details, and in some cases, Social Security numbers. Phreesia promptly took action after discovering the breach, enlisting cybersecurity experts and notifying federal authorities.
ConnectOnCall facilitates after-hours communication for healthcare providers, making the data theft particularly alarming due to the permanent and sensitive nature of health records. Cybercriminals may use this information for identity theft, fraudulent insurance claims, and targeted phishing attacks. Phreesia has since taken the service offline, offering identity and credit monitoring to affected patients, while working to implement more robust security measures.
The breach highlights the growing threat posed by cyberattacks on US healthcare platforms, where data is not only invaluable but also irreplaceable. Experts urge vigilance, such as monitoring accounts, using strong passwords, and employing identity theft protection. With incidents like this on the rise, calls are growing for stricter regulations to safeguard patient information and prevent similar breaches in the future.
India is taking significant steps to build a home-grown Earth observation satellite network, reducing dependence on foreign data for critical sectors like defence and infrastructure. Thirty Indian companies, forming nine consortiums, have expressed interest in the Indian National Space Promotion and Authorisation Centre’s (IN-SPACe) initiative.
The project, part of a larger strategy to monetise the space sector, aims to bolster the country’s $45 billion small satellite and data services market, projected to thrive by 2030. Major participants include startups Pixxel and SatSure, alongside Tata Advanced Systems. Technical evaluations are set to conclude by January, followed by the selection of a winning bidder.
Applicants must meet strict eligibility requirements, including substantial investment in space activities and establishing operational capabilities within India. The government plans to offer loans of up to 3.5 billion rupees, with private entities covering remaining costs.
India’s broader space programme features plans for crewed missions and interplanetary exploration. However, the immediate focus remains on expanding private sector involvement, supported by a 10-billion-rupee venture fund for startups. By fostering domestic innovation, the nation aims to secure its data sovereignty and commercial space leadership.
Marriott International and Starwood Hotels have been ordered to improve data security following multiple breaches impacting over 344 million customers. The Federal Trade Commission (FTC) finalised the order on Friday, citing inadequate security practices. Major breaches occurred in 2015, 2018, and 2020, exposing sensitive customer information, including passport details and payment data.
Hackers gained prolonged access to systems during the breaches, with one lasting four years undetected. The companies must now implement measures such as limiting data retention and providing US customers with a way to request the deletion of personal information tied to their accounts.
The FTC accused the hotel chains of misleading consumers with claims of robust data security while failing to address basic vulnerabilities like weak passwords and outdated software. The Connecticut Attorney General’s office also announced a $52 million settlement with Marriott on the same day.
Under the 20-year order, Marriott and Starwood must maintain compliance records, undergo inspections, and ensure transparency about their data handling practices. The ruling is part of broader efforts to hold businesses accountable for safeguarding customer information.
Elon Musk’s AI venture, xAI, has unveiled a standalone iOS app for its chatbot, Grok, marking its first major expansion beyond the X platform. The app, currently in beta testing across Australia and a few other regions, offers users an array of generative AI features, including real-time web access, text rewriting, summarisation, and even image generation from text prompts.
Grok, described as a ‘maximally truthful and curious’ assistant, is designed to provide accurate answers, create photorealistic images, and analyse uploaded pictures. While previously restricted to paying X subscribers, a free version of the chatbot was launched in November and has recently been made accessible to all users.
The app also serves as a precursor to a dedicated web platform, Grok.com, which is in the works. xAI has touted the chatbot’s ability to produce detailed and unrestricted image content, even allowing creations involving public figures and copyrighted material. This open approach sets Grok apart from other AI tools with stricter content policies.
As the beta rollout progresses, Grok is poised to become a versatile tool for users seeking generative AI capabilities in a dynamic and user-friendly interface.
Apple is reportedly working on an innovative smart doorbell camera equipped with Face ID technology, enabling users to unlock their doors simply by looking at it. This new device could launch as early as 2025, according to Bloomberg’s Mark Gurman. The camera will feature Apple’s Secure Enclave chip, ensuring biometric data is processed and stored securely, similar to other Apple products like the iPhone.
The doorbell camera is expected to integrate with existing HomeKit-compatible smart locks and might also come as part of a complete system developed in partnership with a smart lock manufacturer. It will likely incorporate Apple’s ‘Proxima’ Wi-Fi and Bluetooth chip, which is also rumoured for upcoming HomePod Mini and Apple TV models.
This development is part of Apple’s broader push into the smart home market. Additional rumours point to a new Apple-branded security camera, smart displays with advanced features like robotic arms, and even a potential Apple TV update. These efforts signal Apple’s commitment to creating a seamless and intelligent home ecosystem.
A US judge has ruled against Israel’s NSO Group in a lawsuit brought by WhatsApp, finding the spyware firm liable for hacking and breach of contract. The case, heard in Oakland, California, revolves around allegations that NSO exploited a vulnerability in WhatsApp to install Pegasus spyware, enabling unauthorised surveillance of 1,400 individuals. The court decision moves the case forward to determine damages.
Will Cathcart, head of WhatsApp, described the ruling as a triumph for privacy, emphasising the need for accountability in the spyware industry. WhatsApp expressed gratitude for support from various organisations and pledged continued efforts to safeguard private communications. Cybersecurity experts, including Citizen Lab’s John Scott-Railton, hailed the judgment as a pivotal moment for holding spyware companies accountable.
NSO argued that its Pegasus software serves to combat serious crime and threats to national security. However, the courts previously rejected claims of immunity, noting the company’s activities fell outside the protection of federal law. Appeals by NSO to higher courts, including the US Supreme Court, failed, paving the way for the trial to proceed.
The judgment signals a significant shift in how the spyware industry may be regulated, with implications for firms previously claiming they were not responsible for the misuse of their technology. Experts see it as a warning to surveillance companies that illegal actions will not go unchallenged.
Tetsuwan Scientific, a startup founded by Cristian Ponce and Théo Schäfer, is developing robotic AI scientists designed to automate lab experiments. Inspired by the rapid evolution of AI models like GPT-4, these robots aim to address the repetitive and labour-intensive aspects of research. They combine low-cost robotic hardware with advanced software that interprets and executes scientific tasks autonomously.
The breakthrough came when Ponce tested AI’s ability to diagnose scientific data and offer solutions. However, existing lab robots lacked the ability to physically act on these insights. Tetsuwan’s solution integrates AI to give robots the context and flexibility to perform tasks like pipetting and analysing results without constant programming.
Currently working with La Jolla Labs in RNA therapeutic drug development, Tetsuwan has secured $2.7 million in funding to advance its technology. The ultimate goal is to create self-reliant AI scientists capable of automating the entire scientific process, from hypothesis to reproducible results, potentially accelerating innovation at an unprecedented pace.
Albania has announced a one-year nationwide ban on TikTok, citing concerns about the platform’s influence on children. The decision follows the fatal stabbing of a 14-year-old boy in November, reportedly linked to social media disputes. Prime Minister Edi Rama revealed the ban as part of a broader strategy to enhance school safety after consultations with parents and teachers.
The Prime Minister has criticised TikTok and similar platforms for encouraging youth violence. Videos supporting the killing were shared online, raising alarms about the role of social media in such incidents. Rama stated that society, not children, bears responsibility for the issue, describing TikTok as a platform that holds children ‘hostage’.
TikTok responded by seeking clarity from the Albanian government, claiming no evidence linked the involved teens to the platform. A spokesperson suggested another platform might have hosted the content tied to the incident.
President-elect Donald Trump hinted at allowing TikTok to continue operating in the US, at least temporarily, citing the platform’s significant role in his presidential campaign. Speaking to conservative supporters in Phoenix, Arizona, Trump shared that his campaign content had garnered billions of views on TikTok, describing it as a “beautiful” success that made him reconsider the app’s future.
TikTok’s parent company, ByteDance, has faced pressure from US lawmakers to divest the app over national security concerns, with allegations that Chinese control of TikTok poses risks to American data. The US Supreme Court is set to decide on the matter, as ByteDance challenges a law that could force divestment. Without a favourable ruling or compliance with the law, TikTok could face a US ban by January 19, just before Trump takes office.
Trump’s openness to TikTok contrasts with bipartisan support for stricter measures against the app. While the Justice Department argues that Chinese ties to TikTok remain a security threat, TikTok counters that its user data and operations are managed within the US, with storage handled by Oracle and moderation decisions made domestically. Despite ongoing legal battles, Trump’s remarks and a recent meeting with TikTok’s CEO suggest he sees potential in maintaining the platform’s presence in the US market.
According to a report by Nikkei Asia, Japan’s competition watchdog, the Japan Fair Trade Commission (JFTC), is expected to find Google guilty of violating the country’s antitrust laws. The JFTC is reportedly preparing to issue a cease-and-desist order, directing Google to halt its monopolistic practices. The investigation, which began last October, focuses on Google’s dominance in web search services.
Google has yet to comment on the allegations, and the JFTC has also not responded to requests for a statement. This investigation follows similar antitrust actions in Europe and other major economies, where concerns have been raised about Google’s market power. The company’s Chrome browser, which is the most widely used globally, plays a central role in its advertising business by providing valuable user data.
This development comes amid increasing scrutiny of Google’s practices. In the US, the Department of Justice has argued that Google should be forced to divest Chrome and be banned from re-entering the browser market for five years as part of efforts to address its search engine monopoly.
