AI Hacks Are Coming Thick and Fast and Overwhelming the Internet

AI Hacks Are Coming Thick and Fast and Overwhelming the Internet

The AI-powered hackers began stealing from Colin Parsons at 11 p.m. on a recent Friday night.

The next morning, the startup founder woke up to about 50 email messages, each one saying he had been charged a few more dollars for Anthropic and OpenAI’s services. The bills ran to $449.

Parsons is just one of the latest victims in a wave of artificial-intelligence-powered attacks that has flooded the internet in recent weeks, as hackers increasingly turn to agents and AI hacking tools that make intrusions faster and harder to track than ever before.

Share

Cybersecurity agency prepares alert for Canadian organizations on programming vulnerability

Cybersecurity agency prepares alert for Canadian organizations on programming vulnerability

The Canadian Centre for Cybersecurity says it is preparing an alert for organizations regarding vulnerabilities in a programming language powering many of the world’s websites.

The developers of PHP, an open-source programming language used to run websites, disclosed Wednesday that they have identified two “critical vulnerabilities,” urging all PHP users to “update immediately.”

Share

When even our fridges are ‘online’, a meltdown is inevitable

When even our fridges are ‘online’, a meltdown is inevitable

High schools aren’t the only things on fire in France right now. This week, fridges and freezers in hundreds of supermarkets were targeted by unknown hackers in a cyberattack. Internal thermostats were cranked up as high as 50 degrees Celsius, sparking fires and melting countless glaces and bâtonnets de poisson. Tonnes of products have had to be dumped, causing tens of millions of euros’ worth of damage. Supermarket chains – including Intermarché and Monoprix – were among those impacted.

Share

Canadian cybersecurity executive arrested by FBI in hacking case

Canadian cybersecurity executive arrested by FBI in hacking case

A Canadian cybersecurity executive whose career has focused on helping clients negotiate with ransomware attackers has been arrested in the United States in connection with a hacking group that the FBI says stole a huge trove of sensitive data about the bureau’s own employees, according to court records and Reuters.

Share

Cyber-attack defrosts hundreds of refrigerators in two French supermarket chains

Cyber-attack defrosts hundreds of refrigerators in two French supermarket chains

French supermarket chains Intermarché and Cooperative U have been hit by an “unprecedented” cyber-attack that caused their refrigerators to defrost, the two retailers have said.

An estimated 150-200 Intermarché shops were targeted, along with almost 100 Cooperative U outlets, in the attack, they said on Monday.

Paris prosecutors confirmed the attack, which reportedly also hit other major chains, and said it had prompted outbreaks of fire.

h/t Mauser

Share

RCMP ‘monitoring’ reports of massive North American drivers’ licence hack

RCMP ‘monitoring’ reports of massive North American drivers’ licence hack

The Royal Canadian Mounted Police says it is “aware” of an ongoing FBI investigation into a report that hackers gained access to tens of millions of government-issued identity records across North America— including Canadians’ driver’s licences.

Canadians are now being warned to stay vigilant for bad actors that can exploit people’s personal data.

Share

ID Verification Breach Exposes Millions of Sensitive Identity Documents

ID Verification Breach Exposes Millions of Sensitive Identity Documents

If you ever needed more proof that governments pressuring companies to collect ID data from customers or users is a bad idea, you only have to look at what happened this week. A dark-web service advertised on August 31 has been offering over 153 million scans of driver’s licenses, more than 10 million other identity cards, over 3 million travel documents and/or international IDs, and at least 579,000 medical cards.

The data apparently stems from a company hired to verify people’s identities. The service, called Nexus, was advertised on the Russian-language cybercrime forum Exploit.


“… searching for just Canadian drivers licenses returns approximately 1.1 million results, with the largest concentration from Ontario (473,673 records).”

Share

Water systems are ripe for cyberattacks, experts warn after suspected Iranian hacks

Water systems are ripe for cyberattacks, experts warn after suspected Iranian hacks

In late 2022, Microsoft detected the hack of a water system in Guam that U.S. intelligence agencies in the following months determined was orchestrated by China. The idea wasn’t new. The spy agencies had long watched as Iran targeted Israeli water systems.

“That another nation state was doing it to us — that was unsettling,” recalled one former U.S. official, who, like several others interviewed for this story, spoke on the condition of anonymity because of the matter’s sensitivity.

Share

Canadian Tire says customer info caught in data breach on e-commerce platform

Canadian Tire Corp. Ltd. says it has identified a data breach involving personal information belonging to customers, which was stored in an e-commerce database.

The retailer says the breached information belongs to shoppers who had an e-commerce account with Canadian Tire or its other banners, SportChek, Mark’s/L’Equipeur and Party City.

The breached data included names, addresses, emails and birth years, as well as encrypted passwords and in some cases incomplete credit card numbers.

Share

Cache of Devices Capable of Crashing Cell Network Is Found Near U.N.

The Secret Service discovered more than 100,000 SIM cards and 300 servers, which could disable cellular towers or be used to conduct surveillance.

The Secret Service found and seized an illicit network of sophisticated equipment in the New York region that was capable of shutting down the cellular network as foreign leaders prepared to gather nearby for the annual U.N. General Assembly, the agency announced on Tuesday.

Officials said the anonymous communications network, which included more than 100,000 SIM cards and 300 servers, could interfere with emergency response services and could be used to conduct encrypted communication. One official said the network was capable of sending 30 million text messages per minute, anonymously. The official said the agency had never before seen such an extensive operation.

More … Secret Service foils massive plot to cripple NYC cell network and threaten UN General Assembly

h/t Neocon

Share

House of Commons hit by cyberattack from ‘threat actor’: internal email

The House of Commons and Canada’s cybersecurity agency are investigating a significant data breach caused by an unknown “threat actor” targeting employee information.

According to an internal email obtained by CBC News, the House of Commons alerted staff on Monday that there was an information breach. It said a malicious actor was able to exploit a recent Microsoft vulnerability to gain unauthorized access to a database containing information used to manage computers and mobile devices.

Oh sure BCF has been under a months long DDOS attack but all CBC cares about is Stupid Parliament.

Share

Largest Data Breach in History: *16 Billion* Login Credentials Exposed in Databases

Security researchers have uncovered potentially the largest data breach in history, comprising an astounding 16 billion login credentials, which include Apple accounts.

9to5Mac reports that a team of security researchers has stumbled upon a massive trove of stolen login credentials, exposing an unprecedented 16 billion records, including Apple accounts. The discovery, which researchers describe as “one of the largest data breaches in history,” has sent shockwaves through the cybersecurity community and raised serious concerns about the potential for widespread account takeovers, identity theft, and highly targeted phishing attacks.

Share

China’s digital strategy: Cyber espionage!

China’s infiltration into agricultural IoT (Internet of Things) networks represents a critical yet underexplored dimension of its global technological strategy. Through key players such as Huawei and Alibaba Cloud, Beijing has embedded IoT technologies into agricultural systems in Latin America, Africa, and Asia. These initiatives, often framed as development partnerships aimed at improving food production and supply chain resilience, concurrently enable the collection of extensive agricultural and environmental data with profound strategic and geopolitical implications.

Share

Planes Hit by Mystery GPS Jamming Across Europe

Persistent interference with navigational signals in eastern Europe impacted more than 1,600 airplanes—including civilian aircraft—in less than two days, according to open-source analysis, as jamming plagues the airspace around the Baltic Sea.

Jamming lasting just under 48 hours affected 1,614 airplanes, many of which were civilian aircraft flying around the Baltic region in eastern Europe, according to an open-source intelligence account that regularly tracks GPS interference.

Share