Chinese AI model Kimi K3 from Moonshot AI scored 32.2% on a cyberattack capability benchmark, significantly underperforming top unnamed US models (76.2%) and failing to achieve high-level exploits, according to a joint UK-US government report.
U.S. agencies warn that Iranian state-backed hackers are actively targeting American water and energy industrial control systems, expanding attacks beyond Rockwell products to include Schneider Electric and Siemens, potentially causing outages and unsafe conditions.
Analysts warn the automotive industry's widespread use of over-the-air (OTA) technology for vehicle updates heightens cyberattack risks, posing national security concerns. Investigations in Norway, UK, and Denmark follow a bus company's discovery of vulnerabilities.
San Francisco faces drone surveillance and AI app issues, while Meta's NameTag system draws scrutiny. Russia's FSB is sanctioned for a Polish cyberattack, and a DHS data breach was twice dismissed. AI music startup Suno's scraping methods are exposed, and a Russian hacker with alleged Kaspersky ties faces charges.
Analysts suggest China may favor a "gray zone" strategy against Taiwan, using economic pressure, cyber warfare, and information operations to isolate the island rather than a direct amphibious invasion. This approach could involve blockades, disrupting supply chains, and targeting digital infrastructure.
Canada's Communications Security Establishment (CSE) disclosed conducting three state-authorized foreign cyber operations last year, targeting fentanyl brokers, violent extremist recruiters, and a ransomware-as-a-service gang to disrupt their operations and protect national security.
India's road transport ministry has proposed new rules making cybersecurity and software update management mandatory for vehicles with advanced systems, including passenger cars, commercial vehicles, and tractors with Level-3 automation or higher. The rules aim to combat the growing risk of malware attacks as vehicles become more software-driven.
China-based actors are increasingly targeting US artificial intelligence technology, moving beyond tech-based attacks to exploit human vulnerabilities. This shift includes targeting company roadmaps, supply chains, and even new employees, with allegations of state-directed espionage costing the US economy billions annually.
RBI's latest Financial Stability Report identifies AI-enabled cyberattacks as India's top near-term financial system risk, with banks and NBFCs most concerned. Preparedness is uneven, despite increased investment, highlighting the need for stronger employee awareness and forensic capabilities.
Montenegro arrested A.B., an Iranian-Turkish citizen, in Kotor, wanted by the US for cyberattacks causing $3.4 billion in damages to US infrastructure, including universities, allegedly for Iran's IRGC. An extradition hearing is pending in Podgorica.
Montenegrin police, in cooperation with the FBI, arrested an Iranian-Turkish national, A.B., in Kotor, wanted by the U.S. for alleged cyberattacks causing over $3.4 billion in damage. The suspect is accused of hacking US infrastructure, including universities, for the benefit of Iran's Islamic Revolutionary Guard Corps.
As Ireland prepares to assume the EU Council presidency, concerns are mounting over its military capabilities to secure summits and critical infrastructure against drone and cyber threats. Despite low defense spending and limited military assets, Dublin insists it is prepared, citing increased budget allocations and security agreements.
Hackers defaced Philippine government websites, including the NBI, posting messages against corruption. Analysts warn that repeated breaches, even without data theft, can erode investor confidence by highlighting cybersecurity and governance gaps.
The FBI has opened a 22,000 sq ft Cyber Range in Huntsville, Alabama, designed to simulate cyberattacks. This facility, resembling a replica town, allows for training and research on digital crime scenarios without risk of external contamination.
A WSJ report suggests Amazon's research findings on Anthropic's Fable 5 AI model, which reportedly revealed vulnerabilities aiding cyberattacks, influenced the US administration's decision to block foreign access to advanced AI models. Amazon CEO Andy Jassy shared these concerns with US officials.
The US government has ordered Anthropic to suspend access to its advanced AI models, Claude Fable 5 and Mythos 5, for all foreign nationals due to national security concerns. This move signals a shift in AI geopolitics, treating frontier models as strategic assets rather than commercial tools.
The FBI has opened a 22,000 sq ft replica town in Huntsville, Alabama, called the Kinetic Cyber Range, to train law enforcement in simulating and investigating cyberattacks. The facility, featuring realistic buildings and functioning devices, aims to provide hands-on experience with current technologies targeted by hackers, addressing a significant rise in U.S. cybercrime losses.
Swiss security firm Acronis warns of increased cyberattacks during the FIFA World Cup 2026, leveraging AI for sophisticated scams like fake ticket sites and phishing. Attackers target both in-person attendees and online viewers with tactics such as rogue Wi-Fi, QR code fraud, and credential stuffing.
Anthropic sends engineers to NSA to assist in utilizing Mythos AI for cybersecurity, amid a federal ban and concerns over potential misuse.
Anthropic reports over two-thirds of banned accounts used AI for cyberattack prep, including malware writing. AI is also aiding post-compromise techniques, increasing threat levels. Crypto theft surged, with analysts linking it to AI use.
Japan's National Cyber Security Center chief, Yoichi Iida, warns that advanced AI models like Anthropic's Claude-3 will accelerate and scale cyberattacks. He stressed the need for government and private sector collaboration to defend the nation.
India's CBSE re-evaluation portal faced cyberattacks, including a denial-of-service and file access probing, shortly after its launch. Over 16,000 students applied for re-evaluation despite disruptions, raising concerns about exam infrastructure security.
Estonia stores critical citizen data in a secure 'digital embassy' in Luxembourg, protected from cyberattacks and physical threats. Other countries, including Monaco and potentially Ukraine, are following suit amid rising security concerns post-Russia's Ukraine invasion.
The Financial Services Agency (FSA) has asked financial institutions nationwide to prepare for cyberattacks, including potential system shutdowns, due to the risk of a newly developed AI, "Claude Mythos," being misused. Institutions are urged to develop short-term countermeasures within approximately one month.
