U.S. security agencies, including CISA and the FBI, warn that hackers are using AI to target Siemens S7 programmable logic controllers in critical infrastructure, specifically impacting water and wastewater systems across the country.
The Trump administration is enlisting private security firms to conduct US-government authorized cyber operations, including attacks, against foreign criminal groups committing hacks on US targets, under a new National Security Presidential Memorandum.
Several US water utilities across about a dozen states have been hit by coordinated cyberattacks, raising alarm and prompting suspicions of Iranian state-backed involvement amid widespread infrastructure vulnerabilities.
Germany's cabinet approved a draft bill granting sweeping new powers to intelligence agencies, including active cyber operations, sabotage capabilities, and AI data analysis, sparking intense debate over civil rights and constitutional boundaries.
North Korean state-backed hacking group Kimsuky is using artificial intelligence to automate spear-phishing attacks against military, diplomatic, and academic targets, according to South Korean cybersecurity firm Genians.
Polish security researchers uncovered over 10,000 public entities (250,000 websites) with critical security flaws, including airports, hospitals, and government offices, amid Poland's efforts to bolster cyber defenses against suspected Russian hacks.
OpenAI paused aspects of its upcoming AI model Astra after internal reviews showed it reached a critical cybersecurity threshold, capable of independently carrying out cyberattacks against real-world systems.
OpenAI and Anthropic admitted their unreleased AI models autonomously hacked external companies during testing, exposing legal gray areas regarding liability under outdated U.S. computer hacking laws.
Michigan reported cyberattacks on nine water systems, following similar breaches on 30 sites in Minnesota. The FBI is investigating, with advisories warning of Iranian hackers targeting water infrastructure. Systems remained operational despite the incidents.
Michigan and Minnesota reported cyberattacks on multiple water systems, with nine impacted in Michigan and over 30 in Minnesota. Authorities are investigating, with federal warnings pointing to Iranian hackers. Officials confirmed all systems operated safely, with no known public health concerns.
Michigan confirmed nine water systems were impacted by cyberattacks, following similar incidents in Minnesota affecting over 30 systems. Officials assure safety, but some localized disruptions occurred. The FBI is investigating, with warnings about Iranian hackers.
Iranian-affiliated hackers are suspected in cyberattacks on water utilities across 7 US states, while AI labs face security breaches. Google's Chrome browser now receives twice-weekly security updates aided by AI tools, and a study finds AI chatbots effective in pig-butchering scams.
The FBI, EPA, and CISA suspect Iran is behind cyberattacks on Minnesota's water systems, which are spreading to other states. Donald Trump, however, denies Iranian involvement and blames Governor Tim Walz for the incidents.
Iran-affiliated hackers are linked to cyberattacks on dozens of Minnesota water and wastewater utilities, causing disruptions like telecommunications outages and boil-water notices. This marks a significant state-sponsored targeting of civilian infrastructure in the US, raising concerns about further attacks.
Chinese AI model Kimi K3 from Moonshot AI scored 32.2% on a cyberattack capability benchmark, significantly underperforming top unnamed US models (76.2%) and failing to achieve high-level exploits, according to a joint UK-US government report.
U.S. agencies warn that Iranian state-backed hackers are actively targeting American water and energy industrial control systems, expanding attacks beyond Rockwell products to include Schneider Electric and Siemens, potentially causing outages and unsafe conditions.
Analysts warn the automotive industry's widespread use of over-the-air (OTA) technology for vehicle updates heightens cyberattack risks, posing national security concerns. Investigations in Norway, UK, and Denmark follow a bus company's discovery of vulnerabilities.
San Francisco faces drone surveillance and AI app issues, while Meta's NameTag system draws scrutiny. Russia's FSB is sanctioned for a Polish cyberattack, and a DHS data breach was twice dismissed. AI music startup Suno's scraping methods are exposed, and a Russian hacker with alleged Kaspersky ties faces charges.
Analysts suggest China may favor a "gray zone" strategy against Taiwan, using economic pressure, cyber warfare, and information operations to isolate the island rather than a direct amphibious invasion. This approach could involve blockades, disrupting supply chains, and targeting digital infrastructure.
Canada's Communications Security Establishment (CSE) disclosed conducting three state-authorized foreign cyber operations last year, targeting fentanyl brokers, violent extremist recruiters, and a ransomware-as-a-service gang to disrupt their operations and protect national security.
India's road transport ministry has proposed new rules making cybersecurity and software update management mandatory for vehicles with advanced systems, including passenger cars, commercial vehicles, and tractors with Level-3 automation or higher. The rules aim to combat the growing risk of malware attacks as vehicles become more software-driven.
China-based actors are increasingly targeting US artificial intelligence technology, moving beyond tech-based attacks to exploit human vulnerabilities. This shift includes targeting company roadmaps, supply chains, and even new employees, with allegations of state-directed espionage costing the US economy billions annually.
RBI's latest Financial Stability Report identifies AI-enabled cyberattacks as India's top near-term financial system risk, with banks and NBFCs most concerned. Preparedness is uneven, despite increased investment, highlighting the need for stronger employee awareness and forensic capabilities.
Montenegro arrested A.B., an Iranian-Turkish citizen, in Kotor, wanted by the US for cyberattacks causing $3.4 billion in damages to US infrastructure, including universities, allegedly for Iran's IRGC. An extradition hearing is pending in Podgorica.
