Search This Blog
Powered by Blogger.

Blog Archive

Labels

Footer About

Footer About

Labels

Load More
Trendy Right Now

Popular Posts

Latest News

China's New AI Model Challenges U.S. Cybersecurity Leaders

  China's latest open-weight artificial intelligence model is drawing attention within the cybersecurity community after independent eva...

All the recent news you need to know
Isreal
Critical Infrastructure critical infrastructure attack Cyber Attacks cyber intrusion Iran Cyber Attacks Isreal

Iran-Linked Cyberattacks Against Israel Triple as Critical Infrastructure Faces Rising Threats

 

Surging numbers of cyber intrusions tied to Iran have been logged by Israeli officials, revealing persistent digital hostilities despite lulls in physical warfare. The National Cyber Directorate notes attacks on critical systems now occur at almost three times the frequency seen twelve months ago - this escalation suggests online defenses are just as vital as traditional security setups. While battlefield activity slows, unseen operations thrive behind screens. 

Back in June 2026, Israel saw nearly 4,800 hostile cyber events, according to Yossi Karadi, head of the country's National Cyber Directorate. That number comes from remarks he shared with the German publication Die Welt. Compared to just 1,600 incidents logged one year earlier - during June 2025 - the rise is sharp. 

At that time, Israeli forces were carrying out military actions targeting Iran. Even when fighting slows on the ground, digital clashes do not pause. Though truces might calm frontlines, hacking efforts persist without rest. Karadi pointed out that numerous hacker collectives operate with high-level skills. Despite strong national safeguards, these actors demand ongoing attention. Round-the-clock watch remains necessary, he emphasized. 

One Israeli official noted that the assaults hit many types of groups, not just state bodies. Beyond governmental units, vital utility providers found themselves under pressure. Public administrative hubs also faced repeated digital intrusions. Smaller commercial ventures weren’t spared either - many reported breaches. Accounting practices appeared on the list of compromised entities recently. Legal consultancies showed up frequently in incident reports too. 

So far, Israeli officials say key systems have stayed safe even as attack attempts increase. Confidence in defense strength comes through clearly in Karadi’s remarks - yet he points out dangers still linger. Vigilance must hold steady, because risks remain real and constant. Even when some breaches on vital systems were stopped, firms with poor digital safeguards faced harsher outcomes. 

Some businesses, noted Karadi, fell harder because they were simpler targets - leading to total erasure of their networks after hackers got in. The names of those hit stayed undisclosed. Technical specifics about how it happened? Left out too. 

Across global tensions, digital attacks now routinely accompany physical warfare. Rather than staying separate, hacking efforts blend into modern conflict strategies. Government-linked hackers shift toward striking infrastructure, officials, and corporate networks - often at the same time as troop movements. 

These actions aim less at immediate damage, more at stealing secrets or wiping records clean. Public trust erodes when utilities or institutions face repeated intrusions. Hidden agendas drive many breaches, masking long-term influence goals behind technical exploits. Even though Iran denies launching cyber operations against other nations, it often highlights attacks aimed at its domestic institutions. 

Assigning blame for digital intrusions among states is rarely straightforward - officials commonly reject accusations, leaving experts to piece together evidence using forensic data and collected insights. Despite shifts in traditional combat, cyber operations show no slowdown - recent data from Israel’s National Cyber Directorate confirms their steady rise. 

With global friction still simmering, state-backed hacking efforts keep mounting. Institutions across sectors find themselves under growing strain to adapt defenses accordingly. Sophistication matters more than size when confronting these digital intrusions. Readiness now hinges on responsiveness, not just preparation.
Read more »
US AI Regulation
AI Export Controls AI National Security Anthropic Mythos 5 Artificial Intelligence Governance Frontier AI Security OpenAI GPT-5.6 Privacy Secure AI Deployment US AI Regulation

US Opens the Door for Trusted Organizations to Use Anthropic's Mythos AI


With a significant shift in U.S. government policy toward frontier artificial intelligence deployment, limited access has been restored to Anthropic's advanced Mythos 5 model, signaling a more targeted regulatory strategy than a blanket ban. 


Following a suspension of the model earlier this month due to national security concerns, U.S. authorities have now authorized its release to a carefully vetted group of organizations, including major Fortune 500 companies, which have been carefully vetted. 

Washington has emphasized the importance of balancing artificial intelligence innovation with national security safeguards, as increasingly capable foundation models are subject to increased scrutiny over their potential misuse by foreign military and intelligence entities. 

Additionally, the move is a useful illustration of a growing trend in which governments are increasingly influencing the deployment of cutting-edge AI systems and in which access to those systems is increasingly linked to trust, security compliance, and controlled distribution rather than unrestricted public access. 

Regulatory discussions prompted by the U.S. government's export control order issued on June 12, which required Anthropic to suspend access to both Mythos 5 and its companion model, Fable 5, while officials assessed the possible national security implications of releasing frontier artificial intelligence capabilities, led to the latest authorization. 

As the administration noted, it was concerned that highly capable generative AI models could be exploited by military or intelligence agencies linked to China, Russia, and other countries considered strategic risks. In light of this, Anthropic sought to strengthen compliance measures with the U.S. authorities, ultimately obtaining approval from the Secretary of Commerce Howard Lutnick to reactivate Mythos 5 to a limited network of vetted partners. 

However, Fable 5 remains subject to export restrictions while regulatory assessments are being completed. There has also been a broader shift in policy, as OpenAI announced it had postponed the full public rollout of GPT-5.6 at the request of U.S. officials, limiting early access to a small number of pre-approved organizations whose identities were disclosed to the government in response to the change. 

Together, these developments demonstrate the growing regulatory framework for the deployment of frontier AI models, in which access to these models is increasingly restricted, government oversight is continuous, and available models are available to a narrower audience rather than being made available widely to the public. 

While the government has reversed the partial policy, its selective approval process continues to polarize discussion over the need for transparency and competitive fairness as frontier AI models are deployed. As a consequence of the lack of clearly defined eligibility criteria, federal agencies have accumulated considerable discretion, leaving companies outside the approved ecosystem with little insight into the decisions made regarding access. 

As a legislative counsel for the Foundation for Individual Rights and Expression, John Coleman has questioned the opaque vetting framework, arguing that a lack of transparency in participant selection raises broader concerns about accountability and the consistency of regulatory authority application. 

Achieving the same objective, Commerce Secretary Howard Lutnick confirmed that organizations on the approved list of trusted organizations, as well as their employees, including non-U.S. citizens, as well as Anthropic's own international workforce, will be exempt from requiring individual export licenses to access Mythos 5. 

Licensing requirements, however, will remain in force for organizations outside of the government's trusted network. A number of the approved entities have been participating in Anthropic's Project Glasswing initiative, a collaborative effort between approximately 100 established technology companies and research institutions. It is also being discussed whether or not Fable 5 will be authorized in the future, although no implementation dates have been disclosed.

Increasing national security concerns increasingly influence commercial deployment strategies, which is reflected in the evolving regulatory framework which reflects a broader shift in how advanced artificial intelligence capabilities are governed. Although Fable 5 and Mythos 5 are based on the same underlying foundation model, the latter has been designed to be widely available with fewer deployment restrictions, making its continued suspension a noteworthy distinction in the government's risk assessment. 

A number of regulatory frictions have also resulted from Anthropic's refusal to support the use of its AI models for domestic surveillance and fully autonomous weapons systems. This stance exacerbated frictions between Anthropic and Washington. Additionally, both Anthropic and OpenAI continue to pursue public market ambitions while adjusting to the new compliance requirements introduced in President Donald Trump's executive order. 

By establishing a voluntary framework, the U.S. government will have the opportunity to review frontier artificial intelligence models up to 30 days before they are released to trusted partners under this voluntary framework. Analysts point out that while the latest authorization provides a practical mechanism for controlled deployment in the near-term, it does not resolve the question of how advanced AI systems are able to be deployed at scale. 

A former Commerce Department official and analyst at the Center for Strategic and International Studies, Ms. Koren warned that prolonged uncertainty surrounding broad model deployment could eventually erode the competitive advantage of U.S. AI developers. This could create opportunities for geopolitical rivals such as China to narrow their technological gap. 

Advance AI models are progressively being returned under tightly controlled access, signaling that frontier artificial intelligence has entered a new era where technical capability alone is no longer the determining factor of deployment. 

As governments refine oversight mechanisms for high-impact AI systems, developers, enterprises, and security teams must adjust to ever-evolving compliance requirements. Those considering integrating next-generation artificial intelligence need to closely monitor regulatory developments, export controls, and trusted access frameworks, as policy decisions are becoming an increasingly important aspect of AI adoption.
Read more »
Romania hospital cyberattack
BackMyData Data Breach Healthcare cybersecurity ransomware attack Romania hospital cyberattack

Romania's Swift Response Stops Massive Cyberattack on Hospitals, Offers Global Lessons in Healthcare Security

 

Romania's healthcare system faced one of its biggest cyber crises in February 2024 when a widespread ransomware attack targeted hospitals across the country, disrupting critical medical services and exposing the growing vulnerability of healthcare infrastructure to cybercriminals.

The attack began when hackers infiltrated the systems of Bucharest-based software company RSC, compromising its widely used hospital management platform, Hippocrates. As the malicious software rapidly spread to connected hospitals, officials at Romania's National Directorate for Cyber Security (DNSC) realized immediate action was necessary to prevent a nationwide catastrophe.

Faced with limited options, DNSC Director Dan Cimpean instructed more than 100 hospitals to disconnect from the internet immediately. The drastic measure successfully halted the spread of the ransomware but also left hospitals without internet access, email services, and connected medical systems.

Medical staff were forced to abandon digital records and return to manual processes, relying on handwritten documentation and paper-based workflows while cybersecurity experts investigated the breach and IT teams worked to restore operations.

The incident has since become an important case study for disaster response planners worldwide, demonstrating how healthcare systems can continue functioning during a major cyberattack.

Surgeon Oana Goidescu, who was working at Buzău Hospital when the attack unfolded, described the challenges medical staff faced.

"It was quite an unpleasant experience, because an IT record is not just a list of patients." She explained the extent of the disruption by adding: "For each patient, we request lab tests, radiology, medicines and supplies. All of that was gone."

The Hippocrates platform plays a central role in hospital operations, handling patient admissions, laboratory requests, pharmacy logistics, payroll, medical records, and diagnostic results. Once compromised, hospitals across Romania experienced widespread service failures.

The ransomware used in the attack, known as BackMyData, encrypted hospital files and demanded payment in Bitcoin to restore access.

The first warning signs appeared at Pitești Children's Hospital on the morning following the breach. By the next day, numerous hospitals reported that their Hippocrates systems had stopped functioning.

Cybersecurity specialists collaborated closely with the software provider to identify infected systems, isolate the malware, and begin recovery efforts.

Meanwhile, hospitals developed temporary offline systems to continue treating patients.

Vlad Paic from Carol Davila Hospital explained how his team adapted. When we saw the system would not be repaired quickly, we developed an offline method so we could register every patient. He added:"We asked the laboratory to give us results on paper. We used Excel and other offline tools to ensure care was not affected."

Romania's relatively recent transition to digital healthcare systems proved somewhat beneficial, as many staff members were still familiar with traditional paper-based procedures.

Investigators later confirmed that 26 hospitals had been directly infected with the BackMyData ransomware. Unaffected hospitals were gradually reconnected to the internet after additional cybersecurity protections were implemented.

Authorities also relied heavily on public communication throughout the crisis. Patients were advised to avoid hospitals unless absolutely necessary, helping reduce pressure on already strained facilities.

Despite these efforts, medical staff often faced frustration from worried patients.

Goidescu recalled: "We were asked, 'What if it were your mother?' They were right to be angry, but we tried to explain we were not at fault."

Romanian authorities also issued clear instructions that hospitals should neither negotiate with the attackers nor pay the ransom. The hackers had demanded €160,000 in Bitcoin, but the government refused payment and instead focused on restoring systems through secure backups.

Regular data backups proved invaluable, allowing most hospitals to recover their systems within five days. Although no deaths or serious patient harm were reported during the incident, healthcare workers spent weeks manually entering records created during the outage, while some information was permanently lost.

Investigators have not publicly identified those responsible for the attack. However, authorities previously dismantled a ransomware group linked to BackMyData in an international law enforcement operation that resulted in the arrest of four Russian nationals outside Russia.

Reflecting on the incident, Dan Cimpean warned that no country is immune from similar threats. "The more technology you have, the more digitised you are, the greater the risk."

The Romanian cyberattack reflects a broader global trend. In the United Kingdom, a cyberattack on an NHS blood-testing provider last year contributed to the first officially confirmed patient death linked to a cyber incident. In the United States, attacks on Change Healthcare and Ascension caused major disruptions, with Change Healthcare reportedly paying a $22 million ransom.

Cybersecurity experts say hospitals remain attractive targets because of their essential services.

Alina Bîzgă of cybersecurity company Bitdefender explained: "Hospitals handle critical services, and the criminals think that the more disruption that can be caused, the more likely they are to get paid a ransom."

The Romania incident highlights the urgent need for stronger cybersecurity measures, routine system backups, and well-prepared emergency response plans to safeguard healthcare services against increasingly sophisticated cyber threats.

Read more »
U.S. Policy
Digital Tax Trade Deal Tech Firms Technology Trump Tariff U.S. Policy

Trump Threatens 100% Tariff on Countries That Adopt Digital Services Tax

 

U.S. President Donald Trump has threatened to impose a 100 percent tariff on goods from any country that levies a digital services tax on American companies, escalating tensions with trading partners already weighing tougher rules on big tech. In a social media post on Friday, Trump said the tariff would apply immediately and would override existing trade agreements, whether those deals were already in force or still awaiting implementation. 

The move is aimed at countries, especially in Europe, that have discussed or adopted taxes on digital platforms and online services. Trump argued that these taxes unfairly target U.S. firms, many of which are among the world’s largest technology companies. Reuters reported that the warning came as several European governments continue to debate how best to tax digital businesses that generate revenue from local users without having a large physical presence. 

Trump’s message raises the risk of a fresh trade confrontation between Washington and key allies. By linking digital tax policy to broad import penalties, the White House is signaling that it may use tariffs as leverage in disputes that extend beyond traditional goods trade and into the regulation of the digital economy. Reuters noted that the announcement also came shortly after the European Union moved to reduce tariffs on U.S. goods, adding another layer of strain to transatlantic negotiations. 

The practical impact of the threat could be significant if implemented. A blanket 100 percent tariff would sharply raise the cost of exports to the United States and could hit sectors far beyond technology, depending on how broadly the measure is enforced. Reuters also noted that Trump said the tariff would supersede trade deals, a statement that adds uncertainty about how existing agreements might be affected if a country proceeds with a digital services tax. 

The latest warning fits a broader pattern in Trump’s trade approach, which has relied on tariffs as a bargaining tool against countries he says are treating American companies unfairly. For businesses, the announcement is another reminder that tax policy, trade policy and digital regulation are increasingly linked. For governments, it creates a sharper incentive to weigh the political and economic costs of taxing U.S. tech giants against the risk of retaliation from the United States.
Read more »
US
AI governance AI Safety Data Governance GPT Open AI technology US

OpenAI Limits GPT-5.6 Release While U.S. Reviews AI Safety

 



OpenAI has postponed the extensive public rollout of its latest frontier artificial intelligence model, GPT-5.6, after the U.S. government requested an opportunity to examine the technology before it reaches a wider audience. Rather than making the model immediately available to all users, the company will begin with a restricted deployment involving a small number of carefully vetted partners whose identities have been disclosed to federal authorities.

The temporary decision surfaces an increasingly cautious approach toward highly capable AI systems as governments evaluate their potential impact on national security. Policymakers have become more concerned that advanced generative AI models, while offering substantial benefits across research, software development and cybersecurity, could also be exploited to support sophisticated cyberattacks, automate vulnerability discovery, generate convincing phishing campaigns or assist other malicious activities if deployed without adequate safeguards.

According to OpenAI, the limited rollout is intended to provide government officials with an opportunity to study the model's capabilities and assess possible security risks before broader public access is granted. The company said it has already briefed the U.S. government on GPT-5.6 and its expected capabilities and described the current arrangement as an interim measure while it works with Washington to establish a more structured framework for releasing future frontier AI models.

Chief Executive Officer Sam Altman publicly expressed support for rigorous safety evaluations but questioned whether government agencies should determine which organizations receive early access. In a post on X, Altman said extensive testing of advanced AI systems is appropriate, while arguing that customer selection should remain outside government control.

The latest development follows an executive order signed earlier this month by President Donald Trump establishing a voluntary process under which developers of designated "covered frontier models" may provide the U.S. government with access to their systems for up to 30 days before they are released to trusted external partners. The initiative is designed to give officials time to evaluate emerging security concerns and strengthen oversight of increasingly capable AI technologies before wider deployment.

OpenAI stated that restricting access during this initial period represents what it believes is the most practical route toward making GPT-5.6 more broadly available in the coming weeks while discussions continue with the Administration on implementing the cyber-focused executive order and developing a repeatable review process for future launches.

The company added that engineering teams will continue conducting extensive safety evaluations and work closely with early partners throughout the testing phase. At the same time, OpenAI cautioned that the current level of government access should remain a temporary measure rather than becoming a permanent requirement for future AI releases. It also declined to identify the organizations participating in the initial rollout.

OpenAI further warned that prolonged restrictions on access to frontier AI systems could slow innovation across multiple sectors. The company noted that developers, businesses, cybersecurity professionals and international collaborators all rely on access to advanced models to build defensive security tools, strengthen research, develop enterprise applications and accelerate responsible AI adoption.

Leading the new product family is GPT-5.6 Sol, which OpenAI describes as its most capable model to date. The release also includes Terra, positioned as a mid-range model, and Luna, a lower-cost alternative intended to make advanced AI capabilities available at a lower price point across a wider range of use cases.

The government's heightened scrutiny extends beyond OpenAI. Earlier this month, Anthropic was instructed by U.S. authorities to suspend access to its frontier AI models for foreign nationals because of national security concerns. The company continues to face an ongoing legal and regulatory dispute with the government over those restrictions, illustrating the growing debate surrounding oversight of advanced artificial intelligence systems.

The developments come as both OpenAI and Anthropic have confidentially submitted paperwork for U.S. initial public offerings. Separately, The New York Times reported that OpenAI is considering postponing its public market debut until next year.

The developing relationship between AI developers and governments illustrates how the deployment of frontier models is becoming closely linked with cybersecurity and national security policy. While companies continue to pursue increasingly powerful AI capabilities, regulators are placing greater emphasis on evaluating how these systems could influence cyber defense, critical infrastructure protection and the misuse of AI by malicious actors before they are released at scale.

Read more »
Microsoft Security Flaw
Backdoor Malware Cyber Attacks Cyber Security Ransomware Attacks Exploitation Malware Attack Microsoft security Microsoft Security Flaw

Edgecution Malware Exploits Microsoft Edge Extension to Deploy Python Backdoor in Ransomware Attack

 

One way hackers adapt is by twisting legitimate features into tools for harm. A recent example shows a malicious Microsoft Edge extension escaping the browser’s restricted environment to establish persistent access on infected systems. 

Researchers named the campaign Edgecution, which abuses built-in browser functionality rather than software flaws. The payload deploys a Python-based backdoor capable of silently executing commands on compromised devices. Researchers at Zscaler believe the campaign is linked to an Initial Access Broker associated with the Payouts Kings ransomware operation. 

Instead of exploiting vulnerabilities, the attackers rely on social engineering and legitimate browser capabilities to gain deeper access to victim systems. The attack begins with someone impersonating IT support on Microsoft Teams, directing employees to a fake Microsoft update page under the pretense of installing an email security update. 

Victims see what appears to be an official Outlook update portal, but clicking its buttons instead downloads malware, copies malicious scripts to the clipboard, or requests Microsoft 365 and Outlook credentials. What looks like a routine update quickly turns into a compromise. The downloaded package contains intentionally malformed ZIP headers to evade security scanners. 

Once executed, scripts repair the archive, extract hidden files, configure the system, and create scheduled tasks that silently launch Microsoft Edge in the background. Inside the package are two main components: a malicious Microsoft Edge extension disguised as an Edge Monitoring Agent and a Python-based backdoor. The extension communicates with attacker-controlled servers, receiving commands and sending back results. 

Although browser extensions normally operate inside isolated sandboxes, this attack bypasses those restrictions. Attackers abuse Chrome’s Native Messaging protocol—a legitimate feature that allows browser extensions to communicate with trusted desktop applications. By leveraging this mechanism, the malicious extension launches the bundled Python backdoor as a native application, escaping the browser’s security boundaries.  

Once active, the Python backdoor enables attackers to execute shell commands, run PowerShell and arbitrary Python code, write files, enumerate running processes, and collect system information. Helper scripts generate the Native Messaging manifest and batch files needed to connect the extension with the local application. 

The malicious extension runs inside a headless Microsoft Edge session, remaining invisible to users while maintaining persistent access that is difficult to detect. Zscaler also identified unused commands within both malware components, indicating the framework is still under development and could gain additional capabilities in future versions. 

According to researchers, Edgecution highlights the growing sophistication of ransomware campaigns. Rather than relying solely on traditional malware, attackers increasingly exploit trusted browser features and enterprise collaboration platforms to bypass security defenses. 

To reduce the risk, organizations should closely monitor browser extensions, restrict Chrome Native Messaging where possible, review native messaging host configurations, and train employees to recognize social engineering attempts delivered through platforms such as Microsoft Teams. Zscaler has also published indicators of compromise, including malicious extension hashes and command-and-control servers, to help defenders identify affected systems.
Read more »
Subscribe to: Posts (Atom)

Featured