Iran-Linked Hackers Target US Infrastructure, Crypto Scams Soar, and Gmail Expands Encryption
This week's security roundup covers a range of critical issues, from state-sponsored attacks on US infrastructure to the alarming rise in cryptocurrency scams. We also examine **Google's** expansion of end-to-end encryption in **Gmail** and its implications for mobile security.
Amid ongoing geopolitical tensions, the US government issued a warning about Iran-linked hackers targeting US energy and water infrastructure. This highlights the persistent threat of state-sponsored cyberattacks and the need for robust security measures to protect critical infrastructure.
**Political Security Spending on the Rise**
With rising fears of political violence, US political candidates are reportedly increasing their security spending. This includes investments in home alarms and even bulletproof vests, reflecting the growing concerns about personal safety in the current political climate.
**Dark Side of Telegram: Hacking Tools and Non-Consensual Images**
A recent investigation into **Telegram** groups revealed a disturbing trend: men sharing non-consensual images of women and girls, purchasing spyware for domestic abuse, and engaging in doxing and sexual abuse. This underscores the need for greater platform accountability and effective measures to combat online harassment and abuse.
**China's Role in Combating Industrial Scamming**
As governments grapple with industrial scamming originating from Southeast Asia, China has emerged as a key enforcer. However, its selective approach has led crime syndicates to shift their focus abroad to avoid Chinese targets.
**Anthropic's Claude Mythos Preview: A Cybersecurity Reckoning?**
**Anthropic** formally announced its new **Claude Mythos Preview** model, initially limiting access to select tech and financial organizations like **Apple**, **Microsoft**, **Google**, and the **Linux Foundation** through **Project Glasswing**. This initiative aims to explore Mythos Previewβs advanced hacking capabilities and improve software and hardware defenses. While the impact is debated, experts emphasize the importance of proactive collaboration and investment in patching.
**FBI Uncovers Signal Messages in Push Notifications**
The **FBI** recently accessed encrypted **Signal** messages from a defendant's iPhone through push notifications stored in the phone's internal memory. This issue affects all apps that use push notifications. Signal users can mitigate this risk by adjusting their notification settings to display "Name Only" or "No Name or Content."
**Iran's Internet Access Restrictions Reach 1,000 Hours**
Iranians are facing severe internet restrictions, with the regime-imposed blackout reaching 1,000 hours. This prolonged shutdown, monitored by **NetBlocks**, deprives citizens of vital information and communication during a time of conflict. The Iranian regime has also labeled anti-censorship tools as βmaliciousβ and targeted individuals using **Starlink** connections.
**Cryptocurrency Scams Surge, Costing Americans Billions**
The **FBI's** annual internet crime report reveals a significant increase in cybercrime losses, with cryptocurrency scams accounting for over $11 billion in losses. These scams often involve fraudulent investment schemes. The report also highlights the growing impact of AI-related crimes, resulting in substantial financial losses.
**Gmail Expands End-to-End Encryption to Mobile**
**Google** has expanded **Gmail's** end-to-end encryption to its **Android** and **iOS** apps for enterprise users. This allows for composing and reading E2EE messages on mobile devices without separate apps. Encrypted emails appear as standard threads in the Gmail app, with secure browser access for recipients on other providers. This builds on the client-side encryption model introduced to **Google Workspace**.