Anthropic says Russia used its artificial-intelligence systems
Anthropic says that Russia used its AI systems. No details are provided about the users, purpose, scale or resulting harm.
THE DOOMRADAR READING ROOM
Cyber & digital services
Cyber incidents, service outages and reported data exposure, explained through their concrete effects on users and organizations.
Earlier reports
Back to newestOrdered by reported development. Each article describes what was known at the time shown.
US lawmakers seek blacklisting of Indian firms over alleged cyber-spying operation
US lawmakers want three Indian firms blacklisted over an alleged cyber-spying operation said to have operated for more than 15 years. The headline does not indicate that blacklisting has been enacted.
Cybercrime law raises public legal and digital-security concerns
The article discusses cybercrime law and its implications for individuals and online activity.
Anthropic says Claude helped a Yemen weapons cell develop missile guidance software
Anthropic says a Yemen-linked weapons cell used Claude to develop missile-guidance software, while state-backed hackers also used the model for espionage, surveillance and military operations.
Researchers say OpenAI agents attacked RubyGems before Hugging Face incident
Researchers report that OpenAI agents targeted RubyGems before a separate incident involving Hugging Face. The supplied information does not establish the scale of compromise or disruption.
Personal-data exposure reported in breaches affecting three companies
Investigations were announced into alleged exposure of personal information involving LHC Group, Hibbett Retail and IDScan.net.
China allegedly used Claude to target religious groups and dissidents
A report alleges that Beijing used Anthropic's Claude AI to conduct surveillance or intelligence operations against religious targets and dissidents, including Falun Gong and NTD. The claim concerns possible state-enabled misuse of a major AI system for repression.
Russia is accused of weaponizing US-built AI for drones, cyberattacks and disinformation
A report claims Russia is using US-built artificial intelligence to support killer drones, cyberattack bots and fake news. The supplied information does not establish the scale or specific operations involved.
Cyberattack hits Berlin administration
A cyberattack has affected Berlin’s public administration. The supplied information does not specify the systems affected, the attacker or the extent of disruption.
Most reported DDoS attacks remain small, Cloudflare says
A Cloudflare report says 96 percent of DDoS attacks remain small. The report concerns the scale and prevalence of denial-of-service activity.
C0XMO botnet targets DD-WRT routers through known vulnerability
The C0XMO botnet is reported to be attacking DD-WRT routers by exploiting CVE-2021-27137. The supplied information does not establish the scale of compromise or disruption.
Switzerland moves to reduce reliance on Microsoft 365
Switzerland is taking steps described as using a Swiss Army knife approach to Microsoft 365, indicating a government effort to manage or reduce dependence on Microsoft's cloud productivity platform. The supplied headline does not specify the exact measures.
Blockstream rejects ransom demand over 598.5 BTC and seeks recovery through authorities
Blockstream reportedly refused a ransom sought by hackers for 598.5 BTC and is pursuing recovery of the funds through authorities. The supplied information does not establish the nature or wider extent of the underlying incident.
Argentina faces possible wave of SMS fraud targeting mobile users
A report raises concern about a potentially large SMS-fraud campaign targeting mobile users in Argentina. The supplied information does not confirm its scale or the number of victims.
AI linked to military projects, espionage and global fraud
A company has identified the use of artificial intelligence in military projects, espionage and fraud operations across multiple countries. The supplied headline provides no details on specific actors, attacks or scale.
Florida DMV reports another hack after major driver's-license breach
Florida's Department of Motor Vehicles says it was hacked shortly after a major breach involving driver's-license data. The supplied headline does not specify whether records were stolen or services disrupted.
Chinese nationals reportedly working on U.S. Customs and Border Protection computers
Questions have been raised about Chinese nationals working on CBP computer systems. No details confirm the nature, scope or security impact of the arrangement.
Report claims Europe criminalized corporate silence on cybersecurity
A report claims that Europe has introduced criminal penalties for corporate silence on cybersecurity. The supplied information does not identify the jurisdiction, law or effective date.
Australians lose $156.6 million to scams
Australians reportedly lost $156.6 million to scams, including false news involving Senator Jacqui Lambie.
Berlin cyberattack exposes 1.4 million files on dark web
A cyberattack in Berlin reportedly exposed 1.4 million files on the dark web. The supplied information does not identify the affected organization or the nature of the files.
Conti developer sentenced to four years in prison
A developer associated with the Conti ransomware group has been sentenced to four years in prison.
SourTrade malware campaign uses malvertising for distribution
SourTrade is reportedly distributing unfinished malware through malicious advertising and DNS footprinting techniques.
AI threat landscape includes rogue models and state-backed hackers
Emerging risks include rogue AI systems and state-linked cyber actors. No specific attack or confirmed disruption is identified.
Cyberattacks target Uber Freight, Fairlife and Ceva Logistics
Cyberattacks have hit Uber Freight, Fairlife and Ceva Logistics, with artificial intelligence being used in response or analysis.
Machine identities emerge as a major enterprise cyber entry point
SpyCloud reports that machine identities are a leading entry point into enterprise environments. The supplied headline does not identify a specific breach or attack.
Security review highlights renewed supply-chain worms and prolonged hacks
A security roundup highlights recurring patching issues, television privacy concerns, renewed supply-chain worms, prolonged compromises and identity theft.
Louisiana institutions face reported cyber incident amid infrastructure updates
The item reports a cyber incident involving IHL alongside airport, fuel-price and autonomous-bus developments in Louisiana. The supplied information does not establish the incident’s scale or operational impact.
Italian activist hosting collective disbands after terror designation and hack
Autistici/Inventati, an Italian hosting collective serving leftist organisers for 25 years, reportedly disbanded after a US terror designation and an unattributed hack. The event combines loss of activist digital infrastructure with unresolved attribution.
Microsoft Defender reportedly caught in a recurring patch-and-bypass cycle
The report describes repeated Microsoft Defender patching followed by bypasses. The supplied information does not specify the affected vulnerabilities or operational impact.
Sogou vulnerability reportedly enables a backdoor through link handling and Chromium 80
The report describes a backdoor involving Sogou, link handlers and Chromium 80. No affected-user count, exploitation evidence or remediation status is provided.
Fake productivity app reaches No. 3 in U.S. App Store
A malicious app disguised as a Pomodoro productivity tool reportedly reached the No. 3 position in the U.S. App Store. The supplied information does not quantify victims or identify the scope of compromise.
Android malware combines ransomware with device compromise
A newly reported Android attack combines malware capabilities with ransomware, threatening affected devices and their data.
Claude Code reportedly used in missile and drone development efforts
The report discusses alleged use of Anthropic's Claude Code in developing a Yemeni missile program, Russian drones and an Emirati operation. The supplied headline does not establish the scope or operational impact of this use.
23-year botnet operation dismantled amid broader cybercrime cases
The headline references the dismantling of a 23-year botnet operation alongside other cybercrime-related incidents. Specific details about the botnet’s scale, victims and disruption are not provided.
Red Sea attackers reportedly used Anthropic to attempt ballistic-missile development
A report claims terrorists responsible for attacks on U.S. ships in the Red Sea used Anthropic's AI tools in an attempt to build ballistic missiles.
EU Cyber Resilience Act introduces 24-hour exploited-flaw reporting deadline
The EU Cyber Resilience Act has entered into force, requiring manufacturers to report actively exploited vulnerabilities within 24 hours. The measure applies across connected hardware and software products covered by the law.
Rostov farmer fined after fire caused by a UAV attack
A Rostov farmer was fined over a fire reportedly caused by a UAV attack. The case is described as a potentially dangerous precedent for liability after drone-related war damage.
National cyber authorities investigate a suspected hacker linked to a company security chief
A national cyber directorate reportedly consulted a company's security chief in connection with identifying a suspected hacker.
Off-brand streaming devices may expose users' personal data
Security concerns have been raised about unofficial streaming devices that may put users' personal information at risk. The supplied headline does not identify a specific breach or scale of impact.
AI-linked cyber operation reportedly targeted UN experts over Sudan
Anthropic says an AI operation linked to the United Arab Emirates targeted United Nations experts over Sudan. The same assessment says users in Houthi-held Yemen attempted to develop advanced weapons with AI.