News of the Cyber World

[kyonides]

US Water Company Hacked

Major U.S. water company hit by cyberattack

New Jersey-based company responsible for providing water to more than 14 million people was hit by a cyberattack which appears to only resulted in the loss of billing systems, according to a Securities and Exchange Commission filing Monday.

American Water Works Company, which first learned of the attack on Oct. 3, said there does not appear to be any impact to water or wastewater services. No ransomware gang has claimed responsibility for the attack on the company, which has operations in 14 states and serves at least 18 military installations.

There has been a steady increase in cyberattacks against water facilities in recent years, as both states and criminals exploit the sector, which experts deem vulnerable. The White House has spent many months warning about the vulnerabilities of the more than 170,000 water systems in the United States, including by sending a letter to governors in March.

At the same time, the Environmental Protection Agency has faced heavy criticism for the sector’s vulnerability, as the industry has faced a  rash of hacks against water facilities. Meanwhile, the sector continues to be a largely voluntary operation when it comes to cybersecurity efforts, which critics say is dependent on Congress revamping EPA’s authorities. The Government Accountability Office has also noted as recently as August that the EPA has not identified or prioritized the greatest risks in the sector.

Advertisement
The EPA has announced plans to increase water security inspections in response to the increasing threats. Additionally, a recent reboot of a landmark critical infrastructure policy will require the government to provide yearly risk mitigation updates through a national plan on infrastructure risk.

While the American Water hack does not appear to impact vital services or operations, the company noted that it is “unable to predict the full impact of this incident” and disconnected some systems. The 8-K filing also notes that American Water does not expect the hack to have a “material effect on the company, or its financial condition or results of operations.”

The company took billing services offline and noted on its website that customers will not incur late charges and water services will not be shut off while they work to get back online.

The company said in a statement to CyberScoop that it had “contacted and [is] receiving assistance from law enforcement, and we are coordinating fully with them.”

In its 2023 annual report, American Water wrote that the company’s “capital investment totaled $2.7 billion, and we are well on track to deliver $3.1 billion in investments in 2024.”

The annual report also included a section on the company’s cybersecurity effort, highlighting a “defense-in-depth” strategy that uses the National Institute of Standards and Technology’s cybersecurity framework. The company “periodically reviews and modifies the implementation of its cybersecurity strategy based on threat trends, program maturity, the results of assessments, and the advice of third-party security consultants,” per the report.A 

MS Patch Tuesday

Microsoft offers updates on 117 vulnerabilities on Patch Tuesday

Microsoft on Tuesday shared security updates on 117 common vulnerabilities and exposures, including two that are being actively exploited, according to the company.

The actively exploited vulnerabilities relate to the Microsoft Management Console (CVE-2024-43572) and the Windows MSHTML Platform (CVE-2024-43573), the company said.

The list includes five publicly disclosed zero-days in total, as part of 28 elevation-of-privilege vulnerabilities, seven security feature bypasses, 43 remote code execution vulnerabilities, six information disclosure vulnerabilities, 26 denial-of-service vulnerabilities and seven spoofing vulnerabilities, according to Bleeping Computer.

The MSHTML vulnerability exploits an issue with the Internet Explorer web browser, making it the fourth such MSHTML vulnerability to be exploited in the wild in 2024, Brian Krebs reported Tuesday. Security Week reported that the MSHTML platform has been widely targeted by ransomware and advanced nation-state hacking teams.

The Microsoft Management Console vulnerability allows attackers who leverage malicious Microsoft Saved Console (MSC) files to execute remote code on targeted systems, according to Security Week.

WordPress: Love to Complain a Lot? Employees Might Get $30K If They Quit

Adios, Complainers: Tech CEO Offers Unhappy Employees $30,000+ to Leave Company Forever

The CEO of tech company Automattic, Matt Mullenweg, has offered unhappy employees a buyout package of $30,000 or six months of salary to quit the company and never return amid an ongoing dispute with competitor WP Engine.

SFGate reports that the San Francisco-based tech company Automattic, known for its popular web-hosting site WordPress.com, has been embroiled in a weeks-long drama with competitor WP Engine. The conflict reached a new height last week when CEO Matt Mullenweg announced that 159 of his workers had chosen to accept a buyout offer and quit the company.

Mullenweg, who is also one of the co-creators of the WordPress web software, framed the buyout offer as an opportunity for “alignment” within the company. In a blog post, he explained that it had become clear that a significant portion of his staff disagreed with how he had been handling the dispute with WP Engine. As a result, he decided to offer what he called “the most generous buy-out package possible” to those who wished to leave.

Under the terms of the buyout, employees who chose to accept the offer would receive either $30,000 or six months of salary, whichever was higher. However, they would not be allowed to return to the company in the future. Mullenweg revealed that of the 8.4 percent of the company who took the deal, 18 individuals had salaries exceeding $200,000, meaning their pre-tax severance checks would clear $100,000.

The roots of the conflict between Automattic and WP Engine can be traced back to the open-source nature of the WordPress software. While Mullenweg co-created the software, his control over it is limited due to its open-source status. In September, Mullenweg publicly accused WP Engine and its private equity parent, Silver Lake, of prioritizing financial gain over the ideals of open source software.

The following weeks saw a rapid escalation of the dispute, with Mullenweg calling WP Engine a “cancer” and the two companies trading cease-and-desist letters. WP Engine’s lawyers labeled Mullenweg’s actions as “outrageous” and his statements as “false, misleading, and disparaging.” Mullenweg responded by blocking WP Engine from some WordPress tools, effectively removing certain software functions from their customers.

On Wednesday, the conflict reached a new level when WP Engine filed a wide-reaching lawsuit against Automattic and Mullenweg in the Northern District of California. The lawsuit, which includes 11 different claims, accuses Automattic and Mullenweg of breaking promises, attempting to intimidate WP Engine, and harming the entire WordPress community.

Despite the ongoing legal battle, Mullenweg remains committed to his stance. In a statement to SFGate, he said, “I’ve spent half of my life championing open source. I’m passionate about ensuring the software that runs 43 percent of the web is healthy. When private equity-backed companies take advantage of open source software and its tens of thousands of contributors, I’m going to stand up and fight against them.”

The End of Google Search Monopoly?

DOJ Considers Asking Judge to Break Up Google over Search Monopoly

As the government’s second antitrust trial heads towards closing arguments next month, the DOJ is contemplating asking a federal judge to compel Google to sell parts of its business to address the verdict of its first antitrust trial — that the internet giant has monopoly power with its search engine.

AP News reports that amidst the ongoing second antitrust case against Google, the DOJ is considering drastic measures to address the tech giant’s monopolistic practices related to its search engine, the focus of the first antitrust case. According to a recent court filing, federal prosecutors are weighing the possibility of asking a judge to force Google to sell off parts of its business in order to eliminate its dominance in the online search market.

The filing, submitted on Tuesday, marks the first step in a lengthy legal process aimed at devising remedies that could potentially reshape the company that has long been synonymous with internet search. The DOJ argues that Google has maintained control over the most popular distribution channels for more than a decade, leaving competitors with little incentive to vie for users.

To fully address the alleged harms caused by Google’s practices, the antitrust enforcers suggest that merely ending Google’s current control over distribution is insufficient. They emphasize the need to ensure that Google cannot exert similar control over the distribution channels of the future. As such, the department is considering requesting structural changes that would prevent Google from leveraging its various products, such as the Chrome browser, Android operating system, AI products, or app store, to benefit its search business.

Additionally, prosecutors have set their sights on Google’s default search agreements, indicating that any proposed remedies would aim to restrict or prohibit these deals. Default search agreements effectively lock in Google’s services and products as the automatic choice presented to consumers, exemplified by how Safari browsers on Apple iPhones default to using Google’s search engine.

In response to the filing, Lee-Anne Mulholland, Google’s vice president of regulatory affairs, expressed concern that the Department of Justice was signaling requests that extend beyond the specific legal issues at hand. She cautioned that government overreach in a rapidly evolving industry could lead to unintended negative consequences for American innovation and consumers.

Google on Genuine Businesses

Do You Trust Google? Search Giant Tests Verified Checkmarks to Identify ‘Genuine’ Businesses

Google is experimenting with a new feature that displays blue verified checkmarks next to links in search results that the search giant deems to be legitimate, aiming to help users avoid fake or fraudulent websites.

The Verge reports that to enhance user trust and safety, Google has begun testing a new verification system in its search results. The tech giant is now displaying blue checkmarks beside links to genuine business websites, such as Meta, Apple, and Amazon, to help users identify trustworthy sources and avoid falling victim to copycat sites attempting to capitalize on well-known brands.

Google public affairs spokesperson Molly Shaheen confirmed the experiment, stating, “We regularly experiment with features that help shoppers identify trustworthy businesses online, and we are currently running a small experiment showing checkmarks next to certain businesses on Google.”

The checkmarks are currently visible to a limited number of users and appear to be an extension of Google’s Brand Indicators for Message Identification (BIMI) feature, which is already used to display verification checkmarks in Gmail’s web and mobile apps for senders who have adopted the verification platform.

When a user hovers over the checkmark, a message appears explaining, “Google’s signals suggest that this business is the business that it says it is.” According to Shaheen, this determination is based on factors such as website verification, Merchant Center data, and manual reviews conducted by Google.

Google has not officially announced the search checkmarks or provided a timeline for when more users can expect to see the feature. The company’s decision to implement this verification system comes as part of its ongoing efforts to combat the spread of misinformation and protect users from fraudulent websites.

As with all Google features, there is a concern that the company will use this as a political weapon against conservatives. Google has a long track record of censorship and if users become used to only clicking on links with verification checkmarks, selective verification could become a new censorship tool.

Ex-Google CEO: Ignore AI's Environmental Impact

Ex-Google CEO Eric Schmidt: Ignore AI’s Environmental Impact Because Climate Goals Were Always Unrealistic

Former Google CEO Eric Schmidt has called for a full-scale investment in AI infrastructure, even as the energy-intensive nature of AI development threatens to undermine global climate goals. Saying the quiet part out loud, Schmidt admitted Silicon Valley’s climate goals were always completely unrealistic, stating: “We’re not going to hit the climate goals anyway because we’re not organized to do it.”

Business Insider reports that in a recent AI summit held in Washington DC, Eric Schmidt, the former CEO of Google, made a controversial statement regarding the future of artificial intelligence and its potential impact on the environment.

Schmidt, who served as Google’s CEO from 2001 to 2011 and previously chaired the National Security Commission on Artificial Intelligence while also being a noted Clinton lackey and progressive advocate, urged the audience to fully invest in AI infrastructure, despite the massive energy consumption required by AI data centers.

The rapid growth of AI has led to a significant increase in spending on data centers, which provide the computational power necessary for training and running AI models. According to a report by McKinsey, data centers are expected to consume 35 gigawatts of power annually by 2030, a substantial increase from the 17 gigawatts consumed last year.

This surge in energy consumption poses a serious threat to the Biden administration’s targets of achieving a carbon-neutral power sector by 2035 and a net-zero US economy by 2050.

Despite the environmental concerns, Schmidt argued that the potential benefits of AI outweigh the risks. He acknowledged that there are ways to mitigate the negative effects of AI on the environment, such as using better batteries and power lines to build data centers.

However, he believes that the rapid growth of AI will eventually outpace these preventive measures. “All of that will be swamped by the enormous needs of this new technology,” Schmidt stated. “Because it’s a universal technology, and because it’s the arrival of an alien intelligence… we may make mistakes with respect to how it’s used, but I can assure you that we’re not going to get there through conservation.”

When pressed by presenters on whether it is possible to meet AI energy needs without disregarding conservation goals, Schmidt expressed his doubts about the feasibility of achieving the current climate targets.

“We’re not going to hit the climate goals anyway because we’re not organized to do it,” he said. Instead, Schmidt suggested that we should “bet on AI solving the problem” rather than “constraining it and having the problem.”

Schmidt’s comments have sparked a debate within the tech industry and among environmentalists. Some argue that the potential benefits of AI, such as its ability to optimize energy systems and develop new clean technologies, justify the increased energy consumption. Others, however, warn that prioritizing AI development over environmental concerns could have disastrous consequences for the planet.

In addition to his advocacy for AI development, Schmidt has also been involved in the defense industry. In 2022, he founded White Stork, a defense company that develops AI-powered drones. During a lecture at Stanford University in April, Schmidt referred to himself as an “arms dealer” due to the company’s involvement in the war in Ukraine. He also mentioned that White Stork would “use AI in complicated, powerful ways for these essentially robotic wars.”

So when anything benefits the elite, climate change doesn't even exist.  So this is all about politics & economic decline not science.

Meta AI Trained on Smart Glass Pictures

Zuck Is Always Watching: Meta Confirms Meta AI Will Be Trained on Smart Glass Pictures

Mark Zuckerberg’s Meta has confirmed that images and videos shared with its AI assistant through the company’s Ray-Ban Meta smart glasses can be used to train the company’s AI models.

TechCrunch reports that Meta has shed light on its data usage practices concerning the Ray-Ban Meta smart glasses. The company has confirmed that any image or video shared with the Meta AI assistant through these glasses may be used to train and improve Meta’s AI models, turning the whole world into Zuckerberg’s dataset.

This revelation comes after TechCrunch inquired about Meta’s stance on using photos and videos captured by users on the Ray-Ban Meta for AI training purposes. Initially, Meta provided a vague response, but later clarified that while images and videos captured on the smart glasses are not used for training by default, once a user submits them to the AI for analysis, they fall under a different set of policies.

The implications of this practice are significant, as Ray-Ban Meta users may unknowingly be providing Meta with a vast collection of personal data, including images of their homes, loved ones, and personal files. This data could potentially be used to develop increasingly powerful AI models. The only way for users to opt out of this data collection is to refrain from using Meta’s multimodal AI features altogether.

Meta’s recent rollout of new AI features for the Ray-Ban Meta glasses has made it easier for users to interact with the AI assistant more naturally, which could lead to an increase in data submissions. The introduction of a live video analysis feature, showcased in a promotional video where a user analyzes their closet to pick an outfit, further emphasizes the potential for data collection.

While Meta’s privacy policy does state that user interactions with AI features can be used to train AI models, the specifics regarding images shared through the Ray-Ban Meta were not initially clear. Meta’s AI terms of service also mention that by sharing images with Meta AI, users agree to have those images analyzed, including facial features, using AI technology.

The use of facial recognition software by Meta has been a contentious issue in the past, with the company recently settling a court case in Texas for $1.4 billion related to its now-defunct “Tag Suggestions” feature on Facebook. It is worth noting that several of Meta AI’s image features are not being released in Texas, possibly due to these legal concerns.

TikTok is Addictive & Harms Children

13 States File Lawsuits Against China’s TikTok Alleging Platform Is Addictive and Harms Children’s Mental Health

13 states and the District of Columbia have filed lawsuits against China’s TikTok, claiming the popular short-form video app is designed to be addictive and is harming the mental health of children and teens.

AP News reports that in a coordinated legal effort, multiple states and the District of Columbia have filed lawsuits against China-owned TikTok, alleging that the social media platform’s design intentionally fosters addiction in young users, leading to detrimental effects on their mental health. The lawsuits, filed in state courts, stem from a national investigation into TikTok launched in March 2022 by a bipartisan coalition of attorneys general from states such as New York, California, Kentucky, and New Jersey.

Central to the lawsuits is TikTok’s algorithm, which powers the app’s main “For You” feed by serving users content tailored to their interests. The complaints also highlight specific design features that allegedly contribute to children’s addiction, including endless scrolling, push notifications with “buzzes,” and face filters that create unattainable appearances.

The District of Columbia’s filing referred to the algorithm as “dopamine-inducing,” claiming it was intentionally created to be addictive and trap young users into excessive use for hours on end. The complaint asserts that TikTok engages in these practices despite knowing the potential for “profound psychological and physiological harms,” such as anxiety, depression, and body dysmorphia.

Washington DC Attorney General Brian Schwalb stated, “It is profiting off the fact that it’s addicting young people to its platform.” Similarly, Cari Fais, acting director of New Jersey’s Division of Consumer Affairs, said, “The ugly truth is that TikTok misrepresents its platform as being safe for young users when, in reality, it is designed to turn a generation of children into social media addicts for TikTok’s profit.”

While TikTok does not allow children under 13 to sign up for its main service and restricts some content for those under 18, several states argue that these restrictions are easily bypassed, enabling children to access the adult version of the platform despite the company’s safety claims.

The lawsuits also target other aspects of TikTok’s business, such as its virtual currency system, TikTok Coins, and the “Gifts” feature on TikTok LIVE. The District of Columbia alleges that TikTok operates as an “unlicensed virtual economy” by allowing users to purchase coins and send gifts to streamers, who can then cash them out for real money. The company reportedly takes a 50 percent commission on these transactions without registering as a money transmitter with the appropriate authorities.

Furthermore, officials claim that teens are frequently exploited for sexually explicit content through TikTok’s LIVE streaming feature, essentially operating as a “virtual strip club” without age restrictions. The company’s cut from these financial transactions allegedly allows it to profit from this exploitation.

Ben Affleck's Unreliable EV

Ben Affleck and Son Stranded on Highway After Electric Truck Dies

Actor Ben Affleck was seen stranded on the Los Angeles Freeway with his son on Saturday after his electric Bronco stopped working.

The Batman star and his twelve-year-old son, Samuel, who he shares with ex-wife Jennifer Garner, where able to make their way to a gas station where they indulged in some snacks while they waited for a tow truck to cart their dead EV back home, according to TMZ.

Samuel’s life has gotten complicated on the parental front as his mom divorced Affleck in 2017 and now his step mom, Jennifer Lopez, is also preparing to divorce Affleck.

However, according to reports, Garner and Lopez have never had any issues with each other and all get along cordially, TMZ notes.

Also, despite the divorce, Affleck has often been seen at events and vacation days with Garner and the three children they had together, so the Justice League star is very much involved in his children’s lives.
...

American VS Chinese EV Industry Controversy

GOP’s Mike Rogers Says Elissa Slotkin’s Support of Electric Vehicle Mandates Is Ceding Auto Market to Communist China

Former Rep. Mike Rogers (R-MI) hammered Rep. Elissa Slotkin (D-MI) for her record of supporting electric vehicle (EV) mandates during Michigan’s U.S. Senate debate Tuesday.

The auto industry has proven to be one of the most critical issues in Michigan for both the presidential and U.S. Senate races and was a hot topic of discussion Tuesday evening.
“My opponent has multiple times supported EV mandates, trying to pick the cars that our companies have to build and the cars that you’re going to have to buy,” Rogers said. “And by the way, that got us 2,400 layoffs at Stellantis, 1,000 layoffs at General Motors.”

Slotkin notably opposed legislation that would block states from being able to limit the number of gas-powered vehicles sold in September 2023, as Breitbart News reported. The legislation passed along bipartisan lines but not with Slotkin’s support.

Moreover, that vote came during the United Auto Workers (UAW) strike. Democrats’ push for electric vehicles was a major factor for striking union members, as it threatened to reduce manufacturing jobs.
Rogers stressed Tuesday that the many Michigan autoworkers he has spoken with “know more than what’s coming out of Washington, DC.”

What is more, in September 2024, Slotkin voted against legislation that would roll back the Biden-Harris administration’s rule to phase out EVs, which polling shows most Michiganders oppose. The rule, announced in March, mandates that most new cars sold in the U.S. by 2032 are EVs or hybrids.

Rogers argued Thursday that hybrids are a better way forward than EVs.

“There’s a better way to get where we want to go, like hybrids. By the way, you don’t have to plug it in, and you get to keep the autoworkers that are here in the state,” he said.

“About a million are reliant on building something, a part or something for a gasoline engine. Why we would take 40% of that labor off the table is beyond me,” he added.

Rogers also emphasized the threat that China poses to the domestic auto markets under a shift to EVs, saying the vast majority of parts processed in EVS go through China.

“Why in God’s green Earth we would cede that auto market to the Communist Party of China is beyond me,” he said.

Rogers contended, “You beat China by selling Americans cars they want to buy.”