All posts tagged: Network security

Anthropic’s AI hacking tech triggers concern in German cyber agency – POLITICO

Anthropic’s AI hacking tech triggers concern in German cyber agency – POLITICO

Anthropic announced on Tuesday evening that it shared its latest model with a newly formed group of 12 cybersecurity firms and 40 other unnamed organizations to scan and stress-test their systems. Experts fear the model, if used for malicious purposes, could lead to massive cybersecurity breaches across the tech supply chain. BSI has not yet directly tested the tool, Plattner said in a written statement, but the agency had conversations with developers that had have given it “meaningful insight” into how the Mythos model works. Cyber officials have dialed up their warnings in recent months that AI tools are getting better at finding cyber flaws. The head of the EU’s cyber agency ENISA in February described the impact of AI on cybersecurity as an oncoming “storm.” According to Plattner, the German cyber chief, Anthropic’s new Mythos model means “we may reach a point in the medium term where unknown, classical software vulnerabilities simply cease to exist.” Source link

Russian spooks hack Wi-Fi routers to spy on West – POLITICO

Russian spooks hack Wi-Fi routers to spy on West – POLITICO

Officials believe the hacking group used the stolen data to conduct cyberattacks, information sabotage and intelligence gathering and focused on military, government and critical infrastructure targets. “The Russians tried their best to cover all vulnerable routers, while redirecting requests only to domains they were interested in. For example, *.gov.ua, or with names corresponding to Microsoft Outlook, military systems,” said a law enforcement official taking part in the joint operation, granted anonymity to disclose more details. Ukraine’s SBU said “the Russian special services paid special attention to information exchanged between employees and servicemen of state bodies, units of the Ukrainian Defense Forces and enterprises of the defense-industrial complex.” Agencies tied the campaign to hacking group Fancy Bear (also known as APT28 and Forest Blizzard), which has previously been identified by Western officials as part of the Russian military intelligence service GRU. Hackers exploited weaknesses in routers since at least 2024, including in popular TP-Link routers. By hacking the routers, they were able to snoop on data exchanges from mobile devices and laptops and bypass encryption protocols, …

Spain is handing ‘crown jewels’ to Huawei, lawmakers warn – POLITICO

Spain is handing ‘crown jewels’ to Huawei, lawmakers warn – POLITICO

The Spanish government has defended the contract it struck for storing wiretaps. Spain’s Interior Ministry said in a statement that the government had awarded a contract to “European companies,” which then bought storage products. “There is no risk to security, technological and legal sovereignty, nor is there any foreign interference or threat to the custody of evidence,” the ministry said. Interior Minister Fernando Grande-Marlaska told the Spanish parliament last September that Telefónica, the country’s telecom champion, operated a state surveillance system called SITEL and that storage “cabinets” had been integrated into that system.   Bloomberg reported last July that Huawei equipment is not used for classified information, with one government official saying the storage “represents a minor part of a watertight, audited, isolated and certified system.” On Monday, Juan Fernando López Aguilar, a prominent member of the European Parliament for the Socialists and Democrats group and a member of Prime Minister Pedro Sanchéz’s party in Spain, defended Madrid’s contract and pushed back on EU moves to intervene on the issue. In terms of “security, espionage, or …

Washington pushes back against EU’s bid for tech autonomy – POLITICO

Washington pushes back against EU’s bid for tech autonomy – POLITICO

Europe and the U.S. “face the same sort of threat and the same threat actors,” said Cairncross, who advises Trump on cybersecurity policy. Rather than weaning off America, wean off China, he said: “There is a clean tech stack. It is primarily American. And then there is a Chinese tech stack.” Claiming that U.S. tech is as risky as Chinese tech is “a giant false equivalency,” according to Cairncross. “Personal data doesn’t get piped to the state in the United States,” he said, referencing concerns that the Beijing government has laws requiring firms to hand over data for Chinese surveillance and espionage purposes. The attempt to quell concerns is notable even if it may not change the direction of travel in Europe. The European Commission wants to boost homegrown technology with a “tech sovereignty” package this spring. It presented a cybersecurity proposal in January that, if approved, could be used to root out suppliers that pose security risks — including from America. “We want to ensure that we don’t have risky dependencies when it comes to …