Network

Vandals Cut Fiber-Optic Lines, Causing Outage For Spectrum Internet Subscribers (arstechnica.com) 49

An anonymous reader quotes a report from Ars Technica: Subscribers in Southern California of Spectrum's Internet service experienced outages over the weekend following what company officials said was an attempted theft of copper lines located in Van Nuys, a suburb located 20 miles from downtown Los Angeles. The people behind the incident thought they were targeting copper lines, the officials wrote in a statement Sunday. Instead, they cut into fiber optic cables. The cuts caused service disruptions for subscribers in Van Nuys and surrounding areas. Spectrum has since restored service and is offering a $25,000 reward for information leading to the apprehension of the people responsible. Spectrum will also credit affected customers one day of service on their next bill.

"Criminal acts of network vandalism have become an issue affecting the entire telecommunications industry, not just Spectrum, largely due to the increase in the price of precious metals," the officials wrote in a statement issued Sunday. "These acts of vandalism are not only a crime, but also affect our customers, local businesses and potentially emergency services. Spectrum's fiber lines do not include any copper." Outage information service Downdetector showed that thousands of subscribers in and around Van Nuys reported outages starting a little before noon on Sunday. Within about 12 hours, the complaint levels returned to normal. Spectrum officials told the Los Angeles Times that personnel had to splice thousands of fiber lines to restore service to affected subscribers.

Transportation

Mitsubishi Launches EV Battery Swap Network in Tokyo - for Both Cars and Trucks (electrek.co) 70

In Tokyo Mitsubishi is deploying "an innovative new battery swap network for electric cars" in a multi-year test program reports the EV news site Electrek.

But it's not just for electric cars. Along with the 14 modular battery swapping stations, Mitsubishi is also deploying "more than 150 battery-swappable commercial electric vehicles" from truck maker Fuso: A truck like the Mitsubishi eCanter typically requires a full night of AC charging to top off its batteries, and at least an hour or two on DC charging in Japan, according to Fuso. This joint pilot by Mitsubishi, Mitsubishi Fuso Trucks, and [EV battery swap specialist] Ample aims to circumvent this issue of forced downtime with its swappable batteries, supporting vehicle uptime by delivering a full charge within minutes.

The move is meant to encourage the transport industry's EV shift while creating a depository of stored energy that can be deployed to the grid in the event of a natural disaster — something Mitsubishi in Japan has been working on for years.

The article's author also adds their own opinion about battery-swapping technology. "When you see how simple it is to add hundreds of miles of driving in just 100 seconds — quicker, in many cases, than pumping a tank of liquid fuel into an ICE-powered car — you might come around, yourself."
Transportation

Smart Tires Will Report On the Health of Roads In New Pilot Program (arstechnica.com) 29

An anonymous reader quotes a report from Ars Technica: Do you remember the Pirelli Cyber Tire? No, it's not an angular nightmare clad in stainless steel. Rather, it's a sensor-equipped tire that can inform the car it's fitted to what's happening, both with the tire itself and the road it's passing over. The technology has slowly been making its way into the real world, starting with rarified stuff like the McLaren Artura. Now, Pirelli is going to put some Cyber Tires to work for everybody, not just supercar drivers, in a new pilot program with the regional government of Apulia in Italy.

The Cyber Tire has a sensor to monitor temperature and pressure, using Bluetooth Low Energy to communicate with the car. The electronics are able to withstand more than 3,500 G as part of life on the road, and a 0.3-oz (10 g) battery keeps everything running for the life of the tire. The idea was to develop a better tire pressure monitoring system, one that could tell the car exactly what kind of tire -- summer, winter, all-season, and so on -- was fitted, and even its state of wear, allowing the car to adapt its settings appropriately. But other applications suggested themselves -- at a recent CES, Pirelli showed how a Cyber Tire could warn other road users about aquaplaning. Then again, we've been waiting more than a decade for vehicle-to-vehicle communication to make a difference in daily driving to no avail.

Apulia's program does not rely on crowdsourcing data from Cyber Tires fitted to private vehicles. Regardless of the privacy implications, the rubber isn't nearly in widespread enough use for there to be a sufficient population of Cyber Tire-shod cars in the region. Instead, Pirelli will fit the tires to a fleet of vehicles supplied by the fleet management and rental company Ayvens. Driving around, the sensors in the tires will be able to infer how rough or irregular the asphalt is, via some clever algorithms. That's only one part of it, however. Pirelli and Apulia are also combining input from the tires with data from a network of road cameras and some technology from the Swedish startup Univrses. As you might expect, this data is combined in the cloud, and dashboards are available to enable end users to explore the data.

The Almighty Buck

Shopify Partners With Coinbase and Stripe In Landmark Stablecoin Deal (yahoo.com) 7

Shopify is launching stablecoin payments for its merchants later this year, starting with USDC in collaboration with Coinbase and Stripe. Fortune reports: The publicly traded tech company lets merchants -- including vintage clothes sellers, cosmetics businesses, and electronics companies -- set up their own online marketplaces. By late June, Shopify will let a select group of users accept payments in USDC, a stablecoin issued by the crypto company Circle, which recently had one of the year's hottest IPOs. "In our own philosophical framework, we are extremely aligned with everything that crypto stands for," Tobias Lutke, the CEO of Shopify and a Coinbase board member, said onstage at a Coinbase conference on Thursday.

Shopify will then gradually expand access to merchants across its network in the U.S. and Europe before opening up stablecoin payments to every merchant who uses its platform. The e-commerce company worked with Coinbase to develop a payments protocol to handle chargebacks, refunds, and other intricacies of retail payments on Coinbase's blockchain, Base. It also collaborated with fintech giant Stripe, one of Shopify's payments processors, to integrate stablecoins into the e-commerce company's existing software stack. "I think other payment processors will look at what Shopify is building and be like, 'Holy crap,'" Jesse Pollak, a Coinbase executive who oversees the crypto exchange's wallet and blockchain divisions, told Fortune.

China

More Than a Dozen VPN Apps Have Undisclosed Ties To China (thehill.com) 71

More than a dozen private browsing apps on Apple and Google's app stores have undisclosed ties to Chinese companies, leaving user data at risk of exposure to the Chinese government, according to a new report from the Tech Transparency Project. From a report: Thirteen virtual private network (VPN) apps on Apple's App Store and 11 apps on Google's Play Store have ties to Chinese companies, the tech watchdog group said in the report released Thursday.

Chinese law requires Chinese companies to share data with the government upon request, creating privacy and security risks for American users. Several of the apps, including two on both app stores and two others on Google Play Store, have ties to Chinese cybersecurity firm Qihoo 360, which has been sanctioned by the U.S. government, according to the report. The Tech Transparency Project previously identified more than 20 VPN apps on Appleâ(TM)s App Store with Chinese ties in an April report. The iPhone maker has since removed three apps linked to Qihoo 360.

The Courts

Deere Must Face FTC's Antitrust Lawsuit Over Repair Costs, US Judge Rules (reuters.com) 21

Agriculture equipment giant Deere must face a lawsuit by the U.S. Federal Trade Commission accusing the company of forcing farmers to use its authorized dealer network and driving up their costs for parts and repairs, a U.S. judge has ruled. From a report: U.S. District Judge Iain Johnston in the federal court in Rockford, Illinois on Monday ruled for now to reject, opens new tab Deere's effort to end the lawsuit, which was filed at the end of Democratic President Joe Biden's administration in January.

The lawsuit alleges Deere is violating federal antitrust law by controlling too tightly where and how farmers can get their equipment repaired, allowing the Illinois-based company to charge artificially higher prices. The FTC was joined in its lawsuit by Michigan, Wisconsin and three other U.S. states.

Network

Cisco Updates Networking Products in Bid To Tap AI-Fueled Demand (bloomberg.com) 8

Cisco is updating its networking and security products to make AI networks speedier and more secure, part of a broader push to capitalize on the AI spending boom. From a report: A new generation of switches -- networking equipment that links computer systems -- will offer a 10-fold improvement in performance, the company said on Tuesday. That will help prevent AI applications from suffering bottlenecks when transferring data, Cisco said. Networking speed has become a bigger issue as data center operators try to manage a flood of AI information -- both in the cloud and within the companies' own facilities. Slowdowns can hinder AI models, Cisco President and Chief Product Officer Jeetu Patel said in an interview. That applies to the development phase -- known as training -- and the operation of the models, a stage called inference. A massive build-out of data centers has made Cisco more relevant, he said. "AI is going to be network-bound, both on training and inference," Patel said. Having computer processors sit idle during training because of slow networks is "just throwing away money."
Python

New Code.org Curriculum Aims To Make Schoolkids Python-Literate and AI-Ready 50

Longtime Slashdot reader theodp writes: The old Code.org curriculum page for middle and high school students has been changed to include a new Python Lab in the tech-backed nonprofit's K-12 offerings. Elsewhere on the site, a Computer Science and AI Foundations curriculum is described that includes units on 'Foundations of AI Programming [in Python]' and 'Insights from Data and AI [aka Data Science].' A more-detailed AI Foundations Syllabus 25-26 document promises a second semester of material is coming soon: "This semester offers an innovative approach to teaching programming by integrating learning with and about artificial intelligence (AI). Using Python as the primary language, students build foundational programming skills while leveraging AI tools to enhance computational thinking and problem-solving. The curriculum also introduces students to the basics of creating AI-powered programs, exploring machine learning, and applying data science principles."

Newly-posted videos on Code.org's YouTube channel appear to be intended to support the new Python-based CS & AI course. "Python is extremely versatile," explains a Walmart data scientist to open the video for Data Science: Using Python. "So, first of all, Python is one of the very few languages that can handle numbers very, very well." A researcher at the Univ. of Washington's Institute for Health Metrics and Evaluation (IHME) adds, "Python is the gold standard and what people expect data scientists to know [...] Key to us being able to handle really big data sets is our use of Python and cluster computing." Adding to the Python love, an IHME data analyst explains, "Python is a great choice for large databases because there's a lot of support for Python libraries."

Code.org is currently recruiting teachers to attend its CS and AI Foundations Professional Learning program this summer, which is being taught by Code.org's national network of university and nonprofit regional partners (teachers who signup have a chance to win $250 in DonorsChoose credits for their classrooms). A flyer for a five-day Michigan Professional Development program to prepare teachers for a pilot of the Code.org CS & A course touts the new curriculum as "an alternative to the AP [Computer Science] pathway" (teachers are offered scholarships covering registration, lodging, meals, and workshop materials).

Interestingly, Code.org's embrace of Python and Data Science comes as the nonprofit changes its mission to 'make CS and AI a core part of K-12 education' and launches a new national campaign with tech leaders to make CS and AI a graduation requirement. Prior to AI changing the education conversation, Code.org in 2021 boasted that it had lined up a consortium of tech giants, politicians, and educators to push its new $15 million Amazon-bankrolled Java AP CS A curriculum into K-12 classrooms. Just three years later, however, Amazon CEO Andy Jassy was boasting to investors that Amazon had turned to AI to automatically do Java coding that he claimed would have otherwise taken human coders 4,500 developer-years to complete.
The Internet

ICANN Waves Hands in Protest at AFRINIC Election Arrangement (theregister.com) 18

The Internet Corporation for Assigned Names and Numbers (ICANN) has called for changes to the roster of officials appointed to oversee the forthcoming election at the African Network Information Centre (AFRINIC), the latest twist in a conflict that stretches back years and has left the African regional internet registry in limbo. From a report: AFRINIC is one of the world's five regional internet registries, the governance bodies that delegate and manage IP addresses and autonomous systems numbers in co-ordination with ICANN. The African organization has essentially been dead in the water, operating without a board or CEO since 2022. The problems started in 2020 when AFRINIC alleged that one of its members -- a company called Cloud Innovation -- had breached its agreement with the registry in ways that could lead AFRINIC to reclaim the company's IP address holdings.

Cloud Innovation countered that AFRINIC acted improperly and launched multiple lawsuits in Mauritius, the Indian Ocean nation the registry calls home. Other parties also sued AFRINIC for similar reasons. The lawsuits left AFRINIC's bank accounts frozen and meant it was unable to convene a board or run elections. In February 2025, the Supreme Court of Mauritius appointed a receiver to secure AFRINIC's assets and reconstitute its board.

United States

Major US Grocery Distributor Warns of Disruption After Cyberattack (techcrunch.com) 10

United Natural Foods (UNFI), a major distributor of groceries to Whole Foods and other retailers, said on Monday that it was hit by a cyberattack, warning of disruptions to its ability to fulfill and distribute customer orders. From a report: UNFI said in a Monday filing with the U.S. Securities and Exchange Commission that it became aware of unauthorized access to its IT systems last Thursday, and began shutting down portions of its network. The filing added that the company has "implemented workarounds for certain operations in order to continue servicing its customers where possible," but noted that the intrusion has caused ongoing disruptions to its business operations.

The Providence, Rhode Island-based company is one of the largest grocery distributors in North America, selling fresh produce, goods, and food products to more than 30,000 stores and supermarket locations across the U.S. and Canada. UNFI also serves as the "primary distributor" to Whole Foods, the Amazon-owned grocery chain. Last year, the two companies extended their long-running contract until May 2032.

United Kingdom

UK Renewable Energy Firms are Being Paid Huge Sums to Not Provide Power (bbc.com) 76

The U.K. electricity grid "was built to deliver power generated by coal and gas plants near the country's major cities and towns," reports the BBC, "and doesn't always have sufficient capacity in the wires that carry electricity around the country to get the new renewable electricity generated way out in the wild seas and rural areas.

"And this has major consequences." The way the system currently works means a company like Ocean Winds gets what are effectively compensation payments if the system can't take the power its wind turbines are generating and it has to turn down its output. It means Ocean winds was paid £72,000 [nearly $100,000 USD] not to generate power from its wind farms in the Moray Firth during a half-hour period on 3 June because the system was overloaded — one of a number of occasions output was restricted that day. At the same time, 44 miles (70km) east of London, the Grain gas-fired power station on the Thames Estuary was paid £43,000 to provide more electricity.

Payments like that happen virtually every day. Seagreen, Scotland's largest wind farm, was paid £65 million last year to restrict its output 71% of the time, according to analysis by Octopus Energy. Balancing the grid in this way has already cost the country more than £500 million this year alone, the company's analysis shows. The total could reach almost £8bn a year by 2030, warns the National Electricity System Operator (NESO), the body in charge of the electricity network. It's pushing up all our energy bills and calling into question the government's promise that net zero would end up delivering cheaper electricity... the potential for renewables to deliver lower costs just isn't coming through to consumers.

Renewables now generate more than half the country's electricity, but because of the limits to how much electricity can be moved around the system, even on windy days some gas generation is almost always needed to top the system up. And because gas tends to be more expensive, it sets the wholesale price.

The UK government is now considering smaller regional markets, so wind companies "would have to sell that spare power to local people instead of into a national market. The theory is prices would fall dramatically — on some days Scottish customers might even get their electricity for free...

"Supporters argue that it would attract energy-intensive businesses such as data centres, chemical companies and other manufacturing industries."
The Almighty Buck

Consumer Group Accuses Shein of Manipulating Shoppers With 'Dark Patterns' (www.cbc.ca) 14

An anonymous reader quotes a report from CBC: A consumer organization filed a complaint with the European Commission on Thursday against online fast-fashion retailer Shein over its use of "dark patterns," which are tactics designed to make people buy more on its app and website. Pop-ups urging customers not to leave the app or risk losing promotions, countdown timers that create time pressure to complete a purchase and the infinite scroll on its app are among the methods Shein uses that could be considered "aggressive commercial practices," wrote BEUC, a pan-European consumer group, in a report.

The BEUC also detailed Shein's use of frequent notifications, with one phone receiving 12 notifications from the app in a single day. "For fast fashion you need to have volume, you need to have mass consumption, and these dark patterns are designed to stimulate mass consumption," said Agustin Reyna, director general of BEUC, in an interview. "For us, to be satisfactory they need to get rid of these dark patterns, but the question is whether they will have enough incentive to do so, knowing the potential impact it can have on the volume of purchases." [...]

The BEUC also targeted the online discount platform Temu, a Shein rival, in a previous complaint. Both platforms have surged in popularity in Europe, partly helped by apps that encourage shoppers to engage with games and stand to win discounts and free products. [...] The BEUC noted that dark patterns are widely used by mass-market clothing retailers and called on the consumer protection network to include other retailers in its investigation. It said 25 of its member organizations in 21 countries, including France, Germany and Spain, joined in the grievance filed with the commission and with the European consumer protection network.
Temu and Shein have their own issues in the United States. Following the recent closure of the de minimis loophole, use of the two Chinese platforms have slowed significantly. "Temu's U.S. daily active users (DAUs) dropped 52% in May versus March, before Trump's tariffs were announced, while those at rival Shein were down 25%," reports CNBC, citing data from market intelligence firm Sensor Tower.

"The declines were also reflected in both platforms' Apple App Store rankings. Temu averaged a rank of 132 in May 2025, down from an average top 3 ranking a year ago, while Shein averaged a rank of 60 last month versus a top 10 ranking the year prior, the data showed."
China

Chinese Hacked US Telecom a Year Before Known Wireless Breaches (bloomberg.com) 11

An anonymous reader quotes a report from Bloomberg: Corporate investigators found evidence that Chinese hackers broke into an American telecommunications company in the summer of 2023, indicating that Chinese attackers penetrated the US communications system earlier than publicly known. Investigators working for the telecommunications firm discovered last year that malware used by Chinese state-backed hacking groups was on the company's systems for seven months starting in the summer of 2023, according to two people familiar with the matter and a document seen by Bloomberg News. The document, an unclassified report sent to Western intelligence agencies, doesn't name the company where the malware was found and the people familiar with the matter declined to identify it.

The 2023 intrusion at an American telecommunications company, which hasn't been previously reported, came about a year before US government officials and cybersecurity companies said they began spotting clues that Chinese hackers had penetrated many of the country's largest phone and wireless firms. The US government has blamed the later breaches on a Chinese state-backed hacking group dubbed Salt Typhoon. It's unclear if the 2023 hack is related to that foreign espionage campaign and, if so, to what degree. Nonetheless, it raises questions about when Chinese intruders established a foothold in the American communications industry.
"We've known for a long time that this infrastructure has been vulnerable and was likely subject to attack," said Marc Rogers, a cybersecurity and telecommunications expert. "What this shows us is that it was attacked, and that going as far back as 2023, the Chinese were compromising our telecom companies." Investigators linked the sophisticated rootkit malware Demodex to China's Ministry of State Security, noting it enabled deep, stealthy access to systems and remained undetected on a U.S. defense-linked company's network until early 2024.

A Chinese government spokesperson denied responsibility for cyberattacks and accused the U.S. and its allies of spreading disinformation and conducting cyber operations against China.
Open Source

The IRS Tax Filing Software TurboTax Is Trying To Kill Just Got Open Sourced (404media.co) 192

An anonymous reader shares a report: The IRS open sourced much of its incredibly popular Direct File software as the future of the free tax filing program is at risk of being killed by Intuit's lobbyists and Donald Trump's megabill. Meanwhile, several top developers who worked on the software have left the government and joined a project to explore the "future of tax filing" in the private sector.

Direct File is a piece of software created by developers at the US Digital Service and 18F, the former of which became DOGE and is now unrecognizable, and the latter of which was killed by DOGE. Direct File has been called a "free, easy, and trustworthy" piece of software that made tax filing "more efficient." About 300,000 people used it last year as part of a limited pilot program, and those who did gave it incredibly positive reviews, according to reporting by Federal News Network.

But because it is free and because it is an example of government working, Direct File and the IRS's Free File program more broadly have been the subject of years of lobbying efforts by financial technology giants like Intuit, which makes TurboTax. DOGE sought to kill Direct File, and currently, there is language in Trump's massive budget reconciliation bill that would kill Direct File. Experts say that "ending [the] Direct File program is a gift to the tax-prep industry that will cost taxpayers time and money."

Biotech

World-First Biocomputing Platform Hits the Market (ieee.org) 20

An anonymous reader quotes a report from IEEE Spectrum: In a development straight out of science fiction, Australian startup Cortical Labs has released what it calls the world's first code-deployable biological computer. The CL1, which debuted in March, fuses human brain cells on a silicon chip to process information via sub-millisecond electrical feedback loops. Designed as a tool for neuroscience and biotech research, the CL1 offers a new way to study how brain cells process and react to stimuli. Unlike conventional silicon-based systems, the hybrid platform uses live human neurons capable of adapting, learning, and responding to external inputs in real time. "On one view, [the CL1] could be regarded as the first commercially available biomimetic computer, the ultimate in neuromorphic computing that uses real neurons," says theoretical neuroscientist Karl Friston of University College London. "However, the real gift of this technology is not to computer science. Rather, it's an enabling technology that allows scientists to perform experiments on a little synthetic brain."

The first 115 units will begin shipping this summer at $35,000 each, or $20,000 when purchased in 30-unit server racks. Cortical Labs also offers a cloud-based "wetware-as-a-service" at $300 weekly per unit, unlocking remote access to its in-house cell cultures. Each CL1 contains 800,000 lab-grown human neurons, reprogrammed from the skin or blood samples of real adult donors. The cells remain viable for up to six months, fed by a life-support system that supplies nutrients, controls temperature, filters waste, and maintains fluid balance. Meanwhile, the neurons are firing and interpreting signals, adapting from each interaction.

The CL1's compact energy and hardware footprint could make it attractive for extended experiments. A rack of CL1 units consumes 850-1,000 watts, notably lower than the tens of kilowatts required by a data center setup running AI workloads. "Brain cells generate small electrical pulses to communicate to a broader network," says Cortical Labs Chief Scientific Officer Brett Kagan. "We can do something similar by inputting small electrical pulses representing bits of information, and then reading their responses. The CL1 does this in real time using simple code abstracted through multiple interacting layers of firmware and hardware. Sub-millisecond loops read information, act on it, and write new information into the cell culture."
The company sees CL1 as foundational for testing neuropsychiatric treatments, leveraging living cells to explore genetic and functional differences. "It allows people to study the effects of stimulation, drugs and synthetic lesions on how neuronal circuits learn and respond in a closed-loop setup, when the neuronal network is in reciprocal exchange with some simulated world," says theoretical neuroscientist Karl Friston of University College London. "In short, experimentalists now have at hand a little 'brain in a vat,' something philosophers have been dreaming about for decades."
Medicine

Younger Generations Less Likely To Have Dementia, Study Suggests 78

An anonymous reader quotes a report from The Guardian: People born more recently are less likely to have dementia at any given age than earlier generations, research suggests, with the trend more pronounced in women. According to the World Health Organization, in 2021 there were 57 million people worldwide living with dementia, with women disproportionately affected. However, while the risk of dementia increases with age, experts have long stressed it is not not an inevitability of getting older. "Younger generations are less likely to develop dementia at the same age as their parents or grandparents, and that's a hopeful sign," said Dr Sabrina Lenzen, a co-author of the study from the University of Queensland's Centre for the Business and Economics of Health. But she added: "The overall burden of dementia will still grow as populations age, and significant inequalities remain -- especially by gender, education and geography."

Writing in the journal Jama Network Open, researchers in Australia report how they analyzed data from 62,437 people aged 70 and over, collected from three long-running surveys covering the US, England and parts of Europe. The team used an algorithm that took into account participants' responses to a host of different metrics, from the difficulties they had with everyday activities to their scores on cognitive tests, to determine whether they were likely to have dementia. They then split the participants into eight different cohorts, representing different generations. Participants were also split into six age groups. As expected, the researchers found the prevalence of dementia increased by age among all birth cohorts, and in each of the three regions: UK, US and Europe. However, at a given age, people in more recent generations were less likely to have dementia compared with those in earlier generations.

"For example, in the US, among people aged 81 to 85, 25.1% of those born between 1890-1913 had dementia, compared to 15.5% of those born between 1939-1943," said Lenzen, adding similar trends were seen in Europe and England, although less pronounced in the latter. The team said the trend was more pronounced in women, especially in Europe and England, noting that one reason may be increased access to education for women in the mid-20th century. However, taking into account changes in GDP, a metric that reflects broader economic shifts, did not substantially alter the findings.
A number of factors could be contributing to the decline. "This is likely due to interventions such as compulsory education, smoking bans, and improvements in medical treatments for conditions such as heart disease, diabetes, and hearing loss, which are associated with dementia risk," said Prof Tara Spires-Jones, the director of the Centre for Discovery Brain Sciences at the University of Edinburgh.
EU

Apple Challenges EU Order To Open iOS To Rivals (reuters.com) 85

Apple has filed an appeal with the European Union's General Court in Luxembourg challenging the bloc's order requiring greater iOS interoperability with rival companies' products under the Digital Markets Act. The EU executive in March directed Apple to make its mobile operating system more compatible with competitors' apps, headphones, and virtual reality headsets by granting developers and device makers access to system components typically reserved for Apple's own products.

Apple contends the requirements threaten its seamless user experience while creating security risks, noting that companies have already requested access to sensitive user data including notification content and complete WiFi network histories. The company faces potential fines of up to 10% of its worldwide annual revenue if found in violation of the DMA's interoperability rules designed to curb Big Tech market power.
Government

Russian Nuclear Site Blueprints Exposed In Public Procurement Database (cybernews.com) 23

Journalists from Der Spiegel and Danwatch were able to use proxy servers in Belarus, Kazakhstan, and Russia to circumvent network restrictions and access documents about Russia's nuclear weapon sites, reports Cybernews.com.

"Data, including building plans, diagrams, equipment, and other schematics, is accessible to anyone in the public procurement database." Journalists from Danwatch and Der Spiegel scraped and analyzed over two million documents from the public procurement database, which exposed Russian nuclear facilities, including their layout, in great detail. The investigation unveils that European companies participate in modernizing them. According to the exclusive Der Spiegel report, Russian procurement documents expose some of the world's most secret construction sites. "It even contains floor plans and infrastructure details for nuclear weapons silos," the report reads.
Some details from the Amsterdam-based Moscow Times: Among the leaked materials are construction plans, security system diagrams and details of wall signage inside the facilities, with messages like "Stop! Turn around! Forbidden zone!," "The Military Oath" and "Rules for shoe care." Details extend to power grids, IT systems, alarm configurations, sensor placements and reinforced structures designed to withstand external threats...

"Material like this is the ultimate intelligence," said Philip Ingram, a former colonel in the British Army's intelligence corps. "If you can understand how the electricity is conducted or where the water comes from, and you can see how the different things are connected in the systems, then you can identify strengths and weaknesses and find a weak point to attack."

Apparently Russian defense officials were making public procurement notices for their construction projects — and then attaching sensitive documents to those public notices...
Crime

US Sanctions Cloud Provider 'Funnull' As Top Source of 'Pig Butchering' Scams (krebsonsecurity.com) 8

An anonymous reader quotes a report from KrebsOnSecurity: The U.S. government today imposed economic sanctions on Funnull Technology Inc., a Philippines-based company that provides computer infrastructure for hundreds of thousands of websites involved in virtual currency investment scams known as "pig butchering." In January 2025, KrebsOnSecurity detailed how Funnull was being used as a content delivery network that catered to cybercriminals seeking to route their traffic through U.S.-based cloud providers. "Americans lose billions of dollars annually to these cyber scams, with revenues generated from these crimes rising to record levels in 2024," reads a statement from the U.S. Department of the Treasury, which sanctioned Funnull and its 40-year-old Chinese administrator Liu Lizhi. "Funnull has directly facilitated several of these schemes, resulting in over $200 million in U.S. victim-reported losses."

The Treasury Department said Funnull's operations are linked to the majority of virtual currency investment scam websites reported to the FBI. The agency said Funnull directly facilitated pig butchering and other schemes that resulted in more than $200 million in financial losses by Americans. Pig butchering is a rampant form of fraud wherein people are lured by flirtatious strangers online into investing in fraudulent cryptocurrency trading platforms. Victims are coached to invest more and more money into what appears to be an extremely profitable trading platform, only to find their money is gone when they wish to cash out. The scammers often insist that investors pay additional "taxes" on their crypto "earnings" before they can see their invested funds again (spoiler: they never do), and a shocking number of people have lost six figures or more through these pig butchering scams.

KrebsOnSecurity's January story on Funnull was based on research from the security firm Silent Push, which discovered in October 2024 that a vast number of domains hosted via Funnull were promoting gambling sites that bore the logo of the Suncity Group, a Chinese entity named in a 2024 UN report (PDF) for laundering millions of dollars for the North Korean state-sponsored hacking group Lazarus. Silent Push found Funnull was a criminal content delivery network (CDN) that carried a great deal of traffic tied to scam websites, funneling the traffic through a dizzying chain of auto-generated domain names and U.S.-based cloud providers before redirecting to malicious or phishous websites. The FBI has released a technical writeup (PDF) of the infrastructure used to manage the malicious Funnull domains between October 2023 and April 2025.

Security

ASUS Router Backdoors Affect 9,000 Devices, Persists After Firmware Updates 23

An anonymous reader quotes a report from SC Media: Thousands of ASUS routers have been compromised with malware-free backdoors in an ongoing campaign to potentially build a future botnet, GreyNoise reported Wednesday. The threat actors abuse security vulnerabilities and legitimate router features to establish persistent access without the use of malware, and these backdoors survive both reboots and firmware updates, making them difficult to remove.

The attacks, which researchers suspect are conducted by highly sophisticated threat actors, were first detected by GreyNoise's AI-powered Sift tool in mid-March and disclosed Thursday after coordination with government officials and industry partners. Sekoia.io also reported the compromise of thousands of ASUS routers in their investigation of a broader campaign, dubbed ViciousTrap, in which edge devices from other brands were also compromised to create a honeypot network. Sekoia.io found that the ASUS routers were not used to create honeypots, and that the threat actors gained SSH access using the same port, TCP/53282, identified by GreyNoise in their report.
The backdoor campaign affects multiple ASUS router models, including the RT-AC3200, RT-AC3100, GT-AC2900, and Lyra Mini.

GreyNoise advises users to perform a full factory reset and manually reconfigure any potentially compromised device. To identify a breach, users should check for SSH access on TCP port 53282 and inspect the authorized_keys file for unauthorized entries.

Slashdot Top Deals