Cyber Threats: Cisco Firewalls, AI Ransomware Paper, Facial Scanning, and Weak Passwords

China-Linked Hackers Target Cisco Firewalls

• 🇨🇳 China-affiliated threat group Storm 1849 is exploiting Cisco adaptive security appliance firewalls globally.
• 🎯 Targets include US federal and state agencies, defense contractors, financial institutions, and organizations across Europe, Asia, Africa, and the Middle East.
• ⚠️ Experts advise affected entities to patch, reset configurations, and credentials to fully remove intrusions.

MIT Sloan Retracts AI Ransomware Paper

• 📄 MIT Sloan has retracted a working paper that falsely claimed over 80% of ransomware attacks in 2024 involved artificial intelligence.
• ❌ Independent researchers criticized the report for its lack of evidence and inclusion of defunct malware.
• 💡 The paper's co-author acknowledged an updated version is forthcoming, emphasizing the intent to explore AI's growing role in ransomware.
• 📢 Critics accused MIT Sloan and Safe Security of spreading "cyber slop" or baseless AI claims for profit.

Cybersecurity Training Ineffectiveness and API Exploitation

• 📉 A UC San Diego health study found cybersecurity training had little impact on phishing susceptibility among nearly 20,000 employees.
• 💡 Researchers suggest emphasizing technical defenses like multi-factor authentication and spam filtering over training alone.
• 💻 Microsoft uncovered Sesame Op, a backdoor that hijacks OpenAI's API as a covert command and control channel for infected systems.
• 🔒 This attack is a misuse of legitimate AI capabilities, not an OpenAI vulnerability, and blends malicious traffic with legitimate AI activity.

Apple Patches and Data Breaches

• 🍎 Apple released major security updates for iOS, iPad OS, and Mac OS, addressing over 100 vulnerabilities, including 19 in WebKit.
• 🏥 Ogal Thorp Incorporated, a Florida-based operator of mental health centers, is notifying over 92,000 patients of a data breach exposing personal and medical information.
• ⚠️ Breaches involving behavioral health data carry heightened risks of emotional and social harm.

Government Cyber Initiatives and Cargo Theft

• 🎓 OPM plans a mass deferment for Cyber Corps scholars affected by the government shutdown, granting more time for job placement.
• 🏛️ Lawmakers urge the FTC to probe Flock Safety over alleged weak cybersecurity, including not requiring multi-factor authentication.
• 🚚 Cybercriminals are teaming with organized crime groups to carry out cargo thefts, using malicious tools to redirect legitimate shipments.

ICE Facial Scanning and Weak Passwords

• 🛂 ICE is using a controversial facial recognition app, Mobile Fortify, to determine citizenship and legal residency, with data stored for 15 years.
• ⚖️ DHS policy states individuals cannot refuse to be scanned, raising Fourth Amendment concerns, especially given facial recognition's unreliability with people of color.
• 🔒 A recent jewel heist at the Louvre Museum was facilitated by an embarrassingly weak password: "Louv".
• 🚨 This highlights how opportunistic criminals can exploit chronic underestimation of risk and weak security practices.