Speaking at Bletchley Park, the historic World War II codebreaking center in England, Anne Keast-Butler, director of the UK intelligence agency GCHQ, said Britain and its partners are operating in a “space between peace and war” as adversaries increasingly combine cyberattacks, sabotage, disinformation, and emerging technologies.

Keast-Butler warned that rapidly advancing AI systems are being weaponized in ways that often remain below the threshold of conventional warfare. She said governments, businesses, and citizens must treat cybersecurity with far greater urgency as geopolitical tensions deepen.

Russia Identified as Primary Cyber Threat

The GCHQ chief singled out Russia as a major source of escalating hybrid activity targeting Europe and Britain. According to her remarks, Moscow has increasingly focused on critical infrastructure, democratic institutions, supply chains, and public trust campaigns.

She also warned that Russian operations now extend “from the seabed to cyberspace,” including concerns surrounding undersea telecommunications cables and energy pipelines near British waters.

British intelligence estimates cited in the speech suggested nearly 500,000 Russian soldiers have been killed since the full-scale invasion of Ukraine began in 2022. Those figures could not be independently verified within the available reporting.

Concerns Expand Beyond Russia

Keast-Butler also warned that China’s growing technological capabilities are narrowing the strategic advantage long held by Britain and its allies in areas including artificial intelligence, cyber operations, and space technology.

She said both China and Russia are investing heavily in space-based systems and emerging technologies that could shape future military and intelligence competition.

Previous warnings from British cybersecurity officials have also identified Iran as a growing cyber threat alongside Russia and China.

AI Seen as Both Risk and Opportunity

Despite highlighting the risks posed by AI-driven cyber operations, the GCHQ director said artificial intelligence could also strengthen intelligence work and national cyber defenses when used responsibly.

According to official statements referenced in reporting, GCHQ is developing plans for an AI-powered national “cybershield” intended to improve protection for British infrastructure and businesses against future attacks. Officials indicated the project remains several years from full implementation.

Keast-Butler delivered the address during the first annual GCHQ lecture at Bletchley Park, a symbolic location closely linked to Britain’s wartime codebreaking efforts and the origins of modern computing.

The post UK Spy Chief Warns AI Is Reshaping Cyber Conflict as Russian Threats Intensify appeared first on Journos News - Breaking News, World News, Top Stories, Todays Headlines and Flash Reports.

US and European authorities have launched a powerful crackdown on a notorious hacking tool that has fueled countless cyberattacks across the globe. Known as Lumma, this tool has been linked to ransomware attacks, bank thefts, and other serious digital crimes, affecting hundreds of organizations worldwide.

On Wednesday, the US Justice Department announced it seized the computer systems that hackers used to access Lumma. Meanwhile, Microsoft successfully took control of or shut down 2,300 websites tied to this cybercriminal network, thanks to a court order.

This operation delivers a serious blow to a sprawling hacking enterprise that had been causing chaos, especially over the past two months. Microsoft reported discovering nearly 394,000 Windows computers infected with Lumma across the world.

Authorities say Lumma-powered attacks targeted a wide range of victims — including airlines, universities, hospitals, banks, US state governments, and even Fortune 500 companies. The FBI estimates that in 2023 alone, hackers using Lumma caused credit card fraud losses of $36.5 million.

However, the fight against Lumma hasn’t been straightforward. The lead developer of the software reportedly operates out of Russia, where versions of Lumma are openly sold on Telegram and other Russian forums for prices ranging from $250 to $1,000, according to Microsoft analysts.

US prosecutors have charged numerous Russian hackers in the past decade for cybercrimes against American targets, but only a few have been brought to justice in US courts. Russian officials have also resisted efforts to extradite accused cybercriminals.

When asked if the FBI knows whether Lumma’s developer is based in Russia or if they have contacted Russian authorities, Brett Leatherman, the FBI’s deputy assistant director for cyber operations, said he could not comment.

But Leatherman emphasized that the FBI’s strategy focuses on disrupting the entire hacking ecosystem — not just individual actors — to provide relief to victims.

“This is about cutting off the tools and infrastructure these criminals rely on,” Leatherman said. “Even if we can’t charge every individual, taking down this network helps protect the victims.”

This global crackdown involved a coordinated effort from Europol, American and European tech companies, and a Japanese cybersecurity group. This collaborative approach reflects the growing role tech firms play in tackling cybercrime worldwide.

Leatherman expressed hope that this takedown would also sow distrust within the cybercriminal network, further weakening their operations.

“This is part of a broader investigation into the group behind Lumma,” he said. “We aim to fracture their trust and dismantle their network.”

Source: CNN – US and European authorities crack down on hacking tool used by cybercriminals worldwide

The post US and Europe Shut Down Major Hacking Tool Used by Cybercriminals appeared first on Journos News - Breaking News, World News, Top Stories, Todays Headlines and Flash Reports.

Cybersecurity officials from the FBI and the U.S. Cybersecurity and Infrastructure Security Agency (CISA) have issued a warning about the Medusa ransomware, which has been active since 2021 and has recently impacted hundreds of individuals. citeturn0news18

What is Medusa Ransomware?

Medusa is a ransomware-as-a-service (RaaS) platform that first came to prominence in 2023. The ransomware impacts organizations running Windows, predominantly exploiting vulnerable and unpatched systems and hijacking accounts through initial access brokers. citeturn0search9

How Does Medusa Operate?

The Medusa ransomware gang has attacked over 300 victims in critical infrastructure sectors, according to U.S. cybersecurity agencies. citeturn0search5

Who Has Been Targeted?

Medusa has targeted over 300 victims in various sectors, including medical, education, legal, insurance, technology, and manufacturing. citeturn0news18

Recommended Protective Measures

To mitigate the risk of Medusa ransomware attacks, cybersecurity officials recommend the following actions:

• Update Systems Regularly: Ensure operating systems, software, and firmware are up-to-date to patch vulnerabilities.
• Enable Multifactor Authentication (MFA): Implement MFA for all services, especially webmail, VPNs, and accounts accessing critical systems.
• Use Strong Passwords: Employ long, unique passwords for all accounts and avoid password reuse.
• Educate Employees: Conduct regular training to recognize phishing attempts and suspicious activities.
• Secure Backups: Maintain offline, encrypted backups of critical data to ensure recovery without paying ransoms.

Implementing these measures can significantly reduce the risk of falling victim to Medusa ransomware attacks. Organizations are also urged to report any ransomware incidents to the FBI or CISA to aid in tracking and combating these threats.

Source: Cybersecurity officials warn against potentially costly Medusa ransomware attacks

The post Medusa Ransomware Warning: FBI and CISA Urge Caution appeared first on Journos News - Breaking News, World News, Top Stories, Todays Headlines and Flash Reports.

Elon Musk’s social media platform, X, suffered widespread outages on Monday, which the billionaire attributes to a cyberattack originating from Ukraine.

Musk’s Claim: A Coordinated Cyberattack?

During an interview with Fox Business on Monday afternoon, Musk stated:

“We’re not sure exactly what happened, but there was a massive cyberattack to try to bring down the X system, with IP addresses originating in the Ukraine area.”

However, Musk did not provide further details about the source of the attack or whether he believes it was linked to the Ukrainian government. Experts caution that cyber attackers often spoof IP addresses, making it difficult to determine the true origin of an attack.

Timeline of the Outage

According to outage-tracking site DownDetector:

• The issues began around 6 a.m. ET, with over 20,500 users reporting problems.
• The disruptions temporarily subsided but surged again at 10 a.m. ET, affecting nearly 40,000 users.
• By 2 p.m. ET, outage reports started decreasing, and service gradually resumed.

Users reported that X was inaccessible, and the issue appeared to be global, as DownDetector’s international platforms also showed disruptions. By 4 p.m. ET, Musk confirmed that the platform was functioning again.

Musk Hints at Larger Involvement

In a post on X, Musk suggested that “a large, coordinated group and/or a country is involved.” However, no conclusive evidence has been provided. He also responded “Yes” to a post speculating that the attack was an attempt to silence him and his platform.

Cybersecurity expert Eric Noonan, CEO of CyberSheath, urged caution in drawing immediate conclusions:

“One of the things that should always be taken with a grain of salt is any statements made in the short period immediately after, or even during, an attack.”

Musk’s History of Cyberattack Claims

This isn’t the first time Musk has attributed service disruptions to cyberattacks. In August 2024, his conversation with Donald Trump on X was delayed by 42 minutes, which Musk suggested was due to a likely distributed denial-of-service (DDoS) attack. Similarly, Ron DeSantis’ 2023 presidential campaign announcement on X was plagued by technical issues.

DDoS attacks overwhelm servers with excessive traffic, leading to service failures. However, ransomware attacks have been more prevalent in recent years due to their financial motives, whereas DDoS attacks typically aim to cause disruption, making their sources harder to trace.

Impact of Musk’s Leadership on X’s Stability

Since acquiring X (formerly Twitter) in 2022, Musk has made significant cuts:

• Immediately fired top executives upon taking over.
• Laid off 3,500 employees, roughly 50% of the workforce, within days.
• Reduced staff by 80% in total and enforced a return-to-office policy.

These drastic changes have coincided with frequent platform glitches and outages, raising concerns about the stability of the platform under Musk’s management.

A Tough Day for Musk’s Businesses

Beyond X, Musk faced setbacks in other ventures. Tesla shares plummeted 15% on Monday, erasing all gains since Trump’s November 2024 election. Additionally, Musk’s role as head of Trump’s Department of Government Efficiency (DOGE) has placed him under increased scrutiny.

This story is developing and will be updated as more details emerge.

Source

The post X Goes Down Worldwide – Musk Claims Cyberattack from Ukraine appeared first on Journos News - Breaking News, World News, Top Stories, Todays Headlines and Flash Reports.

In a major cybersecurity breach, Chinese hackers gained access to U.S. telecommunications networks, allowing them to track the locations of millions of individuals and record phone calls. This breach, carried out by the hacking group Salt Typhoon, is now confirmed to have impacted nine major telecommunication providers, according to Anne Neuberger, deputy national security adviser for cyber and emerging technology.

The Scope of the Breach

Salt Typhoon infiltrated U.S. telecom networks, stealing a significant amount of Americans’ cell phone records and eavesdropping on conversations of senior political figures, including President-elect Donald Trump, Vice President-elect JD Vance, and senior Biden administration officials. This massive breach, which began earlier this year, was first detected by investigators, with the FBI announcing the investigation in October. The Wall Street Journal had reported the breaches a month prior.

Neuberger confirmed that the breach had affected nine telecom providers, with one more added to the eight previously reported. These include industry giants such as Lumen Technologies, AT&T, Verizon, and T-Mobile. While the U.S. government issued cybersecurity guidance to telecom companies early on, it’s still unclear if the hackers have been fully evicted from these networks. T-Mobile and Lumen have publicly disputed claims that they haven’t removed the intruders.

Unprecedented Access to Sensitive Data

Once the Chinese hackers infiltrated telecom networks, they gained “broad and full access” to American data. This allowed them to geolocate millions of individuals and listen in on phone calls at will. While it’s difficult to estimate the full extent of the breach, Neuberger noted that many of those affected were located in the Washington, D.C., area. The goal, she explained, was likely to identify individuals of interest, particularly government officials, for follow-up espionage and intelligence gathering.

Though fewer than 100 individuals were specifically targeted for their phone calls and texts, Neuberger acknowledged that the full scope of the breach may never be known. The hackers used sophisticated techniques that made it difficult to track all their activities. As a result, efforts are now focused on holding China accountable and working with telecom companies to improve cybersecurity.

A Call for Stronger Cybersecurity Measures

Neuberger emphasized the need for a defensible infrastructure to protect critical U.S. networks. She argued that just as we wouldn’t leave our homes or offices unlocked, private companies managing critical infrastructure must implement basic cybersecurity practices to reduce vulnerability to large-scale attacks.

As part of this initiative, Neuberger called on the Federal Communications Commission (FCC) to formalize new cybersecurity requirements for telecom companies. She warned that voluntary practices are insufficient to guard against cyber threats from nations like China, Russia, and Iran.

“We need the FCC to implement required minimum cybersecurity practices across telecoms,” she said, stressing that once these steps are in place, the U.S. would have greater confidence in evicting Chinese hackers from critical networks.

Addressing Health Data Vulnerabilities

Neuberger also highlighted concerns about cybersecurity in the healthcare sector. She revealed that the Department of Health and Human Services (HHS) is set to propose a new rule updating the Health Insurance Portability and Accountability Act (HIPAA) to include stronger security requirements for health data. This would mandate healthcare entities to encrypt data, monitor networks for security breaches, and perform regular compliance checks to ensure they meet updated cybersecurity standards.

“We’re seeing a troubling rise in attacks on hospitals and healthcare data,” Neuberger said. “This update, the first in over a decade, will help ensure that healthcare data is better protected, reducing the risks posed by cybercriminals.”

Conclusion

The Salt Typhoon breach underscores the growing threat of state-sponsored cyberattacks and the need for robust cybersecurity measures to safeguard U.S. critical infrastructure. As the government works to address these vulnerabilities, the focus remains on reinforcing telecom networks and ensuring that similar breaches do not happen in the future.

Source

The post Chinese Hackers Breach U.S. Telecom Networks, Target Millions of Americans appeared first on Journos News - Breaking News, World News, Top Stories, Todays Headlines and Flash Reports.

The FBI and CISA (Cybersecurity and Infrastructure Security Agency) are urging Americans to prioritize secure communication methods, particularly encrypted messaging and phone calls, to protect against growing cyber threats. This comes amidst reports of a large-scale cyber espionage campaign targeting U.S. telecommunications networks, attributed to the Chinese hacking group Salt Typhoon.

The Problem with Cross-Platform Messaging

While messaging between Android devices or iPhones is secure, communication between the two platforms lacks end-to-end encryption, leaving it vulnerable to interception. Despite Apple’s recent adoption of RCS (Rich Communication Services), the lack of encryption in cross-platform messaging remains a critical security gap.

The FBI emphasizes the importance of using secure devices and communication methods. A senior official stated that the ongoing investigation into Chinese cyber activities has uncovered a broad campaign to compromise U.S. telecom networks. This campaign reportedly includes the interception of metadata and the private communications of individuals involved in government or political activities.

The Scale of the Threat

Salt Typhoon’s activities have heightened concerns about the vulnerabilities in U.S. critical infrastructure. During a classified briefing for U.S. senators, the group’s alleged deep penetration of American telecommunications networks was discussed, sparking calls for action. A Senate Commerce subcommittee is scheduled to hold a hearing on December 11 to address these security risks and explore best practices.

Recommendations for Secure Communication

In light of these threats, Americans are advised to:

1. Use Encrypted Messaging Apps: Apps like Signal and WhatsApp provide end-to-end encryption, ensuring that even if communications are intercepted, they cannot be decrypted.
2. Enable Timely Updates: Keep your phone’s operating system up-to-date to protect against vulnerabilities.
3. Use Phishing-Resistant Multi-Factor Authentication (MFA): Enhance security for email, social media, and collaboration tools.
4. Avoid Unsecured Messaging: Minimize the use of standard text messaging (SMS/RCS) for sensitive communication.

CISA’s officials recommend encrypted messaging and voice apps for all communications, stressing that encryption is a critical defense against cyberattacks.

The RCS Encryption Gap

RCS, positioned as the successor to SMS, still lacks full end-to-end encryption for cross-platform communication. While Google and GSMA (the mobile industry’s standard-setting body) have promised encryption for RCS, no timeline has been provided. Apple has remained silent on the issue, despite the irony of its growing encryption ecosystem.

Balancing Encryption and Law Enforcement

The FBI’s emphasis on “responsible encryption” reflects a nuanced stance. While advocating for secure communication, the FBI acknowledges the challenges encryption poses to investigations, as some platforms—like Signal and WhatsApp—cannot grant lawful access to encrypted content without compromising a device.

Choosing Secure Alternatives

Until encryption gaps in RCS are resolved, the FBI advises using fully encrypted platforms for cross-platform messaging:

• Signal: Offers robust encryption for messaging, voice, and video calls.
• WhatsApp: A widely used alternative with similar encryption features.
• Facebook Messenger: Now provides end-to-end encryption as an option.

Conclusion

In the face of increasing cyber threats, secure communication is more critical than ever. Americans are encouraged to adopt encrypted apps as their default for messaging and calls. Avoid standard SMS or RCS texting until these platforms implement comprehensive encryption. With secure alternatives readily available, it’s a necessary step to safeguard personal and sensitive information.

Source

The post FBI Alert: Why You Should Stop Using Regular Texts on Your Phone appeared first on Journos News - Breaking News, World News, Top Stories, Todays Headlines and Flash Reports.