![](https://i0.wp.com/media.wired.com/photos/6606f98c12bb914ce2738b5e/191:100/w_1280,c_limit/Security-News-This-Week--Cybercriminals'-Yogurt-Heist-Reveals-A-Rampant-Form-of-Online-Fraud-Security-GettyImages-158315555.jpg?w=640&ssl=1)
The Journal’s story reveals that cargo hijacking fraud stays a significant issue—one which value $500 million in 2023, quadruple the 12 months earlier than. Victims say load board operators must do extra to confirm customers’ identities, and that legislation enforcement and regulators additionally must do extra to handle the thefts.
Multifactor authentication (MFA) has served as a vital safeguard towards hackers for years. In Apple’s case, it could possibly require a person to faucet or click on “enable” on an iPhone or Apple Watch earlier than their password will be modified, an necessary safety towards fraudulent password resets. However KrebsOnSecurity studies this week that some hackers are weaponizing these MFA push alerts, bombarding customers with tons of of requests to power them to permit a password reset—or on the very least, cope with a really annoying disruption of their machine. Even when a person does reject all these password reset alerts, the hackers have, in some circumstances, referred to as up the person and pretended to be a assist particular person—utilizing figuring out info from on-line databases to pretend their legitimacy—to social engineer them into resetting their password. The answer to the issue seems to be “rate-limiting,” a typical safety characteristic that limits the variety of instances somebody can strive a password or try a delicate settings change in a sure time interval. In truth, the hackers could also be exploiting a bug in Apple’s charge limiting to permit their rapid-fire makes an attempt, although the corporate didn’t reply to Krebs’ request for remark.
Israel has lengthy been accused of utilizing Palestinians as subjects of experimental surveillance and security technologies that it then exports to the world. Within the case of the nation’s months-long response to Hamas’ October 7 bloodbath—a response that has killed 31,000 Palestinian civilians and displaced hundreds of thousands extra from their properties—that surveillance now consists of utilizing controversial and arguably unreliable facial recognition instruments among the many Palestinian inhabitants. The New York Occasions studies that Israel’s army intelligence has adopted a facial recognition software constructed by a personal tech agency referred to as Corsight, and has used it in its makes an attempt to determine members of Hamas—significantly these concerned within the October 7 assault—regardless of considerations that the tech was generally defective and produced false positives. In a single case, as an illustration, the Palestinian poet Mosab Abu Toha was pulled out of a crowd by troopers who had someway recognized him by identify, earlier than he was beat, accused of being a member of Hamas, and interrogated, earlier than troopers then instructed him the interrogation had been a “mistake.”
In different dystopian AI information, The Guardian this week reported on a authorities venture in San Jose, California, that used AI-enabled laptop imaginative and prescient know-how to determine encampments and automobiles lived in by unhoused individuals. Within the venture, video recorded from a automotive across the metropolis is given to taking part firms together with Ash Sensors, Sensen.AI, Xloop Digital, Blue Dome Applied sciences, and CityRover, which use it as coaching information to develop a system that may acknowledge tents or automobiles that individuals is perhaps residing in. Whereas the venture has been described as a approach to determine and assist individuals in want, advocates for the unhoused in San Jose say they’re involved the information is more likely to as an alternative be given to the police, and thus as simply one other type of surveillance focusing on probably the most susceptible inhabitants of town.
Radical libertarian Ammon Bundy, a well known determine on the far proper, has been on the run since final 12 months, charged with contempt of courtroom after being ordered to pay $50 million to an Idaho hospital he’d accused of kid trafficking and main a marketing campaign of harassment that focused its employees. Then final month, he posted a provocative video to YouTube titled, “Need to Know The place Ammon Bundy Is?” The open supply detectives at Bellingcat apparently did: They discovered sufficient proof in Bundy’s movies to convincingly reveal his location. Bellingcat was ready to make use of materials like a faculty calendar within the background of 1 shot, a mountain vary in one other, and a freeway check in a 3rd to position Bundy in a sure county in southern Utah. When contacted by Bellingcat, Bundy denied hiding and wrote, just a little confusingly, that “at any time peace officers may discover me if they need.”
![](https://i0.wp.com/media.wired.com/photos/6606f98c12bb914ce2738b5e/master/pass/Security-News-This-Week--Cybercriminals'-Yogurt-Heist-Reveals-A-Rampant-Form-of-Online-Fraud-Security-GettyImages-158315555.jpg?w=640&ssl=1)
Discover more from TechPros: Innovate, Learn & Connect
Subscribe to get the latest posts sent to your email.