Flock’s Plans for Rideshare Dashcams and Coaching Police, Revealed

404 Media besides reported this week that a erstwhile Flock authorities affairs manager, Jonathan Paz, said helium discontinue successful July 2025 and turned down equity and severance aft learning the institution had fixed ICE and Customs and Border Protection nonstop camera entree done a aviator programme portion telling unit internally it did not enactment with ICE. Separately, 404 obtained a coaching usher the institution gives constabulary connected however to talk to metropolis councils, which tells officers to little assembly members and metropolis managers privately earlier nationalist meetings, to travel with a scripted presentation, and to displacement the statement from outgo to "the outgo of unresolved crime."

Water inferior hacks present reported successful astatine slightest a twelve states

Cyberattacks connected US h2o systems person deed utilities successful astatine slightest 12 states, according to CBS News, up from the 7 the FBI acknowledged a week earlier. Sources named Michigan, Minnesota, Georgia, New Jersey, and South Dakota. Federal investigators inactive fishy Iran-backed hackers but person made nary ceremonial attribution.

The Clayton County Water Authority successful suburban Atlanta, which serves 300,000 people, said an intrusion past period dropped h2o unit and forced a boil-water advisory, though work came backmost wrong hours. Some utilities mislaid distant power of their systems wholly and had operators moving instrumentality by hand. In respective cases the hackers reached pumps, valves, and unit controls directly. Officials accidental drinking h2o has remained safe.

The July 30 alert from the FBI, EPA, and CISA told utilities to disconnect their concern controllers from the net and tighten passwords and firewalls. Those controllers—small computers that tally carnal instrumentality similar pumps and valves—are the aforesaid instrumentality the CyberAv3ngers deed successful 2023, a radical tied to Iran's Revolutionary Guard that got successful done devices near connected factory-default passwords.

Hacker got into email astatine a US missile-parts supplier

IEH Corporation, a Brooklyn shaper that supplies electrical connectors to defence and aerospace programs, told securities regulators connected Thursday that an intruder broke into a institution email account, according to The Register. The disclosure came successful an 8-K—the signifier nationalist companies record with the Securities and Exchange Commission to study important events.

An worker received a connection from idiosyncratic posing arsenic a prospective concern interaction with what looked similar a morganatic Microsoft file-sharing link. The leafage down it was fake and captured the employee’s login, handing the attacker entree to the company’s Microsoft 365 environment. IEH said the intruder could scope email, attachments, lawsuit correspondence, acquisition orders, engineering documentation, and perchance method accusation covered by US export controls—material that cannot beryllium legally shared with overseas nationals without a license.

IEH said it recovered the intrusion connected August 4 and has not said however agelong the attacker was inside. It reported nary grounds that information was copied out, though Microsoft 365 logging does not reliably seizure theft, and cipher has attributed the attack. IEH connectors are utilized successful the Patriot air-defense system, AMRAAM and THAAD missiles, and the Mark 48 torpedo.

Belarusian ransomware relation gets 16 years

Maksim Silnikau, a 40-year-old Belarusian nationalist who built and ran the Ransom Cartel ransomware operation, was sentenced to 16 years successful prison, Cyberscoop reports. Prosecutors accidental the radical attacked astatine slightest 18 companies betwixt 2021 and 2023.

Silnikau had been progressive connected Russian-speaking cybercrime forums since 2005 and started recruiting for Ransom Cartel successful 2021, according to the US Justice Department. He allegedly supplied the radical who carried retired the attacks with stolen passwords and the bundle to fastener victims’ computers, and built a power sheet for tracking break-ins, talking to victims, and haggling implicit payments. Targets included instrumentality firms, schools, a tiny aesculapian exertion startup, and multinational corporations successful California, New York, and Nebraska. Some of the targets were knocked offline for months. According to DOJ, the radical tried to extract astatine slightest $5.2 million.