Encryption

Austrian Government Agrees On Plan To Allow Monitoring of Secure Messaging (yahoo.com) 30

Austria's coalition government has agreed on a plan to enable police to monitor suspects' secure messaging in order to thwart militant attacks, ending what security officials have said is a rare and dangerous blind spot for a European Union country. From a report: Because Austria lacks a legal framework for monitoring messaging services like WhatsApp, its main domestic intelligence service and police rely on allies with far more sweeping powers like Britain and the United States alerting them to chatter about planned attacks and spying.

That kind of tip-off led to police unravelling what they say was a planned attack on a Taylor Swift concert in Vienna, which prompted the cancellation of all three of her planned shows there in August of last year. "The aim is to make people planning terrorist attacks in Austria feel less secure - and increase everyone else's sense of security," Joerg Leichtfried of the Social Democrats, the junior minister in charge of overseeing the Directorate for State Security and Intelligence (DSN), told a news conference.

Government

California AI Policy Report Warns of 'Irreversible Harms' 52

An anonymous reader quotes a report from Time Magazine: While AI could offer transformative benefits, without proper safeguards it could facilitate nuclear and biological threats and cause "potentially irreversible harms," a new report commissioned by California Governor Gavin Newsom has warned. "The opportunity to establish effective AI governance frameworks may not remain open indefinitely," says the report, which was published on June 17 (PDF). Citing new evidence that AI can help users source nuclear-grade uranium and is on the cusp of letting novices create biological threats, it notes that the cost for inaction at this current moment could be "extremely high." [...]

"Foundation model capabilities have rapidly advanced since Governor Newsom vetoed SB 1047 last September," the report states. The industry has shifted from large language AI models that merely predict the next word in a stream of text toward systems trained to solve complex problems and that benefit from "inference scaling," which allows them more time to process information. These advances could accelerate scientific research, but also potentially amplify national security risks by making it easier for bad actors to conduct cyberattacks or acquire chemical and biological weapons. The report points to Anthropic's Claude 4 models, released just last month, which the company said might be capable of helping would-be terrorists create bioweapons or engineer a pandemic. Similarly, OpenAI's o3 model reportedly outperformed 94% of virologists on a key evaluation. In recent months, new evidence has emerged showing AI's ability to strategically lie, appearing aligned with its creators' goals during training but displaying other objectives once deployed, and exploit loopholes to achieve its goals, the report says. While "currently benign, these developments represent concrete empirical evidence for behaviors that could present significant challenges to measuring loss of control risks and possibly foreshadow future harm," the report says.

While Republicans have proposed a 10 year ban on all state AI regulation over concerns that a fragmented policy environment could hamper national competitiveness, the report argues that targeted regulation in California could actually "reduce compliance burdens on developers and avoid a patchwork approach" by providing a blueprint for other states, while keeping the public safer. It stops short of advocating for any specific policy, instead outlining the key principles the working group believes California should adopt when crafting future legislation. It "steers clear" of some of the more divisive provisions of SB 1047, like the requirement for a "kill switch" or shutdown mechanism to quickly halt certain AI systems in case of potential harm, says Scott Singer, a visiting scholar in the Technology and International Affairs Program at the Carnegie Endowment for International Peace, and a lead-writer of the report.

Instead, the approach centers around enhancing transparency, for example through legally protecting whistleblowers and establishing incident reporting systems, so that lawmakers and the public have better visibility into AI's progress. The goal is to "reap the benefits of innovation. Let's not set artificial barriers, but at the same time, as we go, let's think about what we're learning about how it is that the technology is behaving," says Cuellar, who co-led the report. The report emphasizes this visibility is crucial not only for public-facing AI applications, but for understanding how systems are tested and deployed inside AI companies, where concerning behaviors might first emerge. "The underlying approach here is one of 'trust but verify,'" Singer says, a concept borrowed from Cold War-era arms control treaties that would involve designing mechanisms to independently check compliance. That's a departure from existing efforts, which hinge on voluntary cooperation from companies, such as the deal between OpenAI and Center for AI Standards and Innovation (formerly the U.S. AI Safety Institute) to conduct pre-deployment tests. It's an approach that acknowledges the "substantial expertise inside industry," Singer says, but "also underscores the importance of methods of independently verifying safety claims."
The Internet

Iran Is Going Offline To Prevent Purported Israeli Cyberattacks 147

In response to escalating tensions with Israel, Iran has begun throttling internet access, with plans to disconnect from the global internet entirely to prevent Israeli cyberattacks. The Iranian government also urges citizens to delete WhatsApp -- one of the country's most popular messaging platforms -- claiming without evidence that the Meta-owned app has been weaponed by Israel to spy on its users. (WhatsApp vehemently denied those claims in a statement to the Associated Press.) Telegram is also said to be blocked as well. The Verge reports: The announcements come amidst the escalating war between Iran and Israel, which broke out after Israel attacked the country on June 12th, and a rise in reported internet outages. Civilians have claimed that they've been unable to access basic but critical telecommunications services, such as messaging apps, maps, and sometimes the internet itself. Cloudflare reported that two major Iranian cellular carriers effectively went offline on Tuesday, and The New York Times reports that even VPNs, which Iranians frequently use to access banned sites like Facebook and Instagram, have become increasingly harder to access. [...]

Israel's role in the cyber outages has not been officially confirmed, but independent analysts at NetBlocks noticed a significant reduction of internet traffic originating from Iran on Tuesday, starting at 5:30 PM local time. According to Tasnim, a news network affiliated with the Iranian Revolutionary Guards, Iranians will still have access to the country's state-operated national internet service, though two Iranian officials told the Times that the internal bandwidth could be reduced by up to 80 percent.
Government

Trump Extends TikTok Deadline For Third Time (cnbc.com) 69

President Trump will extend the deadline for ByteDance to divest TikTok's U.S. operations by another 90 days, marking the third extension since taking office. The extension aims to prevent a TikTok ban while negotiations with potential buyers like Oracle and Project Liberty continue. CNBC reports: "President Trump will sign an additional Executive Order this week to keep TikTok up and running," White House Press Secretary Karoline Leavitt said in a statement. "As he has said many times, President Trump does not want TikTok to go dark. This extension will last 90 days, which the Administration will spend working to ensure this deal is closed so that the American people can continue to use TikTok with the assurance that their data is safe and secure."

ByteDance was nearing the deadline of June 19, to sell TikTok's U.S. operations in order to satisfy a national security law that the Supreme Court upheld just a few days before Trump's second presidential inauguration. Under the law, app store operators like Apple and Google and internet service providers would be penalized for supporting TikTok. ByteDance originally faced a Jan. 19 deadline to comply with the national security law, but Trump signed an executive order when he first took office that pushed the deadline to April 5. Trump extended the deadline for the second time a day before that April mark. Trump told NBC News in May that he would extend the TikTok deadline again if no deal was reached, and he reiterated his plans on Thursday.

China

Why China is Giving Away Its Tech For Free 39

An anonymous reader shares a report: [...] the rise in China of open technology, which relies on transparency and decentralisation, is awkward for an authoritarian state. If the party's patience with open-source fades, and it decides to exert control, that could hinder both the course of innovation at home, and developers' ability to export their technology abroad.

China's open-source movement first gained traction in the mid-2010s. Richard Lin, co-founder of Kaiyuanshe, a local open-source advocacy group, recalls that most of the early adopters were developers who simply wanted free software. That changed when they realised that contributing to open-source projects could improve their job prospects. Big firms soon followed, with companies like Huawei backing open-source work to attract talent and cut costs by sharing technology.

Momentum gathered in 2019 when Huawei was, in effect, barred by America from using Android. That gave new urgency to efforts to cut reliance on Western technology. Open-source offered a faster way for Chinese tech firms to take existing code and build their own programs with help from the country's vast community of developers. In 2020 Huawei launched OpenHarmony, a family of open-source operating systems for smartphones and other devices. It also joined others, including Alibaba, Baidu and Tencent, to establish the OpenAtom Foundation, a body dedicated to open-source development. China quickly became not just a big contributor to open-source programs, but also an early adopter of software. JD.com, an e-commerce firm, was among the first to deploy Kubernetes.

AI has lately given China's open-source movement a further boost. Chinese companies, and the government, see open models as the quickest way to narrow the gap with America. DeepSeek's models have generated the most interest, but Qwen, developed by Alibaba, is also highly rated, and Baidu has said it will soon open up the model behind its Ernie chatbot.
Power

Spain's Government Blames Huge Blackout On Grid Regulator and Private Firms (bbc.com) 60

An anonymous reader quotes a report from the BBC: The Spanish government has said that the national grid operator and private power generation companies were to blame for an energy blackout that caused widespread chaos in Spain and Portugal earlier this year. Shortly after midday on April 28, both countries were disconnected from the European electricity grid for several hours. Businesses, schools, universities, government buildings and transport hubs were all left without power and traffic light outages caused gridlocks. While schoolchildren, students and workers were sent home for the day, many other people were stuck in lifts or stranded on trains in isolated rural areas.

In the immediate aftermath, the left-wing coalition government did not provide an explanation, instead calling for patience as it investigated. Nearly two months after the unprecedented outage, the minister for ecological transition, Sara Aagesen, has presented a report on its causes. She said the partly state-owned grid operator, Red Electrica, had miscalculated the power capacity needs for that day, explaining that the "system did not have enough dynamic voltage capacity." The regulator should have switched on another thermal plant, she said, but "they made their calculations and decided that it was not necessary."

Aagesen also blamed private generators for failing to regulate the grid's voltage shortly before the blackout happened. "Generation firms which were supposed to control voltage and which, in addition, were paid to do just that did not absorb all the voltage they were supposed to when tension was high," she said, without naming any of the companies responsible. The day after the outage, Prime Minister Pedro Sanchez suggested that private electricity companies might have played a role, saying that his government would demand "all the relevant accountability" from them. However, the new report on the blackout also raises questions about the role of Beatriz Corredor, president of Red Electrica and a former Socialist minister, who had previously insisted that the grid regulator had not been at fault.
Aagesen said there was no evidence of a cyberattack behind the blackout. The government also maintained that Spain's renewable energy output was not to blame.
Businesses

The US Navy Is More Aggressively Telling Startups, 'We Want You' (techcrunch.com) 20

An anonymous reader quotes a report from TechCrunch: While Silicon Valley executives like those from Palantir, Meta, and OpenAI are grabbing headlines for trading their Brunello Cucinelli vests for Army Reserve uniforms, a quieter transformation has been underway in the U.S. Navy. How so? Well, the Navy's chief technology officer, Justin Fanelli, says he has spent the last two and a half years cutting through the red tape and shrinking the protracted procurement cycles that once made working with the military a nightmare for startups. The efforts represent a less visible but potentially more meaningful remaking that aims to see the government move faster and be smarter about where it's committing dollars.

"We're more open for business and partnerships than we've ever been before," Fanelli told TechCrunch in a recent episode of StrictlyVC Download. "We're humble and listening more than before, and we recognize that if an organization shows us how we can do business differently, we want that to be a partnership." Right now, many of these partnerships are being facilitated through what Fanelli calls the Navy's innovation adoption kit, a series of frameworks and tools that aim to bridge the so-called Valley of Death, where promising tech dies on its path from prototype to production. "Your granddaddy's government had a spaghetti chart for how to get in," Fanelli said. "Now it's a funnel, and we are saying, if you can show that you have outsized outcomes, then we want to designate you as an enterprise service."

In one recent case, the Navy went from a Request for Proposal (RFP) to pilot deployment in under six months with Via, an eight-year-old, Somerville, Massachusetts-based cybersecurity startup that helps big organizations protect sensitive data and digital identities through, in part, decentralization, meaning the data isn't stored in one central spot that can be hacked. (Another of Via's clients is the U.S. Air Force.) The Navy's new approach operates on what Fanelli calls a "horizon" model, borrowed and adapted from McKinsey's innovation framework. Companies move through three phases: evaluation, structured piloting, and scaling to enterprise services. The key difference from traditional government contracting, Fanelli says, is that the Navy now leads with problems rather than predetermined solutions. "Instead of specifying, 'Hey, we'd like this problem solved in a way that we've always had it,' we just say, 'We have a problem, who wants to solve this, and how will you solve it?'" Fanelli said.

Japan

Japan Builds Near $700 Million Fund To Lure Foreign Academic Talent (theregister.com) 52

An anonymous reader shares a report: Japan is the latest nation hoping to tempt disgruntled US researchers alarmed by the Trump administration's hostile attitude to academia to relocate to the Land of the Rising Sun. The Japanese government aims to create an elite research environment, and has detailed a $693 million package to attract researchers from abroad, including those from America who may have seen their budgets slashed or who fear a clampdown on their academic freedom.
Earth

Could This City Be the Model for How to Tackle the Both the Climate and Housing Crisis? (npr.org) 138

NPR looks at the "high-quality, climate-friendly apartments" in Vienna, asking if it's a model for addressing both climate change and the housing crisis.

About half the city's 2 million people live in the widespread (and government-supported) apartments, with solar panels on top and very thick, insulated walls that reduce the need for heating and cooling. (One resident tells NPR they don't even need an air conditioner because "It's not cold in winter times. It's not hot in summer times.") Vienna council member Nina Abrahamczik, who heads the climate and environment committee, says as the city transitions all of its buildings off planet-heating fossil fuels, they're starting with the roughly 420,000 housing units they already own or subsidize.... As Vienna makes an aggressive push to completely move away from climate-polluting natural gas by 2040, it's starting with much of this social housing, says Jürgen Czernohorszky, executive city councilor responsible for climate and environment. City-owned buildings are now switching from gas to massive electric heat pumps, and to geothermal, which involves probing into the ground to heat homes. Another massive geothermal project that drills even deeper into the earth to heat homes is also underway.

The city is also powering housing with solar energy. As of a year and a half ago, Vienna mandates all new buildings and building extensions to have rooftop solar. And Vienna's older apartment buildings are getting climate retrofits, says Veronika Iwanowski, spokesperson for Vienna's municipal housing company, Wiener Wohnen. That includes new insulation, doors and windows to prevent the city's wind from getting in the cracks. The increase in energy efficiency and switching from gas to renewables doesn't just have climate benefits from cutting fossil fuel use. It also means housing residents are paying less on electric bills...

With city-subsidized housing, housing developers can compete to get land and low-interest loans from the city. Officials say those competitions are a critical lever for climate action. "As we can control the contents of the competitions, we try to make them fit to the main goals of the city," says Kurt Hofstetter, city planner for Vienna, "which is of course also ecological...." Now the housing judges give out points for things like increased energy efficiency, green roofs and sustainable building materials... Now the climate innovations in subsidized housing are inspiring the private market as well, Hofstetter says...

The article notes that most of the city's funding is provided in the form of low-interest loans, according to a researcher at the Austrian Federation of Limited-Profit Housing Associations. (And the average social housing rents are about $700 for a large one-bedroom apartment, says Gerald Kössl, researcher at the Austrian Federation of Limited-Profit Housing Associations.)
United States

New York State Begins Asking Employers to Offically Identify Layoffs Caused by AI (entrepreneur.com) 32

The state of New York is "asking companies to disclose whether AI is the reason for their layoffs," reports Entrepreneur: The move applies to New York State's existing Worker Adjustment and Retraining Notification (WARN) system and took effect in March, Bloomberg reported. New York is the first state in the U.S. to add the disclosure, which could help regulators understand AI's effects on the labor market.

The change takes the form of a checkbox added to a form employers fill out at least 90 days before a mass layoff or plant closure through the WARN system. Companies have to select whether "technological innovation or automation" is a reason for job cuts. If they choose that option, they are directed to a second menu where they are asked to name the specific technology responsible for layoffs, like AI or robots.

AI

Site for 'Accelerating' AI Use Across the US Government Accidentally Leaked on GitHub (404media.co) 18

America's federal government is building a website and API called ai.gov to "accelerate government innovation with AI", according to an early version spotted by 404 Media that was posted on GitHub by the U.S. government's General Services Administration.

That site "is supposed to launch on July 4," according to 404 Media's report, "and will include an analytics feature that shows how much a specific government team is using AI..." AI.gov appears to be an early step toward pushing AI tools into agencies across the government, code published on Github shows....

The early version of the page suggests that its API will integrate with OpenAI, Google, and Anthropic products. But code for the API shows they are also working on integrating with Amazon Web Services' Bedrock and Meta's LLaMA. The page suggests it will also have an AI-powered chatbot, though it doesn't explain what it will do... Currently, AI.gov redirects to whitehouse.gov. The demo website is linked to from Github (archive here) and is hosted on cloud.gov on what appears to be a staging environment. The text on the page does not show up on other websites, suggesting that it is not generic placeholder text...

In February, 404 Media obtained leaked audio from a meeting in which [the director of the GSA's Technology Transformation Services] told his team they would be creating "AI coding agents" that would write software across the entire government, and said he wanted to use AI to analyze government contracts.

Education

'Ghost' Students are Enrolling in US Colleges Just to Steal Financial Aid (apnews.com) 110

Last week America's financial aid program announced that "the rate of fraud through stolen identities has reached a level that imperils the federal student aid programs."

Or, as the Associated Press suggests: Online classes + AI = financial aid fraud. "In some cases, professors discover almost no one in their class is real..." Fake college enrollments have been surging as crime rings deploy "ghost students" — chatbots that join online classrooms and stay just long enough to collect a financial aid check... Students get locked out of the classes they need to graduate as bots push courses over their enrollment limits.

And victims of identity theft who discover loans fraudulently taken out in their names must go through months of calling colleges, the Federal Student Aid office and loan servicers to try to get the debt erased. [Last week], the U.S. Education Department introduced a temporary rule requiring students to show colleges a government-issued ID to prove their identity... "The rate of fraud through stolen identities has reached a level that imperils the federal student aid program," the department said in its guidance to colleges.

An Associated Press analysis of fraud reports obtained through a public records request shows California colleges in 2024 reported 1.2 million fraudulent applications, which resulted in 223,000 suspected fake enrollments. Other states are affected by the same problem, but with 116 community colleges, California is a particularly large target. Criminals stole at least $11.1 million in federal, state and local financial aid from California community colleges last year that could not be recovered, according to the reports... Scammers frequently use AI chatbots to carry out the fraud, targeting courses that are online and allow students to watch lectures and complete coursework on their own time...

Criminal cases around the country offer a glimpse of the schemes' pervasiveness. In the past year, investigators indicted a man accused of leading a Texas fraud ring that used stolen identities to pursue $1.5 million in student aid. Another person in Texas pleaded guilty to using the names of prison inmates to apply for over $650,000 in student aid at colleges across the South and Southwest. And a person in New York recently pleaded guilty to a $450,000 student aid scam that lasted a decade.

Fortune found one community college that "wound up dropping more than 10,000 enrollments representing thousands of students who were not really students," according to the school's president. The scope of the ghost-student plague is staggering. Jordan Burris, vice president at identity-verification firm Socure and former chief of staff in the White House's Office of the Federal Chief Information Officer, told Fortune more than half the students registering for classes at some schools have been found to be illegitimate. Among Socure's client base, between 20% to 60% of student applicants are ghosts... At one college, more than 400 different financial-aid applications could be tracked back to a handful of recycled phone numbers. "It was a digital poltergeist effectively haunting the school's enrollment system," said Burris.

The scheme has also proved incredibly lucrative. According to a Department of Education advisory, about $90 million in aid was doled out to ineligible students, the DOE analysis revealed, and some $30 million was traced to dead people whose identities were used to enroll in classes. The issue has become so dire that the DOE announced this month it had found nearly 150,000 suspect identities in federal student-aid forms and is now requiring higher-ed institutions to validate the identities of first-time applicants for Free Application for Federal Student Aid (FAFSA) forms...

Maurice Simpkins, president and cofounder of AMSimpkins, says he has identified international fraud rings operating out of Japan, Vietnam, Bangladesh, Pakistan, and Nairobi that have repeatedly targeted U.S. colleges... In the past 18 months, schools blocked thousands of bot applicants because they originated from the same mailing address; had hundreds of similar emails with a single-digit difference, or had phone numbers and email addresses that were created moments before applying for registration.

Fortune shares this story from the higher education VP at IT consulting firm Voyatek. "One of the professors was so excited their class was full, never before being 100% occupied, and thought they might need to open a second section. When we worked with them as the first week of class was ongoing, we found out they were not real people."
Transportation

Smart Tires Will Report On the Health of Roads In New Pilot Program (arstechnica.com) 29

An anonymous reader quotes a report from Ars Technica: Do you remember the Pirelli Cyber Tire? No, it's not an angular nightmare clad in stainless steel. Rather, it's a sensor-equipped tire that can inform the car it's fitted to what's happening, both with the tire itself and the road it's passing over. The technology has slowly been making its way into the real world, starting with rarified stuff like the McLaren Artura. Now, Pirelli is going to put some Cyber Tires to work for everybody, not just supercar drivers, in a new pilot program with the regional government of Apulia in Italy.

The Cyber Tire has a sensor to monitor temperature and pressure, using Bluetooth Low Energy to communicate with the car. The electronics are able to withstand more than 3,500 G as part of life on the road, and a 0.3-oz (10 g) battery keeps everything running for the life of the tire. The idea was to develop a better tire pressure monitoring system, one that could tell the car exactly what kind of tire -- summer, winter, all-season, and so on -- was fitted, and even its state of wear, allowing the car to adapt its settings appropriately. But other applications suggested themselves -- at a recent CES, Pirelli showed how a Cyber Tire could warn other road users about aquaplaning. Then again, we've been waiting more than a decade for vehicle-to-vehicle communication to make a difference in daily driving to no avail.

Apulia's program does not rely on crowdsourcing data from Cyber Tires fitted to private vehicles. Regardless of the privacy implications, the rubber isn't nearly in widespread enough use for there to be a sufficient population of Cyber Tire-shod cars in the region. Instead, Pirelli will fit the tires to a fleet of vehicles supplied by the fleet management and rental company Ayvens. Driving around, the sensors in the tires will be able to infer how rough or irregular the asphalt is, via some clever algorithms. That's only one part of it, however. Pirelli and Apulia are also combining input from the tires with data from a network of road cameras and some technology from the Swedish startup Univrses. As you might expect, this data is combined in the cloud, and dashboards are available to enable end users to explore the data.

The Military

US Navy Backs Right To Repair After $13 Billion Carrier Crew Left Half-Fed By Contractor-Locked Ovens (theregister.com) 135

An anonymous reader quotes a report from The Register: US Navy Secretary John Phelan has told the Senate the service needs the right to repair its own gear, and will rethink how it writes contracts to keep control of intellectual property and ensure sailors can fix hardware, especially in a fight. Speaking to the Senate Armed Services Committee on Tuesday, Phelan cited the case of the USS Gerald R. Ford, America's largest and most expensive nuclear-powered aircraft carrier, which carried a price tag of $13 billion. The ship was struggling to feed its crew of over 4,500 because six of its eight ovens were out of action, and sailors were barred by contract from fixing them themselves.

"I am a huge supporter of right to repair," Phelan told the politicians. "I went on the carrier; they had eight ovens -- this is a ship that serves 15,300 meals a day. Only two were working. Six were out." He pointed out the Navy personnel are capable of fixing their own gear but are blocked by contracts that reserve repairs for vendors, often due to IP restrictions. That drives up costs and slows down basic fixes. According to the Government Accountability Office, about 70 percent [PDF] of a weapon system's life-cycle cost goes to operations and support. A similar issue plagued the USS Gerald Ford's weapons elevators, which move bombs from deep storage to the flight deck. They reportedly took more than four years after delivery to become fully operational, delaying the carrier's first proper deployment. "They have to come out and diagnose the problem, and then they'll fix it," Phelan said. "It is crazy. We should be able to fix this."
"Our soldiers are immensely smart and capable and should not need to rely on a third party contractor to maintain their equipment. Oven repair is not rocket science: of course sailors should be able to repair their ovens," Kyle Wiens, CEO of repair specialists iFixit told The Register.

"It's gratifying to see Secretary Phelan echoing our work. The Navy bought it, the Navy should be able to fix it. Ownership is universal, and the same principles apply to an iPhone or a radar. Of course, the devil is in the details: the military needs service documentation, detailed schematics, 3D models of parts so they can be manufactured in the field, and so on. We're excited that the military is joining us on this journey to reclaim ownership."

Further reading: Army Will Seek Right To Repair Clauses In All Its Contracts
Privacy

Researchers Confirm Two Journalists Were Hacked With Paragon Spyware (techcrunch.com) 28

An anonymous reader quotes a report from TechCrunch: Two European journalists were hacked using government spyware made by Israeli surveillance tech provider Paragon, new research has confirmed. On Thursday, digital rights group The Citizen Lab published a new report detailing the results of a new forensic investigation into the iPhones of Italian journalist Ciro Pellegrino and an unnamed "prominent" European journalist. The researchers said both journalists were hacked by the same Paragon customer, based on evidence found on the two journalists' devices.

Until now, there was no evidence that Pellegrino, who works for online news website Fanpage, had been either targeted or hacked with Paragon spyware. When he was alerted by Apple at the end of April, the notification referred to a mercenary spyware attack, but did not specifically mention Paragon, nor whether his phone had been infected with the spyware. The confirmation of the first-ever known Paragon infections further deepens an ongoing spyware scandal that, for now, appears to be mostly focused on the use of spyware by the Italian government, but could expand to include other countries in Europe.

These new revelations come months after WhatsApp first notified around 90 of its users in over two dozen countries in Europe and beyond, including journalists, that they had been targeted with Paragon spyware, known as Graphite. Among those targeted were several Italians, including Pellegrino's colleague and Fanpage director Francesco Cancellato, as well as nonprofit workers who help rescue migrants at sea. Last week, Italy's parliamentary committee known as COPASIR, which oversees the country's intelligence agencies' activities, published a report (PDF) that said it found no evidence that Cancellato was spied on. The report, which confirmed that Italy's internal and external intelligence agencies AISI and AISE were Paragon customers, made no mention of Pellegrino. The Citizen Lab's new report puts into question COPASIR's conclusions.

Japan

Japan Urged To Use Gloomier Population Forecasts After Plunge in Births (ft.com) 90

Japan must stop being overly optimistic about how quickly its population is going to shrink, economists have warned, as births plunge at a pace far ahead of core estimates. From a report: Japan this month said there were a total of 686,000 Japanese births in 2024, falling below 700,000 for the first time since records began in the 19th century and defying years of policy efforts to halt population decline. The total represented the ninth straight year of decline and pushed the country's total fertility rate -- the average number of children born per woman over her lifetime -- to a record low of 1.15.

But public and parliamentary dismay over the latest evidence of Japan's decline was intensified by the extent to which the figures undershot population estimates calculated by government demographers just two years ago. The median forecast produced by the National Institute of Population and Social Security Research (IPSS) in 2023 did not foresee the number of annual births -- which does not include children born to non-Japanese people -- dropping into the 680,000 range until 2039.

Government

CISA Loses Another Senior Exec (theregister.com) 34

An anonymous reader quotes a report from The Register: The US Cybersecurity and Infrastructure Security Agency has lost another senior leader: executive director Bridget Bean departed on Wednesday. Bean, who served as the de facto agency boss for five months between former CISA director Jen Easterly's departure in January and Madhu Gottumukkala's appointment to the deputy director post last month, said she was "officially retiring from Federal service once again" in a LinkedIn post. "My time at CISA has been truly remarkable," she wrote. "Having had the privilege to serve as the Senior Official Performing the Duties of Director of CISA for 5 months has been a profound honor."

CISA's executive leadership page now lists Gottumukkala as its acting director, and the agency remains without a Senate-confirmed leader. President Trump nominated Sean Plankey to serve as the agency's director, and his nomination is scheduled for consideration (PDF) by the Senate's Homeland Security and Governmental Affairs Committee today. However, his appointment still requires a full Senate vote. Senator Ron Wyden (D-OR) has said he will continue to block Plankey's confirmation until CISA releases an unclassified report on American telecommunications networks' weak security.

At the time of her departure, Bean had spent three and a half years with CISA and more than three decades with the federal government, including a job as the Federal Emergency Management Agency's third-ranking official. Before accepting the executive director post, she was CISA's first chief integration officer. In this position, she "led the integration of the agency's operations and ensured CISA's frontline of regional staff seamlessly supported the critical infrastructure that Americans rely on every hour of every day," according to her bio on the agency's website. [...] Bean's retirement comes during a talent exodus from CISA -- and other federal government agencies -- with some folks getting fired and others taking the Trump administration's buyout offer to resign from public service. As of May 30, the heads of five of CISA's six operational divisions and six of its 10 regional offices had left the agency, and around 1,000 people, nearly one-third of its total staff, have reportedly left CISA since Trump took office.

China

More Than a Dozen VPN Apps Have Undisclosed Ties To China (thehill.com) 71

More than a dozen private browsing apps on Apple and Google's app stores have undisclosed ties to Chinese companies, leaving user data at risk of exposure to the Chinese government, according to a new report from the Tech Transparency Project. From a report: Thirteen virtual private network (VPN) apps on Apple's App Store and 11 apps on Google's Play Store have ties to Chinese companies, the tech watchdog group said in the report released Thursday.

Chinese law requires Chinese companies to share data with the government upon request, creating privacy and security risks for American users. Several of the apps, including two on both app stores and two others on Google Play Store, have ties to Chinese cybersecurity firm Qihoo 360, which has been sanctioned by the U.S. government, according to the report. The Tech Transparency Project previously identified more than 20 VPN apps on Appleâ(TM)s App Store with Chinese ties in an April report. The iPhone maker has since removed three apps linked to Qihoo 360.

The Courts

Deere Must Face FTC's Antitrust Lawsuit Over Repair Costs, US Judge Rules (reuters.com) 21

Agriculture equipment giant Deere must face a lawsuit by the U.S. Federal Trade Commission accusing the company of forcing farmers to use its authorized dealer network and driving up their costs for parts and repairs, a U.S. judge has ruled. From a report: U.S. District Judge Iain Johnston in the federal court in Rockford, Illinois on Monday ruled for now to reject, opens new tab Deere's effort to end the lawsuit, which was filed at the end of Democratic President Joe Biden's administration in January.

The lawsuit alleges Deere is violating federal antitrust law by controlling too tightly where and how farmers can get their equipment repaired, allowing the Illinois-based company to charge artificially higher prices. The FTC was joined in its lawsuit by Michigan, Wisconsin and three other U.S. states.

Power

World Bank Lifts Ban on Funding Nuclear Energy in Boost To Industry 112

The World Bank is lifting its decades-long ban on financing nuclear energy, in a policy shift aimed at accelerating development of the low-emissions technology to meet surging electricity demand in the developing world. From a report: In an email to staff on Wednesday, Ajay Banga, the World Bank president, said it would "begin to re-enter the nuclear energy space" [non-paywalled source] in partnership with the International Atomic Energy Agency, the UN nuclear watchdog which works to prevent proliferation of nuclear weapons.

"We will support efforts to extend the life ofÂexisting reactors in countries that already have them, and help support grid upgrades andÂrelated infrastructure," the email said. The shift follows advocacy from the pro-nuclear Trump administration and a change of government in Germany, which previously opposed financing atomic energy due to domestic political opposition to the technology. It is part of a wider strategy aimed at tackling an expected doubling of electricity demand in the developing world by 2035. Meeting this demand would require annual investment in generation, grids and storage to rise from $280 billion today to $630 billion, Banga said in the memo seen by the Financial Times.

Slashdot Top Deals