National Guardsman who leaked US defense secrets on Discord agrees to 16-year plea deal

Jack Teixeira, the Massachusetts Air National Guardsman accused of leaking classified defense secrets on Discord, has pled guilty. The New York Times reports the 22-year-old withdrew his not-guilty plea on Monday, trading a guilty admission for up to around 16 years in prison. Had he gone to trial and lost, he could have faced up to 60 years.

In a Boston federal court, Teixeira pleaded guilty to six counts of “willful retention and transmission of national defense information” under the Espionage Act. Federal authorities arrested the airman at his mother’s house last April.

The Air National Guardsman is accused of sharing classified documents on a Minecraft-focused Discord server in late 2022. The posted files included volumes of information about the war in Ukraine (including details about military equipment and Russian and Ukrainian troop movements), as well as Russia’s attempts to stockpile more weapons from Egypt and Turkey. The content eventually landed on 4chan, Telegram and other Discord servers.

The leaked docs also contained a report about the hacking of an unnamed American company by “a foreign adversary” and details about a plot to assault US troops serving abroad. 

The government said it didn’t find evidence of deliberate espionage motives, nor did it accuse Teixeira of acting as a whistleblower in the mold of Edward Snowden. Instead, prosecutors concluded he wanted to gain status with his online friends. The New York Times reports that a senior federal law enforcement official, speaking anonymously to the paper, said the DOJ wouldn’t have agreed to the reduced sentencing if it had uncovered more malicious motives.

The judge presiding over the case, Indira Talwani, scheduled a hearing in September to finalize her endorsement of the deal. The sentencing guidelines range from 11 to more than 16 years in prison. His lawyer, Michael K. Bachrach, told reporters Teixeira’s immaturity played a pivotal role while promising he would push for the lowest sentence. “He is very much a kid,” the attorney reportedly said. “We will be able to establish why his youth played a substantial role.”

A NYT investigation of more than 9,500 of Teixeira’s messages, published last May, revealed an obsession with “weapons, mass shootings, shadowy conspiracy theories — and proving he was in the right, and in the know.”

This article originally appeared on Engadget at https://www.engadget.com/national-guardsman-who-leaked-us-defense-secrets-on-discord-agrees-to-16-year-plea-deal-215721722.html?src=rss

National Guardsman who leaked US defense secrets on Discord agrees to 16-year plea deal

Jack Teixeira, the Massachusetts Air National Guardsman accused of leaking classified defense secrets on Discord, has pled guilty. The New York Times reports the 22-year-old withdrew his not-guilty plea on Monday, trading a guilty admission for up to around 16 years in prison. Had he gone to trial and lost, he could have faced up to 60 years.

In a Boston federal court, Teixeira pleaded guilty to six counts of “willful retention and transmission of national defense information” under the Espionage Act. Federal authorities arrested the airman at his mother’s house last April.

The Air National Guardsman is accused of sharing classified documents on a Minecraft-focused Discord server in late 2022. The posted files included volumes of information about the war in Ukraine (including details about military equipment and Russian and Ukrainian troop movements), as well as Russia’s attempts to stockpile more weapons from Egypt and Turkey. The content eventually landed on 4chan, Telegram and other Discord servers.

The leaked docs also contained a report about the hacking of an unnamed American company by “a foreign adversary” and details about a plot to assault US troops serving abroad. 

The government said it didn’t find evidence of deliberate espionage motives, nor did it accuse Teixeira of acting as a whistleblower in the mold of Edward Snowden. Instead, prosecutors concluded he wanted to gain status with his online friends. The New York Times reports that a senior federal law enforcement official, speaking anonymously to the paper, said the DOJ wouldn’t have agreed to the reduced sentencing if it had uncovered more malicious motives.

The judge presiding over the case, Indira Talwani, scheduled a hearing in September to finalize her endorsement of the deal. The sentencing guidelines range from 11 to more than 16 years in prison. His lawyer, Michael K. Bachrach, told reporters Teixeira’s immaturity played a pivotal role while promising he would push for the lowest sentence. “He is very much a kid,” the attorney reportedly said. “We will be able to establish why his youth played a substantial role.”

A NYT investigation of more than 9,500 of Teixeira’s messages, published last May, revealed an obsession with “weapons, mass shootings, shadowy conspiracy theories — and proving he was in the right, and in the know.”

This article originally appeared on Engadget at https://www.engadget.com/national-guardsman-who-leaked-us-defense-secrets-on-discord-agrees-to-16-year-plea-deal-215721722.html?src=rss

Members of ransomware gang Lockbit arrested by law enforcement

International law enforcement, led by the UK’s National Crime Agency, have disrupted ransomware gang Lockbit's operation. The group behind notable hacks against aircraft manufacturer Boeing, chip giant Taiwan Semiconductor Manufacturing Company, sandwich chain Subway and thousands more had its site taken offline on Monday while authorities arrested major players behind the gang. "This site if now under the control of law enforcement," the website reads. According to malware repository Vx-underground, law enforcement took down at least 22 Lockbit-affiliated Tor sites.

"Through our close collaboration, we have hacked the hackers; taken control of their infrastructure, seized their source code, and obtained keys that will help victims decrypt their systems," National Crime Agency Director General, Graeme Biggar, said in a statement. “As of today, LockBit are locked out. We have damaged the capability and most notably, the credibility of a group that depended on secrecy and anonymity."

Lockbit admitted defeat, too. In a statement to Vx-underground, the group said "FBI pwned me." Operation Cronos, the name law enforcement used for their efforts, also resulted in the seizure of source code and other useful data related to Lockbit's operations. At the same time, authorities in Poland, Ukraine and the US arrested key members of the ransomware operation. There are sanctions out for two more Lockbit affiliates in Russia.

There's more good news for Lockbit victims, too: The operation obtained keys from Lockbit to create a decryption tool for victims to get their data back, according to US Attorney General Merrick Garland. The free decryptors can be found via the No More Ransom project

Since 2019 when Lockbit first entered the scene, it's squeezed victims for more than $120 million in ransomware payments, according to acting assistant AG Nicole Argentieri.

This article originally appeared on Engadget at https://www.engadget.com/members-of-ransomware-gang-lockbit-arrested-by-law-enforcement-144245076.html?src=rss

Amazon, one of the world’s largest employers, has called the National Labor Relations Board ‘unconstitutional’

Amazon, a company that employs more than 1.54 million people, has claimed that the National Labor Relations Board Relations Board (NLRB), the federal agency responsible for protecting the rights of workers, is unconstitutional. Amazon made the claim in a legal document filed on Thursday as part of a case in which prosecutors from the Board have accused the e-commerce giant of discrimination against workers at an Amazon warehouse in Staten Island who had voted to unionize, according to The New York Times.

Amazon is not the first company to challenge the Board’s constitutionality. Last month, Elon Musk’s SpaceX sued the NLRB after the agency accused the company of unlawfully firing eight employees and called the agency “unconstitutional” in the lawsuit. Weeks later, grocery chain Trader Joe’s, which the NLRB accused of union-busting, said that the NLRB’s structure and organization was “unconstitutional,” Bloomberg reported. And in separate lawsuits, two Starbucks baristas have independently challenged the agency’s structure as they sought to dissolve their unions.

Amazon’s claim is similar to the existing claims filed by SpaceX and Trader Joe’s. In the lawsuit, the company’s lawyers argued that “the structure of the N.L.R.B. violates the separation of powers” by “impeding the executive power provided for in Article II of the United States Constitution.” In addition, Amazon claimed that the NLRB’s hearings “can seek legal remedies beyond what’s allowed without a trial by jury.”

Seth Goldstein, a lawyer who represents unions in the Amazon and Trader Joe’s cases told Reuters that these challenges to the NLRB increase the chances of the issue reaching the Supreme Court. And they might cause employers to stop bargaining with unions in hope that courts will finally strip the federal agency of its powers, Goldstein said. Amazon has a contentious history with the NLRB, which said the company broke federal labor laws last year. 

This article originally appeared on Engadget at https://www.engadget.com/amazon-one-of-the-worlds-largest-employers-has-called-the-national-labor-relations-board-unconstitutional-011519013.html?src=rss

Amazon, one of the world’s largest employers, has called the National Labor Relations Board ‘unconstitutional’

Amazon, a company that employs more than 1.54 million people, has claimed that the National Labor Relations Board Relations Board (NLRB), the federal agency responsible for protecting the rights of workers, is unconstitutional. Amazon made the claim in a legal document filed on Thursday as part of a case in which prosecutors from the Board have accused the e-commerce giant of discrimination against workers at an Amazon warehouse in Staten Island who had voted to unionize, according to The New York Times.

Amazon is not the first company to challenge the Board’s constitutionality. Last month, Elon Musk’s SpaceX sued the NLRB after the agency accused the company of unlawfully firing eight employees and called the agency “unconstitutional” in the lawsuit. Weeks later, grocery chain Trader Joe’s, which the NLRB accused of union-busting, said that the NLRB’s structure and organization was “unconstitutional,” Bloomberg reported. And in separate lawsuits, two Starbucks baristas have independently challenged the agency’s structure as they sought to dissolve their unions.

Amazon’s claim is similar to the existing claims filed by SpaceX and Trader Joe’s. In the lawsuit, the company’s lawyers argued that “the structure of the N.L.R.B. violates the separation of powers” by “impeding the executive power provided for in Article II of the United States Constitution.” In addition, Amazon claimed that the NLRB’s hearings “can seek legal remedies beyond what’s allowed without a trial by jury.”

Seth Goldstein, a lawyer who represents unions in the Amazon and Trader Joe’s cases told Reuters that these challenges to the NLRB increase the chances of the issue reaching the Supreme Court. And they might cause employers to stop bargaining with unions in hope that courts will finally strip the federal agency of its powers, Goldstein said. Amazon has a contentious history with the NLRB, which said the company broke federal labor laws last year. 

This article originally appeared on Engadget at https://www.engadget.com/amazon-one-of-the-worlds-largest-employers-has-called-the-national-labor-relations-board-unconstitutional-011519013.html?src=rss

US officials believe Chinese hackers lurk in critical infrastructure

Chinese hackers have been hiding in US critical infrastructure for at least the last five years, CNN reported on Wednesday. By lurking behind the scenes of transportation, water, electricity and other important systems, the hackers have the opportunity to strike whenever they deem the time is right, US officials say in a 50-page report on the subject. A public version of the full document is set to be released next week. 

Officials from the FBI and the Justice Department previously issued a court order to update software that could succumb to Chinese hacking. The effort aimed to fight Chinese hacking by remotely disabling certain affected systems. According to the department, it was able to remove code from hundreds of internet routers that could have let Chinese hackers in. 

The forthcoming report reveals just how long this has been going on, and how bad a potential cyberattack could be. It's set to detail hackers' techniques, while providing guidance to companies behind critical infrastructure systems on how to find Chinese hackers in their systems. There are no signs in the report that hackers have acted maliciously against US infrastructure yet. 

Hackers started by getting into IT systems and, from there, working their way into more important tech behind US infrastructure. They also broke into security cameras at some of the facilities and, in another case, accessed water treatment plants, the report says. 

Last week, FBI director Christopher Wray warned Congress that Chinese hackers were preparing to wreck havoc on US critical infrastructure systems. "Cyber threats to our critical infrastructure represent real world threats to our physical safety," he said at the hearing.

This article originally appeared on Engadget at https://www.engadget.com/us-officials-believe-chinese-hackers-lurk-in-critical-infrastructure-150319581.html?src=rss

The EU wants to criminalize AI-generated porn images and deepfakes

Back in 2022, the European Commission released a proposal for a directive on how to combat domestic violence and violence against women in other forms. Now, the European Council and Parliament have agreed with the proposal to criminalize, among other things, different types of cyber-violence. The proposed rules will criminalize the non-consensual sharing of intimate images, including deepfakes made by AI tools, which could help deter revenge porn. Cyber-stalking, online harassment, misogynous hate speech and "cyber-flashing," or the sending of unsolicited nudes, will also be recognized as criminal offenses.

The commission says that having a directive for the whole European Union that specifically addresses those particular acts will help victims in Member States that haven't criminalized them yet. "This is an urgent issue to address, given the exponential spread and dramatic impact of violence online," it wrote in its announcement. In addition, the directive will require member states to develop measures that can help users more easily identify cyber-violence and to know how to prevent it from happening if possible or how to seek help. It will require them to provide their residents with an online portal where they can send in reports, as well. 

In its reporting, Politico suggested that the recent spread of pornographic deepfake images using Taylor Swift's face urged EU officials to move forward with the proposal. If you'll recall, X even had to temporarily block searches for the musician's name after the images went viral. "The latest disgusting way of humiliating women is by sharing intimate images generated by AI in a couple of minutes by anybody," European Commission Vice President Věra Jourová told the publication. "Such pictures can do huge harm, not only to popstars but to every woman who would have to prove at work or at home that it was a deepfake." At the moment, though, the aforementioned rules are just part of a bill that representatives of EU member states still need to approve. "The final law is also pending adoption in Council and European Parliament," the EU Council said. According to Politico, if all goes well and the bill becomes a law soon, EU states will have until 2027 to enforce the new rules.

This article originally appeared on Engadget at https://www.engadget.com/the-eu-wants-to-criminalize-ai-generated-porn-images-and-deepfakes-105037524.html?src=rss

Scammers use deepfakes to steal $25.6 million from a multinational firm

Bad actors keep using deepfakes for everything from impersonating celebrities to scamming people out of money. The latest instance is out of Hong Kong, where a finance worker for an undisclosed multinational company was tricked into remitting $200 million Hong Kong dollars ($25.6 million). 

According to Hong Kong police, scammers contacted the employee posing as the company's United Kingdom-based chief financial officer. He was initially suspicious, as the email called for secret transactions, but that's where the deepfakes came in. The worker attended a video call with the "CFO" and other recognizable members of the company. In reality, each "person" he interacted with was a deepfake — likely created using public video clips of the actual individuals. 

The deepfakes asked the employee to introduce himself and then quickly instructed him to make 15 transfers comprising the $25.6 million to five local bank accounts. They created a sense of urgency for the task, and then the call abruptly ended. A week later, the employee checked up on the request within the company, discovering the truth.

Hong Kong police have arrested six people so far in connection with such scams, according to CNN. The individuals involved stole eight identification cards and had filed 54 bank account registrations and 90 loan applications in 2023. They had also used deepfakes to trick facial recognition software in at least 20 cases. 

The widespread use of deepfakes is one of the growing concerns of evolving AI technology. In January, Taylor Swift and President Joe Biden were among those whose identities were forged with deepfakes. In Swift's case, it was nonconsensual pornographic images of her and a financial scam targeting potential Le Creuset shoppers. President Biden's voice could be heard in some robocalls to New Hampshire constituents, imploring them not to vote in their state's primary. 

Update, February 6 2024, 10:34AM ET: The Hong Kong police said in their press conference that they had arrested six people in connection with such scams, not necessarily this scam.

This article originally appeared on Engadget at https://www.engadget.com/scammers-use-deepfakes-to-steal-256-million-from-a-multinational-firm-034033977.html?src=rss

Sega of America plans to lay off 61 workers

Sega of America plans to lay off 61 employees in March, according to a California WARN (Worker Adjustment and Retraining Notification) report. Eurogamer and X user @WhatLayoff first reported on the government notice, which lists two separate job cuts classified as “layoff permanent” on March 8. It’s the latest chapter in a year-plus of brutal job cuts in the tech and gaming worlds.

California’s WARN Act, passed in 1988, requires employers to provide 60 days’ notice for upcoming layoffs — allowing the affected workers time to prepare. It applies to companies with at least 75 full-time or part-time workers and covers layoffs of 50 or more people within 30 days. It isn’t clear precisely how many workers Sega of America employs.

The WARN report lists separate layoffs (one of 12 and another of 49 workers) at two Irvine, CA-based Sega of America offices. The job cuts both have a “notice” date of January 8, and the reports were “processed” by California on January 29 with “effective” dates of March 8.

The Communications Workers of America (CWA) filed an unfair labor practice complaint against Sega in November after the publisher allegedly said it would lay off 80 unionized workers. At the time, the organization said Sega presented the proposal in a captive audience meeting, describing the circumstances as “a clear case of bad faith bargaining.”

The Allied Employees Guild Improving SEGA (AEGIS-CWA), the union representing Sega workers in the US, wrote on X Tuesday that the company announced the latest plans “a few months ago,” suggesting the layoffs posted in the WARN notice are part of the same roadmap. The union said Sega plans to outsource quality assurance and some localization work “in a move that would significantly impact our workforce.”

Sega hasn’t publicly confirmed the layoffs. Engadget reached out to a company representative, and we’ll update this article if we hear back.

The layoffs come less than two months after Sega said it would refresh its classics Crazy Taxi, Jet Set Radio, Shinobi, Golden Axe and Streets of Rage. Eurogamer notes the company’s Like a Dragon: Infinite Wealth, which launched last week, has been a high mark for the publisher.

This article originally appeared on Engadget at https://www.engadget.com/sega-of-america-plans-to-lay-off-61-workers-180100573.html?src=rss

Block is reportedly laying off around 1,000 workers

Block is the latest notable tech company to lay off hundreds of workers, according to reports. CEO Jack Dorsey is said to have informed employees that the company is firing a "large number" of them, with Cash App, Square and the foundational (i.e. operations) teams bearing the brunt of the impact. According to a Business Insider source, Block is letting go nearly 1,000 people.

Dorsey reportedly wrote in his memo that the company is becoming leaner. It laid off around 40 people from the Tidal team in December. Last year, Block said it planned to limit its headcount to around 12,000 workers, a reduction from the around 13,000 it had in late 2023. Engadget has contacted Block for confirmation of the layoffs.

While it was initially expected that the layoffs would take place over a period of months, executives reportedly opted against that in favor carrying them out at the same time. "Why is so much happening in one single day? All of these teams were confident in the direction they're taking, and were ready to take action within the same 2-3 weeks," Dorsey is said to have written in his memo. "We decided it would be better to do [it] at once rather than arbitrarily space them out, which didn't seem fair to the individuals or to the company. When we know we need to take an action, we want to take it immediately, rather than let things linger on forever."

The tech industry has shed tens of thousands of workers over the last year or so, including thousands this month alone across companies including Unity, Twitch, Amazon, Meta, Microsoft, eBay and Google. It also emerged on Tuesday that PayPal is firing around 2,500 people

This article originally appeared on Engadget at https://www.engadget.com/block-is-reportedly-laying-off-around-1000-workers-205319045.html?src=rss