The US Department of Justice has announced that five people have pleaded guilty to helping North Koreans defraud US companies by pretending to be US-based remote workers. North Korea has previously used fake identities and the direct manipulation of US cybersecurity workers to circumvent international sanctions and funnel money into the country.

In this case, the people knew they were helping North Koreans, the DOJ says, and “provided their own, false, or stolen identities” to help the remote workers get jobs. They also “hosted U.S. victim company-provided laptops at residences across the United States” to hide the workers’ location. In the case of at least two “facilitators,” they also took company drug tests on the workers’ behalf.

Audricus Phagnasay, Jason Salazar and Alexander Paul Travis each pleaded guilty to one wire fraud conspiracy for their role in the scam. Travis was paid “at least $51,397” for participating, while Phagnasay and Salazar earned “at least $3,450 and $4,500, respectively.” Another facilitator, Erick Ntekereze Prince, used his company to contract certified IT workers to other US companies, fully knowing the workers were using stolen identities. He earned “more than $89,000” for his participation in the scam and pleaded guilty to one count of wire fraud conspiracy.

The final facilitator, Oleksandr Didenko, pleaded guilty for one count of wire fraud conspiracy and one count of aggravated identity theft for participating in an extensive identity theft operation. Didenko helped foreign IT workers fraudulently gain employment at 40 US companies, the DOJ says, and he’s forfeiting $1.4 million as part of his plea.

“These prosecutions make one point clear: the United States will not permit the DPRK to bankroll its weapons programs by preying on American companies and workers,” U.S. Attorney Jason A. Reding Quiñones said in the DOJ announcement. “We will keep working with our partners across the Justice Department to uncover these schemes, recover stolen funds, and pursue every individual who enables North Korea’s operations.”

This article originally appeared on Engadget at https://www.engadget.com/big-tech/five-plead-guilty-to-helping-north-koreans-pretend-to-be-us-based-it-workers-230831417.html?src=rss

BrianFagioli writes: Logitech has confirmed a cybersecurity breach after an intruder exploited a zero-day in a third-party software platform and copied internal data. The company says the incident did not affect its products, manufacturing or business operations, and it does not believe sensitive personal information like national ID numbers or credit card data were stored in the impacted system. The attacker still managed to pull limited information tied to employees, consumers, customers and suppliers, raising fair questions about how long the zero-day existed before being patched.

Logitech brought in outside cybersecurity firms, notified regulators and says the incident will not materially affect its financial results. The company expects its cybersecurity insurance policy to cover investigation costs and any potential legal or regulatory issues. Still, with zero-day attacks increasing across the tech world, even established hardware brands are being forced to acknowledge uncomfortable weaknesses in their internal systems.

Read more of this story at Slashdot.

Holiday shopping season is ripe for scammers, as consumers rush to find and take advantage of some of the best discounts of the year, and potentially overlook red flags that signal fraud. Security researchers are warning of an uptick in scams capitalizing on the Black Friday and Cyber Monday hype. Fraudsters know that they can prey on shoppers’ sense of urgency and excitement for limited-time, exclusive deals—and AI is making these campaigns even more difficult to spot than usual.

New data from McAfee suggest that nearly half of Americans have come across an AI-powered scam while shopping, from deepfakes impersonating celebrities pushing promotions to near-flawless spoofed websites that steal your credit card information.

Here are the scams to watch for this Black Friday.

Black Friday shopping scams

Spoofed websites are a common type of a scam, and fraudsters use holiday shopping season to trap users with fake retail sites and sales pages that look legitimate but are actually just collecting data like your login credentials and payment information. Scammers will use stolen assets like logos and product photos from known and trusted brands, and AI makes it easy to set up a convincing (but fake) small business website with elements like a customer service page and consumer reviews in no time.

Another shopping scam facilitated by AI is the impersonation scam. You think you’re watching a popular influencer or celebrity promoting an exclusive deal or product giveaway on TikTok or another social media platform, but it’s actually a deepfake. If you click through to enter or buy, you’ll land on a counterfeit page (as outlined above) designed to steal from you.

According to Google’s November fraud and scam advisory, scammers can get eyes on their content by hijacking search terms for Black Friday sales, running deceptive ads, or pushing deals on social media. Fake storefronts may appear as sponsored links, which are easy to overlook if you’re in a rush to make a purchase.

Of course, you may encounter other common holiday scams, such as fake shipping notifications that request payment in order to resolve a delivery issue as well as account verification scams that prompt you to confirm personal details. These phishing and smishing campaigns use standard scam tactics like impersonating a legitimate company or service and sending a fraudulent link that collects your bank information or username and password combination.

Black Friday scam red flags

When shopping holiday deals, slow down enough to look for common signs of scams. Fraudsters will use urgency—such as a limited time to secure a deal or a limited number of items left in stock—in hopes you won’t think before you buy. You should also be wary of any deal that is too good to be true, or a promotion with especially low prices that are out of line with other sales on similar items. This includes influencers pushing “exclusive” opportunities. If you are purchasing from a small business you don’t know, google the brand and read third-party reviews to see whether it is legitimate.

Instead of clicking links from emails, texts, and social media posts promoting sales, go directly to the retailer’s website and search for the deal. If you do click through, check the URL carefully to ensure it is legitimate (scammers may use homoglyphs that avoid detection at first glance) and look for website elements that real companies have, such as a privacy policy and address. If you see a promotion on social media, check the creator’s account to see when they joined the platform, what they’ve posted in the past, and whether they are verified.

Beware of any site that requires you to pay with a gift card, cryptocurrency, or bank transfer versus a credit card, which has some protection in the case of fraud. Legitimate retailers will use legitimate payment methods.

Finally, never enter your login credentials unless you’ve confirmed that the site you’re using is trustworthy. This includes delivery services and your Amazon and PayPal accounts, all of which scammers may pressure you to “verify” in order to resolve a billing or delivery issue.

According to CNBC, JPMorgan Chase has secured deals ensuring it will get paid by the fintech firms responsible for nearly all the data requests made by third-party apps connected to customer bank accounts. From the report: The bank has signed updated contracts with the fintech middlemen that make up more than 95% of the data pulls on its systems, including Plaid, Yodlee, Morningstar and Akoya, according to JPMorgan spokesman Drew Pusateri. “We’ve come to agreements that will make the open banking ecosystem safer and more sustainable and allow customers to continue reliably and securely accessing their favorite financial products,” Pusateri said in a statement. “The free market worked.”

The milestone is the latest twist in a long-running dispute between traditional banks and the fintech industry over access to customer accounts. For years, middlemen like Plaid paid nothing to tap bank systems when a customer wanted to use a fintech app like Robinhood to draw funds or check balances. […] After weeks of negotiations between JPMorgan and the middlemen, the bank agreed to lower pricing than it originally proposed, and the fintech middlemen won concessions regarding the servicing of data requests, according to people with knowledge of the talks.

Fintech firms preferred the certainty of locking in data-sharing rates because it is unclear whether the current CFPB, which is in the process of revising the open-banking rule, will favor banks or fintech companies, according to a venture capital investor who asked for anonymity to discuss his portfolio companies. The bank and the fintech firms declined to disclose details about their contracts, including how much the middlemen agreed to pay and how long the deals are in force.

Read more of this story at Slashdot.

This is a clip from the Tianmen National Forest Park in Zhangjiajie, China (previously seen with athletes parkouring down) where a publicity stunt involving a Chery SUV attempting to drive up the 999 stairs leading to ‘Heaven’s Gate’ went horribly wrong. The SUV eventually slips backwards and destroys part of a wall. Some details while I wish I could have been there to point and laugh at the driver before backing my own car into a tree leaving the parking area.

During the attempt, the vehicle’s safety cable detached, wrapping around one of the wheels and causing the SUV to lose balance and crash into a barrier. Thankfully, no injuries were reported.

The company later apologized for the incident, admitting poor risk assessment and promising to repair any damage caused.

Aha — the safety cable was to blame. That’s why I would have gone with no safety cable. *shrug* That’s just how I live my life. It isn’t a great one, just to be clear. Regardless, I’m really not impressed with Chery SUVs from what I’ve seen so far.

If Donald Trump loses his Supreme Court fight over tariffs, the US may be forced to return “tens of billions of dollars to companies that have paid import fees this year, plus interest,” The Atlantic reported. And the longer the verdict is delayed, the higher the refunds could go, possibly even hitting $1 trillion.

For tech companies both large and small, the stakes are particularly high. A Trump defeat would not just mean clawing back any duties paid on imports to the US that companies otherwise can use to invest in their competitiveness. But, more critically in the long term, it would also end tariff shocks that, as economics lecturer Matthew Allen emphasized in a report for The Conversation, risked harming “innovation itself” by destabilizing global partnerships and diverse supply chains in “tech-intensive, IP-led sectors like semiconductors and software.”

Currently, the Supreme Court is weighing two cases that argue that the US president does not have unilateral authority to impose tariffs under the International Emergency Economic Powers Act (IEEPA). Defending his regime of so-called “reciprocal tariffs,” Trump argued these taxes were necessary to correct the “emergency” of enduring trade imbalances that he alleged have unfairly enriched other countries while bringing the US “to the brink of catastrophic decline.”

Read full article

Comments

The first multi-spacecraft science mission to launch to Mars is now on its way, and catching a ride on the twin probes are the first kiwis to fly to the red planet.

NASA’s ESCAPADE (Escape and Plasma Acceleration and Dynamics Explorers) mission lifted off on a 22-month trip to Mars on Thursday aboard a New Glenn rocket. Once there, the identical satellites will enter Martian orbit to study in real time how space weather affects the planet’s hybrid magnetosphere and how the interaction drove Mars to lose its once-dense atmosphere.

Led by the Space Sciences Laboratory at the University of California, Berkeley—the two spacecraft are named “Blue” and “Gold” after the school’s colors—the ESCAPADE probes are the first Mars-bound vehicles to be designed, built, and tested by Rocket Lab, the end-to-end space company headquartered in California but founded in New Zealand.

Read full article

Comments

An anonymous reader quotes a report from Ars Technica: On Thursday evening, OpenAI CEO Sam Altman posted on X that ChatGPT has started following custom instructions to avoid using em dashes. “Small-but-happy win: If you tell ChatGPT not to use em-dashes in your custom instructions, it finally does what it’s supposed to do!” he wrote.

The post, which came two days after the release of OpenAI’s new GPT-5.1 AI model, received mixed reactions from users who have struggled for years with getting the chatbot to follow specific formatting preferences. And this “small win” raises a very big question: If the world’s most valuable AI company has struggled with controlling something as simple as punctuation use after years of trying, perhaps what people call artificial general intelligence (AGI) is farther off than some in the industry claim. “The fact that it’s been 3 years since ChatGPT first launched, and you’ve only just now managed to make it obey this simple requirement, says a lot about how little control you have over it, and your understanding of its inner workings,” wrote one X user in a reply. “Not a good sign for the future.”

Read more of this story at Slashdot.

With the government reopening, the dubious panel of vaccine advisors selected by anti-vaccine Health Secretary Robert F. Kennedy is wasting no time getting back to dismantling the federal childhood vaccine schedule.

A meeting that was scheduled for October but put on hold during the shutdown has already been rescheduled for December 4 and 5. A Federal Register notice Thursday said that the meeting will “include discussions on vaccine safety, the childhood and adolescent immunization schedule, and hepatitis B vaccines.” The announcement was light on information beyond that but indicated that there would be a vote on hepatitis B vaccines.

The panel—the Advisory Committee on Immunization Practices (ACIP) for the Centers for Disease Control and Prevention—is typically composed of preeminent, extensively vetted vaccine experts. But, in June, Kennedy summarily fired all 17 experts on the panel and installed 12 new members, almost all of whom are questionably qualified and espouse anti-vaccine views.

Read full article

Comments

Good news, Android users: It no longer matters whether or not you have one of Google’s latest and greatest devices—at least when it comes to recording calls with Google’s Phone app. As spotted by 9to5Google, Google just opened up call recording in its app to Pixel 6 and newer. You won’t get access to the Phone app’s latest AI features, but if all you want is a reliable way to record phone calls, you’ll be set.

Google announced this new rollout back in September, calling the ability to record calls a “fundamentally useful feature,” even without transcription or automatic note taking. That’s certainly true: While the idea of recording phone calls might strike some as nefarious, there are many legitimate applications for recording phone calls, from journalists seeking a record of an phone interview, to patients calling their healthcare providers to make sure they keep track of all medical advice and instruction.

Call recording on Android—especially on Google’s Pixel devices—has had a turbulent past. While there was once a time you could download a third-party call recorder app without issue, Google started slowly taking away key functions from developers, like blocking access to recordings from microphones. In 2022, the company announced that was blocking access to Android’s Accessibility API, the main workaround developers used for their apps—effectively killing the third-party call recorder market. If your phone’s manufacturer supported call recording in their primary app, that was still OK, but if not, you basically lost this functionality.

With Pixel 9 and Pixel 10, Google offers a feature called Call Notes, which transcribes and summarizes your calls using Gemini. In addition to these AI enhancements, however, you still receive a recording of the phone call, making these two Pixel series the only ones with the capability. That’s why this call recording expansion is so necessary.

Call recording on Pixel isn’t perfect

There are two key caveats to keep in mind with this feature, however. First, don’t expect to record a call without the other party’s permission. Even if you live in a region with one-party consent—meaning you don’t need both parties to agree to the recording—Google’s call recorder will announce that it is about to record the call. Unless the other party isn’t paying attention, they will know you’re recording—and could choose to hang up the line if they feel uncomfortable.

Second, this feature won’t be available to all Pixel users, even if you have the proper Pixel device. This feature will only work in regions where call recording is legal, and Google says it is rolling out the functionality to all countries that support it throughout the rest of this year. It seems as of this article, the United States and Canada have the feature, but many other countries do not. If you live somewhere where call recording is legal, but don’t see this feature yet, sit tight: It’s likely rolling out soon.

How to set up call recording on Pixel

To start, make sure you’re using a Pixel 6 or newer, running at least Android 14, or a non-Pixel device running at least Android 9. Next, update your Phone app to the latest version.

Now, open the Phone app’s Settings, then head to Call Assist > Call Recording. Here, you can turn on the toggle next to “Turn on Call Recording.” You can also toggle on “Automatically record calls with non-contacts,” if you want the app to start recording whenever someone outside your contacts list calls, or “Automatically record calls with these numbers” to manually select contacts you’d like the Phone app to record conversations for. You can choose to automatically delete these recordings after seven, 14, or 30 days, or let them stay on your phone forever.

You can skip those latter two options, however, if you’d rather make recordings a case-by-case basis. If so, whenever you’re in a call, you can choose the Call Assist button to select “Call Recording.” (If this is your first recording, you’ll need to download some audio files before you’re able to record calls.) When you do, the Phone app will ask if you’d like to record the call, which you can agree to. There is then a short countdown before the system alerts everyone on the call that it will begin recording. You can stop the recording at any time from the Call Assist menu. You’ll find your new recording in the Home tab.

Not everything about the future sucks. Like electric cars. Sure, there’s one thing that dinosaur-burners do better—short refueling stops—but even the least efficient EV is still multiple times better than its gas equivalent. So much better in fact that it offsets all the extra energy needed to make the battery within a year or two. They’re quieter, and easy to drive. And in a pinch, they can power your house from the garage. Or how about an airport?

OK, we’re not talking about a major international airport (although I really need to talk to someone at Dulles International Airport about my idea to electrify those Space 1999-esque mobile lounges at some point). But up in Humboldt County, California, there’s a microgrid at the Redwood Coast Airport that has now integrated bidirectional charging, and a pair of Nissan Leaf EVs, into its operation.

The microgrid has been operating since 2021 with a 2.2 MW solar array, 8.9 MWh of battery storage, and a 300 KW net-metered solar system. It can feed excess power back into PG&E’s local grid and draw power from the same, but in an outage, the microgrid can keep the airport up and operational.

Read full article

Comments

Federal Communications Commission Chairman Brendan Carr says he won’t scrap the agency’s controversial news distortion policy despite calls from a bipartisan group of former FCC chairs and commissioners.

“How about no,” Carr wrote in an X post in response to the petition from former FCC leaders. “On my watch, the FCC will continue to hold broadcasters accountable to their public interest obligations.”

The petition filed yesterday by former FCC chairs and commissioners asked the FCC to repeal its 1960s-era news distortion policy, which Carr has repeatedly invoked in threats to revoke broadcast licenses. In the recent Jimmy Kimmel controversy, Carr said that ABC affiliates could have licenses revoked for news distortion if they kept the comedian on the air.

Read full article

Comments

By all appearances, Call of Duty: Black Ops 7 features a not insignificant amount of AI-generated art, Kotaku reports. The game’s over 680 Calling Cards — collectible backgrounds earned through in-game achievements or purchases — appear to be the main offenders, featuring art that imitates the knockoff animation style of ChatGPT.

While it’s hard to authoritatively claim that Studio Ghibli-inspired illustrations are a smoking gun, the Calling Cards players have spotted do at the very least seem unpolished for a splashy $70 game. Activision has also confirmed that the game’s development team used “generative AI tools to help develop some in-game assets” in a disclosure on the Black Ops 7 Steam page, which certainly won’t dissuade anyone’s suspicions.

In a statement to Kotaku, Activision also didn’t deny the possibility, noting that AI was one of several “digital tools” it used “to empower and support our teams to create the best gaming experiences possible for our players.” Using AI-generated art or at least AI art edited by a human could have saved Activision and developer Treyarch money during development. But it’s also possible these in-game rewards look weird because they were made in the rush to get the game out the door.

Call of Duty: Black Ops 7 has the honor of being the first in the franchise to launch on Xbox Game Pass, one way Microsoft hopes to justify the subscription’s recent price hike. That the game features AI-generated assets might dampen some player’s excitement, but Black Ops 7’s campaign seems like the more pressing issue. It requires an internet connection to run because it was designed to be played in a “squad” of four, but even if you play with in-game bots, you still can’t pause the game.

This article originally appeared on Engadget at https://www.engadget.com/gaming/call-of-duty-black-ops-7-appears-to-feature-ai-generated-art-assets-201746595.html?src=rss