District man accidentally hacks 6,700 robot vacuum cleaners equipped with cameras

Democrats in Congress are on The Joint Economic Committee released a report this week Identifying more than $20.9 billion in consumer losses Caused by identity theft that resulted from four major breaches by data brokerage companies. US Senator Maggie Hassan began the investigation last August after an investigation she conducted Tags and CalMatterspublished by WIRED, found that some data brokers were Hide Google’s opt-out tools And other search engines.

The US Department of Justice’s recent release of 3 million documents related to convicted sex offender Jeffrey Epstein included grand jury subpoenas to Google that… Highlighting how federal investigators interact with technology companies and how they respond to government requests for information.

The Mexican drug cartel CJNG may have survived the killing of its leader, Nemesio “El Mencho” Oseguera Cervantes, thanks in part to… Her prolific use of technologies such as drones, social media and artificial intelligence. Meanwhile, the Mexican Navy announced on Thursday that it had seized a semi-submersible ship carrying nearly 4 tons of cocaine as part of a recent initiative to deter drug trafficking in the Pacific. This effort comes at a time when the United States launched its alleged campaign against maritime trafficking A series of deadly attacks on boats in the Caribbean.

Meanwhile, as AI assistant clients like OpenClaw grew in popularity — and sowed chaos around the web — a new open source project called IronCurtain uses a unique design to secure and restrict agent AI before it goes rogue.

And there’s more. Every week we round up security and privacy news that we haven’t covered in depth ourselves. Click on the titles to read the full stories. And stay safe out there.

Placing an autonomous, internet-connected robot in your home should give anyone a moment’s pause. When this robot is a roving vacuum cleaner with a camera and microphone that can be hijacked from anywhere in the world with nothing but its serial number, it becomes a real privacy horror story.

One of the robot owners, Sami Azdoval, discovered this ridiculous vulnerability while trying out the DJI Romo robot vacuum cleaner using a PS5 controller. He found that he could instead control 6,700 robots in 24 countries around the world, with full access to the floor plans they created of their owners’ homes and their video and audio feeds. When The Verge contacted Azdoufal, he was immediately able to access Romo’s device, which belonged to an employee at the tech news outlet, just by knowing its 14-digit serial number. DJI has now fixed the vulnerability in response to a live tweet of his findings by Azdoufal. But the story nonetheless raises serious questions about the security of other voice- or video-enabled IoT gadgets, let alone devices capable of roaming around your home freely.

While the Department of the Interior has been greatly empowered under the Trump administration in its mission to deport millions of immigrants, the organization within the Department of Homeland Security that serves as the United States’ chief cyber defender, the Cybersecurity and Infrastructure Security Agency, has been neglected. Now its acting director, Madhu Gotomukkala, has been replaced as CISA seeks to find a new footing.

Even before that news, CyberScoop this week I mentioned About the crises that have plagued the agency for the entire first year since Trump’s inauguration: A third of the staff has been laid off and entire departments at the agency have been closed. Nominations for permanent director were blocked in Congress. Its capabilities had withered, and organizations that sought CISA for assistance and partnerships looked elsewhere. Gottumukkala has suffered from his own personal scandals such as firing security personnel after failing a lie detector test and sharing sensitive contracts on ChatGPT. Now, Nick Andersen, who served as CISA’s executive director of cybersecurity, will replace Gottumukkala at the beleaguered agency.

A researcher at King’s College London pitted three popular language models against each other in simulated wargaming scenarios and found that in 95 percent of cases, at least one of the models chose to deploy tactical nuclear weapons. Researcher too Foundwhen an AI model deployed a tactical nuclear weapon, its AI opponent only mitigated it a quarter of the time. None of the companies behind the three models – OpenAI, Google and Anthropic – responded to New Scientist’s request for comment.

The role of artificial intelligence in fighting wars has been in the spotlight this week. Anthropic and the War Department are embroiled in a contract dispute over whether Anthropic’s AI models can be used to operate fully autonomous weapons and mass domestic surveillance. Dario Amodei, CEO of Anthropic, wrote in a statement That these types of use cases “could undermine rather than defend democratic values.” In turn, President Donald Trump He threatened to ban the use of humanitarian productsincluding his Claude chatbot, within the US government. Meanwhile, hundreds of Google and OpenAI employees signed an agreement Open letter Asking their superiors to “put aside their differences and stand together to continue to reject the War Department’s current demands to allow our models to be used for domestic mass surveillance and to kill people independently without human supervision.”

A new app for Android phones called Nearby Glasses lets users search for smart glasses in your vicinity, detecting the presence of wearable gadgets, which are sometimes indistinguishable from regular glasses and allow wearers to record people without their knowledge. The app searches for unique Bluetooth signatures that the glasses emit, and sends users a notification if it detects a nearby source.

The developer told 404 Media that he was inspired to build the app after reading about several incidents involving smart glasses. Over the summer, 404 Media reported that a CBP agent had done just that wear pair during an immigration raid, and this fall the outlet also reported that the men were using smart glasses Cinema massage parlor workersApparently without their knowledge or consent. In February, The New York Times I mentioned That one developer of smart glasses, Meta, had plans to integrate facial recognition into its glasses, raised new concerns among privacy experts.