\n<\/p>\n
Federal contracting records<\/span> reviewed by WIRED this week show that United States Customs and Border Protection is transitioning from testing small drones to using them as standard surveillance tools<\/a>, a move that will further expand CBP\u2019s already extensive dragnet that in some cases extends far beyond US land borders.<\/p>\n Meanwhile, US Immigration and Customs Enforcement is planning to incorporate a broad cybersecurity contract that will include expanding employee surveillance and monitoring<\/a>. The move comes as the US government is escalating leak investigations and condemning internal dissent.<\/p>\n The Chinese-language artificial intelligence app Haotian can be used to create \u201cnearly perfect\u201d face swaps during live video chats, and it is a favorite tool of Southeast Asian scammers. A WIRED investigation along with independent research<\/a> indicates that the company has actively marketed its tools to scammers, often via Telegram. Haotian\u2019s main Telegram channel vanished after WIRED contacted Telegram for comment.<\/p>\n Fraudsters in China are using AI-generated images of supposedly defective products and services gone awry<\/a>\u2014from dead crabs to shredded bed sheets\u2014to convince ecommerce sites to give them refunds.<\/p>\n And there\u2019s more. Each week, we round up the security and privacy news we didn\u2019t cover in depth ourselves. Click the headlines to read the full stories. And stay safe out there.<\/p>\n The hacker collective known as the Com has rampaged across the internet for years, breaching hundreds of companies for nihilistic fun and profit. Now they\u2019ve hit a particularly large and sensitive trove of highly personal data: user records for PornHub, the world\u2019s biggest porn site.<\/p>\n ShinyHunters, a subgroup within the Com, appears to have stolen more than 200 million records for PornHub premium users, a total of 94 gigabytes of data detailing users\u2019 histories on the site linked to their account information, including email addresses. According to a public statement from PornHub, the data appears to have been taken from MixPanel, a data analytics firm the porn site used until 2021, suggesting the breached data may be four years old or older. BleepingComputer, the media outlet that broke the news of the breach, reports that PornHub has received extortion emails from the hackers over the last week. No doubt quite a few of the site\u2019s users are hoping PornHub will pay\u2014and that ShinyHunters will keep their personal browsing private.<\/p>\n Venezuela’s state oil company, Petr\u00f3leos de Venezuela (PDVSA), says a cyberattack disrupted its administrative systems shortly after the US military seized a tanker carrying nearly 2 million barrels of Venezuelan crude. In a public statement, PDVSA said operations continued, but it accused the US of orchestrating the intrusion as part of a broader campaign against the country’s energy sector. Reporting by Reuters suggests the attack may have been more damaging than PDVSA acknowledged, temporarily halting oil cargo deliveries and taking internal systems entirely offline.<\/p>\n The episode followed an unusual escalation by Washington in its ongoing standoff with Caracas, which has been marked by dueling claims over sovereignty and security, and by maritime strikes and seizures targeting vessels that US officials have linked to criminal networks operating under the protection of Venezuelan president Nicol\u00e1s Maduro\u2014an allegation for which the Trump administration has presented no public evidence.<\/p>\n Network \u201cedge\u201d devices like routers, VPNs, and firewalls have become a prime target for hackers hunting for inroads to breach their targets. So the news of an unpatched, critical security vulnerability in a range of Cisco products represents a feeding frenzy\u2014and one that network intruders have quietly enjoyed for weeks. Cisco\u2019s Talos research team this week revealed a zero-day in Cisco\u2019s Secure Email Gateway and Secure Email and Web Manager products that use its AsyncOS software, noting that it had been exploited since late November by hackers who appear to be a Chinese state-sponsored group. Worse still, Cisco doesn\u2019t appear to have a patch ready to fix the vulnerability even now.<\/p>\n