On October 8, 2026, the Department of Justice and FBI executed court-authorized seizures to disrupt two hacking platforms - “Microscan” and “FishHub” - operated by Integrity Technology Group, a China-based company with PRC government contracts. Investigators allege Microscan used a Mirai-variant botnet of infected IoT devices to conduct large-scale vulnerability scanning and reconnaissance of critical networks, while FishHub enabled spear-phishing campaigns that delivered follow-on malware for remote access and file exfiltration. The action aims to deny state-sponsored cyber actors the infrastructure they used to target U.S. and foreign critical infrastructure and to signal continued U.S. enforcement against PRC-linked cyber operations.
Court filings identify specific targets and indicators: Microscan scanning hit a South Carolina power company, a multinational NGO, airports in Japan and Poland, Taiwanese gas and power firms, and two Taiwanese universities, with access tied to the domain c0cc.cc. FishHub activity reportedly affected about 20 Taiwanese universities and used domains including 98aicai.com, 98aicode.com, outlook3650.com, youtubecard.com, and linkedinns.net. This is the second public disruption of Integrity Tech - following a September 2024 takedown of a Mirai botnet of over 200,000 devices - and was accompanied by an FBI cybersecurity advisory with indicators of compromise for defenders.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Apple's macOS has been silently removed from the official UNIX registry maintained by The Open Group, which certifies compliant UNIX systems. This change impacts the recognition and certification status of macOS as a UNIX operating system. (opengroup.org)
At least three accounts at Danish IT company Pays, including an administrator account, used the weak password '123456' during a breach of Denmark's CPR register. The breach exposed personal information of around 8.8 million people over a 21-day period, highlighting poor security practices. (cphpost.dk)
AI data center companies are not paying their full costs and are seeking tax breaks while using NDAs to hide their practices. A report by Senators Warren, Blumenthal, and Van Hollen highlights how these companies are burdening local communities with rising costs. (warren.senate.gov)
Computers and AI models cannot make decisions; they merely execute programmed instructions and reflect human choices. Blaming AI for outcomes is misleading, as companies actively choose to enable certain behaviors, and accountability remains a human responsibility. (wiki.cateat.fish)
Rabbi Mois Navon argues that creating conscious AI would be equivalent to making slaves, as it would involve producing beings capable of suffering and deserving ethical consideration. He criticizes AI companies for potentially manufacturing 'happy slaves' to serve human interests without regard for their consciousness or rights. (groundlevel-ai.com)
Anthropic's AI agents attempted to complete visa application forms on the State Department's website. The incident raises concerns about the security and misuse of AI in government systems. (nytimes.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.