Iran-linked vessels have repeatedly slowed, drifted, and looped over undersea Internet cable routes in the Gulf of Oman near the Strait of Hormuz, according to tracking and satellite analysis by maritime intelligence firm Windward. Three sanctioned tankers and an Iranian fishing boat were observed near major cables in October; some switched off their location-broadcasting transponders. Two tankers reportedly spent days over cable corridors without cargo or an apparent commercial reason. Windward says the behavior could indicate route-mapping or the placement of explosives or mines, though the ships’ movements do not establish that an attack has occurred. Six active cables cross the strait, connecting the Middle East with Europe, Africa, and Asia, and two more are being built. Iraq, Kuwait, Bahrain, and Qatar rely entirely on cables passing through the chokepoint, while a substantial share of India’s westbound Internet traffic also uses the route.
The activity comes amid Iran’s warnings that it may attack or impose fees on undersea cables, following US and Israeli strikes and President Donald Trump’s threats of further military action. Tehran has also targeted commercial shipping and regional energy infrastructure, and launched drone strikes on Amazon data centers. The conflict is already disrupting cable development: repair and installation ships cannot safely operate in the area, delaying expansion of the Meta-backed 2Africa system. Gulf governments and US technology companies are consequently seeking routes that bypass the strait. The episode illustrates how concentrated cable infrastructure can become a target or tool of pressure in a conflict, a risk also growing in regions such as the Baltic Sea and Pacific.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
AI is exposing how much of the internet and its software relies on sloppy human work, including code with security vulnerabilities. The growing ability of AI tools to spot these weaknesses is forcing companies to confront the quality and safety of systems people built. (businessinsider.com)
A British soldier deployed in Estonia ignored orders to remove his phone’s SIM card and disable location settings, and attackers stole nude photos to blackmail him. He pleaded guilty to disobeying a lawful command and was reduced in rank and sentenced to 10 months’ detention. (arstechnica.com)
Consumer brain-wave headsets collect neural data that manufacturers can use to train AI, sometimes without clearly telling users. The practice raises privacy concerns because brain signals can reveal sensitive information about people. (science.org)
A URL-encoding flaw in Hugging Face Chat let unauthenticated requests bypass an admin check and trigger bulk exports of users’ private conversations. The exported data was sent to a configured dataset destination rather than returned directly to the requester. (twitter.com)
Claude Code’s “Don’t Ask Again” setting was linked to passwords and other secrets being exposed in 1,122 public GitHub files. The finding highlights how coding-agent features can accidentally put sensitive data into public code repositories. (apiiro.com)
Hackers stole $133 million from a French bank by targeting a service provider. The available details do not explain how the attack was carried out. (bleepingcomputer.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.