China lists open AI models as national security concern.
SummaryBythe N2K CyberWire staffTop stories. China expresses concerns about open AI models. Minnesota cyberattack scale is more extensive than anticipated. Malicious instructions hidden in Word. . .
SummaryBythe N2K CyberWire staffTop stories. China expresses concerns about open AI models. Minnesota cyberattack scale is more extensive than anticipated. Malicious instructions hidden in Word documents. According to reports, Beijing is becoming increasinglyconcernedthat open-source AI models could pose increasingly greater threats to national security and political stability. More specifically, officials are worried that advanced models could enable cyberattacks, scams, biological threats, or bypass government censorship. Some reports suggests that Chinese authorities are considering restricting access to their most advanced models; however, these policies would work against the nation's other AI goal for greater global influence on AI systems. Where AI and identity security take center stage at Black Hat. Headed to Black Hat USA 2026?Visit the SpecterOps Kennel Club August 5 - 6for expert talks with OpenAI and the UK AI Security Institute, along with hands-on workshops exploring AI-accelerated attack paths and identity tradecraft. Pre-register to reserve your spot. While you're there, stop by the N2K CyberWire podcast studio located inside the SpecterOps Kennel Club to meet the N2K CyberWire team and hear conversations with cybersecurity leaders throughout the week. Cyberattack on Minnesota water systems more extensive than original estimates. Since originally disclosed, Minnesota officials havedisclosedthat over thirty community water systems were targeted on July 26 and July 27. The attack targeted operational technology. Notably, officials have stated that there is no evidence of any public health risks. In response to the attack, state officials have launched a whole-of-state response to bring in federal, state, local, tribal, and private-sector partners to aid in the investigation, share intelligence, and support impacted utilities. Involved federal agencies include the Environmental Protection Agency, the Federal Bureau of Investigation, the Cybersecurity and Infrastructure Security Agency, and Minnesota public safety and health officials. RC4's deprecation is exposing hidden migration risks. Most organizations have known they needed to retire RC4 for years. Now Microsoft's enforcement deadline is making that technical debt impossible to ignore. Mike Masciulli of Semperis recently joined Dave Bittner to explain why Active Directory migrations are especially vulnerable and how security teams canidentify hidden break scenarios before a critical cutover. Word documents containing hidden malicious instructions can spread through Copilot workflows. A researcher hasfounda new class of AI-assisted attacks that allow for hidden malicious instructions to be spread through Copilot workflows, via Microsoft Word documents. Researcher Håkon Måløy noted that attacker-controlled prompts embedded in documents can influence Copilot-generated content and copy themselves into new files, creating an "AI worm. " Måløy has noted that while Microsoft has addressed specific proof-of-concept exploits, the broader vulnerability class remains unaddressed. Microsoft has responded that the company has implemented multiple safeguards to strengthen its defense but recommends users treat external documents as untrusted, install updates, and review AI-generated content. Sponsored EventsBlack Hat USA 2026: Trainings, Briefings, Summits & Business Hall(Mandalay Bay Convention Center, Las Vegas, NV, USA, Aug 1 - 6, 2026)Black Hat USA returns for its 29th year: six days filled with hands-on Trainings, hundreds of peer-reviewed Briefings, specialist Summits, and the largest-ever Business Hall. Independent security research across AI, cyber conflict, resilience, and identity. HIP Conf 26: Clarity. Confidence. And people in your corner. (, Sep 8 - 10, 2026)From strategy to implementation, HIP Conf is built to help you make better decisions before, during, and after a crisis. Join the community helping prevent compromise, respond with clarity, and recover with resilience across hybrid identity environments. Selected ReadingAttacks, Threats, and VulnerabilitiesAmazon identifies North Korean hacker group behind open-source supply chain attacks | Amazon Web Services(Amazon Web Services)Amazon is sharing new findings about how a threat actor linked to the Democratic People’s Republic of Korea (DPRK) is targeting open source software libraries, the shared building blocks that companies around the world use to develop applications. Reverse Engineering the Six Stages of MacSync Stealer and RAT | Huntress(Huntress)We reverse-engineered MacSync, a six-stage macOS stealer and RAT, recovered from attacker infrastructure after the victim’s host was taken offline. Possible arbitrary file read and remote code execution in Active Storage variant processing(GitHub)In its default configuration, a Rails application that displays image variants may allow an unauthenticated attacker to read arbitrary files from the server, including the process environment. ‘DangleGeddon’: AI Could Weaponize Forgotten DNS Records at Global Scale(Security Week)Researchers warn that AI could turn dangling DNS takeovers into a nation-state weapon capable of disrupting governments, banks and global supply chains. Legislation, Policy, and RegulationNorth Korea's elite hackers turned on their own government — and got caught(Bitdefender)For years, North Korea's state-trained hackers have been one of the world's most prolific robbers of banks - stealing huge sums of money from foreign financial instituions, draining cryptocurrency exchanges of billions, and funnelling the proceeds into the country's weapons programme. Russia accuses Telegram CEO Pavel Durov of aiding terrorism in its latest digital crackdown(AP News)The charges against the Russian-born Durov, who lives abroad, came as authorities have sought to restrict the use of Telegram as part of a widespread crackdown on online freedom that followed Moscow’s full-scale invasion of Ukraine in 2022. CISA Updates Software Bill of Materials Guidance to Strengthen Supply Chain Security(Homeland Security Today)The Cybersecurity and Infrastructure Security Agency (CISA), together with other U. S. government agencies and international organizations, released 2026 Minimum Elements for a Software Bill of Materials (SBOM)Industry EventsFor a complete running list of events, please visit theEvent Tracker. Newly Noted EventsBooks in Cyber: A conference about the books that shape cybersecurity(Virtual, Sep 8, 2026)A half-day virtual conference about the books that shape cybersecurity - the writers, the readers, and the ideas that endure. EventsBlack Hat USA(Las Vegas, Nevada, USA, Aug 1 - 6, 2026)The premier cybersecurity event of the year returns to Mandalay Bay with a re-engineered, six-day program built to ignite innovation, push boundaries, and bring the global security community together like never before. This year’s event features four days of immersive, expert-led Trainings (August 1–4), followed by Summit Day on Tuesday, August 4, and a two-day main conference packed with groundbreaking Briefings, open-source tool demos in Arsenal, a dynamic Business Hall, and unlimited learning & networking opportunities. DEF CON 34(Las Vegas, Nevada, USA, Aug 6 - 9, 2026)DEF CON has been a part of the hacker community for over three decades. Originally started in 1993, it was a meant to be a party for member of "Platinum Net", a Fido protocol based hacking network out of Canada. As the main U. S. hub I was helping the Platinum Net organizer (I forget his name) plan a closing party for all the member BBS systems and their users. He was going to shut down the network when his dad took a new job and had to move away. We talking about where we might hold it, when all of a sudden he left early and disappeared. I was just planning a party for a network that was shut down, except for my U. S. nodes. I decided what the hell, I'll invite the members of all the other networks my BBS (A Dark Tangent System) system was a part of including Cyber Crime International (CCI), Hit Net, Tired of Protection (ToP), and like 8 others I can't remember. Why not invite everyone on #hack? Good idea!Cybersecurity Operational Methods and Education Training (COMET) cohort(Virtual, USA, Aug 31 - Sep 28, 2026)COMET was established to provide relevant, up-to-date training to Maryland state and local government employees to elevate the ability of the workforce to identify and respond to the largest cybersecurity challenges facing the state and local government. Books in Cyber: A conference about the books that shape cybersecurity(Virtual, Sep 8, 2026)A half-day virtual conference about the books that shape cybersecurity - the writers, the readers, and the ideas that endure. Sponsor & SupportGrow your brand, generate leads, and fill your funnel. With the industry's largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust N2K CyberWire to get the message out. Learn more.