Latest cybersecurity reporting from selected sources.

Also, HexDex Arrest, Black Axe Crackdown, LeRobot RCE FlawThis week, election threats resurfaced. A prolific hacker arrested. Black Axe network disrupted. China-linked disinformation targets Tibet. Exploited ScreenConnect and Windows flaws raise alarms. Minecraft gamers hit with stealer malware. A critical AI framework bug enables remote code execution.

Federal Proposal Pushes AI Adoption While Avoiding Regulatory DetailThe White House AI framework urges rapid deployment and federal alignment to counter China while proposing guardrails on fraud, safety and speech - but leaves unresolved conflicts on IP, content regulation and state preemption that Congress must navigate.

Countries Are Pouring Billions Into Domestic AI Stacks to Escape US-China DominanceBy 2027, more than one-third of the world's nations will be locked into region-specific AI platforms built on proprietary data, infrastructure and governance frameworks, according to Gartner. Nations are now safeguarding LLMs in the same way they do critical infrastructure.

A new artificial intelligence (AI)-powered penetration testing tool linked to a China-based company has attracted nearly 11,000 downloads on the Python Package Index (PyPI) repository, raising concerns that it could be repurposed by cybercriminals for malicious purposes

The US needs to establish a clear framework to provide reasonable guardrails to protect its interests — the quicker, the better.

White House Officials Worry That China Can Leap From U.S. CapabilitiesThe Biden administration declared artificial intelligence suitable for national security purposes in a Thursday directive providing guidance for AI governance and risk management for use in classified missions. The administration has sought to construct a raft of guidelines and framework for AI.

We recently discovered a new threat actor group that we dubbed Void Arachne. This group targets Chinese-speaking users with malicious Windows Installer (MSI) files in a recent campaign. These MSI files contain legitimate software installer files for AI software and other popular software but are bundled with malicious Winos payloads.