RSnake Report 20241220

Table of Contents

• Geopolitical

• Technology

• Cybersecurity

• Business

Hello, and thanks for reading! It is the last week before Xmas, and Hanukkah falls on the same day, so make sure to wish your friends all a good one. We have many weird things afoot as we get to the end of the year, so let’s hop to it!

In the Russia/Ukraine conflict news, Russia has begun to document the Ukrainian’s FPV drone warfare techniques in a handy 31-page document. While a tad rudimentary and likely meant to be read by the least common denominator of uneducated soldiers, the guide shows the incredible adaptability of FPV systems as Ukraine continues to innovate on the battlefield.

Russia's financial front isn't faring well, as I have discussed in length before. The country's second-largest bank is circling the drain, revisiting 1990s-style lows, while its biggest property developer scrambles to offload land just to keep the lights on - a staggering 95% drop in two years. The inflation is so bad that the State Duma is running a media campaign against the head of the central bank. I guess I can expect some people flying out of high-story buildings soon. Zelensky confirmed that Ukraine won’t be transiting Russian gas, causing Gasprom to hit a historic low.

On the battlefield, North Korean soldiers in Kursk seem to embody a grim fatalism. A Ukrainian serviceman recounts chilling scenes of unflinching indifference to injury and death. Coming from the Western world, it seems a very foreign concept. But it can’t be 100% the case, or at minimum, some of the soldiers seem to MedEvac themselves because there is footage of approximately 100+ North Korean soldiers in an emergency hospital with wounds that look far less severe than some that have kept Russian soldiers on the front.

Behind the lines in Moscow, there was yet another assassination. This time, it was Igor Kirillov, the head of Russia's NBC defense troops, who met an explosive end via scooter-borne IED. He was reportedly responsible for ordering chemical weapon use in Ukraine. Footage of the actual explosion was recorded here.

Two anti-drone things to discuss. First is a Ukrainian laser system capable of taking down drones and planes at 2 km, the "Tryzub." The second is a new semi-auto, stick-mag fed, bullpup shotgun meant to be wielded on the front lines to take down drones. After rethinking the shotgun load video we talked about last time, I am less convinced that the test was valid. Many of the FPV drones are outfitted by a small metal fuze, and if contact is made between the elements, it assumes the circuit is complete and it has hit its target. If this thing is outfitted with small conductive flechettes, it should allow contact to set off the fuze at a reasonable stand-off distance.

Ukraine has also put together its first 100% locally sourced FPV drone - with no foreign components. That’s going to make them a lot more capable of mass producing without fear of sanctions or supply chain vulnerabilities writ large. In related good news for Western Armor, apparently, there is a video going around of a slightly customized Abrams getting hit by numerous drones and surviving. That is excellent news for the reactive armor and survivability of the tanks. That means more tanks surviving, more crews surviving, and more knowledge being passed down to other crews to improve training. Great news.

I also saw another video of one of the thermite-dropping “drone-dragon” hitting positions with molten metal. This is actually more effective than I originally thought it would be because most targets are very soft, and this can burn through cover quite easily, not relying on exact line-of-site. Clever and horrific.

Oh, and in case you thought Russia's 2025 ambitions to annex more Ukrainian territory were fading, Defense Minister Belousov would like to remind you otherwise. He now claims that they want to take out the entirety of Donetsk, Luhansk, Kherson and Zaporizhzhia. This may be propaganda, but it certainly isn’t the kind of talk that lends itself to an approach towards peace. Notably missing is Kursk.

Remember in the last newsletter when we discussed those three ships that went down due to high seas? Well, it was a lot more than three. It was at least four tankers and 23 barges around the Crimean bridge. Aside from the obvious strategic tragedy, it has also created a huge ecological disaster. A massive oil spill in the Kerch Strait is now defiling up to 35 km of Anapa's beaches. Russia's inability to maintain basic maritime safety speaks volumes - these were ships that were supposed to be river boats, never operating on high seas and never in extreme weather conditions. Due to the dock being hit, they were forced to be at sea far longer than they had intended, causing the destruction due to waves. Gnarly, it was definitely one of the largest naval disasters ever recorded.

Russian oil refineries are back on the menu. First is Putin’s 10th largest refinery in Novoshakhtisk and Novosibirsk. The latter is interesting because it wasn’t an attack by Ukraine - it was an attack by Free Russian Legion, a pro-Ukrainian group within Russia, and it happened 4,500km from the front lines. Gonna have to keep an eye on that group, for sure. Explosions near Murmansk’s naval base are also unclear - were they Ukrainian or someone else?

In a brief stop to Africa, the Sudan has blocked a proposed Russian naval base. I think even the Sudanese can smell a losing proposition. They would prefer to avoid sanctions and probably see the loss of Syria as a sign of things to come with regard to their ability to project power into the region after the loss of Tartus.

Onto European news. The EU is betting big on self-reliance, announcing plans for a 300-satellite network to rival Starlink by 2030. Do you see the increasing balkanization happening before your eyes? At least for anything critical, this makes a ton of sense.

Switzerland is only a week or so from their nationwide ban or the Burqua. It will be a monetary fine of 1,000 Swiss Francs per offense. This will have some interesting ripple effects as people leave the country for their beliefs, or take the hit financially, or more than likely realize their beliefs aren’t all that important.

There was a cool but brief video showing the proposed British soldier load-out. It’s heavy in electronic warfare and drone capabilities, which is likely the right call, given what we are seeing play out in Ukraine.

Onto Southeast Asia, where China's hypersonic advances continue apace, with drones launching test planes from ballons in experiments that could redefine military aviation, though I think that is a slow path to getting things to altitude if time is of the essence. Meanwhile, economic concerns in China deepen as 2-year bond yields dip below 1%, signaling the approaching reckoning of their financial debt bubble. That won’t necessarily stop them from wanting to invade Taiwan; in fact, it may hasten it because it will change the economic situation on the ground either way, so may as well do two catastrophes at once. Meanwhile, China has demanded that the US withdraw its troops from occupied Cuba. Good luck with that!

On a different note, Taiwan received its first shipment of Abrams tanks, a game-changer for regional security, and they must be breathing easy seeing the results of their performance in Ukraine.

Onto the Middle East news, where Syrian leadership commits not to facilitate attacks on Israel, which has got to be annoying Iran, to Turkey's potential northern Syria offensive against US-backed Kurdish forces, the region remains a flashpoint that we’ll have to watch carefully. Israel isn’t waiting, though, as they move further into Syria along the Daraa countryside.

If something does happen with Turkey invading into the north of Syria, it likely will either happen this weekend or early next week due to a temporary ceasefire between the SDF (Kurds) and the SNA (anti-Assad forces). The only way this seems to work is if the Kurds are able to capture and keep some land with a buffer zone of some sort. Having their own country would likely not make Turkey happy, but it might enable the groups to avoid the almost certainly huge death toll that is to come.

Israel struck Houthi targets in Yemen in response to drone attacks, with operations that stretched its air force to new limits. There is some rather poor footage of the attacks against various targets, including munitions, fuel/oil depots, power stations, boats, etc. Some of the damage from the Hezyaz power plant can be seen here.

There was a very exciting battle of Hamas soldiers attempting to infiltrate via water and being killed by Israeli forces. It’s a little hard to see due to the water spray, but you can tell what a chaotic environment it is to operate at see.

Onto North American news where Canada is in meltdown mode. Finance Minister Chrystia Freeland’s abrupt resignation has led to cascading chaos, with rumors swirling that Trudeau himself might be stepping down. Even his own party is calling for his resignation, and a contempt case looms. The time has passed to pass a budget, so we will see what ends up happening.

In brief tech news, Google’s Veo 2 AI media tool has officially transcended the uncanny valley from my perspective. I watched several of the videos and know it’s AI but man - it’s good. Meanwhile, XBOW, the first very good automated web pentester, actually surpassed or met the same capabilities as all human pen-testers that were pitted against it, in a fraction of the time, except for logic flaws. Very impressive.

Okay, onto the articles!

Geopolitical

Israel's military actions in Gaza, including cutting off water supplies and destroying critical infrastructure, have led to severe humanitarian issues for the Palestinian population. Human Rights Watch has described these actions as potentially constituting genocide under international law, prompting calls for international sanctions against Israel. The ongoing conflict has resulted in a significant death toll and widespread displacement in the region.

• Israel has restricted access to water and electricity in Gaza, severely impacting the population's survival.

• Human Rights Watch and other organizations are calling for sanctions and intervention from the international community.

[RSnake: If Hamas will let the resupply trucks in, that would be great for their people.]

Source: https://www.aljazeera.com/news/2024/12/19/israel-committing-acts-of-genocide-by-cutting-off-water-in-gaza-hrw-says?traffic_source=rss

The UN General Assembly adopted a resolution on December 17, 2024, referring to Russia's actions in Ukraine as a 'war of aggression,' marking the first time such terminology has been officially used by the body. The resolution emphasizes the need for monitoring human rights violations in occupied territories and demands that Russia cease its military aggression and withdraw its forces.

• The UN resolution reflects a significant shift in international recognition of Russia's actions in Ukraine.

• The document calls for enhanced monitoring of human rights abuses in occupied territories and reaffirms Ukraine's sovereignty.

[RSnake: Finally, a little mealymouthed action from the UN. About time. Though it will come of nothing, of course.]

Source: https://www.pravda.com.ua/eng/news/2024/12/18/7489608/

Iran has reached a significant level of nuclear capability, with enough fissile material to potentially create over a dozen nuclear weapons, according to the head of the International Atomic Energy Agency. Additionally, there are reports of Iran actively targeting U.S. officials, including former President Trump, through assassination plots involving the Islamic Revolutionary Guard Corps.

• Iran has enough fissile material to produce multiple nuclear weapons.

• Iran is reportedly involved in assassination plots against U.S. officials.

[RSnake: That cannot be allowed to happen if Israel wants to survive.]

Source: https://www.dailywire.com/news/un-nuclear-inspector-iran-at-practically-the-same-level-as-nuclear-armed-states

The UK has announced new sanctions targeting Russia's energy sector and is providing £35 million in emergency support to Ukraine as the country faces severe humanitarian challenges due to intensified Russian missile attacks. Millions of Ukrainians are without electricity during harsh winter conditions, with two-thirds of the nation's power generation capacity damaged since the start of the invasion, prompting urgent international assistance.

• UK imposes new sanctions on 20 ships involved in transporting Russian oil.

• Over 14.6 million Ukrainians require humanitarian assistance due to the ongoing conflict.

[RSnake: Okay, fine, good, now how are you going to power the country?]

Source: https://euromaidanpress.com/?p=310223

Chancellor Olaf Scholz's government in Germany has collapsed following a confidence vote, amid escalating political instability. This dissolution comes as the country faces significant economic and security challenges, with elections now anticipated in February 2025.

• Chancellor Olaf Scholz lost a confidence vote, leading to the collapse of the government.

• Germany will now have a caretaker government until early elections in February 2025.

Source: https://www.nytimes.com/2024/12/16/world/europe/germany-confidence-vote-scholz-snap-election.html

The US Senate passed the National Defense Authorization Act, allowing for expanded surveillance powers under Section 702 of the Foreign Intelligence Surveillance Act. This change permits the government to compel a wider range of businesses to assist in wiretapping communications, which may lead to increased monitoring of Americans without warrants.

• The NDAA grants significant surveillance powers to the government, potentially impacting the privacy of US citizens.

• Changes to the definition of 'electronic communications service providers' expand the types of companies that can be monitored.

[RSnake: Great, because they did so well with this when the cell companies’ surveillance systems got compromised by the CCP. You know, the ones we still can’t kick the CCP out of…? Perfect. 🙄 ]

Source: https://www.wired.com/story/congress-spy-powers-fisa-ndaa-trump-702/

U.S. President Donald Trump is taking a proactive approach to resolve the ongoing Ukraine War as he enters office, considering options that may involve negotiating with Russian President Vladimir Putin. There is a focus on strengthening Ukraine's negotiating position and ensuring security guarantees as peace talks loom, amidst a static battlefield situation and increasing foreign military involvement from North Korea and China.

• Trump aims to negotiate a resolution to the Ukraine War that might involve concessions to Russia.

• Strengthening Ukraine's military and negotiating leverage is crucial for future peace negotiations.

[RSnake: I am reallllly curious how this will play out. We won’t have long to wait. January is almost here.]

Source: https://www.defensenews.com/opinion/2024/12/18/make-putin-an-offer-he-cant-refuse/

China has significantly expanded its nuclear arsenal, with projections indicating over 1,000 operational nuclear warheads by 2030. Additionally, China's military activities around Taiwan and its ongoing support for Russia in the Ukraine conflict have increased tensions with the United States, which is preparing to bolster its military presence in the Asia-Pacific region in response.

• China's nuclear force has grown to over 600 warheads and is expected to exceed 1,000 by 2030.

• The U.S. is increasing its military readiness in response to China's activities and support for Russia.

[RSnake: The question is why. This made sense during the Cold War because we wanted to kill one another. Who does the CCP want to kill, exactly? This is purely a build-up preparing for aggression. This serves no defensive purpose if they have no intention of getting into a global conflict. But quite obviously, they do, so we should treat them as such.]

Source: https://www.military.com/daily-news/2024/12/18/china-has-expanded-its-nuclear-force-and-strengthened-ties-russia-pentagon-says.html

North Korea has reportedly supplied missiles to Russia for use in the conflict in Ukraine, with evidence presented to the UN Security Council. Furthermore, North Korean troops have allegedly been deployed to assist Russian forces, suffering significant casualties in the conflict. The situation raises concerns about the deepening military alliance between North Korea and Russia, which may affect regional and international security dynamics.

• North Korean missiles have been found in Ukraine, indicating a direct military supply relationship with Russia.

• North Korean troops deployed in Ukraine are experiencing high casualties, showing the complexities of foreign military assistance in conflicts.

[RSnake: “Miles of artillery” on trains. Miles of them. We should see those hitting the front in the coming weeks.]

Source: https://www.aljazeera.com/news/2024/12/19/un-security-council-told-of-north-korean-missiles-used-by-russia-in-ukraine?traffic_source=rss

U.S. Air Force reports indicate that Chinese missile capabilities pose significant threats to American air operations in the Indo-Pacific, particularly affecting air bases in Japan and Guam. In the event of conflict, these missile threats could result in prolonged closures of vital runways and hinder U.S. military operations, necessitating a shift in strategy to improve the resilience and response capabilities of U.S. forces.

• Chinese missiles can threaten the operation of U.S. air bases in Japan and Guam during a conflict.

• The U.S. Air Force may need to prioritize air denial strategies and increase the use of uncrewed systems to counter Chinese missile threats.

[RSnake: Yup, I suspect we shall see a decline in any transiting through that region if things go hot.]

Source: https://www.defensenews.com/opinion/2024/12/17/no-runways-no-sorties-chinese-missiles-threaten-us-airpower-plans/

Russia has detained a suspect believed to be responsible for the murder of General Igor Kirillov, who was killed in a bomb blast in Moscow. The suspect claims to have been recruited by Ukrainian special forces to carry out the attack, prompting reactions from both Russia and Ukraine amid ongoing tensions in the conflict.

• A 29-year-old Uzbek national has been detained by Russian authorities for allegedly carrying out a bombing that killed General Igor Kirillov.

• The incident is significant as it marks the assassination of a high-ranking Russian military officer within Russia.

[RSnake: Interesting and unsurprising. Also, what does Russia expect?]

Source: https://www.aljazeera.com/news/2024/12/18/russia-detains-suspect-over-murder-of-general-igor-kirillov?traffic_source=rss

Vladimir Putin has shifted his stance on the Syrian conflict after the collapse of the Assad regime, signaling a retreat from previous propaganda asserting the strength of his military influence.

• Putin's shift in narrative regarding Syria reveals vulnerabilities in his military strategy.

• Western perceptions of Russian escalation may need reevaluation following these developments.

[RSnake: He doesn’t seem as intimidating as he used to. Ask the leaders of Sudan.]

Source: https://www.atlanticcouncil.org/?p=814574

Palantir Technologies has secured a contract valued at up to $618.9 million with the U.S. Army to expand the Army Vantage program, which enhances data integration and decision-making capabilities across various military operations. This partnership is aimed at enabling more efficient, data-driven operations by leveraging advanced artificial intelligence and analytics tools to support a broad spectrum of military applications, impacting over 100,000 users and 180 unique data sources.

• Palantir has extended its partnership with the U.S. Army to enhance data analytics capabilities.

• The program aims to improve operational effectiveness across various military functions.

[RSnake: They are definitely leading the way. Very glad they are on the US’s side.]

Source: https://thereadable.co/palantir-expands-army-vantage-partnership-with-618-9m-contract/

The U.S. Navy has reported a waste of $1.84 billion in its modernization program for Ticonderoga class guided-missile cruisers, primarily due to poor oversight and planning. As a result, nearly half of the amphibious warfare ships necessary for Marine operations are often unavailable, leading to missed exercises and delayed deployments.

• The Navy has wasted $1.84 billion since 2015 on cruiser modernization due to weak oversight.

• Nearly half of the Marine Corps' amphibious warfare ships are unavailable, impacting mission readiness.

[RSnake: A ton of these boats will never float - in fact, they are being decommissioned before they even finish the modernization.]

Source: https://www.defensenews.com/news/your-navy/2024/12/18/us-navy-wasted-18-billion-on-cruiser-modernization-program-report/

Rampant corruption within the Chinese military is hindering its operational effectiveness, potentially delaying future plans for an invasion of Taiwan. The Pentagon reports ongoing anti-corruption efforts have resulted in the removal of several high-ranking military officials, which may disrupt China's military modernization and strategic goals related to a 2027 timeline for improved capabilities.

• Corruption in the Chinese military is impacting its ability to meet strategic military objectives.

• The Pentagon's report reveals a significant military buildup in China, yet suggests internal issues may slow down future operations.

[RSnake: Good… I suspected this would happen, similar to what we are seeing in Russia with blocks of wood instead of plastic explosives. In China, it is water instead of fuel in ballistic missiles, etc. It’s hard to tell exactly how good or bad they would be, but a mix is likely the right answer.]

Source: https://www.defensenews.com/pentagon/2024/12/18/corruption-may-slow-chinas-ability-to-one-day-invade-taiwan-dod-says/

The U.S. Senate has approved a National Defense Authorization Act that includes a 14.5% pay raise for junior enlisted service members and a 4.5% increase for all other service members. Additionally, the bill includes a provision that restricts healthcare for transgender military children, prompting calls for a veto from advocates and some Democrats, although there is no indication that President Biden will do so.

• Junior enlisted service members are set to receive a significant pay raise, with a total of 14.5% for those in ranks E-1 to E-4.

• The National Defense Authorization Act includes controversial provisions restricting healthcare for transgender children of service members.

[RSnake: That won’t even cover the cost of inflation.]

Source: https://www.military.com/daily-news/2024/12/18/145-junior-enlisted-pay-raise-restriction-care-transgender-military-kids-headed-bidens-desk.html

The incoming U.S. administration, under President-elect Donald Trump, is planning a diplomatic trip focused on Ukraine and European capitals to address the ongoing Russo-Ukrainian War. The envoy's itinerary notably excludes Moscow, indicating a strategy to engage primarily with Kyiv and European allies.

• Trump's incoming Ukraine envoy plans to visit Kyiv and other European capitals in January 2025.

• The absence of Moscow from the envoy's itinerary suggests a focus on building relations with Ukraine and its allies.

[RSnake: Interesting. We shall see what happens!]

Source: https://euromaidanpress.com/?p=310235

Technology

OpenAI is expanding ChatGPT's capabilities to evolve it into an all-encompassing application that integrates multiple functions such as web searching, project management, and autonomous task completion. As part of this initiative, OpenAI has been systematically rolling out new features over a 12-day promotional event, aiming to maximize user engagement and pave the way for future advancements in artificial general intelligence (AGI). The company is also making significant revenue projections, seeking to incorporate enhancements that make ChatGPT increasingly valuable to users.

• OpenAI is launching new features for ChatGPT as part of a strategy to transform it into a comprehensive application.

• The company aims to generate substantial revenue while working towards artificial general intelligence.

[RSnake: Sure, but if it is going to censor things, it won’t be useful for tons of applications. Everything from medical issues, social issues, romance issues, etc… etc…. It’s really surprising they haven’t figured out they need an NSFW/unfiltered mode. Every search engine has this already, why don’t they?]

Source: https://mashable.com/article/openai-plan-to-make-chatgpt-everything-app

Recent developments in neurotechnology, particularly through DARPA's programs, are exploring methods to enhance cognitive function via non-invasive vagus nerve stimulation (nVNS). Studies have shown significant improvements in focus and memory recall among military personnel utilizing this technology, with potential applications including support for neurodevelopment in children and optimizing overall brain function.

• DARPA's TNT program is testing various technologies to enhance cognitive functions through non-invasive means.

• nVNS has shown promising results in improving focus and memory recall in military settings and is being investigated for broader applications in neurodevelopment.

[RSnake: Hopefully, this works, but I’m not so sure. CTE is a very real issue, and I think it is more pervasive than the military realizes.]

Source: https://www.zerohedge.com/medical/smarter-faster-focused

Kratos Defense successfully tested its stealth Uncrewed Combat Air Vehicle (UCAV) prototype within the last few months, with the aircraft's performance and systems being proven effective.

• Kratos Defense aims to secure a contract for its Thanatos stealth UCAV with an undisclosed customer.

• The USAF's Collaborative Combat Aircraft program makes the company a potential customer for the Thanatos UCAV.

[RSnake: Cool looking little drone. It's not clear what its capabilities are, but I suspect we’ll see a lot of things like this in the near future.]

Source: https://www.zerohedge.com/military/kratos-conducts-first-test-mysterious-stealth-drone

Tech companies are making significant investments to develop the infrastructure needed for the growing demand for AI technologies, particularly in Africa. Google is funding a subsea fiber-optic cable project to enhance connectivity between Africa and Australia, while also providing support to local tech companies to boost digital infrastructure across the continent.

• Major investments are being made by tech giants to improve digital infrastructure for AI development.

• Google's initiative includes financing a subsea cable to enhance connectivity and foster growth in Africa's tech sector.

[RSnake: Africa might be one of the few places AI makes sense. Land is cheap, laws are… fuzzy, etc. They’d be wise to drop any censorship and copyright laws and let the big companies go rampant there. I’m not sure the Western world has the stomach for what it takes to build good AI-complete unencumbered/uncensored freedom of knowledge.]

Source: https://techcrunch.com/?p=2933013

Voyager 1 is currently over 15 billion miles from Earth and recently encountered a communication glitch, requiring the use of a backup transmitter. The Dwingeloo telescope in the Netherlands was able to detect signals from Voyager 1 at lower frequencies during this issue, facilitating communication with NASA while the primary system struggled.

• Voyager 1 is the farthest human-made object from Earth, currently exploring interstellar space.

• Amateur astronomers utilized the Dwingeloo telescope to receive faint signals from Voyager 1, helping maintain communication with NASA.

[RSnake: They don’t build them like they used to!]

Source: https://gizmodo.com/?p=2000539738

Cybersecurity

A Russian cyber-espionage group known as Midnight Blizzard is engaging in an extensive campaign utilizing phishing emails and rogue Remote Desktop Protocol (RDP) attacks to target international entities, including government, military, and academic institutions. This group's operation is marked by the use of legitimate tools to evade detection and has been observed hitting as many as 200 different targets daily.

• Midnight Blizzard utilizes phishing emails and rogue RDP files to target organizations worldwide.

• The group's tactics involve sophisticated methods that allow for stealthy unauthorized access to victim systems.

[RSnake: Amazing that this hasn’t been fully played out and that RDP is still something people have open to the public Internet. But yet, here we are. More on RDP attacks here.]

Source: https://www.darkreading.com/threat-intelligence/midnight-blizzard-taps-phishing-email-rogue-rdp-nets

A subtle attack on large language models can increase the likelihood of biased responses by up to 78% through synonym replacements in prompts, which can undermine user autonomy and make users more likely to notice target concepts.

• The attack works by manipulating prompts with synonym replacements to produce heavily biased LLM responses.

• The practicality of this attack has the potential to undermine user autonomy and make users more likely to notice target concepts.

[RSnake: Interesting. And yes, it is very easy to put your finger on the scales.]

Source: https://arxiv.org/abs/2406.04755

A new Binding Operational Directive (BOD) has been issued by the US Cybersecurity and Infrastructure Security Agency (CISA) requiring federal civilian agencies to implement specific security configurations to reduce cyber-risk in cloud environments, with measures including identifying specific cloud tenants, implementing assessment tools, and aligning cloud environments to CISA's Secure Cloud Business Applications (SCuBA) secure configuration baselines.

• Cloud security configurations are being mandated by the US Cybersecurity and Infrastructure Security Agency (CISA) to reduce cyber-risk in federal civilian agencies.

• The mandate requires identifying specific cloud tenants, implementing assessment tools, and aligning cloud environments to CISA's Secure Cloud Business Applications (SCuBA) secure configuration baselines.

Source: https://www.darkreading.com/cloud-security/cisa-directs-federal-agencies-secure-cloud-environments

Congo accuses Apple of using conflict minerals, alleging the tech firm complicit in human rights violations and crimes in the Democratic Republic of Congo.

• Congo alleges that Apple uses minerals pillaged from the Democratic Republic of Congo and laundered through international supply chains.

• Apple denies direct sourcing of primary minerals and claims to audit suppliers, publish findings, and fund bodies improving mineral traceability.

[RSnake: I don’t think anyone would be surprised if they did, but it’s also very difficult to get a full analysis of the supply chain, too.]

Source: https://www.fastcompany.com/91248336/apple-under-fire-using-conflict-minerals-supply-chain

A cyberattack on the Texas Tech University Health Sciences Center impacted 1.4 million patients, resulting in sensitive data exposure. The breach was identified between September 17 and September 29, 2024, and has led the organization to take measures for network security and notify affected individuals about potential risks.

• A cyberattack compromised sensitive data of 1.4 million patients in Texas.

• Hackers leaked 2.1 million files on the dark web, including stolen data from the organization.

[RSnake: Ouch - that is a lot of PII records. Imagine how much sensitive information was in there. More on that here.]

Source: https://www.bleepingcomputer.com/news/security/texas-tech-university-system-data-breach-impacts-14-million-patients/

Attackers are using links to Google Calendar invites to steal credentials for financial fraud, bypassing email protections with modified sender headings and custom file formats.

• Attackers use modified Google Calendar invites to steal credentials for financial fraud, bypassing email protections.

• Google Calendar is used by over 500 million people, providing a massive attack surface for cybercriminals.

[RSnake: Ouch - and unsurprising. Calendaring is a highly complex application. Far more so than it ever should have been, but that was largely Microsoft’s doing with their complicated mimetypes, headers, etc. Google largely inherited that stuff and had to support it.]

Source: https://www.darkreading.com/cyberattacks-data-breaches/phishers-spoof-google-calendar-invites-global-campaign

Mysterious drones are being spotted flying over various locations in the US, sparking theories about their origin and purpose, with some speculating they may be related to a potential US war with Russia or other international conflicts.

• The US government is playing down the situation, but drone sightings have been reported over multiple states, including New Jersey, Massachusetts, Pennsylvania, and Ohio.

• Several theories abound, including speculation about drones carrying radioactivity or being used to test delivery systems, as well as attempts to disrupt international conflicts, particularly those involving Russia.

[RSnake: It was nothing. We can relax now. But the ones over military bases are not nothing.]

Source: https://www.zerohedge.com/political/santa-please-bring-me-war-christmas

A phishing campaign using HubSpot has compromised approximately 20,000 Microsoft Azure accounts in Germany and the UK by exploiting HubSpot Form Builder to create deceptive forms and redirect victims to attacker-controlled sites.

• Phishing campaign using HubSpot exploits Form Builder to target 20,000 Microsoft Azure accounts in Germany and the UK.

• Threat actors used HubSpot links and DocuSign-mimicking PDFs to redirect victims to credential-harvesting pages.

[RSnake: Interesting. I have seen some of these, because the forms are legit, they just are build by bad actors.]

Source: https://www.bleepingcomputer.com/news/security/hubspot-phishing-targets-20-000-microsoft-azure-accounts/

Recorded Future, a U.S. cybersecurity firm, has been designated as an 'undesirable' organization by the Russian government, effectively banning its operations in the country. This label was applied due to allegations that Recorded Future provides support for Western propaganda and assists Ukraine with intelligence on Russian military activities.

• Recorded Future is the first cybersecurity firm to receive an 'undesirable' designation from Russia.

• Russia accuses the company of aiding Western propaganda efforts and providing intelligence support to Ukraine.

[RSnake: Lol. I bet they have. I am surprised Palantir didn’t get the nod too.]

Source: https://www.bleepingcomputer.com/news/security/recorded-future-ceo-applauds-undesirable-designation-by-russia/

A 15-year-old girl in Wisconsin opened fire at a conservative Christian school, killing two and injuring six, before turning the gun on herself. Investigators have found a digital trail connecting her to a graphic online forum that showcases videos of death and violence, indicating a disturbing fascination with such content.

• The shooter had a history of disturbing online activity linked to a platform featuring graphic violence.

• The attack occurred during a study hall session at a Christian school, resulting in multiple casualties.

[RSnake: Gross. There is a lot of evil shit online. Don’t let your kids use the Internet unattended until you are sure they have the mental wherewithal to handle whatever they come across.]

Source: https://timesofindia.indiatimes.com/world/us/natalie-rupnows-dark-online-past-wisconsin-school-shooter-linked-to-site-watch-people-die-showing-beating-beheadings-and-gruesome-deaths/articleshow/116453659.cms

A GPS tracking company, Hapn, is experiencing a security breach that has exposed the names and affiliations of thousands of its customers due to a website vulnerability. The exposed data includes details on over 8,600 GPS trackers, but does not contain location data.

• A bug allowed unauthorized access to customer information including names and business affiliations.

• The exposure affects thousands of users, raising significant privacy concerns.

[RSnake: Wow - that will be interesting, to see who is spying on who…]

Source: https://techcrunch.com/?p=2934319

A tax preparer in the Bronx, Rafael Alvarez, was found to have committed one of the largest tax frauds in U.S. history, defrauding the I.R.S. out of $145 million. He falsely filed thousands of tax returns, resulting in substantial undeserved refunds for clients, and is facing up to eight years in prison following his guilty plea.

• Rafael Alvarez operated ATAX and filed fraudulent tax returns for years.

• He agreed to pay $145 million in restitution and forfeited nearly $12 million in fraudulent proceeds.

[RSnake: If you were watching the RSnake Show, I interviewed the FBI’s #1 most wanted cyber criminal who invented that. Just shows how powerful it is as a technique. We estimated $4BN in fraud annually using tax refunds, and that was a decade ago or more.]

Source: https://www.nytimes.com/2024/12/17/nyregion/fraud-tax-return-charges-bronx.html

Business

The Department of Homeland Security (DHS) has announced enhancements to the H-1B visa program, allowing U.S. employers to fill job vacancies in specialty occupations more efficiently. Changes include a streamlined approvals process, increased flexibility for employers, and enhanced oversight to ensure compliance with labor laws.

• New rules modernize the H-1B program to boost economic competitiveness.

• Improvements will allow quicker processing and greater employer flexibility in hiring skilled workers.

[RSnake: Good, that’ll be useful for a lot of companies. Of course it would be nice to vet them to make sure they actually like the United States and don’t have ties to the CCP or other rival national interests.]

Source: https://www.uscis.gov/newsroom/news-releases/dhs-strengthens-h-1b-program-allowing-us-employers-to-more-quickly-fill-critical-jobs

Thousands of Amazon workers are set to strike, aiming for better wages and work conditions after failing to negotiate contracts with the company. The International Brotherhood of Teamsters represents around 10,000 workers across several U.S. facilities who are participating in this labor action, coinciding with the peak holiday season.

• Amazon workers will walk off the job due to unfulfilled contract negotiations.

• The strike involves multiple facilities, indicating a larger movement for unionization within Amazon.

[RSnake: Ouch. Well, hopefully, all your Amazon orders have been placed. This will be a hell of a ride for a while if it does come to pass. Btw, Starbucks has a similar walkout planned, so get your coffee beans now! Speaking of….]

Source: https://www.reuters.com/technology/amazon-workers-strike-multiple-us-warehouses-during-busy-holiday-season-2024-12-19/

Starbucks is facing significant competition in China as local coffee and tea chains offer more diverse flavors and lower prices, leading to a sharp decline in the company's sales. The shift in consumer preferences from foreign brands to cost-effective local options has intensified market competition, culminating in a 14 percent drop in same-store sales for Starbucks in its latest financial quarter.

• Starbucks is experiencing a rapid loss of customers in China due to competition from local brands.

• Consumer preferences in China are shifting towards cheaper, diverse beverage options offered by homegrown chains.

[RSnake: I will keep saying this for as long as it takes - China is not a real market for US businesses.]

Source: https://www.nytimes.com/2024/12/19/business/starbucks-china.html

OpenAI is facing significant financial challenges, with annual expenses exceeding $5.4 billion and projected to reach $37.5 billion by 2029.

• Building a chatbot like ChatGPT requires billions of dollars in funding.

• OpenAI needs to raise additional billions of dollars in the years to come to meet its accelerating expenses.

[RSnake: And growing! I wonder what they got paid for the Apple Intelligence deal. Clearly, it wasn’t enough, and Apple will almost certainly roll out its own at some point. I think Meta’s LLama 3.3 goes a long way to undercutting the market btw.]

Source: https://www.nytimes.com/2024/12/17/technology/openai-chatgpt-funding.html

The Federal Reserve implemented a 'hawkish cut' on interest rates, indicating expectations for persistent inflation above their target for next year. This has led to significant declines in major stock indices, particularly affecting stocks like Tesla and GameStop, as investors reacted to the Fed's updated projections and the potential for tighter monetary policy in the future.

• The Federal Reserve cut interest rates but projected continued high inflation, which surprised markets.

• Major stock indices fell sharply in response to the Fed's hawkish stance, with significant drops in technology and speculative stocks.

[RSnake: Great, more inflation. Perfect. More on the cuts here.]

Source: https://www.ft.com/content/a429c12b-04e8-4e1f-a591-98d93f49c9e9

President-elect Trump is holding meetings with top executives, including TikTok CEO Shou Chew, as he expresses support for the app, which he credits for his appeal to young voters. TikTok is currently facing a mandated divestiture from its Chinese parent company amid U.S. security concerns, and Trump’s administration may influence the future of the app in the United States. Additionally, Congress has warned major tech companies to prepare for TikTok's removal from app stores by mid-January unless a resolution is reached.

• Trump is meeting with TikTok CEO Shou Chew after having initially supported a ban on the app.

• TikTok is seeking to delay a ban while trying to navigate a required sale from its Chinese owner due to U.S. security legislation.

[RSnake: Huh - I wonder if he has a plan here to use it as some state-controlled app of some sort.]

Source: https://abcnews.go.com/Politics/trump-meeting-tiktok-ceo-shou-chew-mar-lago/story?id=116847471

Mars, Inc. plans to invest in new infrastructure and processes over the next five years to ensure that its cocoa sourcing is both environmentally responsible and free from child labor. This initiative is a response to the estimated 1.56 million children engaged in child labor in cocoa-producing regions like Côte d’Ivoire and Ghana, which supply 60% of the world's cocoa.

• Mars is aiming to create a segregated supply chain for cocoa to trace its sources.

• The initiative seeks to address both child labor and environmental sustainability in cocoa production.

[RSnake: Child labor free never tasted so good.]

Source: https://www.supplychainbrain.com/articles/40855-mars-carves-path-toward-responsibly-sourced-cocoa

Boeing is investing $1 billion and hiring 500 workers in South Carolina to expand its manufacturing of the 787 Dreamliner, responding to increased demand for wide-body jets. The new final-assembly plant is expected to begin operations by early 2027, while Boeing aims to ramp up production to meet its goals after facing supply chain challenges.

• Boeing is expanding its production capabilities for the 787 Dreamliner in South Carolina due to rising demand.

• The company is overcoming supply chain issues to increase production targets by 2026.

[RSnake: Hopefully, these people were hired because they have talent, not based on what they look like.]

Source: https://www.supplychainbrain.com/articles/40853-boeing-to-spend-1b-to-expand-787-dreamliner-complex

The Federal Trade Commission (FTC) has implemented a new rule requiring hotels and ticket sales companies to disclose all fees upfront to consumers, effective April 16, 2025. This rule aims to eliminate hidden charges, often perceived as 'junk fees,' that consumers often encounter during transactions, with support from a significant majority of the public who oppose such fees.

• The FTC has finalized a rule mandating price transparency for hotels and ticketing companies.

• Companies will face fines for failing to disclose all costs associated with purchases upfront.

[RSnake: That could be interesting for consumers. Sorta like knowing what you are eating. Why am I paying so much for this? Of course, this really is just to get customers angry at a perception of growing profits.]

Source: https://gizmodo.com/?p=2000539804

Elon Musk's platform X is projected to lose millions of users through 2025, with recent data showing a significant drop in daily active users in the U.S. over the month leading up to the elections. The brand value of X has decreased dramatically since Musk's acquisition, indicating a broader decline in the platform's popularity and revenue.

• X has seen a decline of 300,000 to 2.6 million daily active users in the U.S. daily during October 2024.

• X's brand value has fallen from $5.7 billion to $673 million since Musk acquired the platform.

[RSnake: Most of them are heading to Bluesky.]

Source: https://mashable.com/article/elon-musk-x-declining-user-base-2025

MicroStrategy has significantly increased its bitcoin holdings and will be included in the Nasdaq-100 index, providing indirect exposure to bitcoin for investors. As a result of its bitcoin strategy, the company's stock has surged, leading to discussions about the potential impacts on the cryptocurrency market. The inclusion in the index could drive further capital flows into both MicroStrategy and bitcoin prices.

• MicroStrategy's market capitalization has exceeded $100 billion, largely due to its bitcoin investments.

• The company's stock price has increased dramatically since adopting bitcoin as a treasury asset in 2020.

[RSnake: It was only a matter of time before it would be regulated, tracked, and taxed.]

Source: https://www.fastcompany.com/91247580/why-microstrategy-tech-stock-rallying-joins-nasdaq

SoftBank plans to invest $100 billion in the United States over the next four years, primarily targeting artificial intelligence and related infrastructure projects. This investment is expected to create approximately 100,000 jobs and reflects a strong belief in the U.S. economy's potential for growth under the current administration.

• SoftBank will invest in AI infrastructure, creating 100,000 jobs.

• The investment aims to bolster the U.S. economy and demonstrates confidence from international investors.

[RSnake: Smart, for the time being, the US is and will remain the leader until some other nations step up and fix their regulatory regime.]

Source: https://www.zerohedge.com/political/trump-softbanks-masa-son-announce-100-billion-us-investment

Chinese smartphone companies are rapidly introducing low-cost AI-equipped smartphones, with prices starting as low as $168. This shift poses a significant challenge for Apple, which faces declining market share in China as domestic brands gain ground and enhance their AI capabilities, while Apple's AI features remain unavailable in the region.

• Chinese smartphone brands are expanding their market presence with low-cost AI features.

• Apple is struggling to maintain its share in China as local competitors grow stronger.

[RSnake: Only in China, really. This will likely get shot down in other Western markets, even if it rivals the capabilities, in all but the poorest places who can’t afford the iPhones and don’t mind the government ties to the CCP.]

Source: https://www.zerohedge.com/markets/how-will-apple-compete-168-ai-smartphones-chinese-brands

Thanks so much for reading. Once again, please forward this newsletter to anyone you think should be reading it. It’s how the newsletter grows, how I know you love it, and how it encourages me to keep going. I’d really appreciate it!