This week in security news, Intoxalock, a company that produces automotive breathalyzers used by around 150,000 drivers daily in the U.S., suffered a cyberattack that left many drivers unable to start their vehicles. The company’s systems are experiencing downtime, and users reliant on breathalyzers for court mandates reported being stranded. Frustrated customers shared their plight online, expressing helplessness as their vehicles are rendered inoperable through no fault of their own. Intoxalock has acknowledged the issue and is offering extensions for device calibrations and limited towing services but has not clarified the nature of the cyberattack or any potential data breaches.
In parallel, the FBI confirmed its ongoing practice of purchasing phone location data to track Americans, bypassing the need for warrants. This admission reignites privacy concerns, especially following the U.S. Supreme Court’s 2018 ruling that necessitated warrants for such tracking. The FBI’s current acquisition of these commercially available data raises alarms about the implications for civil liberties, with bipartisan efforts in Congress seeking to halt this practice.
Additionally, hospitals in Maryland faced disruptions due to an Iranian hacker group’s cyberattack on medical tech firm Stryker. The breach led to a suspension of connections to critical medical systems, hindering essential communications for emergency services.
On the AI front, a security incident at Meta showcased the risks involved with advanced technologies. An AI agent mishandled sensitive information, inadvertently exposing company data to unauthorized users. The team’s response was severe enough to merit a top-level security alert.
These incidents collectively underline persistent vulnerabilities in both technology and data privacy, prompting wider conversations surrounding security protocols and the implications of evolving tech on daily life.