Federal investigators are probing a suspected cyberattack on more than 30 community water systems across Minnesota, after malicious digital activity disrupted operations and forced several utilities to switch to manual controls.

According to state officials, four cities publicly confirmed the attacks, while investigators are examining whether the hackers have links to Iranian cyber groups. The FBI has cautioned that the findings remain preliminary, and officials are also considering whether the attackers intentionally tried to appear Iran-based amid heightened U.S.-Iran tensions.

The incident has once again raised concerns over the security of America's critical infrastructure, including water, wastewater, energy, and transportation systems. Previous cyber incidents involving alleged Iran-linked hacking groups have already placed U.S. utilities on high alert.

Iran-Linked Cyberattack? FBI Probes Minnesota Water System Hack |US Critical Infrastructure Targeted

The auroras have always appeared mesmerising and mythical to humans, however, a new study suggests that they can actually be a threat to our planet.&nbsp;

The forces which lead to the generation&nbsp;of the auroras also cause&nbsp;the formation of currents which can damage infrastructure through which electricity is conducted, like pipelines.

The scientists wrote about how harmful these auroras can be in the&nbsp;journal,&nbsp;Frontiers in Astronomy and Space Sciences.

They also noted that the impact angle of interplanetary shocks is the reason which determines the strength of the current and gives an opportunity for forecasting dangerous shocks and shielding critical infrastructure.

The article's lead author, Dr&nbsp;Denny Oliveira from&nbsp;NASA's Goddard Space Flight Centre&nbsp;said, "Auroras and geomagnetically induced currents are caused by similar space weather drivers. The aurora is a visual warning that indicates that&nbsp;electric currents&nbsp;in space can generate these geomagnetically-induced currents on the ground."

Also Read:&nbsp;<a href="https://www.wionews.com/trending/earth-witnessed-never-ever-seen-polar-rain-aurora-heres-how-this-eerie-glow-was-formed-738543">Earth witnessed never-ever-seen 'polar rain' aurora. Here's how this eerie glow was formed</a>

"The auroral region can greatly expand during severe geomagnetic storms," he added.

"Usually, its southernmost boundary is around latitudes of 70 degrees, but during&nbsp;extreme events, it can go down to 40 degrees or even further, which certainly occurred during the May 2024 storm—the most severe storm in the past two decades," said Oliveira.&nbsp;

<h2>How&nbsp;are&nbsp;auroras formed?</h2>

The auroras are created by two processes - when particles ejected from the Sun reach the magnetic field of Earth and lead to a geomagnetic storm, or when Earth's magnetic field is compressed by interplanetary shocks.

The shocks also lead to the generation of geomagnetically induced currents. This has the capacity of damaging the infrastructure which conducts electricity.&nbsp;

More powerful interplanetary shocks hint at more powerful currents and auroras.&nbsp;However, researchers noted that&nbsp;less powerful and frequent shocks can also be damaging.

"Arguably, the most intense deleterious effects on power infrastructure occurred in March 1989 following a severe geomagnetic storm—the Hydro-Quebec system in Canada was shut down for nearly nine hours, leaving millions of people with no electricity," Oliveira said.

Watch:&nbsp;Gravitas: Human spaceflight - The riskiest venture of mankind

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/gravitas-human-spaceflight-the-riskiest-venture-of-mankind-737576/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

"But weaker, more frequent events such as interplanetary shocks can pose threats to ground conductors over time. Our work shows that considerable geoelectric currents occur quite frequently aftershocks, and they deserve attention," he added.

The lead author further suggested, "One thing power infrastructure operators could do to safeguard their equipment is to manage a few specific electric circuits when a shock alert is issued. This would prevent geomagnetically induced currents from reducing the lifetime of the equipment."

(With inputs from agencies)

The auroras have always appeared mesmerising and mythical to humans, however, a new study suggests that they can actually be a threat to our planet. The forces which lead to the generation of the auroras also cause the formation of currents which can damage infrastructure through which electricity is conducted, like pipelines.

The auroras have always appeared mesmerising and mythical to humans, however, a new study suggests that they can actually be a threat to our planet. The forces which lead to the generation of the auroras also cause the formation of currents which can damage infrastructure through which electricity is conducted, like pipelines. The scientists wrote about how harmful these auroras can be in the journal, Frontiers in Astronomy and Space Sciences. They also noted that the impact angle of interplanetary shocks is the reason which determines the strength of the current and gives an opportunity for forecasting dangerous shocks and shielding critical infrastructure. The article's lead author, Dr Denny Oliveira from NASA's Goddard Space Flight Centre said, "Auroras and geomagnetically induced currents are caused by similar space weather drivers. The aurora is a visual warning that indicates that electric currents in space can generate these geomagnetically-induced currents on the ground." Also Read: Earth witnessed never-ever-seen 'polar rain' aurora. Here's how this eerie glow was formed "The auroral region can greatly expand during severe geomagnetic storms," he added. "Usually, its southernmost boundary is around latitudes of 70 degrees, but during extreme events, it can go down to 40 degrees or even further, which certainly occurred during the May 2024 storm—the most severe storm in the past two decades," said Oliveira. How are auroras formed? The auroras are created by two processes - when particles ejected from the Sun reach the magnetic field of Earth and lead to a geomagnetic storm, or when Earth's magnetic field is compressed by interplanetary shocks. The shocks also lead to the generation of geomagnetically induced currents. This has the capacity of damaging the infrastructure which conducts electricity. More powerful interplanetary shocks hint at more powerful currents and auroras. However, researchers noted that less powerful and frequent shocks can also be damaging. "Arguably, the most intense deleterious effects on power infrastructure occurred in March 1989 following a severe geomagnetic storm—the Hydro-Quebec system in Canada was shut down for nearly nine hours, leaving millions of people with no electricity," Oliveira said. Watch: Gravitas: Human spaceflight - The riskiest venture of mankind "But weaker, more frequent events such as interplanetary shocks can pose threats to ground conductors over time. Our work shows that considerable geoelectric currents occur quite frequently aftershocks, and they deserve attention," he added. The lead author further suggested, "One thing power infrastructure operators could do to safeguard their equipment is to manage a few specific electric circuits when a shock alert is issued. This would prevent geomagnetically induced currents from reducing the lifetime of the equipment." (With inputs from agencies)

Mesmerising auroras can threaten planet Earth, harm critical infrastructure: Scientists

FBI Director Christopher Wray on Wednesday (Jan 31) warned that Chinese hackers have been preparing to “wreak havoc and cause real-world harm” to the US. “China’s hackers are positioning on American infrastructure in preparation to wreak havoc and cause real-world harm to American citizens and communities, if or when China decides the time has come to strike,” Wray said while speaking to the House Select Committee on the Chinese Communist Party.

FBI Director Christopher Wray on Wednesday (Jan 31) warned that Chinese hackers have been preparing to “wreak havoc and cause real-world harm” to the US. “China’s hackers are positioning on American infrastructure in preparation to wreak havoc and cause real-world harm to American citizens and communities, if or when China decides the time has come to strike,” Wray said while speaking to the House Select Committee on the Chinese Communist Party. Although an alarm regarding China’s offensive cyber capabilities has been sounded earlier by the cyber officials, Wray’s dramatic public warning emphasised on huge level of concern among the top officials regarding the threats that the Chinese hackers are posing to critical infrastructure nationwide. The National Security Agency's head and other senior US officials also testified over Chinese cyber activity in front of the panel on Wednesday. Also read: Xi Jinping welcomes Taliban ambassador to China as Kabul-Beijing ties move forward Wray said that the Chinese government-backed hackers have been targeting things like electrical infrastructure, oil and natural gas pipelines and water treatment plants. The Chinese hackers have been working “to find and prepare to destroy or degrade the civilian critical infrastructure that keeps us safe and prosperous,” said Wray. “And let’s be clear: Cyber threats to our critical infrastructure represent real world threats to our physical safety," he added. Earlier, the Chinese government has previously denied allegations regarding hacking efforts. Chinese cyber actors took advantage of flaws in US technology The hearing took place in the wake of efforts being made by US and Chinese officials to ease tensions in the relationship between the two countries. Speaking about the assurances given by China at the House hearing, Wray said, “China’s promised a lot of things over the years, so I’ll guess I’ll believe it when I see it.” The hearing's focus was not on US elections but on how Chinese hackers have been allegedly burrowing in computer networks at energy plants, ports and other key infrastructure in the United States. Watch: Gravitas | U.S. disables pervasive chinese hacking campaign “The truth is the Chinese cyber actors have taken advantage of very basic flaws in our technology. We have made it easy on them,” Jen Easterly, who headed the US Cybersecurity and Infrastructure Security Agency, said to the lawmakers. “Unfortunately, the technology underpinning our critical infrastructure is inherently insecure because of decades of software developers not being held liable for defective technology. That has led to incentives where features and speed to market have been prioritized against security, leading our nation vulnerable to cyber invasion. That has to stop,” Easterly said. The FBI and Justice Department have earlier emphasised on preventing malign campaigns which are being run by the Chinese government and hackers. (With inputs from agencies)

FBI chief warns Chinese hackers 'wreaking havoc' on US critical infrastructure

The US government in recent months launched an operation to fight a pervasive Chinese hacking operation that successfully compromised thousands of internet-connected devices, according to two Western security officials and one person familiar with the matter.

The Justice Department and Federal Bureau of Investigation sought and received legal authorization to remotely disable aspects of the Chinese hacking campaign, the sources told Reuters.

The Biden administration has increasingly focussed on hacking, not only for fear nation states may try to disrupt the US election in November, but because ransomware wreaked havoc on Corporate America in 2023.

The hacking group at the centre of recent activity, Volt Typhoon, has especially alarmed intelligence officials who say it is part of a larger effort to compromise Western critical infrastructure, including naval ports, internet service providers and utilities.

While the Volt Typhoon campaign initially came to light in May 2023, the hackers expanded the scope of their operations late last year and changed some of their techniques, according to three people familiar with the matter.

The widespread nature of the hacks led to a series of meetings between the White House and private technology industry, including several telecommunications and cloud commuting companies, where the US government asked for assistance in tracking the activity.

Such breaches could enable China, national security experts said, to remotely disrupt important facilities in the Indo-Pacific region that in some form support or service US military operations. Sources said US officials are concerned the hackers were working to hurt US readiness in case of a Chinese invasion of Taiwan.

China, which claims democratically governed Taiwan as its own territory, has increased its military activities near the island in recent years in response to what Beijing calls "collusion" between Taiwan and the United States.

The Justice Department and FBI declined to comment. The Chinese embassy in Washington did not immediately respond to a request for comment.

When Western nations first warned about Volt Typhoon in May, Chinese foreign ministry spokesperson Mao Ning said the hacking allegations were a "collective disinformation campaign" from the Five Eyes countries, a reference to the intelligence sharing grouping of countries made up of the United States, Canada, New Zealand, Australia and the UK.

Volt Typhoon has functioned by taking control of swaths of vulnerable digital devices around the world - such as routers, modems, and even internet-connected security cameras - to hide later, downstream attacks into more sensitive targets, security researchers told Reuters. This constellation of remotely controlled systems, known as a botnet, are of primary concern to security officials because they limit the visibility of cyber defenders that monitor for foreign footprints in their computer networks.

"How it works is the Chinese are taking control of a camera or modem that is positioned geographically right next to a port or ISP (internet service provider) and then using that destination to route their intrusions into the real target," said a former official familiar with the matter. "To the IT team at the downstream target it just looks like a normal, native user that's sitting nearby."

The use of so-called botnets by both government and criminal hackers to launder their cyber operations is not new. The approach is often used when an attacker wants to quickly target numerous victims simultaneously or seeks to hide their origins.

The US government in recent months launched an operation to fight a pervasive Chinese hacking operation that successfully compromised thousands of internet-connected devices, according to two Western security officials and one person familiar with the matter.

The US government in recent months launched an operation to fight a pervasive Chinese hacking operation that successfully compromised thousands of internet-connected devices, according to two Western security officials and one person familiar with the matter. The Justice Department and Federal Bureau of Investigation sought and received legal authorization to remotely disable aspects of the Chinese hacking campaign, the sources told Reuters. The Biden administration has increasingly focussed on hacking, not only for fear nation states may try to disrupt the US election in November, but because ransomware wreaked havoc on Corporate America in 2023. The hacking group at the centre of recent activity, Volt Typhoon, has especially alarmed intelligence officials who say it is part of a larger effort to compromise Western critical infrastructure, including naval ports, internet service providers and utilities. While the Volt Typhoon campaign initially came to light in May 2023, the hackers expanded the scope of their operations late last year and changed some of their techniques, according to three people familiar with the matter. The widespread nature of the hacks led to a series of meetings between the White House and private technology industry, including several telecommunications and cloud commuting companies, where the US government asked for assistance in tracking the activity. Such breaches could enable China, national security experts said, to remotely disrupt important facilities in the Indo-Pacific region that in some form support or service US military operations. Sources said US officials are concerned the hackers were working to hurt US readiness in case of a Chinese invasion of Taiwan. China, which claims democratically governed Taiwan as its own territory, has increased its military activities near the island in recent years in response to what Beijing calls "collusion" between Taiwan and the United States. The Justice Department and FBI declined to comment. The Chinese embassy in Washington did not immediately respond to a request for comment. When Western nations first warned about Volt Typhoon in May, Chinese foreign ministry spokesperson Mao Ning said the hacking allegations were a "collective disinformation campaign" from the Five Eyes countries, a reference to the intelligence sharing grouping of countries made up of the United States, Canada, New Zealand, Australia and the UK. Volt Typhoon has functioned by taking control of swaths of vulnerable digital devices around the world - such as routers, modems, and even internet-connected security cameras - to hide later, downstream attacks into more sensitive targets, security researchers told Reuters. This constellation of remotely controlled systems, known as a botnet, are of primary concern to security officials because they limit the visibility of cyber defenders that monitor for foreign footprints in their computer networks. "How it works is the Chinese are taking control of a camera or modem that is positioned geographically right next to a port or ISP (internet service provider) and then using that destination to route their intrusions into the real target," said a former official familiar with the matter. "To the IT team at the downstream target it just looks like a normal, native user that's sitting nearby." The use of so-called botnets by both government and criminal hackers to launder their cyber operations is not new. The approach is often used when an attacker wants to quickly target numerous victims simultaneously or seeks to hide their origins.

US disabled Chinese hacking network targeting critical infrastructure, sources say

Most households in the southern Ukrainian city of Kherson are still without electricity and water as utility companies struggle to repair crucial infrastructure damaged and mined by the retreating Russian forces, regional officials said on Sunday.&nbsp;Yaroslav Yanushevych, the governor of Kherson area, announced that as a security precaution, the government had chosen to impose a curfew from 5 pm to 8 am and prohibit anybody from leaving or entering the city.&nbsp;

The enemy mined every piece of vital infrastructure, Yanushevych said on Ukrainian television.&nbsp;

He added that he hoped mobile phone companies will soon be able to restart their service, saying, "We are trying to meet within a few days and (then) open the city."

After Russia abandoned the sole provincial capital it had taken over since it&nbsp;started its invasion in February, Ukrainian troops moved into the centre of Kherson on Friday.&nbsp;

The retreat was the third significant Russian pullback in the conflict and the first to involve giving up such a sizable occupied city in the face of a significant Ukrainian counteroffensive that has retaken areas of the east and south.&nbsp;

Train service to Kherson is anticipated to resume this week, according to the head of Ukrainian state railways.&nbsp;

Also Read:<a href="https://www.wionews.com/business-economy/binance-halts-ftxs-ftt-token-deposits-urges-rivals-to-follow-533755">&nbsp;Binance halts FTX's FTT token deposits, urges rivals to follow</a>

Despite mine-clearing efforts and attempts to restore essential services, a different regional official claimed that the situation in the city "remains very difficult" from a humanitarian standpoint.

The first deputy head of the Kherson regional council, Yuriy Sobolevskiy, told Ukrainian TV that "most houses have no electricity, no water and problems with gas supplies."&nbsp;

In a video speech on Saturday, President Volodymyr Zelensky claimed that "the occupants damaged all the key infrastructure before retreating from Kherson: communications, water, heat, and electricity."&nbsp;

Residents of Kherson greeted Ukrainian troops with joy as they arrived, but the general command of Ukraine stated that severe fighting continued along the eastern front in the Donetsk and Luhansk provinces.

(with inputs from agencies) 
&nbsp;

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1  width=&quot;100%&quot;"></iframe>

Most households in the southern Ukrainian city of Kherson are still without electricity and water as utility companies struggle to repair crucial infrastructure damaged and mined by the retreating Russian forces, regional officials said on Sunday.

Most households in the southern Ukrainian city of Kherson are still without electricity and water as utility companies struggle to repair crucial infrastructure damaged and mined by the retreating Russian forces, regional officials said on Sunday. Yaroslav Yanushevych, the governor of Kherson area, announced that as a security precaution, the government had chosen to impose a curfew from 5 pm to 8 am and prohibit anybody from leaving or entering the city. The enemy mined every piece of vital infrastructure, Yanushevych said on Ukrainian television. He added that he hoped mobile phone companies will soon be able to restart their service, saying, "We are trying to meet within a few days and (then) open the city." After Russia abandoned the sole provincial capital it had taken over since it started its invasion in February, Ukrainian troops moved into the centre of Kherson on Friday. The retreat was the third significant Russian pullback in the conflict and the first to involve giving up such a sizable occupied city in the face of a significant Ukrainian counteroffensive that has retaken areas of the east and south. Train service to Kherson is anticipated to resume this week, according to the head of Ukrainian state railways. Also Read: Binance halts FTX's FTT token deposits, urges rivals to follow Despite mine-clearing efforts and attempts to restore essential services, a different regional official claimed that the situation in the city "remains very difficult" from a humanitarian standpoint. The first deputy head of the Kherson regional council, Yuriy Sobolevskiy, told Ukrainian TV that "most houses have no electricity, no water and problems with gas supplies." In a video speech on Saturday, President Volodymyr Zelensky claimed that "the occupants damaged all the key infrastructure before retreating from Kherson: communications, water, heat, and electricity." Residents of Kherson greeted Ukrainian troops with joy as they arrived, but the general command of Ukraine stated that severe fighting continued along the eastern front in the Donetsk and Luhansk provinces. (with inputs from agencies)

Kherson rushing to restore critical infrastructure damaged by retreating Russian forces

From India's power grid to vaccine makers, Chinese hackers are allegedly targeting critical Indian infrastructure and assets, according to reports.&nbsp;

Two reports hint at potential cyber warfare by China but no breach has been detected by India till now. &nbsp;

India's power ministry said on Monday, it suffered no data breach or loss while no breach has been reported by the vaccine makers too. But the prospect of a cyber-attack from Chinese territory looks real.&nbsp;

The first attempt was allegedly made last year when Chinese troops hadn't de-escalated. In a study, Recorded Future, an US cybersecurity company, has found that while the Indian and Chinese soldiers remained locked in an eyeball-to-eyeball conflict, Chinese hackers launched a cyber campaign against India's power grid, according to this report.&nbsp;

<a href="https://www.wionews.com/videos/gravitas-is-china-engaging-in-cyber-warfare-against-india-367262">WATCH |</a>

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/gravitas-is-china-engaging-in-cyber-warfare-against-india-367262/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

Chinese malware entered control systems that manage the supply of electricity across India. A high-voltage transmission substation was also targeted alongside a coal-fired thermal power plant. Perhaps, the biggest claim is around a power outage that happened in Mumbai last year in October 2020. There was a widespread power outage in Mumbai. It lasted several hours, disrupted train services and threw life out of gear. Was China behind the blackout in Mumbai?&nbsp;

According to Recorded Future, this remains unsubstantiated but there is evidence to suggest that there was a coordinated effort to target Indian load dispatch centres. These centres reportedly serve as a link between power generation and transmission to consumers.&nbsp;

Recorded Future shared its findings with the Indian government. India's power ministry said in its statement on Monday, there wasn't any impact in functionality. &nbsp;&nbsp;

Along with this, news agency Reuters says Chinese hackers backed by the state targeted two Indian vaccine makers, Bharat Biotech and the Serum Institute of India, whose shots are being used for India's coronavirus vaccine programme. Cyber intelligence firm Cyfirma has come out with this finding.&nbsp;

Chinese hacking group 'Apt10' is said to be behind this. It is also known as 'Stone Panda'. It identified gaps and vulnerabilities in two areas i.e. IT infrastructure of the vaccine makers and their supply chain software.&nbsp;

The purpose behind the hack according to experts was quite clear. They wanted to steal intellectual property. This could possibly mean the recipe to make the vaccines. Reportedly, Apt10 was actively targeting the Serum Institute of India, which has the license to produce the Oxford vaccine. The same shot is being used in India and supplied around the world under commercial contracts or grants.&nbsp;

Leading tech giants and their apps were banned by India after the clashes at Galwan but if these claims are indeed true. They are a proof of how China is weaponising its tech know-how and how it is conducting cyber warfare.&nbsp;

From India's power grid to vaccine makers, Chinese hackers are allegedly targeting critical Indian infrastructure and assets, according to reports. Two reports hint at potential cyber warfare by China but no breach has been detected by India till now.

From India's power grid to vaccine makers, Chinese hackers are allegedly targeting critical Indian infrastructure and assets, according to reports. Two reports hint at potential cyber warfare by China but no breach has been detected by India till now. India's power ministry said on Monday, it suffered no data breach or loss while no breach has been reported by the vaccine makers too. But the prospect of a cyber-attack from Chinese territory looks real. The first attempt was allegedly made last year when Chinese troops hadn't de-escalated. In a study, Recorded Future, an US cybersecurity company, has found that while the Indian and Chinese soldiers remained locked in an eyeball-to-eyeball conflict, Chinese hackers launched a cyber campaign against India's power grid, according to this report. WATCH | Chinese malware entered control systems that manage the supply of electricity across India. A high-voltage transmission substation was also targeted alongside a coal-fired thermal power plant. Perhaps, the biggest claim is around a power outage that happened in Mumbai last year in October 2020. There was a widespread power outage in Mumbai. It lasted several hours, disrupted train services and threw life out of gear. Was China behind the blackout in Mumbai? According to Recorded Future, this remains unsubstantiated but there is evidence to suggest that there was a coordinated effort to target Indian load dispatch centres. These centres reportedly serve as a link between power generation and transmission to consumers. Recorded Future shared its findings with the Indian government. India's power ministry said in its statement on Monday, there wasn't any impact in functionality. Along with this, news agency Reuters says Chinese hackers backed by the state targeted two Indian vaccine makers, Bharat Biotech and the Serum Institute of India, whose shots are being used for India's coronavirus vaccine programme. Cyber intelligence firm Cyfirma has come out with this finding. Chinese hacking group 'Apt10' is said to be behind this. It is also known as 'Stone Panda'. It identified gaps and vulnerabilities in two areas i.e. IT infrastructure of the vaccine makers and their supply chain software. The purpose behind the hack according to experts was quite clear. They wanted to steal intellectual property. This could possibly mean the recipe to make the vaccines. Reportedly, Apt10 was actively targeting the Serum Institute of India, which has the license to produce the Oxford vaccine. The same shot is being used in India and supplied around the world under commercial contracts or grants. Leading tech giants and their apps were banned by India after the clashes at Galwan but if these claims are indeed true. They are a proof of how China is weaponising its tech know-how and how it is conducting cyber warfare.

Chinese hackers target critical Indian infrastructure 

critical-infrastructure

Critical Infrastructure, News on Critical Infrastructure, stories on Critical Infrastructure, articles on Critical Infrastructure, Critical Infrastructure stories at Wion, Critical Infrastructure news, Critical Infrastructure latest news