Get tomorrow's brief in your inbox
Today: Texas purchased mobile cell surveillance equipment from Israeli firm Cognyte that forces nearby phones to connect without probable cause. A federal court partially upheld the Digital Equity Act but stripped its race-based protections after the Trump administration challenged broadband discrimination safeguards. Hackers used an autonomous AI agent to conduct cyber-espionage against Thailand's Ministry of Finance, exposing vulnerabilities in government network security.
Texas Deploys Mobile Cell-Site Simulators from Cognyte
Texas purchased FalcoNet cell-site simulators from Israeli surveillance company Cognyte that mimic mobile phone towers and force all nearby phones to connect, enabling law enforcement to track devices regardless of whether they belong to suspects. The contract reveals the equipment can be concealed in vehicles, backpacks, or attached to helicopters. This technology functions identically to L3Harris's Stingray systems and collects location data on all phones within range without individualized warrants.
Autonomous AI Agent Used in Thailand Finance Ministry Breach
Hackers deployed Hermes, an open-source AI agent, in "YOLO mode" to conduct autonomous cyber-espionage against Thailand's Ministry of Finance without human oversight. Hunt.io researchers discovered hundreds of exposed files on attacker infrastructure including stolen credentials, authentication cookies, attack scripts, and a previously undocumented malware family called Hades. The AI agent independently explored the ministry's network, searched internal files, gathered system information, and attempted privilege escalation. The breach exposed administrative portals, email systems, and document management platforms. Chinese-speaking operators are suspected based on recovered indicators.
Federal Court Strips Race-Based Protections from Digital Equity Act
The DC District Court issued a mixed ruling that preserved the 2021 Digital Equity Act's competitive grant program but declared its race-based components unconstitutional. The Trump administration had challenged the Act, which aimed to address digital redlining by requiring broadband deployments and grants to be non-discriminatory. The law identified minority status as one of eight indicators of barriers to digital access. Major ISPs like AT&T have been documented charging minority neighborhoods higher prices for slower broadband service and refusing to upgrade or repair infrastructure in predominantly Black areas of cities including Detroit and Cleveland. The court ruling removes enforcement mechanisms designed to prevent racial discrimination in the $42.5 billion Infrastructure Act broadband expansion program.
Mobile surveillance risk: Implement VPN-always policies for employees in Texas and other states deploying Stingray-type cell-site simulators. Issue guidance prioritizing secured WiFi over cellular connections for confidential communications.
AI-powered reconnaissance detection: Update security monitoring to detect autonomous AI agent activity, particularly API call patterns indicating automated network mapping and credential testing. Review access controls on administrative portals.
Credential rotation protocols: Establish procedures for emergency credential rotation when reconnaissance activity is detected. Prioritize administrative accounts, email systems, and document management platforms.
Broadband deployment compliance: Telecommunications providers receiving federal broadband grants must document non-discriminatory deployment and pricing practices across all service areas while avoiding explicit race-based classifications following the Digital Equity Act court ruling.
Government network hardening: Organizations with government contracts should audit network segmentation, restrict lateral movement capabilities, and implement enhanced logging for privilege escalation attempts following the Thailand Finance Ministry breach pattern.