AboutDFIR.com – The Definitive Compendium Project
Digital Forensics & Incident Response

Blog Post

InfoSec News Nuggets 4/21/2025

Hacking US crosswalks to talk like Zuck is as easy as 1234

Crosswalk buttons in various US cities were hijacked over the past week or so to – rather than robotically tell people it’s safe to walk or wait – instead emit the AI-spoofed voices of Jeff Bezos, Elon Musk, and Mark Zuckerberg. And it’s likely all thanks to a freely available service app and poorly secured equipment. In Seattle this week, some crosswalks started playing AI-generated messages spoofing tech tycoon Jeff Bezos. In one video clip, a synthetic Bezos voice can be heard introducing himself from the push-button box, and claiming the crossing is sponsored by Amazon Prime.

 

Japan warns of hundreds of millions of dollars in unauthorized trades from hacked accounts

Japanese regulators published an urgent warning about hundreds of millions of dollars worth of unauthorized trades being conducted on hacked brokerage accounts in the country.  Japan’s Financial Services Agency (FSA) said on Friday that there has been a “sharp increase in the number of cases of unauthorized access and unauthorized trading” through online trading services. The trend was occurring, according to the agency, because of stolen customer information obtained through phishing websites “disguised as websites of real securities companies.”

 

Critical AnythingLLM Vulnerability Exposes Systems to Remote Code Execution

A critical security flaw (CVE-2024-13059) in the open-source AI framework AnythingLLM has raised alarms across cybersecurity communities. The vulnerability, discovered in February 2025, allows attackers with administrative privileges to execute malicious code remotely, potentially compromising entire systems. According to the Offsec report, the flaw originates from improper filename sanitization in the multer library, used by AnythingLLM for file uploads.

 

Motorola to outfit first responders with new AI-enabled body cameras

Motorola Solutions is bringing AI to the front lines, launching a new AI solution to help first responders make timely decisions, improve police reporting, and foster interaction with the community. On Monday, Motorola unveiled AI Assist, which the company describes as “a new category of human-AI collaboration for public safety.” It also unveiled SVX (which stands for secure voice and video converged), a first-of-its-kind body camera with radio. Paired with AI Assist, SVX fuses AI with core law enforcement tools to help first responders work more efficiently. 

 

Indian IT services firms face project delays amid the US tariff war

The US reciprocal tariffs war is beginning to hit the Indian IT industry, with contracts getting delayed as customers adopt a wait-and-watch approach. Some of the country’s top tech services exporters — including Tata Consultancy Services (TCS), Infosys, and Wipro — have begun to show signs of strain, as revealed in their recent quarterly earnings calls. Tata Consultancy Services (TCS), Asia’s largest IT services provider, has flagged growing uncertainty, which it said started in February but has now begun to impact project timelines and client decision-making.

 

EU Bolsters Cybersecurity With NIS2 Directive

The European Union (EU) enacted the Network and Information Systems 2.0 Directive, known as NIS2, in 2022, a sweeping overhaul of its cybersecurity regulations. The full implementation across member states started this year.  For the first time, the new version of the directive makes directors and executives accountable, subjecting them to strict penalties. With increasing digitalization and industrial societies’ critical reliance on information systems, the EU views enhanced cybersecurity as a paramount priority. The COVID-19 pandemic further underscored the vulnerabilities within intricate supply networks, prompting the new directive to explicitly address these critical links’ cyber resilience.

Related Posts