Weekly Cybersecurity Roundup: Messaging-App Phishing, Anti-Deepfake Chip and Google’s 2029 Target
Summary
The roundup covers cyberattack disruptions and data theft, an FBI/CISA warning on Russian phishing targeting messaging accounts, ETH Zurich’s prototype media-authentication chip, Google’s 2029 post-quantum target, and a Palo Alto recruiter-impersonation scam.
Key points
- LA Metro locked down administrative computers after detecting unauthorized access, disrupting arrival displays and online TAP card payments; it said customer and employee data was not compromised, and transit continued.
- The FBI and CISA warned that Russian intelligence operatives are using phishing to hijack Signal, WhatsApp and other messaging accounts; the article says thousands of accounts have been compromised.
- A cyberattack on Intoxalock disrupted systems supporting breathalyzer ignition-device calibration, leaving some drivers unable to start their cars; the company says service has been restored and it will cover outage-related costs.
- Heritage Bank disclosed that hackers copied files from an employee file-sharing server, including personal and financial information; the bank said customer accounts and daily operations were not affected.
- ETH Zurich researchers developed a prototype sensor chip that cryptographically signs media at capture so later tampering can be detected; the team has filed a patent.
- Google set 2029 as its target for transitioning to post-quantum cryptography, citing faster quantum-computing progress and harvest-now, decrypt-later risks; it says deployment is underway across Android, Chrome and cloud services.
- Palo Alto Networks’ Unit 42 has tracked a recruiter-impersonation phishing campaign since August 2025 that asks senior professionals to pay $400–$800 for a purported resume fix.
Article Details
- Event Type
- Weekly cybersecurity news roundup covering cyber incidents, phishing campaigns, security research, policy developments, and changes in cybersecurity readiness.
- Impact
- Reported incidents disrupted Los Angeles Metro administrative systems and rider services, prevented some drivers from starting cars after an Intoxalock outage, and exposed Heritage Bank employee and customer data. Authorities warned that a Russian intelligence-linked phishing campaign had compromised messaging accounts, while a separate campaign impersonated Palo Alto Networks recruiters to defraud professionals. Google’s 2029 post-quantum transition target and reduced CISA staffing highlight broader security and preparedness concerns.
MITRE ATT&CK
People
Anny VuIdentified as the leader of the State Department’s Bureau of Emerging Threats, which is tasked with addressing cyberattacks and other advanced technology risks.Heather AdkinsGoogle VP of Security Engineering who warned that harvest-now, decrypt-later attacks make delaying the transition to post-quantum cryptography dangerous.Nick AndersenCISA acting director who told a House committee that the DHS funding lapse had furloughed roughly 60% of CISA’s workforce and warned of lasting damage to its cyber workforce.Sophie SchmiegGoogle senior cryptography engineer who warned that harvest-now, decrypt-later attacks make delaying the transition to post-quantum cryptography dangerous.
Threat Actors
Vendors
GoogleGoogle puts 2029 deadline on quantum-safe encryption switchIntoxalockIntoxalock, an Iowa-based company that makes court-mandated breathalyzer ignition devices, was hit by a cyberattack that took down its systems and left some drivers unable to start their cars.Palo Alto NetworksScammers pose as Palo Alto Networks recruiters
Products
AndroidGoogle is already rolling out quantum-resistant algorithms across Android, Chrome, and its cloud services, and is urging the wider industry to follow suit.Google ChromeGoogle is already rolling out quantum-resistant algorithms across Android, Chrome, and its cloud services, and is urging the wider industry to follow suit.SignalFBI and CISA flag Russian campaign to hijack Signal and WhatsApp accountsWhatsAppFBI and CISA flag Russian campaign to hijack Signal and WhatsApp accounts
Countries
Chinaagainst cyberattacks, AI misuse, space-based threats, and other advanced technology risks from Iran, China, Russia, and North Korea.Iransecurity against cyberattacks, AI misuse, space-based threats, and other advanced technology risks from Iran, China, Russia, and North Korea.North KoreaAI misuse, space-based threats, and other advanced technology risks from Iran, China, Russia, and North Korea.Russiacyberattacks, AI misuse, space-based threats, and other advanced technology risks from Iran, China, Russia, and North Korea.United StatesThousands of accounts have already been compromised globally, with the attackers focusing on high-value targets like current and former US government officials, military personnel, politicians, and journalists.
Industries
GovernmentThousands of accounts have already been compromised globally, with the attackers focusing on high-value targets like current and former US government officials, military personnel, politicians, and journalists.TechnologyUS national security against cyberattacks, AI misuse, space-based threats, and other advanced technology risks from Iran, China, Russia, and North Korea.