Search This Blog

Wednesday, October 21, 2026

Chinese-linked hackers compromise ConnectWise, target hundreds in global attack, Microsoft says

 Microsoft said that the hacker group Storm-0940, which the company links to China, compromised IT company ConnectWise as part of a campaign targeting hundreds of organizations in various countries. This was reported by Channel NewsAsia.

Tool with AI capabilities

According to Microsoft, the group used ARTEX, an open-source penetration testing framework. Such tools are used to legally test the security of networks and services. ARTEX allows any artificial intelligence model to be used to automate testing tasks and can be configured for autonomous reconnaissance and data exfiltration.

Microsoft said that most attack attempts were unsuccessful. At the same time, Storm-0940 quickly gained persistent privileged access to cloud environments at many organizations. Such access may remain even after attempts to clean up systems.

More current news is available on the UA.News Telegram channel Telegram.

Campaign targets

The campaign targeted organizations in the aerospace, defense, automotive, chemical and energy sectors. Targets also included the financial sector, government entities, law firms, manufacturing, media, military organizations, semiconductor manufacturers, software developers, technology companies, think tanks and non-profit organizations.

ConnectWise did not immediately comment on Microsoft's findings. In a statement on October 16, the company said it was investigating recent unauthorized access attempts related to the ConnectWise Cloud Backup environment. The Chinese Embassy in Washington also did not respond to a request for comment. Beijing regularly denies involvement in or support for cyber theft of data.

https://ua.news/en/technologies/microsoft-zaiavila-pro-zlam-connectwise-khakerami-poviazanimi-z-kitaiem-channel-newsasia

Pakistani arrested for allegedly running USPS scheme that cost $126M in losses

 Pakistani authorities acting on intelligence arrested a man Tuesday accused of running an online counterfeit postage operation that U.S. prosecutors say caused more than $126 million in losses to the U.S. Postal Service, Pakistan’s cybercrime investigation agency said.

Faheem Akram, 33, was arrested after a weekslong search involving raids across several parts of the country, a senior official at the National Cyber Crime Investigation Agency, Atif Ameer, told reporters.

Akram, a resident of Khanewal in eastern Punjab province, was indicted by a federal grand jury in the Southern District of Florida, the U.S. Attorney’s Office for the district said in a Sept. 28 statement.

Police officers escorting detained suspect Faheem Akram in Lahore, Pakistan.
Police officers escort detained suspect Faheem Akram, accused of running an online counterfeit postage operation in Lahore, Pakistan, Oct. 21, 2026.AP Photo/K.M. Chaudary
Police officers escorting detained suspect Faheem Akram in Lahore, Pakistan.
Akram’s alleged scheme caused more than $126 million in losses to the U.S. Postal Service, prosecutors say.AP Photo/K.M. Chaudary
The office alleged that Akram operated LabelsBank.com, an unauthorized website that sold more than 5.1 million counterfeit postage labels to more than 5,200 customers.

The labels typically cost $2 each, regardless of a package’s weight, size or destination.

The counterfeit labels allowed customers to ship packages at prices far below legitimate postal rates, resulting in lost revenue and shipping costs for the Postal Service, according to the U.S. Attorney’s Office.

Its estimate of more than $126 million represents alleged losses to the Postal Service rather than proceeds from the website’s sales.

Ameer said Pakistani investigators found that Akram operated the website from August 2023 through September 2026 and used 16 bank accounts for the business.

Those included accounts held by Akram, his brother, wife, sister and aunt, he said.

It was unclear whether Akram would be extradited to the United States or face trial in Pakistan.

https://nypost.com/2026/10/21/world-news/faheem-akram-accused-in-126-million-us-postage-fraud-scheme/

‘That’s what ChatGPT told me’: How AI is entering the exam room

 When a patient came to Jon Ebbert, MD, with dizziness, he took her history, examined her and told her he suspected benign paroxysmal positional vertigo.

“She looked at me and said, ‘That’s what ChatGPT told me,'” said Dr. Ebbert, a general internist and medical director of the Systems Innovation Accelerator at Rochester, Minn.-based Mayo Clinic.

He asked whether the chatbot had told her what to do about it. It had not. “We could move pretty quickly into the part where I added the most value: confirming that the diagnosis fit her presentation, explaining what it meant in her specific situation and talking about how to manage it,” Dr. Ebbert said.

Scenes like that are becoming routine. Patients are arriving with diagnoses, treatment options and question lists from ChatGPT, Claude and Gemini. The habit itself is not new; clinicians are very familiar with “Dr. Google,” but AI changes the conversation enough that physician leaders at Mayo Clinic and Los Angeles-based Cedars-Sinai told Becker’s their health systems are figuring out how physicians should respond.

“AI feels much more personalized and conversational, and it can present information confidently,” Dr. Ebbert said. “That can make it feel more authoritative than a traditional Internet search, even when the answer may be incomplete or lack clinical context.”

Yaron Elad, MD, chief medical informatics officer at Cedars-Sinai and a practicing cardiologist, has noticed the same shift. “I think patients probably view AI as a little bit more authoritative than they ever felt that their Google searches were before,” he said.

In his view, that confidence is often earned. Chatbots tend to draw on stronger sources and cite them, while search engines could send patients to sites that were not evidence-based.

At Mayo Clinic, AI output tends to arrive in three forms, Dr. Ebbert said: a list of possible diagnoses based on symptoms, an explanation of a condition the patient already has or treatment options and questions the AI suggested they raise.

Sometimes the source is obvious, Dr. Elad said, because patients bring a printout of their query. Other times it surfaces as a list of questions. He does not hesitate to ask where an idea came from.

“Usually, they’re apologetic about it, like, ‘Oh, you know, I’m not questioning you, but this is what ChatGPT said,'” he said.

For patients with complicated conditions, those lists can run long, Dr. Ebbert said, citing cases his colleagues have described.

“The issue isn’t necessarily that patients are asking questions, which is a good thing,” Dr. Ebbert said. “It’s that an AI system can generate an almost unlimited number of plausible questions without knowing which avenues have already been evaluated or which are actually relevant to that particular patient.”

For Dr. Elad, the bigger concern is accuracy. He said physicians are trained to spot AI output that does not add up, he said.

“I worry that patients may not be able to always discern when the advice they’re getting from AI is either inappropriate for their clinical situation, or worse, actually erroneous or a hallucination,” he said.

That is why he encourages patients to bring what they find to him. “Please bring it here so I can filter it for you,” he said he tells them. “I don’t know of any clinician here who is offended by a patient doing their own research and coming in.”

Often, he can confirm the chatbot’s answer. Other times, he pushes back. “In your particular situation, because I know more about your case than the AI knows about your case, this is why I’m doing this, or this is why I disagree with what ChatGPT told you,” he said. Sometimes the gap is practical, such as when AI recommends a treatment the patient’s insurance does not cover.

Mayo Clinic has turned those conversations into a formal framework. “The emphasis is not on dismissing AI-generated information, but on helping patients interpret it safely and appropriately,” Dr. Ebbert said.

The guide gives clinicians a four-step framework:

  1. Normalize it. Acknowledge that patients use these tools and that their AI output shows what worries them.
  2. Set expectations. Explain that AI may not know the patient’s history, exam findings, test results or preferences and can list rare or serious diagnoses without saying what is likely. The guide also reminds clinicians to tell patients not to enter identifiable health information into public AI tools.
  3. Guide the conversation. Do not debate whether the AI was right or wrong. Ask what concerns the patient most, “separate what is possible from what is probable” and explain the reasoning behind a test, referral or treatment.
  4. Agree on next steps. Close with what is most likely, what happens next, what to watch for and when to contact the care team again.

The effect on visit length is mixed for now. For Dr. Ebbert, some visits run faster because the patient is prepared. Others run longer as physicians correct misinformation or work through long lists of AI-generated possibilities.

Dr. Elad said AI-informed visits often do take longer, “but I think in a good way.”

“They’ve come in having thought about their condition or whatever their issue is, and they’ve formulated questions based on what they’ve learned,” he said. “You’re actually talking to an educated audience who’s at least familiar with some of the terminology you might use.”

Some patients are going a step further and recording their visits, essentially bringing their own ambient AI into the exam room. Dr. Ebbert called it a newer issue Mayo Clinic is starting to see and said clinicians should still address the patient’s underlying questions, but the AI-generated summary should not be treated as the authoritative medical record.

Dr. Elad said no patient has asked him to record a visit with their own AI tool yet. In California, all parties must consent to a recording, so patients would need physicians’ consent, just as physicians ask patients before using ambient AI.

He said he personally would not object, though physicians’ comfort levels vary. Physicians edit their own ambient AI notes before accepting them, he said, “and I can tell you that ambient AI certainly makes mistakes that we need to correct.”

“I would be careful if I was a patient using ambient AI to record a medical visit because it might misunderstand something or misconstrue something, and in that situation, you don’t have the benefit of your physician reviewing it,” he said.

https://www.beckershospitalreview.com/quality/hospital-physician-relationships/thats-what-chatgpt-told-me-how-ai-is-entering-the-exam-room/

Steve Cohen-backed Queens casino delayed as socialists flood little-known board meeting

 It’s a high-stakes game of Flushing Hold ’em.

An obscure city panel threw a wrench into plans for a new casino at Citi Field when it on Tuesday tabled approval of the facility’s design after angry residents, including members of the Democratic Socialists of America, flooded a meeting with objections.

The nine-member Public Design Commission was supposed to only review how the new casino and its grounds were supposed to look and accommodate the public — but critics at the meeting attacked the project by Mets owner Steve Cohen over objections to gambling and how it would affect the area.

A rendering of the planned Metropolitan Park casino complex in Queens.NYC.gov
The Queens casino is a joint venture from New York Mets owner Steve Cohen and Hard Rock Entertainment.Robert Sabo for NY Post
And even though those kinds of complaints were not supposed to be entertained by the board because the casino already has full state approval, the commission unanimously voted to table action on approving the designs, thus potentially delaying the project.

The $8 billion Cohen-Hard Rock Metropolitan Park casino is expected to open in 2030. It’s not clear how long the tabling of the design approval will delay the project, though reps for the casino tried to downplay the effect.

The New York State Gaming Commission last December awarded the Cohen-Hard Rock Metropolitan Park bid a license to operate a casino in Flushing Meadows/Willets Point.

The project also includes a hotel and music venue alongside the gaming center, and when completed, it will provide easier pedestrian access to the Flushing Bay waterfront.

A map of the Metropolitan Park complex site.NYC.gov

The state legislature also passed a law repurposing the lots around the Mets ballpark — designated parkland for the World’s Fair — for commercial use. Six local Queens community boards overwhelmingly voted to back the casino project.

But a group of community activists — including members of the Democratic Socialists of America — oppose the project and testified Tuesday at the design panel’s meeting.

Alexis Kaloyanides, a member of Community Education Council 30 and an NYC-DSA member, said, “As a parent and public school advocate committed to the future generation of Queens kids, it is my responsibility to consider the societal harms that a casino will bring into our communities.”

The new casino will be right next to Citi Field in Flushing.NYC.gov

The Guardians of Flushing Bay raised concerns about how the project will address flooding.

Several PDC members told opponents that their role is limited to approving elements of design for the project, not on whether the project should proceed. But they thanked them for raising legitimate concerns about the casino complex.

“We’ve been handed a bulk of work that says this casino has been given permission by the State and City of New York to operate in this property. Our purview is …. given where we are on the issue of gambling, how can we ensure the public right of access, use, utility, safety, and comfort within this structure,” said PDC member Merryl Tisch.

“I also want to say that in my experience working at this table, the collaboration that has taken place on design issues within this structure has been a model of everyone hearing each other and moving forward. I have confidence that this too will be the case [with the casino’s design].”

But one commission member questioned the merit of the entire project, complaining about placing a casino next to Flushing Meadows Park.

Metropolitan Park is set to open in 2030.NYC.gov

“I feel like there’s this huge elephant, and we’re talking about what kind of saddle we’re going to put on the elephant or what we’re going to feed the elephant – but the elephant is this massive gambling operation,” PDC member Kenseth Armstead said.

“We keep saying ‘resort.’ It’s a casino.”

Armstead said he wouldn’t take a kid to a park located next to a casino.

Panel members said they wanted to see changes to the main casino building’s facade, a widening of corridors and staircases.

But they also wanted to see flood mitigation plans for the structures under review.

“We can’t really think about this until we make sure that we understand what the site as a whole is doing,” PDC President Deborah Marton said. “It’s just the sequence of things that makes it so that we don’t understand the underlying conditions.”

Queens Borough President Donovan Richards, a casino booster, was annoyed when he heard the design panel postponed approval of a key portion of the design project.

“They should not hold up thousands of jobs for Queens. They can make things more difficult, but they can’t prevent the project from happening,” he said.

“That would be a dereliction of duty,” Richards said.

The casino complex is projected to generate 23,000 union jobs, 25 acres of green space, and a spruced-up 7-line train station that connects to the complex.

Richards said it’s OK for PDC to exercise their legitimate role to review the aesthetics, like the color of glass windows, but not to be obstructionists.

The Cohen-Hard Rock team downplayed the delay, saying the casino project is moving forward and that it has worked with the PDC to fine-tune the design.

Protestors gather outside a news conference about plans to build a casino near Citi Field on Sunday, March 30, 2025, in New York.James Keivom

“Construction at Metropolitan Park is well underway. The project’s design reflects years of community engagement and input from our neighbors, and was developed with an all-New York design team,” a Metropolitan Park spokesperson said.

“Since the master plan was approved in 2025, we’ve worked closely with the Commission, and we thank them for continuing to offer thoughtful input on this important project.”

After receiving feedback from the PDC, the Metropolitan Park team said it made several changes, including: doubling the width and space of the outdoor colonnade and its public seating, including a new overlook of the 25-acre park; adding transparent glass sections around the façade and an additional escalator at the main park-side entrance.

The Gaming Commission awarded two other casino licenses in the city.

The Genting Group’s Resorts World New York obtained a license to expand its slots parlor to offer table games next to Aqueduct Racetrack in Ozone Park. It became the city’s first full-fledged casino in April by offering blackjack, roulette, and other table games.

Bally’s was offering a third license to open a casino on the property of President Trump’s former golf course at Ferry Point near the Whitestone Bridge — a move that could net the Trump Organization $115 million.

In response, a PDC official said Wednesday,  “A motion was made to table the item to give the applicants an opportunity to respond to the commissioner comments. There is no predetermined timing for an item’s resubmission.”

https://nypost.com/2026/10/21/us-news/nyc-panel-tables-design-for-cohen-hard-rock-casino-project/

'Ore. school shooter may have links to ‘764’ groups trafficking violent blackmail, snuff videos, child porn'

 Investigators are probing connections between the Oregon elementary school shooter and violent online extremist groups — including the terror cult “764” — after the teen’s horrific attack that left three kids and a teacher dead, according to a report.

Investigators profiled Griffin John, 16, as a highly online and socially disaffected teen, Oregon Public Broadcasting reported, citing four sources with knowledge of the investigation.

John’s links to “nihilist violent extremist” groups are now being probed – with “764” being one of the groups investigated in connection to the Silver Rail Elementary School massacre, the outlet reported.

Griffin J. John standing in front of a waterfall.
Federal and state investigators are probing connections between Oregon teen shooter Griffin John (above) and “nihilist violent extremist” groups following the horrific attack at the elementary school in Bend, Oregon.Shauntai NIckerson / Facebook
People walk at a family reunification location at Journey Church following a school shooting.
The horrific attack by the teen shooter left three kids and an elementary school teacher dead.REUTERS
The FBI describes “nihilistic violent extremism” as the motivator for extremists to commit heinous crimes.

“They want to sow chaos and facilitate the destruction of society,” the agency explains, adding that twisted individuals often emerge from “decentralized online networks and subcultures that glorify violence, mass killers, and self-harm.”

Oregon police are also investigating “764” links to a Benson High School student who released toxic chemicals in a cafeteria earlier this month, the outlet reported.

The “sadistic” group targets and exploits children and vulnerable individuals across the US — and feds have already busted a number of its ringleaders.

“These networks use threats, blackmail, and manipulation to coerce or extort victims into producing, sharing, or live-streaming acts of self-harm, animal cruelty, sexually explicit acts, and/or suicide,” the FBI has warned. “The footage is then circulated among members of the network to continue to extort victims and exert control over them.”

NYPD Commissioner Jessica Tisch and Rebecca Weiner, the department’s deputy commissioner for intelligence and counterterrorism, warned of the harrowing networks in an op-ed in The Post last year.

“Many of these networks, with names like 764, the Com, No Lives Matter and True Crime Community, belong to a loosely connected subculture called nihilistic violent extremism,” they wrote.

“This is influencer culture at its darkest, where status comes from creating the worst-possible content. Videos of beheadings, dismemberings, torture and child pornography freely circulate.

“Consuming ultra-violent content online fuels real-world creation,” they warned.


John broke into his former special-education classroom Thursday and killed three students, ages 5, 8 and 11, and a teacher, while also injuring a 7-year-old in a wheelchair and a 54-year-old teacher before being gunned down by a hero dad who heard the attack unfolding. 

Kaylub Giamanco, whose daughters attend the school, was heading home for his lunch break when he heard gunshots and saw John entering the building around 1 p.m.

Giamanco’s proud mom told CBS News her son “knew something was not right, so he pulled up onto the grass, grabbed his gun and basically stalked the gunman back into the school.”

In a heart-pounding call immediately after, Giamanco said: “Mom, I just shot and killed somebody. A man went into my daughters school and shot kids. And I looked at him point-blank, and I shot and killed him, Mom.”

The youngest victim of the tragedy was identified as “very bright and mischievous” Rhoam Summer, while the fallen teacher was remembered as “compassionate” Megan Lambert.

https://nypost.com/2026/10/21/us-news/griffin-johns-connections-to-nihilist-violent-extremist-groups-investigated-after-oregon-school-shooting-report/

Rapper who literally set fire to money busted as Vance fraud force finds $42M food stamp theft

 An Atlanta rapper with a penchant for peeing naked from balconies was busted on dozens of fraud charges as part of a Trump administration fraud crackdown to recover nearly $42 million in food stamp funds meant for needy families.

Mercedes New, an influencer, rapper and apparent adult content creator in Atlanta who goes by the name Shawty Dred, for years flaunted his lavish lifestyle on social media by posting photos of trips in private jets, Rolls-Royces and Maybachs.

He also shared pictures of himself on social media counting fat stacks of cash — and even set the bills on fire. 

Rapper and social media influencer Mercedes New, also known as Shawty Dred, shows off his wealth in a photo posted to Instagram.Instagram/richlifeshawtydred
Mercedes New posing off in front of a mansion and Rolls Royce Cullinan car.Instagram/richlifeshawtydred

Between January 2020 and July 2026, the 39-year-old rapper allegedly raided state-administered Supplemental Nutrition Assistance Program (SNAP) funding by creating more than 350 fake accounts based on stolen identities with the Georgia Department of Human Services, Division of Family & Children Services (DFCS).

The flamboyant rapper, who sports blingy necklaces and poses in front of mansions, then allegedly obtained hundreds of fraudulent SNAP EBT debit cards by having them mailed to multiple addresses in the metro Atlanta region.

He later sold them on the streets for cash or used them at his own company, Shawty Dred LLC, after setting it up as a SNAP retailer.

While running what turned out to be a $4.6 million fraud scheme, the social media sensation would take to Instagram or TikTok to taunt his viewers as “broke motherf–kers” while he spent the alleged ill-gotten gains on vacations, clothes and jewelry.

Prosecutors earlier this month indicted New on 46 counts of mail fraud, 15 counts of aggravated identity theft and one count of food stamp fraud, making him one of more than 40 defendants charged by federal prosecutors in recent weeks for defrauding SNAP and related programs.

“Two-hundred twenty thousand Americans could’ve eaten for the entire month of October if it were not for this $42 million in fraud,” Attorney General Todd Blanche said. “We’ve indicted men and women in 13 different districts just in the past seven weeks, and that effort will continue for as long as it takes.”

Vice President JD Vance and members of the Departments of Justice and Agriculture held a press conference in Cincinnati Wednesday highlighting the case — with US Department of Agriculture Inspector General John Walk quipping, “there’s nothing ‘New’ under the sun.”

Vice President JD Vance speaking along with other member of the White House’s anti-fraud task force in Cincinatti on Oct. 21, 2026.TANNER PEARSON/EPA/Shutterstock
A fraud task force created by President Donald Trump has uncovered $42 million in Supplemental Nutrition Assistance Program (SNAP) fraud..U.S. Department of Justice Fraud Division

“SNAP exists to help hungry children eat; it does not exist to provide private jets to a guy like Shawty Dred,” Vance said. “I understand he called almost 9,000 times and would take benefits that were spread across 350 accounts, collect them to himself, and then enrich himself in the process.”

“Part of what helped us identify Shawty Dred is the guy’s posting Instagram videos, and we’re able to connect the money that he’s making with the money that he’s then using to go and buy seats on private jets and all these other things,” he said.

New, who has more than 2 million Instagram followers and boasts on the profile about having more “Jewelry” and “Rolls-Royce’s than your favorite rapper,” was previously arrested in 2022 for urinating off his apartment balcony while completely naked.

New was charged with allegedly stealing over $4 million through food stamp fraud.Instagram/richlifeshawtydred
A completed survey form regarding the impact of EBT/SNAP fraud, featuring handwritten responses.

He pleaded guilty to a misdemeanor public indecency charge in 2024 and was sentenced to 50 hours of community service.

“I’m famous! I’m on TV, bruh,” New reportedly told cops as he was arrested four years ago, maintaining his innocence, according to Channel 2 Action News. “Neighbors said it was so bad, they thought about using an umbrella when they walked along the sidewalk,” the outlet noted.

Local police in Georgia had also arrested New last November outside of a Walmart for selling the SNAP EBT debit cards to passersby.

In a 2021 interview with the outlet Hip Hop Since 1987, he boasted about Shawty Dred LLC taking in so much cash that he had plans “to open a total of three restaurants and one strip club in Atlanta, Georgia under my brands.”

Mercedes New, the alleged fraudster rapper, taking a photo in front of a private jet.Instagram/richlifeshawtydred
New was arrested last week in Las Vegas.Instagram/richlifeshawtydred

Asked about his other future plans, the rapper said he anticipated “World domination lol” and “Having $100 million in my bank account.”

The USDA’s inspector general said SNAP and other related programs were also raided “to line the pockets of fraudsters and bankroll other criminal activities like guns and drugs that make American communities less safe.”

As New was arrested last Tuesday in Las Vegas, two other alleged SNAP fraudsters — Jorag Yaseen and Rami Kanaan — were indicted in Ohio federal court for allegedly stealing almost $30 million in fake electronic benefit transfer (EBT) transactions through their Chicago-based food retail stores.

The grocers allowed accomplices in a criminal organization that stole “thousands of Ohio SNAP participants” EBT account information “to be fraudulently processed, scanned, or swiped using
their respective point-of-sale devices” in their Illinois stores.

A 2003 Massachusetts learner’s permit photo shows Fernandez Guzman, a Dominican national accused of stealing the identity of a U.S. citizen to fraudulently obtain benefits and driver’s licenses.Obtained by NY Post

Other defendants were charged in September for also selling EBT cards, submitting fake crop insurance claims for up to $1.7 million to USDA, running a racket that used $2.4 million in fraudulently obtained food stamps to buy over 124,000 pounds of baby formula and then sell it for a profit on the black market.

Alleged fraudsters from Yemen who are now living in Ohio, Michigan and New York were also charged with stealing $1 million in food stamp benefits to pay for marijuana or exchange EBT card values for cash.

Dominican Republic national Fernandez Guzman additionally stole more than $22,000 in SNAP benefits, more than $98,000 in MassHealth benefits and more than $45,500 in Section 8 housing benefits — before being charged for using fake state ID cards and driver’s licenses in three states to do so.

“He is suspected to be unlawfully in the United States,” said Assistant Attorney General Colin McDonald. “This is one of the many cases charged this year involving suspected illegal aliens stealing the identities of Americans to then steal from America.”

“These schemes siphoned millions from taxpayers and robbed struggling Americans of the benefits they depend on so fraudsters could use them for their own selfish purposes,” Blanche said in a statement.

One of the victims, the AG noted, had to take out a loan to put food on the table for her children, since her debit card’s funds had been depleted by fraudsters.

https://nypost.com/2026/10/21/us-news/trump-fraud-task-force-uncovers-42m-in-food-stamp-thefts-including-lewd-rapper-who-literally-set-cash-on-fire/