Skip to main content

Hackers attack the US State Department thousands of times a day

quantum computing is a major threat to crypto says the nsa security padlock
Image used with permission by copyright holder
You might occasionally worry over misplaced passwords and phishing attempts, but take comfort in the fact that you’re not the U.S. State Department. Officials have revealed that the government blocks thousands of hacking attacks every day, and works with a variety of different agencies to keep unwelcome visitors at bay.

The figure came out of a Wall Street Journal investigation into an email hacking attack the State Department fell victim to last November. In the wake of the security breach the department’s entire messaging service was shut down while experts could work on the necessary maintenance to make it safe. It’s believed that a bogus email link was the root cause of the breach, and according to the sources the WSJ spoke to, the hackers still haven’t been fully evicted from the system.

“We have robust security to protect our computer systems and our information, which includes access to an unclassified, open-net system,” said State Department spokeswoman Jen Psaki. “We deal successfully with thousands of attacks every day, and we deal with them in conjunction with other relevant government agencies.”

Despite the best efforts of the State Department, however, cyber criminals are still getting access, at least to unclassified material. The WSJ reports that the hackers in question have become very adept at revising their methods to evade detection. “Each time investigators find a hacker tool and block it… the intruders tweak it slightly to attempt to sneak past defenses,” say the sources the WSJ spoke to.

Last week President Obama headed up a cyber security summit at Stanford University at which he called for companies to be more open about attempted hacks on their systems. “This has to be a shared mission,” he said during a speech at the summit. “Government cannot do this alone. But the private sector cannot do it alone, either.”

David Nield
Dave is a freelance journalist from Manchester in the north-west of England. He's been writing about technology since the…
A dangerous new jailbreak for AI chatbots was just discovered
the side of a Microsoft building

Microsoft has released more details about a troubling new generative AI jailbreak technique it has discovered, called "Skeleton Key." Using this prompt injection method, malicious users can effectively bypass a chatbot's safety guardrails, the security features that keeps ChatGPT from going full Taye.

Skeleton Key is an example of a prompt injection or prompt engineering attack. It's a multi-turn strategy designed to essentially convince an AI model to ignore its ingrained safety guardrails, "[causing] the system to violate its operators’ policies, make decisions unduly influenced by a user, or execute malicious instructions," Mark Russinovich, CTO of Microsoft Azure, wrote in the announcement.

Read more