Home Blog Page 33

Marks & Spencer Cyberattack Attributed to Scattered Spider Ransomware Group; Here’s What Happened

British retailer Marks & Spencer (M&S) has been grappling with a significant cyberattack, reportedly orchestrated by the hacking group Scattered Spider. The incident has disrupted operations across the company’s UK stores and online platforms.

Attack Overview

The cyberattack, identified as a ransomware incident, has been linked to Scattered Spider, a group known for targeting major corporations. The hackers allegedly infiltrated M&S’s systems in February 2025, extracting the NTDS.dit file—a critical component of Windows Active Directory that stores user credentials. This breach enabled the attackers to access and encrypt the company’s servers using the DragonForce ransomware variant.

Operational Impact

As a result of the attack, M&S has faced widespread disruptions:​

Financial Repercussions

  • Revenue Loss: The disruption in online sales is estimated to have cost the company approximately £3.8 million per day.
  • Market Valuation: M&S’s market value reportedly declined by nearly £700 million following the incident.

Response and Investigation

M&S has engaged cybersecurity firms, including CrowdStrike, Microsoft, and Fenix24, to investigate and mitigate the breach. The company has also reported the incident to the UK’s National Cyber Security Centre and the Information Commissioner’s Office.

While it remains unclear whether M&S has paid or intends to pay a ransom, industry experts caution against such actions, citing potential long-term risks and the possibility of encouraging further attacks.

About Scattered Spider

Scattered Spider, also known as Octo Tempest, is a hacking group comprising individuals primarily from the US and UK. The group has been active since at least 2022 and is known for employing sophisticated social engineering techniques, including phishing and impersonation, to infiltrate corporate networks. They have previously targeted major companies, such as MGM Resorts and Caesars Entertainment.

Ongoing Developments

M&S continues to work towards restoring its systems and services. Customers are advised to remain vigilant against potential phishing attempts exploiting the situation. The company has not provided a specific timeline for the full resumption of its operations.​

Government-Backed Hackers Exploited Majority of Attributed Zero-Day Vulnerabilities in 2024, Google Reports

A recent report from Google’s Threat Intelligence Group (GTIG) reveals that state-sponsored hackers were responsible for the majority of attributed zero-day exploits in 2024.

Out of 75 zero-day vulnerabilities identified as exploited in the wild, at least 23 were linked to government-backed actors. Among these, five exploits were attributed to China and another five to North Korea.

Zero-day vulnerabilities are security flaws unknown to software vendors at the time they are exploited. While the total number of such exploits decreased from 98 in 2023 to 75 in 2024, the proportion attributed to state-sponsored groups remains significant.

The report also highlights the role of commercial surveillance vendors in the proliferation of zero-day exploits. Eight of the identified exploits were developed by such vendors, including companies like NSO Group and Cellebrite, which typically sell their tools to government agencies.

GTIG notes a shift in targeting strategies, with 44% of zero-day exploits in 2024 aimed at enterprise products, particularly security and networking software. This marks an increase from 37% in 2023, indicating a growing focus on enterprise technologies by threat actors.

Despite the decrease in total zero-day exploits, Google warns that the overall trend shows a gradual increase in such attacks over time. The report emphasizes the need for continued vigilance and improved security measures to counteract the evolving threat landscape.

Source: Google Cloud

Parents Warned as Meta AI Chatbots Engage in Disturbing Conversations with Children

Parents are being urged to stay alert after a troubling report revealed that Meta’s AI-powered chatbots on Facebook and Instagram engaged in inappropriate conversations with users posing as children — often using voices based on Disney characters and celebrities.

According to a Wall Street Journal investigation, Meta’s AI bots — which simulate conversations with figures like John Cena, Snoop Dogg, and characters resembling Disney’s Anna from Frozen — responded to users claiming to be as young as 13 with sexually suggestive messages. In some cases, the bots used affectionate and explicit language, despite the users clearly identifying themselves as minors.

The bots, launched to make user interaction more entertaining, were quickly found to be vulnerable. With only minimal prompting, several bots role-playing as coaches, schoolgirls, and even Disney-like characters engaged in conversations that crossed serious ethical and legal boundaries.

Meta Under Pressure

Following the revelations, Meta said it had made “significant improvements” to stop bots from engaging in romantic or explicit role-play. However, the company criticized the investigative methods used, arguing that most users would not interact with the bots in such a way. Despite this, Meta acknowledged that additional protections are now being put in place.

Disney, whose characters were reportedly imitated without authorization, strongly condemned the misuse. A spokesperson stated, “We did not authorize, and would never authorize, the use of our characters in this manner,” calling on Meta to remove any Disney-linked content involved in inappropriate exchanges.

Why Parents Should Be Concerned

  • Trusted Characters Misused: Children often trust characters like Anna from Frozen. When AI bots impersonate these figures and engage in explicit talk, it creates a dangerous situation where children might lower their guard.
  • Weak Content Barriers: Although Meta claims to have age protections in place, the report shows these measures are easy to bypass.
  • AI Doesn’t Always Follow Rules: Chatbots learn from interactions, and without strict control, they can be manipulated into harmful conversations quickly.

How Parents Can Protect Their Children

  • Monitor AI Interactions: Keep an eye on apps and platforms your child uses. Know whether AI bots are active in the environment.
  • Talk About Safe Online Behavior: Teach children to recognize when conversations become inappropriate and to report them immediately.
  • Limit Unsupervised Use: Particularly with newer AI features, limit children’s access until the technology proves safer.
  • Use Parental Controls: Activate the strongest parental settings available and regularly review your child’s activity.
  • Report Problems: Encourage children to tell you if something feels wrong. Report inappropriate AI behavior to the platform immediately.

Experts warn that AI-driven virtual characters may seem fun and harmless but can pose hidden dangers, especially when safety mechanisms are weak or inconsistently enforced.

For now, families are advised to be proactive and cautious when allowing children to interact with AI features on popular platforms.

Microsoft to Launch Paid Hotpatching Service for Windows Server 2025

Microsoft announced it will introduce a paid subscription model for hotpatching on Windows Server 2025 starting July 1, 2025, ending the current free preview. The service will cost $1.50 per core per month and aims to significantly reduce the need for server reboots after updates.

Hotpatching allows security patches and updates to be applied without restarting the system, a method already common in Linux distributions and virtualization platforms like VMware and Xen. Microsoft had previously offered hotpatching through its Windows Server Azure Edition and Windows Server 2022 in the Azure cloud. The company first previewed the feature for on-premises Windows Server 2025 systems in August 2024.

With the new subscription, Microsoft promises up to eight hotpatches per year, following a structured three-month update cycle. The first month of each cycle—January, April, July, and October—will be a “baseline” month requiring a reboot, followed by two months where only hotpatches are applied. However, Microsoft notes that in rare cases, critical security needs may still require a reboot during hotpatch months.

Administrators managing Windows Server 2025 machines must use Microsoft’s Arc management tool to access the hotpatching service, though Arc usage for this purpose will not add additional costs. Servers running the Azure Edition will continue to receive hotpatching for free.

Microsoft officials argue that hotpatching can close the “window of vulnerability” created when administrators delay updates due to downtime concerns. It also aims to reduce the traditional disruptions tied to “Patch Tuesday,” the monthly update cycle familiar to IT departments around the world.

For organizations currently using the free preview, automatic enrollment into the subscription model will begin unless they opt out before June 30, 2025. Microsoft emphasized that standard patching methods will remain available at no extra cost for those who choose not to subscribe.

This move places Microsoft in line with Linux enterprise services like Red Hat Enterprise Linux, which has long offered live kernel patching as a premium feature.

The decision to monetize hotpatching reflects a broader trend of software vendors adding premium maintenance services to support uptime demands in increasingly hybrid and multicloud environments.

Rio Rancho and CNM Launch Rio TECH to Prepare Students for Skilled Trades

Rio Rancho Public Schools and Central New Mexico Community College (CNM) have officially opened Rio TECH, a new career and technical education (CTE) high school designed to equip students with both a high school diploma and trade certifications.

The 70,000-square-foot campus, located at 7001 Zenith Court in Rio Rancho, offers programs in welding, carpentry, HVAC, plumbing, and electrical trades.

The $55 million facility features five industry-standard labs and 18 hybrid classrooms, allowing students to split their day between traditional academics and hands-on trade training. Students can earn dual credit through CNM, enabling them to graduate with both a diploma and trade certification.

Dr. Kristopher Johnson, principal of Rio TECH, emphasized the school’s role in workforce development, stating, “Today marks a powerful step forward for our community, students, and the future of education and workforce development here in New Mexico.”

CNM President Tracy Hartzler highlighted the partnership’s significance, noting, “This is a tremendous opportunity to do something different. It took a leap of faith and commitment.”

Students expressed enthusiasm for the program’s practical approach. Jesse Baca, a welding student, said, “It’s very good to start dual credit early because if you want, you can get out of high school and start a job immediately.”

Rio TECH aims to address the growing demand for skilled tradespeople in New Mexico. According to the New Mexico Association for Career and Technical Education, 51% of jobs in the state require skills training beyond high school but less than a four-year degree.

Enrollment is open to students in Sandoval County, with applications accepted through February 28, 2025. Selected students will be interviewed between March and May.

New Mexico Expands Free Summer Reading Program to Boost Literacy Statewide

​New Mexico is expanding its free Summer Reading Program this year, aiming to reach up to 15,000 students from kindergarten through eighth grade. The initiative follows the success of last summer’s pilot, which saw over 9,000 participants improve their reading skills by nearly 5 percentage points on average.

The program offers four weeks of structured literacy instruction, grounded in the science of reading—a method that emphasizes phonemic awareness, phonics, fluency, vocabulary, and comprehension. Students work in small groups with trained instructors, maintaining a 4-to-1 student-teacher ratio. This year’s sessions will run from June 2 to June 27, 2025, across more than 100 sites statewide.

Public Education Secretary Marianna Padilla highlighted the urgency of addressing literacy challenges, noting that only 39% of elementary and middle school students in New Mexico are proficient readers. She emphasized that while change won’t happen overnight, consistent efforts like the Summer Reading Program are steps toward improvement.​

The program is free for all New Mexico families, funded by a $30 million allocation from the state legislature. Instructors, who may be current or retired educators or pre-service teachers, receive $35 per hour and undergo specialized training before the program begins.

Parents can register their children and find more information at literacy.nm.gov. The deadline for student registration is May 20, 2025.

This expansion reflects New Mexico’s commitment to improving literacy rates and ensuring that students have the foundational skills necessary for academic success.

Albuquerque to Use Lottery System for Summer Youth Program Registration Starting April 28

0

​Albuquerque families looking to enroll their children in city-run summer programs will need to participate in a lottery-style registration process, starting April 28. The system is designed to manage high demand and ensure fair access to limited spots across the city’s community centers.

Key Dates and Details

  • Lottery Sign-Up: April 28 – May 9
  • Notification of Selection: May 14 – May 23
  • Program Dates: June through August
  • Hours: Monday to Friday, 7:30 a.m. – 5:30 p.m.
  • Ages: 5–15 years (children must turn 6 by September 1)
  • Fee: $10 one-time, non-refundable registration fee

Parents can enter the lottery online through the City of Albuquerque’s Youth & Family Services portal. A free Community Center Youth Membership is required to participate in the lottery.

Program Overview

The full-day summer programs offer structured activities, including arts and crafts, sports, games, and educational enrichment. They are hosted at more than 20 community centers and two multi-generational centers across Albuquerque.

Due to the popularity of these programs, the city uses a lottery system to allocate spots fairly. Families not selected in the initial draw will be placed on a waitlist and notified if space becomes available.

Additional Summer Opportunities

  • Multi-Generational Center Programs: For ages 5–13; $30 per month plus a one-time $20 annual center membership fee.
  • PLAY+ School Playground Program: For kindergarten through grade 5; registration opens May 22 at 8 a.m.; fees vary based on the number of children enrolled.
  • Inclusive Recreation Programs: For kindergarten through high school; $40 fee; lottery sign-up April 28 – May 9.
  • Early Head Start Program: For ages 0–3; ongoing registration; free.
  • Preschool & NM Pre-K: For ages 3–5; ongoing registration; free or low cost.

Executive Order Sets New Standards for U.S. Higher Education Accreditation

On April 23, 2025, the White House issued an executive order aimed at reforming how colleges and universities in the United States are accredited. The order introduces changes intended to improve accountability, ensure better student outcomes, and shift the focus of accreditation agencies toward measurable educational quality.

Emphasis on Student Outcomes and Transparency

The executive order directs the U.S. Department of Education to work with accrediting agencies to place greater emphasis on student outcomes—such as graduation rates, employment after graduation, and overall financial return on education.

Data cited in the order highlights that many students, particularly those completing certain bachelor’s and master’s programs, graduate with significant debt and limited earning potential. These findings have prompted calls for more transparency about the value of individual programs and institutions.

To address these concerns, the order requires accreditors to:

  • Use program-level data, including graduation and job placement rates, in their evaluations.
  • Provide more transparent information to students and families about the performance and value of educational programs.
  • Support institutions in making improvements when student outcomes fall short.

Review of Accreditation Practices

The order also calls for a review of current accreditation standards to ensure they are aligned with lawful and effective educational practices. It instructs the Secretary of Education to assess whether any accreditor requirements—such as those tied to institutional policies or internal governance—exceed what is necessary for quality assurance.

In particular, the Department of Education is asked to evaluate whether certain standards related to diversity, equity, and inclusion (DEI) initiatives are being applied in a way that may conflict with federal law or court rulings. Accreditors are expected to ensure that any policies they require institutions to adopt comply with current legal guidelines.

Encouraging Innovation and New Accrediting Agencies

Another key part of the order promotes the development of new accrediting agencies and quality assurance models. The Department of Education is directed to:

  • Resume recognition of new accreditors, where appropriate.
  • Launch experimental sites to test alternative forms of quality assurance.
  • Streamline the Accreditation Handbook to remove unnecessary regulatory burdens.

This move is intended to foster innovation and increase competition in the accreditation space, with the goal of expanding educational opportunities and reducing barriers for new institutions.

Support for State and Local Governance

The order also reaffirms the role of state and local authorities in overseeing public colleges and universities. It instructs accreditors to respect these governance structures and avoid imposing unnecessary conditions on institutional management or leadership.

Next Steps

The U.S. Department of Education will now begin implementing the executive order’s directives. As part of this process, accrediting agencies may be required to revise their standards and procedures to align with the new federal priorities.

While responses from education leaders and advocacy groups may vary, the order represents a significant policy shift focused on performance, transparency, and regulatory reform in the higher education system.

Hobbs High School Seniors Craft Heartfelt Gifts for Elderly Residents

In Hobbs, New Mexico, a unique initiative led by veteran educator Wilma Brooks is bringing together high school seniors and senior citizens in a heartwarming display of community spirit. Brooks, who has dedicated 62 years to teaching and is the second-longest-serving educator in the state, guides her students at Hobbs Alternative School in creating handcrafted gifts for residents of local nursing homes.

The classroom buzzes with activity as students produce a variety of items, including wall and door decorations, poster cards with meaningful messages, and personalized photos. These creations are adorned with bold animal prints and other vibrant designs, aiming to bring joy to over 200 nursing home residents during the holidays.

Brooks’ commitment to this cause dates back to 1970, when she began similar outreach projects at Houston Junior High. Her passion for community service was influenced by her upbringing, where her mother emphasized the importance of giving, even if it was just a small, wrapped bar of soap. This ethos has driven Brooks to apply for grants, recruit volunteers, and even personally fund materials to ensure that every resident receives a gift.

Wilma Brooks. PHOTO: Hobbs News

The impact of these gestures is profound. Brittany Gama, Director of Social Services at Desert Springs Healthcare, notes that many residents lack family connections and deeply appreciate the attention. “We have a lot of residents that don’t have any family, so it gives them something to look forward to. It’s an uplifting thing and it uplifts their spirits,” Gama said. She added that gifts on non-major holidays are especially surprising and meaningful to the residents.​

For the students, this project offers more than just academic credit. Brooks explains that many of her students are working to recover credits and have faced challenges in their personal lives. Engaging in this community service provides them with a sense of purpose and connection. Some students have even discovered that their own relatives are among the nursing home residents, adding a personal dimension to their efforts.

As Brooks reflects on her decades of teaching and community involvement, she finds fulfillment in the intergenerational bonds being formed. “Now I’m having former students and parents of students of mine working at the nursing homes, so it means more as a whole. For the residents and the staff, because they deserve it,” she said.

This initiative exemplifies how acts of kindness can bridge generational gaps, enrich lives, and foster a stronger, more compassionate community.

Source: Hobbs News

Florida Teacher Fired for Using Student’s Chosen Name Without Parental Consent Under New State Law

​A Florida high school teacher has lost her job after using a student’s chosen name without parental consent, marking the first known case under a 2023 state law that restricts such actions in public schools.

Melissa Calhoun, an English teacher at Satellite High School in Brevard County, was informed that her contract would not be renewed for the upcoming school year. The decision followed an internal investigation confirming she had referred to a 17-year-old student by a name that aligned with the student’s gender identity, without obtaining the required parental approval.

Florida’s “Parental Authorization for Deviation from Student’s Legal Name Form” law, enacted in 2023, mandates that educators must have written parental consent before using any name other than a student’s legal name. This includes nicknames and names reflecting gender identity. The law is part of a broader set of regulations introduced under Governor Ron DeSantis, aimed at reinforcing parental rights in educational settings.

Brevard Public Schools spokesperson Janet Murnaghan stated that Calhoun knowingly violated the statute. Superintendent Mark Rendell emphasized the importance of parental involvement, saying, “The parent is our partner in this education endeavor that we have with our children.”

The district’s decision has sparked significant community response. At a recent school board meeting, dozens of students and parents advocated for Calhoun’s reinstatement, highlighting her positive impact on students. A Change.org petition supporting her has garnered over 14,500 signatures.

Critics argue that the law may infringe upon First Amendment rights. The ACLU of Florida expressed concerns about potential viewpoint discrimination, especially if the law is applied selectively based on the nature of the name used.

This incident underscores the ongoing national debate over the balance between parental rights and the rights of students and educators, particularly concerning issues of gender identity and expression in schools.​