- Air-L - lists.aoir.org

Global Cyber Alliance report “Salt Typhoon Across the Internet: What AIDE Honeypots Reveal About a Persistent State-Linked Campaign”
by Joly MacFie 21 Dec '25

21 Dec '25

[image: image.png] https://globalcyberalliance.org/new-report-salt-typhoon-across-the-internet/ Overview and Context The report analyzes the *Salt Typhoon* cyber-espionage campaign, a long-running and highly sophisticated operation publicly attributed by U.S. authorities to state-linked actors. The campaign focuses on global telecommunications and critical internet infrastructure and is assessed as persistent, strategic, and ongoing rather than opportunistic. Data Source and Methodology The analysis is based on data from the Automated Internet Defense Environment (AIDE), a global network of honeypots operated across more than 25 countries. These decoy systems emulate vulnerable internet-facing services, particularly those used in telecommunications environments. Between August 2023 and August 2025, AIDE recorded more than 72 million attack attempts originating from China-based IP space. Behavioral patterns observed in this data align closely with previously documented *Salt Typhoon* tactics, techniques, and procedures. Key Findings - Multi-Phase Campaign Evolution: The activity follows a clear lifecycle: - Initial reconnaissance and scanning (mid-2023 to late-2024) - Targeted exploitation and credential attacks (late-2024 to early-2025) - Persistence, lateral movement, and advanced operations (early- to mid-2025) - Targeting Patterns: Attackers consistently focused on internet-exposed remote access systems, especially VPN gateways and network management interfaces. Vendors and platforms commonly observed include Cisco, Ivanti, Palo Alto Networks, and Fortinet, mirroring public vulnerability disclosures during the same period. - Operational Techniques: The campaign relies heavily on “living-off-the-land” techniques, using legitimate administrative tools alongside custom payloads to evade detection. Common behaviors include credential harvesting, webshell deployment, command-and-control preparation, and staged data exfiltration. - Geographic Reach: Activity consistent with *Salt Typhoon* was observed globally, with notable concentrations affecting North America, Europe, and the Asia-Pacific region. The campaign appears designed to scale across borders rather than focus on a single national target. Observed Scale and Indicators Across the observation period, AIDE recorded: - Tens of thousands of exploitation attempts - Widespread credential-based attacks - Large volumes of potential data exfiltration activity - Coordinated use of multiple IP addresses across different campaign phases These indicators point to sustained resourcing and centralized coordination rather than isolated threat actors. Strategic Implications The report emphasizes that *Salt Typhoon* represents a deliberate effort to gain long-term access to communications infrastructure. Such access could enable surveillance, intelligence collection, or future disruption of essential services. Telecommunications networks are highlighted as especially high-value targets due to their role in lawful intercept systems and national communications resilience. Defensive Recommendations Organizations operating critical or internet-facing infrastructure are urged to: - Audit and harden all VPN and remote access systems - Patch known vulnerabilities in network devices promptly - Enable detailed logging and monitor for anomalous administrative behavior - Enforce strong authentication, including multi-factor authentication - Conduct proactive threat hunting aligned with observed attacker behaviors Conclusion The report concludes that *Salt Typhoon* remains an active and serious threat. By combining large-scale honeypot telemetry with known adversary behaviors, it provides a data-driven view of a persistent state-linked campaign and underscores the need for immediate and sustained defensive action across the global internet ecosystem. RESOURCES - Full Report <https://globalcyberalliance.org/wp-content/uploads/2025/12/PUBLIC-REPORT-Sa…> -- -------------------------------------- Joly MacFie +12185659365 -------------------------------------- -

1 0

Job: Online volunteer for UN AI Industry Research - deadline Jan 2
by Joly MacFie 20 Dec '25

20 Dec '25

https://app.unv.org/opportunities/1784888021265777 Unpaid volunteer - remote - 16-20 Hours per week -- -------------------------------------- Joly MacFie +12185659365 -------------------------------------- -

1 0

(no subject)
by Suzy Schipper 19 Dec '25

19 Dec '25

Hello, Can you please unsubscribe me from your mailing list ? kind regards Suzy Schipper

1 0

SECOND CALL FOR PAPERS: 14th International Workshop on Behavior Change Support Systems – BCSS 2026
by Sharon Nabwire 19 Dec '25

19 Dec '25

*SECOND CALL FOR PAPERS: 14th International Workshop on Behavior Change Support Systems – BCSS 2026* Hakodate, Japan https://bcssworkshop.wordpress.com/ The 14th Int’l Workshop on Behavior Change Support Systems – BCSS 2026 – will be held in conjunction with the 21st International Conference on Persuasive Technology in Hakodate, Japan. *Important dates* Submission deadline: January 15, 2026 Notification to authors: February 5, 2026 Final version deadline: February 20, 2026 Event: March 10, 2026 *Description of the event* The Behavior Change Support Systems workshop, BCSS, organized in conference style, builds around the concept of information systems specifically designed to help and support attitude or behavior change in individuals or groups. Information technology has the capacity to enable smart, virtual persuasive environments that provide multimodal cues and psycho-physiological feedback for an individual’s change by strengthening emotional, social, and physical presence. Numerous technologies and applications have been developed over the past decades, showing promising results in motivating and supporting people in domains such as health and wellbeing. As a research field, persuasive technology continues to be a crucial link between different sciences, necessitating a comprehensive understanding of systems supporting behavior change and an interdisciplinary approach to their design, implementation, and evaluation. However, the full potential of these technologies shaping behaviors and tracking the progress and outcomes of interventions have not been used to their full potential. This workshop series seeks to shed new light on the various processes of behavior change support systems. Yet, although human-computer interaction is social in nature and people may even see software applications as social actors, it is still surprisingly unclear how these interactions end-up shaping our attitudes and behaviors. Additionally, the pitfalls and potential drawbacks are not yet fully understood. As people interact with these technologies, they, at the same time, keep modifying their environment as well as adjust their goals during use time. This seems to indicate that digital persuasion is not a one-time, isolated event but rather an ongoing, dynamic process. Since its inauguration, the BCSS workshop has emphasized the highly interdisciplinary approach required for developing and implementing such systems. The workshop provides a scholarly forum connecting researchers, practitioners and experts from various scientific disciplines such as information systems science, human-computer interaction, industrial design, and psychology, and application domains such as information security, sustainability, and medicine. This year’s event especially seeks, but is not limited to, submissions that discuss innovative approaches and cutting-edge technologies such as artificial intelligence (AI) and metaverse in the design, development and implementation of BCSS. The ultimate goal is to create efficient and flexible BCSSs that promote long-term positive user experience. *Paper submission* Scientific papers in two categories are sought for (the submission can be either in CEUR or Springer LNCS format): · Full papers (max 16 pages) · Short papers (5-9 pages) All the papers will be reviewed by at least two reviewers. Accepted papers will be published via *CEUR Workshop Proceedings*. Authors presenting and publishing an accepted paper in the proceedings are expected to register and participate in the Persuasive Technology conference. *Additional information* For more information about the workshop and the conference, please visit the links: - BCSS workshop web site: https://bcssworkshop.wordpress.com/ - Persuasive Technology conference web site: https://2026.persuasivetech.org/ For any questions regarding the event, please contact the Organizing Chair: Sharon.Nabwire(a)oulu.fi *Conference Committees* *General and Program Chair* Oinas-Kukkonen Harri, University of Oulu, Finland *Organizing Chair* Nabwire Sharon, University of Oulu, Finland *Program Committee* Agyei Eunice, UK Centre for Ecology and Hydrology, United Kingdom Arakawa Yutaka, Kyushu University, Japan Armayones Ruiz Manuel, Universitat Obertade Catalunya, Spain Brinkman Willem-Paul, Delft University of Technology, Netherlands Burri Gram-Hansen Sandra, Aalborg University, Denmark Condori Fernandez Nelly, Universidad Santiago de Compostela, Spain Ekpezu Akon, University of Oulu, Finland Fraser Kieran, PayPal, Ireland Guadagno Rosanna, University of Oulu, Finland Haque Sanaul, LUT University, Finland Iyengar Sriram, University of Arizona, United States Langrial Sitwat, National University of Sciences and Technology, Pakistan Oyibo Kiemute, York University, Canada Ren Xipei, University of Macau, China Sharma Nikita, University of Twente, Netherlands Sittig Scott, University of Louisiana, United States Vlahu-Georgievska Elena, University of Wollongong, Australia Yetim Fahri, FOM University of Applied Sciences, Germany

1 0

Wikimedia ESEAP Conference Taiwan CFP open until Sunday 21 Dec
by Amanda Lawrence 18 Dec '25

18 Dec '25

Sorry for the short notice. This may be of interest to some of you - not an academic conference but a chance to share expertise and connect with the Wikimedia community from across Asia Pacific. Wikimedia ESEAP* Conference CFP now open until Sunday 21 Dec Pioneer the future together! *East and South East Asia Pacific (ESEAP) Region The Wikimedia ESEAP Conference 2026<https://meta.wikimedia.org/wiki/ESEAP_Conference_2026> will be the 4th regional conference for Wikimedia communities throughout the ESEAP region and will take place in Kaohsiung, Taiwan on 15–17 May 2026. Bring your experiences, insight, ideas, and innovations to ESEAP in 2026! The call for submissions of presentations, lightning talks, posters and demonstrations (and much more!) for the conference program closes Sunday 21 December AWOT There will be dedicated tracks for Women in the Wikimedia movement and Youth. Submissions: https://meta.wikimedia.org/wiki/Special:MyLanguage/ESEAP_Conference_2026/Pr… + + + Dr Amanda Lawrence Engagement Lead, Australian Internet Observatory<http://internetobservatory.org.au/> Affiliate, ARC Centre of Excellence for Automated Decision-Making + Society<https://www.admscentre.org.au/> RMIT University Email: amanda.lawrence(a)rmit.edu.au Location: Melbourne, Australia Visit: RMIT University | Level 3, Building 98 | 106 Victoria St Carlton, Victoria, Australia

1 0

UNGA WSIS Session transcript
by Joly MacFie 18 Dec '25

18 Dec '25

A couple of people have asked for this. It is. of course, UN copyrighted https://drive.google.com/file/d/1bkQt781rzFo_LO8AIQfVrSoyK1zn5l8b/view?usp=… -- -------------------------------------- Joly MacFie +12185659365 -------------------------------------- -

1 0

UNGA WSIS Session transcript
by Joly MacFie 18 Dec '25

18 Dec '25

A couple of people have asked for this. It is. of course, UN copyrighted https://drive.google.com/file/d/1bkQt781rzFo_LO8AIQfVrSoyK1zn5l8b/view?usp=… -- -------------------------------------- Joly MacFie +12185659365 -------------------------------------- -

1 0

GIG-ARTS 2026: Keynote speaker + deadline reminder
by Mauro SANTANIELLO 18 Dec '25

18 Dec '25

Dear Colleagues, We are delighted to announce* Prof. Iris Eisenberger as the keynote speaker* for the Tenth GIG-ARTS Conference, taking place at Dublin City University on May 14–15, 2026. Iris Eisenberger is Professor of Innovation and Public Law at the Department of Innovation and Digitalisation in Law at the Faculty of Law (University of Vienna). Her work focuses on innovation and technology law, the protection of fundamental and human rights and research at the intersection of law, innovation and society. Please remember that the deadline for submitting abstracts is *19th January 2026*. All information about the 10th edition of GIG-ARTS, including submission guidelines and proposal requirements, is available at: https://gig-arts.eu/dublin-2026/ Best wishes, The Organizing Committee

1 0

[Recap] DigiLabour Book Talks in 2025
by Rafael Do Nascimento Grohmann 18 Dec '25

18 Dec '25

Hi AoIR, In 2025, DigiLabour continued to organize online book talks on its YouTube channel, alongside some in-person events in Toronto. As a recap, check out the 2025 online talks, all available on the channel. Predatory Data - Anita Chan (with Esteban Morales and Paola Ricaurte as discussants): https://www.youtube.com/watch?v=TbyelDrhIZY Work in the Digital Media and Entertainment Industries - Tanner Mirrlees: https://www.youtube.com/watch?v=1XVLFCNNRwY Influencer Creep - Sophie Bishop (with Jul Parke and Arturo Arriagada as discussants): https://www.youtube.com/watch?v=Pu7GwNQ3WqE Common Circuits - Luis Felipe Murillo: https://www.youtube.com/watch?v=K0EPNV9QN0w Informatics of the Oppressed - Rodrigo Ochigame (with Paola Ricaurte as discussant): https://www.youtube.com/watch?v=K6-HJOmwUAQ -- All DigiLabour Book Talks: https://www.youtube.com/watch?v=TbyelDrhIZY Short Videos, Workers Governing Technologies: https://www.youtube.com/watch?v=CZ1PImwoWGA&list=PLBkJLI8oXeXd6YyAY44qZ1mGV… -- And more book talks are coming in 2026. Stay tuned! best, Rafael -- dr. Rafael Grohmann Assistant Professor of Media Studies Department of Arts, Culture and Media<https://www.utsc.utoronto.ca/acm/rafael-grohmann> Faculty of Information<https://ischool.utoronto.ca/profile/rafael-grohmann/> University of Toronto Leader, DigiLabour<https://digilabour.com.br/> Research Associate, University of Oxford<https://www.oii.ox.ac.uk/people/profiles/rafael-grohmann/> Founding Editor, Platforms & Society<https://journals.sagepub.com/home/PNS> Principal Investigator, Worker-Owned Intersectional Platforms (WOIP)<https://digilabour.com.br/worker-owned-intersectional-platforms-woip/> Co-Lead, Creative Labour and Critical Futures (CLCF)<https://criticaldigitalmethods.ca/creative-labour-critical-futures/> Researcher, AI Policy Observatory for the World of Work<https://www.essex.ac.uk/research-projects/ai-policy-observatory-for-the-wor…> Faculty Affiliate, Schwartz Reisman Institute for Technology and Society<https://srinstitute.utoronto.ca/> <https://srinstitute.utoronto.ca/>

1 0

PhD position at University of Manchester
by João C. Magalhães 18 Dec '25

18 Dec '25

Hello all Luke Yates and I are recruiting a researcher to work on a doctoral project exploring how the emergence of GenAI is reshaping relationships among Big Tech and state and non-state political actors (parties, social movements, NGOs, media). The project will investigate attempts by companies to influence individual politicians, political organisations, and communities on AI-related subjects, as well as how these individuals and organisations understand and negotiate these attempts. The aim is to help explain when, how, and why Big Tech succeeds or fails in pushing diverse political actors to trust their products and materialise their interests. This is a four-year, fully funded position (no fees + stipend) financed by the AI Trust and Security Cluster at the Centre for Digital Trust and Society. The successful candidate will be based in the Sociology Department (https://www.humanities.manchester.ac.uk/sociology/) a leading research centre. Applications are restricted to UK candidates and should be submitted by 13 February. More details at https://www.findaphd.com/phds/project/the-politics-of-genai/?p193099 Best, Joao -- João C. Magalhães Senior Lecturer in AI Trust and Security | School of Arts, Languages and Cultures Head of the AI Trust and Security Cluster | Centre for Digital Trust and Society University of Manchester https://jcmagalhaes.com/ Selected publications: Socially blind engineering in Facebook's foundational technologies, 2025<https://link.springer.com/article/10.1007/s13347-025-00971-9> (Philosophy & Technology, w/ Nick Couldry) | Open-ended technological inevitability in journalistic discourses about AI, 2025<http://www.tandfonline.com/doi/full/10.1080/21670811.2025.2522281#d1e238> (Digital Journalism, w/ Rik Smit) | The emergence of platform illiberalism, 2025 <https://osf.io/preprints/socarxiv/6grbc_v1> (pre-print, w/ Clara Iglesias Keller and Rob Gorwa) | A history of objectionability in Twitter’s moderation practices, 2023<https://academic.oup.com/joc/advance-article/doi/10.1093/joc/jqad015/720476…> (Journal of Communication, w/ Emillie de Keulenaar, Bharath Ganesh) | Social media, social unfreedom, 2022 <https://www.degruyter.com/document/doi/10.1515/commun-2022-0040/html> (Communications, w/ Jun Yu) | Big Tech, data colonialism and the reconfiguration of social good, 2021<https://ijoc.org/index.php/ijoc/article/view/15995> (International Journal of Communication, w/ Nick Couldry) | Considering algorithmic ethical subjectivation, 2018<https://journals.sagepub.com/doi/full/10.1177/2056305118768301> (Social Media + Society)

1 0