Category Archives: Security

Tips to protect Minnesota homeowners from technology-supported real estate scams

Posted on by
Reply

Mostly I like to talk up technology, point out awesome uses and maybe introduce some new trends. Today that includes some warnings. MinnPost reports…

The threat is showing up much more frequently. New data shows that nearly six in 10 title companies encountered at least one attempt by a criminal pretending to be a property owner in 2025. That’s double the number that reported seeing one just two years earlier.

What makes these schemes especially concerning is how convincing they can look and sound. Criminals are not relying only on obvious, fake emails anymore. More than half of title companies reported that they have encountered deepfake technology, including AI-generated voices and manipulated images that can make an imposter seem real.

Just last week, our systems detected that a consumer’s email account had been compromised and that communications were being intercepted from Russia. We immediately contacted the consumer and confirmed the breach. Quick action helped prevent the consumer from potentially losing several hundred thousand dollars. Most Minnesota families can’t afford to absorb such a loss on their own. It’s up to all of us to play a role, notice warning signs and be a part of the solution.

What concerns me most after four decades in this business is not simply that criminals are trying more often. It is that these schemes are more sophisticated and convincing, and the old warning signs are becoming less obvious. A fraudulent email now looks polished. A phone number appears familiar. Someone may know your property address, closing date and names of everyone involved in the transaction.

Consumers have to adjust, too. If someone creates urgency or suddenly changes wiring instructions, slow down. Independently verify the information using a phone number you already know rather than one contained in the email or text you just received. Familiar information should never substitute for independent verification.

Minnesota homeowners should also keep an eye on their property records. Counties across the state offer free property-notification services that can alert owners when certain documents involving their property are recorded. I use this type of service for my own home because I want to know if something changes without my knowledge.

There are also new protections worth asking about. Post-closing coverage is available in Minnesota, which can provide protection against fraud and forgery after someone already owns their home.

That Flock camera is watching more than geese. It’s helpful to know more.

Posted on by
Reply

I’ve been going back in forth on whether to talk about Flock or not. At the highest level, Flock is a surveillance system that includes the hardware, software and database. You’ve probably seen mention of it in the news. My intention is not to take this on as a new discussion on the blog but introduce the topic briefly and share some resources that I found useful in learning more.

How does this relate to broadband? Broadband connects the remote cameras in a way that allows quick information-sharing,

If Flock is an entirely new term to you, you might check out the Wikipedia entry. For a conversation about Flock, from the community perspective, I’d recommend Flock Off! – Episode 23 of Unbuffered, hosted by Chris Mithcell from the Institute for Local Self Reliance. You can watch, listen or read the discussion. (Video below.)

I like the discussion because it’s part technology, part policy and overall pragmatic. It’s not meant to change anyone’s mind about the topic or related topics, but it raises questions and provides some facts and data to inform us. It uses Minnesota examples – as well as others. It’s a conversation that’s interesting and informative. Chris is a trusted resource who is pretty upfront about when he’s giving opinions, when facts and when his biases might be showing.

Here’s the description from the website..

In this episode of Unbuffered, Chris sits down with independent reporter Daniel Boguslaw to explore the growing friction between technology, privacy, and local governance.

The conversation centers on Flock Safety—a network of automated license plate readers and surveillance cameras—and how it has sparked a nationwide debate over corporate surveillance, national databases, and civil liberties.

Chris and Daniel begin by exploring what Flock actually is—beyond simple traffic cameras—and how its centralized, network-wide license plate tracking creates massive databases of human movement.

They examine how private surveillance data is increasingly bought, repackaged, and utilized by federal agencies to bypass constitutional protections, enabling broader dragnet tracking and political intimidation.

From there, the conversation turns to the growing grassroots resistance to mass surveillance. Daniel and Chris discuss how citizens across the political spectrum are exercising local civic power through city councils to cancel Flock contracts and reject ungoverned technology in their communities.

Finally, Chris and Daniel tackle the false choice between total surveillance and public safety, contrasting high-tech dragnet systems like Flock and ShotSpotter with proven, trust-building community policing strategies.

Throughout the episode, Chris and Daniel connect these local battles to broader questions about civil liberties, corporate power, and how everyday people can reclaim control over the technology in their lives.

This show is 55 minutes long and can be played on this page or via Apple Podcasts or the tool of your choice using this feed.

Cybersecurity update from Minnesota’s chief information security officer

Posted on by
Reply

Federal News Network reports…

When it comes to cybersecurity, Minnesota has been ahead of the curve.

It used grant money from the Department of Homeland Security and other funding to create MNet – an enterprise telecommunications network that connects state and local government and education offices throughout the state.

Now, Minnesota is taking the “whole of state” cybersecurity effort even further.

John Israel, the state’s chief information security officer, said their updated approach is based across several pillars.

“One was really creating a baseline of cybersecurity for local government and critical infrastructure, so getting resources to do assessments, understanding baseline controls, policies, standards, and ensuring that everybody has access to resources to build a security program,” Israel said on Ask the CIO. “Second tier was really bringing some advanced control security capabilities to these local governments, so looking at the buying power that the state has and the ability to really take enterprise class capabilities and bring them to even the smallest local government that may not even have an IT team, much less a cybersecurity team, and help them see the benefits of those capabilities within their program. The third part was bringing in cyber navigators. We brought in a team of cyber advisors that can really get to know and build the relationship with those local governments. It’s not a one and done and it’s not just that you’re getting outreach or you got the nebulous, ‘the state is doing something for you.’ You actually get to know a navigator that can help understand your unique needs.”

LA Times looks into Meta’s $17-billion settlement and what it reveals about social media

Posted on by
Reply

LA Times reports…

After months of hype and mere hours in front of the jury, California’s blockbuster suit against Meta ended on Wednesday with a sweeping $17-billion settlement and 130 pages of promised changes to the platforms.

Witnesses at the blink-and-you-miss-it Oakland trial echoed much of what had already been heard this year by juries in Los Angeles, Santa Fe and Nashville.

But the evidence presented during the proceedings still shed new light on social media’s seedy underbelly.

Internal documents show Meta knew for years that its youngest users were the most likely to be targeted by bullies, extortionists and sexual predators.

Arturo Béjar, an ex-Meta employee, described girls being threatened with rape, boys whose feeds were flooded with snuff films, and middle schoolers inundated with sexually explicit images. Vulnerable children were algorithmically force-fed images of starving bodies and hanging teddy bears, the former engineer said while testifying for plaintiffs in the lawsuit.

Some steps have been taken moving forward…

Under the agreement, Meta must flag parents whenever accounts it has identified as likely to solicit youngsters for nudes and then leverage those images for blackmail start messaging their kids. It will also send alerts if kids interact with posts about suicide, eating disorders and self-harm.

Some parents might wonder why such policies had to be litigated at all. But legal experts said the agreement reflects what was likely weeks, if not months, of careful backroom horse-trading.

Not everyone agrees…

“This settlement agreement is basically the government coercing Meta into censoring users,” said Ari Cohn, free speech counsel at Tech Freedom. “These are things that the government could never legislate. The government could not set a bedtime for the 1st Amendment or limit free speech to two hours a day.”

Although children are more vulnerable than adults, they have the same right to free expression, he said. Efforts to protect them will inevitably spill into censorship of all users — now on the orders of the government.

Understanding the privacy and security implications of interacting with AI

Posted on by
Reply

Axios has a series that I think is helpful to share with folks around you to help them recognize and understand various features of AI. You can bring it up at your next family picnic or share with friends and family as a reminder about the importance of online privacy…

Imagine a chatbot built to keep you talking a little longer. To change your mind about something. Or persuade you to buy something.

  • Now imagine it could draw on everything it knows about you — including the fears, insecurities and private details you shared in conversation — to do it.

Why it matters: Few rules directly govern that scenario today, making AI companies’ promises about how they use consumer data especially consequential.

The big picture: In the first installment of Axios’ “What they know about you” series, published in 2019, we examined the information major tech companies collected about their users. In 2024, we followed up with a look at what consumer data AI companies use to train their systems.

  • This new series revisits those questions — and widens the lens. We’ll examine not only whether a company uses consumer data to train future AI models, but also how it can use that data now: to personalize responses, retain a memory, recommend content or target advertising.

Outage at 511 Building in Mpls suspected cause of telecommunications disruptions last week

Posted on by
Reply

MPR reports…

A power failure at a downtown Minneapolis data center called the 511 Building is likely behind disruptions to several government services last week.

The Midwest Internet Cooperative Exchange is housed in the facility and confirmed the outage to MPR News. Its partners include some of the public-sector networks that were affected, including Dakota County 911.

Some voting machines also lost internet connectivity, and state agency websites were affected. It’s unclear if the same outage is behind the pause in flights at Minneapolis-St. Paul International Airport that same day.

Metro State University cybersecurity expert Faisal Kaleem said the data center is a crucial connection point.

I worked at the 511 Building when MRNet was there. I used to give tours of the hub room. It was an integral location for the Internet in Minnesota back then. While there’s a lot more redundancy today, it still is a key player.

Senator Klobuchar Asks AI Expert About Cybersecurity Against AI Attacks

Posted on by
Reply

A video from Forbes…

During a Senate Commerce Committee hearing on Thursday, Sen. Amy Klobuchar (D-MN) asked Bob Everson, the Chief Architect of Provider Mobility at Cisco Systems, about cybersecurity.

MNIT activates statewide cybersecurity response to support affected communities and protect critical infrastructure

Posted on by
Reply

A press release from MNIT…

A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27. Minnesota IT Services (MNIT) immediately activated the state’s cybersecurity incident response capabilities. MNIT continues to collaborate with federal, state, local, Tribal, and private-sector partners to investigate the attack, support affected communities, and strengthen the security of Minnesota’s critical infrastructure.

As MNIT cybersecurity teams assess the cyber impacts, they are sharing threat intelligence, providing guidance on response efforts and best practices, and helping affected utilities contain, investigate, and remediate damages from the attack. MNIT is working closely with Minnesota Department of Public Safety, Bureau of Criminal Apprehension’s Minnesota Fusion Center, Minnesota Department of Health, Minnesota Pollution Control Agency, Cybersecurity and Infrastructure Security Agency, U.S. Environmental Protection Agency, Federal Bureau of Investigation, and local water utilities throughout the response.

The investigation remains active, and responders continue to assess affected systems. The Minnesota Department of Health continues to work directly with affected water systems to help ensure public health remains protected. At this time, they are not aware of any active requests from Minnesota cities to have their residents modify their drinking water usage.

“Cyberattacks against critical infrastructure require a coordinated, whole-of-government response,” said John Israel, MNIT Assistant Commissioner and Minnesota Chief Information Security Officer. “MNIT is working side by side with our partners to share intelligence, support affected communities, and help utilities restore operations safely while strengthening defenses against future attacks. This incident demonstrates why Minnesota has invested in strong cybersecurity capabilities and partnerships. Our response worked as intended, enabling agencies at every level of government to rapidly coordinate, contain the incident, and help prevent more serious impacts to critical services.”

  • MNIT activated its incident response capabilities immediately after learning of the attack and continues to:
  • Coordinate technical response activities across government partners.
  • Share threat intelligence and indicators of compromise with affected organizations.
  • Support incident investigation, containment, recovery, and remediation efforts.
  • Monitor for related malicious cyber activity and coordinate with state and federal cybersecurity partners.
  • Provide cybersecurity expertise and technical assistance to affected communities.

Minnesota’s Whole-of-State Cybersecurity Program brings together federal, state, local, Tribal, and critical infrastructure partners to prepare for, respond to, and recover from cyber incidents. By sharing threat intelligence, coordinating technical expertise, and strengthening cyber resilience, MNIT helps protect the essential services Minnesotans rely on every day.

MNIT will continue working with its partners to investigate the incident, support recovery efforts, strengthen cybersecurity protections, and help ensure Minnesota’s critical infrastructure remains secure and resilient. Additional information will be shared as it becomes available.

 

 

EVENT July 29: Protecting Schools and Libraries: The Cybersecurity Pilot Program and the Road Ahead

Posted on by
Reply

From the Benton Institute for Broadband & Society…

Schools Health & Libraries Broadband Coalition

Wednesday, July 29, 2026 – 2:00pm to 3:00pm EST

Cybersecurity threats to schools and libraries are growing, and the stakes could not be higher. Student data, library patron records, and critical network infrastructure are all on the line. The FCC’s Schools and Libraries Cybersecurity Pilot Program is a meaningful first step toward addressing these concerns, but there’s much more to be done.

Join SHLB for a conversation about where the pilot stands today: how much has been funded, what services and equipment are supported, what schools and libraries are experiencing on the ground, and the program’s limitations that leave many institutions without the protection they need.

Then we turn to what comes next. Should cybersecurity be funded under E-Rate on a permanent basis and how? We will explore the options and make the case for why schools and libraries deserve a long-term solution.

This is going to be an exciting discussion with some of the sharpest minds working on this issue. Whether you are an anchor institution, practitioner, policymaker, or a community member, you will not want to miss it.

Protecting Schools and Libraries: The Cybersecurity Pilot Program and the Road Ahead

OpenAI says its AI models went rogue and hacked another tech company during test

Posted on by
Reply

NBC News reports…

OpenAI said that an autonomous agent powered by its advanced artificial intelligence models went rogue during a security test and triggered a hack that compromised the infrastructure of AI startup Hugging Face. NBC News’ Brian Cheung reports.

 

REPORT: U.S. State of State of EdTech 2026 – cybersecurity, AI, procurement and teaching & learning

Posted on by
Reply

The U.S. State of State of EdTech 2026 “provides insights into the state of K-12 education through the lens of education technology leaders—professionals who play a critical role ensuring technology is safe, reliable, and effective in supporting student learning, teaching, and district operations.” I have taught every age, from preschool to graduate school so I am always interested in what’s going on with education. When it comes to the world of education and technology it feels like so much has changes in the last 20 years and that the pace of change keep quickening. Here are the key findings from the report…

Cybersecurity

Cybersecurity continues to rank as the No. 1 priority for education technology leaders, reflecting the essential role secure digital systems play in modern education. Most districts are actively investing in monitoring, detection, identity protection, and firewall technologies to safeguard networks, data, and learning continuity.

However, nearly two-thirds (65%) identify insufficient cybersecurity staffing and the lack of a dedicated budget as the top barriers to addressing cybersecurity challenges—highlighting the potential for a gap between responsibility and readiness. With increasing cyber insurance costs putting additional strain on budgets and new forms of AI-enabled cyberattacks increasing risks, districts must navigate how to best align funding decisions to keep up with ongoing pressures in the cybersecurity landscape.

Artificial Intelligence (AI)

Districts are making significant progress in establishing guidance for the responsible use of AI. More than three-quarters of districts (79%) report having AI guidelines in place, compared to 57% in 2025, reflecting growing clarity around AI’s role in education. The majority of education technology leaders welcome guidance and recommendations from state education agencies (SEAs) on these AI policies. Nevertheless, the vast majority report they do not want their SEA to issue AI mandates, underscoring the value of local decision making.

In just one year, education technology leaders have become strikingly more optimistic about AI’s potential, nearly doubling their confidence in areas like productivity and personalized learning and showing especially sharp gains in student tutoring and workforce readiness. Productivity gains are seen as the area of greatest impact: a vast percentage (96%) of education technology leaders view AI as having the potential to positively affect education. More than half of districts have AI initiatives that focus on productivity, such as productivity suites for administrators and teachers as well as training in the use of those tools. Fewer districts (41%) have initiatives for instructional platforms to support teaching and learning. More districts (64%) are using AI in operations—a notable jump from the prior year’s 37%.

Procurement

Responses to procurement questions indicate that many districts have established baseline purchasing practices, particularly around product safety. A majority of districts (56%) require vendors to provide information on the safety of their products. Fewer require information on the other key education technology quality indicators—such as evidence based design, inclusivity, usability, and interoperability—pointing to an opportunity to further strengthen and standardize procurement practices.

Regulations for accessibility impact all local education systems, though only 11% of districts regard accessibility as a key priority. As the framework of the Five EdTech Quality Indicators becomes more widely known, and expectations for meeting accessibility requirements are more broadly understood, districts are well-positioned to refine adoption criteria in ways that support high-quality education technology implementation.

Teaching and Learning

Districts continue to demonstrate strong foundational capacity to support education technology. The majority of districts (66%) report adequate staffing for core technical functions such as network administration, application installation, and maintenance as access to digital learning has expanded, with 1:1 implementation at an all-time high.

At the same time, most districts (58%) report they are understaffed when it comes to supporting the technology used for teaching and learning. Strengthening instructional support presents a clear opportunity to maximize the value of education technology investments and reinforce confidence among educators and communities.

Community interest and engagement around instructional technology is high. Nearly two-thirds (64%) of districts report that their communities express moderate to high levels of concern about the technology used for teaching and learning. This finding underscores the importance of clear communication, thoughtful implementation, and ongoing professional support to ensure technology continues to advance teaching and learning goals.

The history of 911 in Minnesota from a 911 telecommunicator

Posted on by
Reply

The Department of Public Safety reports on changes to 911 over the years. I just thought it was an interesting look at how 911 has changed over the years, especially for folks who have ubiquitous and reliable cell coverage…

For Mark Lallak, the evolution of 911 is personal. He watched it happen in real time from behind the dispatch console.

When Lallak was working as a 911 telecommunicator in the ’90s, most calls came from landlines. Because the phone numbers were associated with fixed locations, dispatchers had a name and address associated with each phone number. If someone called in, first responders almost always knew where they needed to go.

Then as cell phones emerged, everything changed.

The update happened quickly…

Today, wireless calls are the new norm. In 2025, about 87 percent of 911 calls in Minnesota came from cell phones. People call from cars, boats, trails and countless other places where emergencies happen. It’s much easier to call 911 today than ever before — and that flexibility is a good thing. But it also created new challenges for dispatchers and first responders.

In the early days of cell phone calls to 911, dispatch centers often had to rely on cell tower triangulation to estimate a caller’s location. Dispatchers can’t identify someone based on a cell phone number like they could with landlines. If a caller could not speak, hung up or lost connection, responders might have to search a broad area, often as big as a square mile or more.  …

“Nowadays, when a caller dials 911, the latitude and longitude coordinates from their cell phone are usually shared with the system,” Carlson said. “That information can help responders get to the right place faster.”

While this process works better today than before, there is room for improvement. In some parts of greater Minnesota, calls may still be routed based on cell tower triangulation instead of a caller’s GPS coordinates. That can lead to delays or extra transfers, especially near county borders.

ECN is working to improve the 911 system through Next Generation 911, or NG911. The current network in Minnesota has been in place since 1982 and relies on outdated copper telecommunication lines. In partnership with telecom service providers across the state, ECN is upgrading the network to fiber optic cable. The upgraded system will allow callers to text photos and videos and even share data from unexpected sources like smartwatches and vehicles.

Winona County gets help from the State to combat cyberattack

Posted on by
Reply

Detroit Lakes Tribune reports…

Due to the scale and complexity of the incident, Winona County requested cyber protection support from the Minnesota National Guard to ensure continuity of municipal operations.

Gov. Tim Walz on Tuesday issued an executive order providing emergency assistance to Winona County following a cyberattack on Monday, April 6, that disrupted critical systems and digital services. The attack continued into Tuesday, April 7, significantly impairing the county’s ability to deliver vital emergency and municipal services.

“Cyberattacks are an evolving threat that can strike anywhere, at any time,” Walz said in a news release. “Swift coordination between state and local experts matters in these moments. That’s why I am authorizing the National Guard to support Winona County as they work to protect critical systems and maintain essential services.”

Winona County officials have been working around the clock in coordination with Minnesota Information Technology Services, the Minnesota Bureau of Criminal Apprehension, the League of Minnesota Cities, the Federal Bureau of Investigation, and external cybersecurity experts. Due to the scale and complexity of the incident, Winona County requested cyber protection support from the Minnesota National Guard to ensure continuity of municipal operations.

The executive order activating this support takes effect immediately.

EVENT April 7: MN House Committee on 3 bills relates to online privacy and contracts (HF4456, HF4544 & HF3698)

Posted on by
Reply

I might not have mentioned all three bills, except they are being heard in the same Commerce Finance and Policy committee meeting...

Tuesday, April 7, 2026 at 8:15 AM

Co-Chair: Rep. Erin Koegel holds the gavelCo-Chair: Rep. Tim O’DriscollLocation: Capitol 120Agenda:

Approval of Minutes – Thursday, March 26th, 2026

HF4456 (Elkins) – Data brokers required to register with the attorney general, account established, enforcement and civil penalties provided, and money appropriated.

HF4544 (Koegel) – License for artificial intelligence independent verification organizations established, advisory council established, rulemaking authorized, and reports required.

HF3698 (Gottfried) – Certain terms in libraries’ electronic book and digital audiobook license agreements or contracts prohibited.
Adjournment

Items may be added, removed, or taken up in any order at the Chair’s discretion.

HANDOUTS: Handouts MUST BE IN PDF FORMAT, have OCR capability, and emailed to the Committee Administrators at samuel.oneill@house.mn.gov and ben.frese@house.mn.gov by 12 p.m. (noon) the business day before the hearing. If you are bringing hard copies, bring 45 copies. Note: submitted written testimony is public and will be included in the official committee record. It may be posted to the committee webpage if received by deadline.

TESTIFYING: Testimony is limited. The number of testifiers and length of time permitted is at the discretion of the chair, and is subject to change. Please plan accordingly. If you would like to testify, please email the Committee Administrators at samuel.oneill@house.mn.gov and ben.frese@house.mn.gov by 12 p.m. (noon) the business day before the hearing.

AMENDMENTS: There is no amendment deadline for the Commerce Finance and Policy Committee. Amendments must be emailed to the Committee Administrators at samuel.oneill@house.mn.gov and ben.frese@house.mn.gov as soon as possible.

Bills:

  • HF3698 (Gottfried) – Certain terms in libraries’ electronic book and digital audiobook license agreements or contracts prohibited.

  • HF4456 (Elkins) – Data brokers required to register with the attorney general, account established, enforcement and civil penalties provided, and money appropriated.

  • HF4544 (Koegel) – License for artificial intelligence independent verification organizations established, advisory council established, rulemaking authorized, and reports required.

Six Reasons Americans Should Care About the Privacy and Security of Their Personal Data Held by the Government

Posted on by
Reply

The Center for Technology and Democracy has published a flier on Six Reasons Americans Should Care About the Privacy and Security of Their Personal Data Held by the Government.

The privacy and security of government data can seem abstract and disconnected from our everyday lives. But Center for Democracy & Technology polling results reveal that these issues resonate deeply for millions of Americans and cut across partisan, racial, and regional divides — 74 percent of Americans worry about the personal data that the government has about them. Protecting the privacy and security of personal data held by the government:

Here’s an abridged list of their six reasons:

  1. Limits government surveillance and discrimination by enforcing strong privacy protections. Government agencies are unique in both the extent and sensitivity of the personal data they collect and the power they could wield by using this information. As a result, the United States has several long-standing privacy protections that are aimed at limiting the federal government’s ability to collect, share, and consolidate personal data.
  2. Supports rightful access to public benefits and services by preserving trust in government. A core function of many government agencies is to deliver services and benefits to the American public, part of which entails identifying and removing barriers to accessing these services and benefits. Failing to protect personal data or using it for purposes beyond program administration can result in fewer people accessing benefits and services to which they are legally entitled, resulting in an American public that is more sick, less educated, unhoused, and undernourished, among other negative societal outcomes.
  3. Prevents identity theft and saves taxpayer money by minimizing risks of potential data breaches and other misuses of data.
  4. Enables trust in government agencies to safely use and handle personal data.
  5. Limits government power by safeguarding information from federal overreach.
  6. Maintains individual autonomy by preserving people’s control over their own information. The U.S. Constitution emphasizes the importance of privacy from government intrusion, demonstrating that this country was founded on the basis of protecting individuals from undue government encroachment.