VN — VnExpress

Trucks carrying AI data center equipment become thieves' targets

SecurityOctober 30, 20262 min read

Thieves in the United States are stealing trucks that carry equipment for AI data centers. Since June, the losses have reportedly topped $100 million.

What happened

Over the past few months, theft groups have broken into transport companies' systems and attacked trucks carrying equipment for AI data centers. Stolen goods include Bitcoin mining devices, servers, copper wire, computer memory chips, fiber-optic cables, and other gear. The thieves first took over a broker's account on a website where shipping jobs are posted. Then they posted fake cargo loads to lure real carriers. When a carrier replied, the thieves sent a link with malicious software. One click installed the software, which let the thieves control the company's account and bid on real loads.

Key numbers

Stolen cargo is valued at more than $100 million since June, according to estimates from business leaders, advisers, and investigators.
In Illinois, two cargo thefts in June held copper coils worth about $300,000 and modular power equipment worth about $1 million.
In July 2025, a truck carrying chips and Apple products worth $15 million was stolen in Reno, Nevada.
In June, equipment worth $13 million was taken near the Mojave Desert, and server rack parts worth $10 million were stolen on the way to Texas.

How the thefts work

Some drivers were hired legally and did not know they were part of a scam. In other cases, thieves used fake driver's licenses to get their own people hired. Stolen loads were handed to these driver accomplices to be resold. In one large theft, equipment moving from California to a data center project in Texas was taken after thieves caused a crash involving the escort vehicle. They then took the truck and faked its GPS location so tracking tools could not find it.

Why it matters

AI data centers need huge amounts of expensive hardware, and that makes their shipments a valuable target. The thefts show that the shipping industry has weak spots in how it checks drivers, companies, and digital accounts. Companies in logistics say they must upgrade both their technology and their checks to keep up.

What to watch

Whether new software can better confirm driver licenses and other paperwork.
How companies use generative AI to track cargo more closely.
Whether police in Illinois, Los Angeles, and other areas arrest and charge the groups behind these thefts.

Glossary

Bitcoin mining: Using powerful computers to verify Bitcoin transactions and earn new Bitcoin.

Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers

Dream researchers say suspected Chinese attackers chained PHP2Shell with the Linux kernel flaw Fragnesia (CVE-2026-46300) to gain root on 25 servers, including Palo Alto Networks firewalls linked to US government-affiliated organizations. The attacks began October 23 and targeted organizations in the US, Japan, Taiwan, and South Korea. Dream believes the attackers likely still have persistent remote access to compromised networks.

SecurityVnExpressOct 29

Tech-savvy young people can still fall into scam traps

At the launch of the CyberZ project in Hanoi on October 29, Colonel Hà Văn Bắc, Deputy Director of the Cybersecurity Department under the Ministry of Public Security, said that quick access to technology does not make young people immune to online scams, especially as criminals combine AI with psychological manipulation. He cited cases of students manipulated through "online kidnapping" schemes and said anti-scam efforts should focus on building community capacity to recognize and respond to constantly changing threats. The CyberZ project, directed by the Cybersecurity Department and sponsored by the Vietnam Student Association, includes an information portal and the CyberZ Challenge contest for student ideas.

SecurityArs TechnicaOct 29

Massive leak exposes 41,000 DHS workers and undercover ICE agents

A leak of Department of Homeland Security records has exposed details of more than 41,000 DHS employees and contractors, including email addresses, phone numbers, office addresses, references to internal systems, and information on undercover and surveillance programs. The records cover DHS and seven component agencies, including ICE and CBP, and were last updated on August 19, 2026. The transparency nonprofit Distributed Denial of Secrets published the archive, which it obtained from a group calling itself the Department of Peace; DDoSecrets says the data came from DHS's Okta login system, while Okta says it is unaware of any breach of its systems.

SecurityZDNet KoreaOct 29

"Accelerating Autonomous SOC"... Igloo Expands AI Agent "AiR" to Three Products

Igloo Corporation, an AI-based security operations and analytics platform company, is expanding its cybersecurity AI agent brand "AiR (AI Road)" into a three-product lineup: AiR mate, AiR works, and AiR clue. The company plans to launch the AI agent orchestration platform AiR works in the first quarter of next year to support Agentic SOC implementations tailored to each organization and accelerate the realization of the Autonomous SOC. AiR mate and AiR clue are currently available as services.