Reading · Pithy Security | InfoSec Made Simple

Three cybersecurity stories shocked experts this week, revealing threats hiding in plain sight across American infrastructure.

Highway solar panels contained secret spy radios, hackers pulled off a massive software attack for pocket change, and a US Senator accused Microsoft of gross negligence in hospital breaches.

Here's what happened and why it matters to you.

Welcome to the September 12, 2025, issue of Pithy Security. Here are this week's three most significant cybersecurity developments.

The Federal Highway Administration has just issued a warning about solar-powered highway infrastructure. Officials say chargers, roadside weather stations, and traffic cameras should be scanned for hidden radios secreted inside batteries and inverters. Federal and state-level reporting revealed "undocumented cellular radios" found inside inverters and batteries used across the US highway systems.

Key Insights:

The undocumented radios discovered in inverters and batteries represent a significant security vulnerability in critical infrastructure. These devices could enable remote tampering and surveillance, giving foreign adversaries backdoor access to America's transportation networks. Security experts warn that compromised highway systems could disrupt traffic flow, manipulate emergency alerts, or steal sensitive location data from millions of daily commuters.

Why This Matters For You:

Your daily commute just became a cybersecurity battleground. Those innocent solar panels powering traffic lights, emergency call boxes, and digital highway signs could be secretly transmitting data or receiving commands from foreign adversaries. When hackers can remotely control traffic systems, weather alerts, and roadside cameras, they're putting millions of drivers at risk during rush hour, emergencies, and severe weather events.

Read More on Reuters.

Hackers pulled off one of the largest supply chain attacks in history by compromising 18 popular npm packages that receive 2 billion weekly downloads. (npm packages are "ready-made" chunks of code that developers share and use.) The attackers phished the account of developer "qix" and poisoned versions of widely-used JavaScript libraries, including chalk and debug. Despite reaching millions of developers and hitting 10% of cloud environments, the sophisticated crypto-draining malware initially stole just 5 cents! A comically small amount that some security researchers have since revised slightly upward, but the irony remains.

Key Insights:

The malicious versions were only live for about 2.5 hours on September 8, 2025, before being removed. The attack targeted cryptocurrency wallets in browsers, designed to hijack transactions from Ethereum and Solana users. Security researchers noted the irony that the most significant financial impact will likely be the millions of dollars companies spend on new security vendor contracts rather than actual theft.

Why This Matters For You:

When the world's most popular coding libraries get hijacked but barely anyone loses money, it reveals something encouraging about modern security defenses. The rapid detection and removal show that supply chain monitoring is working, even if it can't prevent initial compromise. For developers who downloaded these packages during those critical 2.5 hours, their wallets stayed safe thanks to a quick industry response, proving that sometimes the cybersecurity community's immune system works exactly as designed. For once! 🛡️

Solar Panels Caught Hiding Secret Spy Radios! 📡

Comments