The Harlow Report-GIS
2025 Edition
ISSN 0742-468XSince 1978
On-line Since 2000
GIS News Snippets
For the week of
June 2, 2025
Remember When?
A “Harlow Report” From June 3, 2024
Anyone Can Tap Into Your WiFi Location Data to Track You
by Ernestas Naprys
Apple will provide your WiFi location to anyone sending a query, and researchers demonstrated that “an unprivileged, weak attacker” — in other words, anyone — can exploit Apple's WiFi-based positioning system (WPS) to perform global mass surveillance.
“Merely being within WiFi range of an Apple device can lead to a device's location and movements being made widely and publicly available,” said a paper by Erik Rye and Dave Levin, researchers at the University of Maryland.
The researchers managed to learn the precise locations of over two billion WiFi access points around the world.
They also demonstrated that large-scale global surveillance attacks could be launched by any remote and unprivileged adversaries.
Read full story at Cybernews…
Now back to 2025
A New Online Map Brings Together 130 Years of Malta's Aerial Imagery
by Times of Malta
New government-led project launched at Public Service Expo
A new website that brings together digitised versions of maps of Malta dating back more than 130 years has been unveiled.
The project — ‘Joint Ordnance Survey of Malta 1896-1927’ — allows members of the public to view a single map and compare how parts of Malta have evolved over time, simply by selecting different aerial photographs and satellite imagery taken over the years.
It builds on historic survey sheets, aerial photography held by the Planning Authority as well as work done by the SintegraM platform to develop a base layer topographical map of Malta, and also includes satellite images provided by US-based firm ESRI.
Daniel Fenech, from the Department of Public Works’ Research and Planning Unit, explained that this digitalisation process involved extensive and innovative research. He further stated that after scanning the old maps, they were digitised using a system called Geographic Information Systems (GIS), allowing the public, professionals, and researchers to view how the map of our country has evolved over the years in a digital format.
The map was formally launched at the Public Service Expo at the MFCC in Ta’ Qali by Parliamentary Secretary for Public Works Omar Farrugia.
Read full story at Times of Malta…
Addressing Vulnerabilities in Positioning, Navigation and Timing (PNT) Services
by Nikita Kumari
Exploring vulnerabilities in (PNT) services and strategies to protect critical infrastructure from GNSS disruptions and signal interference.
The need for precision in networks, particularly those that support critical infrastructure, has never been more acute. Positioning, Navigation, and Timing (PNT) services have become indispensable, enabling precise synchronization and coordination across various sectors such as telecommunication, transportation, energy and finance.
At its core, PNT relies on signals from global navigation satellite systems (GNSS) like GPS, Galileo, and GLONASS to provide accurate location and timing information. These signals are essential for a wide range of applications, from guiding aircraft and ships to synchronizing financial transactions and power grid operations. However, the widespread dependence on GNSS signals also exposes critical infrastructure to vulnerabilities and risks, making it susceptible to disruptions caused by signal jamming, “spoofing” and other forms of interference.
Read full story at BISinfotech…
Chinese Hackers Breach US Local Governments Using Cityworks Zero-Day
by Sergiu Gatlan
Chinese-speaking hackers have exploited a now-patched Trimble Cityworks zero-day to breach multiple local governing bodies across the United States.
Trimble Cityworks is a Geographic Information System (GIS)-based asset management and work order management software primarily used by local governments, utilities, and public works organizations and designed to help infrastructure agencies and municipalities manage public assets, handle permitting and licensing, and process work orders.
The hacking group (UAT-6382) behind this campaign used a Rust-based malware loader to deploy Cobalt Strike beacons and VSHell malware designed to backdoor compromised systems and provide long-term persistent access, as well as web shells and custom malicious tools written in Chinese.
These attacks started in January 2025, when Cisco Talos observed the first signs of reconnaissance activity within the breached organizations' networks.
"Talos has found intrusions in enterprise networks of local governing bodies in the United States (U.S.), beginning January 2025 when initial exploitation first took place. Upon gaining access, UAT-6382 expressed a clear interest in pivoting to systems related to utilities management," said Cisco Talos security researchers Asheer Malhotra and Brandon White.
Read full story at Bleeping Computer…
State Use of GIS Is 'a Backbone for Public Service Planning'
by Quinton O'Reilly
Dermot O'Kane, head of sales at ESRI Ireland, emphasizes that GIS provides a "backbone" for these processes by offering contextual visualization of complex data, revealing patterns and insights that enhance decision-making.
Summary
Geographic Information Systems (GIS) have evolved from a supplementary tool to a cornerstone of digital government workflows, enabling authorities to create, manage, analyze, and map data for informed decision-making. In Ireland, GIS is integral to public service planning, supporting emergency response, census operations, infrastructure development, and utilities management. GIS integrates with platforms such as Microsoft 365, connecting data, people, and processes to form a “digital nervous system” for government operations.These tools enable field workers to collect and share real-time data, streamlining operations like utility network management and eliminating outdated methods like clipboards. For instance, water utilities such as Northern Ireland Water and Uisce Éireann leverage GIS to monitor networks, address issues like pipe bursts efficiently, and plan for housing developments by assessing network capacity.
Read full story at Business Post…
UNDP Helps Launch a New National Land Use Information Management System
by United Nations Development Programme
The new system will support the implementation of the National Sustainable Land Use Policy by enabling government teams to manage, analyze, and visualize spatial land data.
With the support of UNDP and Mammoth Geospatial, The Department of Lands and Physical Planning (DLPP) has officially received the National Land Use Information Management System (NLUIMS), a key digital platform developed to support the implementation of the Papua New Guinean Government's National Sustainable Land Use Policy on the 12 May 2025.
The NLUIMS system was successfully transferred to DLPP's servers and will now undergo a 30-day internal review period. This milestone marks a significant achievement in Papua New Guinea's land governance reform journey, enabling government officers to store, manage, and visualize land use data through an integrated, web-based Geographic Information System (GIS) platform. The system was created with the support of UND's “Establishing Systems for Sustainable Integrated Land Use Planning Across New Britain Island” project, which is part of the Global Environment Facility's Food Systems, Land Use, and Restoration (FOLUR) Programme.
During this review period, DLPP staff are encouraged to test their new skills by uploading datasets and generating maps to the system and explore the growing database of spatial information, including villages, roads, waterways, and administrative
Read full story at United Nations Development Programme…
Industry News
In Government
Consolidating IT Systems Can Lead to Over $100M in Cost Savings, GAO Finds
by Edward Graham
The Government Accountability Office's latest duplication and overlap report said improved federal IT portfolio management could achieve such savings “by reducing duplicative IT investments and halting or terminating investments, when appropriate.”
The federal government can save more than $100 billion if it addresses “overlap, duplication, and fragmentation” across agencies'operations — $100 million of which could come from enhancing management of information technology systems — according to an annual report released on Tuesday by the Government Accountability Office. GAO's duplication and overlap report, the 15th iteration released by the watchdog, identified “148 new matters and recommendations in 43 new topic areas for Congress or federal agencies to improve efficiency and effectiveness of government.”The latest total brings the number of open GAO recommendations to 589. The watchdog said that congressional and federal action on its recommendations “has yielded about $57 billion more in savings since our last report, bringing the federal government's total level of savings to $725 billion.”
Read full story at NextGov…
Here Are the Tech Takeaways From President Trump's Budget Proposal
by Alexandra Kelley and Natalie Alms
The White House has suggested sweeping reductions to many civilian agencies, though it promises to maintain investments in emerging technologies.
The Trump administration released the outline of its 2026 budget request … calling for a reduction in non-defense discretionary funding by $163 billion, or about 23% from 2025.
The so-called “skinny budget” includes cuts to a range of nondefense discretionary spending — which doesn 't include mandatory programs like Social Security —and increases in some places like the Department of Homeland Security and Federal Aviation Administration. The administration says that it is proposing a 13% increase in defense spending. Some of the increases for defense and border security would come from a reconciliation package the administration is working on with congressional Republicans.
the white house says that its' taking aim at “woke” diversity programs and work on climate change; moving some government work to the state and local level; and ridding the government of “weaponized rot,” pointing to cuts to the IRS and the Cybersecurity and Infrastructure Security Agency as examples.
Read full story at Government Executive…
State and Local Governments Are Poised for IT Workforce Gains
by Dominick Sorrentino
A combination of hiring former feds and making smart use of artificial intelligence could help state and local agencies upskill their workforces and maximize efficiency when they need it most.
Listen (06:32)
First came the federal job cuts. There have been an estimated 26,000 so far in 2025, according to Reuters, and potentially more to come. Gov. Wes Moore quickly seized this opportunity to draw skilled workers to the state of Maryland. So did New York, and Pennsylvania. Then came the specter of federal funding cuts. COVID funding, social services, Medicaid, education and public health are areas that have been, or are expected to be, targeted for funding reductions. But where challenges loom, others also see opportunities to transform and modernize state and local government operations, particularly as it pertains to preparing for artificial intelligence. ”Within disruption is the chance to really effectuate change,” says Daniel May, director of procurement talent development at the National Association of State Procurement Officials.“I think we have a chance now to really modernize state technologies, approach our procurement practices differently and connect those two in ways that we haven't done before.”
Read full story at StateTech…
In Technology
Google Replacing SMS With QR Codes for Gmail Authentication
by Omar Gallaga
Instead of receiving an SMS, a QR code will be sent to your phone to verify your Gmail account.
Summary:
Google is phasing out SMS-based two-factor authentication (2FA) for Gmail and other services due to rising security risks, as reported by Forbes and confirmed by Ross Richendrfer, Google's head of security and privacy PR, in a CNET interview. Scammers exploit SMS 2FA through techniques like spoofing and "traffic pumping," where they profit from fraudulent SMS messages. To address this, Google is transitioning to more secure methods like passkeys and QR codes, which users can scan to verify logins, reducing reliance on phone carriers and mitigating phishing risks.
Google isn't alone in this shift. Companies like Evernote, Signal (in 2022), X, Apple, and Microsoft have already moved away from SMS-based 2FA. Security experts, including Amy Bunn from McAfee, support the change, noting that SMS is prone to hijacking via SIM-swapping, which can lock users out of their accounts. Rob Allen from ThreatLocker called SMS the least secure 2FA method, advocating for authenticator apps as a safer alternative. Google has been signaling this transition since 2017, and while it may cause initial inconvenience, experts view it as a necessary step toward a more secure digital environment.
Read full story at CNET…
Microsoft Wants All App & Driver Updates to Go Through Windows Update
by Michael Crider
The new unified Windows Update orchestration platform aims to be your one-stop shop for all software updates.
When it comes to phones, most software is updated through a unified process. With an iPhone, you get all your operating system updates from Apple and all your individual app updates from the App Store. Android phones are similar, if slightly more fragmented. Now what if Windows worked in the same way, centralizing all your software needs and updating everything in one spot? Microsoft wants that.
Microsoft product manager Angie Chen announced the new Windows Update orchestration platform (a classic Microsoft name if ever I heard one) via the IT Pro blog. There's a lot of technical jargon on the page, but it boils down to this: developers will be able to join the platform to deliver software updates for just about anything from within Windows—from the tiniest programs to the most crucial drivers to giant packages like Adobe Creative Suite—all going through Windows Update.
Read full story at PCWorld…
You Can Now Fix Your iPad at Home
by Michael Simon
Apple expands its Self Service Repair program to tablets.
In November 2021, Apple announced that it was opening a new Self Service Repair store to “allow customers who are comfortable with completing their own repairs access to Apple genuine parts and tools.” What started with the iPhone 12 and 13 has expanded to dozens of products, including most Macs and the latest iPhone, the 16e. Now Apple has announced that you can fix your iPad at home too.
Owners of the iPad Air (M2 and M3), iPad Pro (M4), iPad mini (A17 Pro), or iPad (A16) can diagnose and repair their tablet at home with official Apple parts, including displays, batteries, cameras, and the USB-C port. Users will be able to order parts and tools through Apple's Self Service Repair Store.
Other than a small number of people who want the satisfaction of the DIY repair, however, most users will still opt for a Genius Bar appointment. Prices aren't available in the store yet, but they're not likely to be cheap.
Read full story at MacWorld…
In Utilities
Google to Provide Early-Stage Funding for Three Advanced Nuclear Projects
by Kevin Clark
Elementl Power calls itself a “technology agnostic” advanced nuclear project developer and independent power producer. Founded in 2022, the company has a goal of bringing more than 10 gigawatts (GW) of new nuclear online in the U.S. by 2035, working collaboratively with regulated utilities, independent power producers and technology suppliers.
Under this agreement, each of the three nuclear sites would generate at least 600 MW of capacity, with Google having the option for commercial off-take once projects are complete.
Elementl will continue the evaluation of potential reactor technology, engineering, procurement and construction (EPC), and other project partners, while prioritizing specific sites for accelerated development.
Read full story at Power Engineering…
Hawaiian Electric Using Drones as a Wildfire Safety Tool
by Maui News
As part of its ongoing wildfire safety strategy, Hawaiian Electric is using unmanned aircrafts, or drones, for aerial inspections of its electrical infrastructure in identified wildfire risk areas.
The drones play a critical role in the inspection process and the technology enables Hawaiian Electric to more quickly identify issues to prevent or lessen the risk of wildfires.
In Maui County, Hawaiian Electric has contracted with E2 to conduct drone inspections, alongside the company's own staff. Inspections typically will be conducted Mondays through Saturdays, between 6 a.m. and 6 p.m. Personnel will drive Hawaiian Electric or E2 marked company vehicles. If on foot, the drone operator will wear a Hawaiian Electric, E2 or Alt Spec UAS company-branded hard hat and vest. All personnel carry a Hawaiian Electric contractor or employee identification badge.
Read full story at MauiNow…
Trump Aims for 400 GW of Nuclear by 2050, 10 Large Reactors Under Construction by 2030
by Brian Martucci
Nuclear advocates welcomed proposed regulatory reforms while cautioning that NRC and DOE staff cuts could “undermine” progress. One skeptic said NRC changes would compromise safety.
Summary
- The White House wants to deploy 300 GW of net new nuclear capacity by 2050 and have 10 large reactors under construction in the U.S. by 2030 while expanding domestic nuclear fuel supplies, according to an executive order President Trump signed Friday.
- Trump signed three other orders on Friday to accelerate Nuclear Regulatory Commission reviews of reactor license applications and reconsider strict NRC radiation limits; expand departments of Energy and Defense roles in nuclear power plant licensing and siting; and speed up deployment of new test reactors.
- Nuclear power advocates hailed the orders as a boon for the industry, but warned that staff cuts at NRC and DOE could slow progress. A representative for the Union of Concerned Scientists said the proposed reforms would make the public less safe.
Read full story at UtilityDive…