55
42
55
Why prevention-first secrets security will define enterprise scale: Learnings from a leading telecom
55
30
30
55
55
Authorities seize popular, long-running DDoS-for-hire service domainsnew
FBI and RCMP seized NightmareStresser DDoS-for-hire domains under Operation PowerOFF; the service enabled hundreds of thousands of attacks since at least 2022.
The Justice Department announced the court-ordered seizure of NightmareStresser's primary domain and related sites, executed by the FBI Anchorage field office and the Royal Canadian Mounted Police under Operation PowerOFF. The DDoS-for-hire service enabled hundreds of thousands of attacks or attempted attacks since at least 2022, targeting educational institutions, government agencies, gaming platforms, and millions of people. Authorities have seized more than 100 booter domains since 2018; operators remain unidentified and the service claimed to operate under Russian law.
45
What’s next for CISA’s CDM program that gives cybersecurity tools to federal agencies
CISA officials outline future plans for the CDM program, emphasizing speed, automation, unified data, and data-driven federal risk management.
Speaking at an Elastic Federal Cyber Defense Breakfast, CISA officials described next steps for the Continuous Diagnostics and Mitigation (CDM) program that supplies cybersecurity tools to federal agencies. Acting deputy program manager Richard Grabowski named velocity, unification, and data-driven risk management as core goals, including a three-year roadmap to expand SIEM-as-a-Service. Federal CISO Mike Duffy urged aggregating demand across agencies, buying outcomes rather than products, and designing acquisition for continuous improvement. CISA's Matt House tied the program's evolution to post-SolarWinds needs for a government-wide common operating picture.
22
Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks
Australian Federal Police charges two men with 14 offences over TeamPCP supply chain backdoors in Trivy, Checkmarx KICS, and LiteLLM affecting 1,000+ organizations.
The Australian Federal Police charged two Western Australian men, aged 21 and 23, with 14 offences for their alleged principal roles in TeamPCP's March 2026 supply chain attacks; they appeared in Perth Magistrates Court on August 27, 2026. The group stole publishing credentials from trusted open-source projects and pushed poisoned releases across five ecosystems - GitHub Actions, Docker Hub, npm, PyPI, and OpenVSX - with LiteLLM's unpinned Trivy install enabling token theft and backdoored LiteLLM releases. The FBI said the malicious code potentially compromised more than 1,000 organizations, enabled theft of over 500,000 credentials, and exfiltrated at least 300 GB of data. Oligo Security linked the group's infrastructure to activity back to 2020, previously tracked as TA-NATALSTATUS and IronErn.
72
55
55
30
30
30
55
30
55
30
42
30
30
55
55
55