60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
Two alleged TeamPCP members arrested and charged after months of software supply
Australian Federal Police, with FBI support, arrested two alleged TeamPCP members behind supply-chain attacks that compromised over 1,000 organizations.
The AFP charged two Western Australian men, identified by media as Ruben Ian Thomson (21) and Louis Michael Gaebler (23), with 14 combined offences including unauthorized data modification and dealing in criminal proceeds. TeamPCP is blamed for poisoning open-source software releases including Trivy, LiteLLM, and the mini Shai-Hulud worm campaign, exposing over 500,000 credentials and at least 300 GB of data. Victims included the European Commission and GitHub, with remediation costs estimated in the hundreds of millions of dollars. Researchers from Flare traced one suspect through leaked passwords, a GitHub alias, and a Steam profile.
72
Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure
Trump signed an executive order declaring an emergency to bar foreign bulk-power equipment deemed a national security cyber risk.
The executive order, 'Declaring a National Energy Emergency to Secure the United States Bulk-Power System,' prohibits acquiring, importing, transferring, or installing foreign-produced bulk-power equipment and software deemed risky, citing fears of digital backdoors in Chinese-made grid gear. China supplies roughly 85% of solar supply chain capacity and is a major transformer manufacturer. The Energy Department has 120 days to develop implementing rules; the order revives a 2020 Trump-era measure the Biden administration had suspended after utilities found compliance difficult.
62
Eight years later, federal authorities re-up charges against alleged Iranian hackers at Mabna Institute
US prosecutors unsealed a superseding indictment charging 17 Iranians in the Mabna Institute's state-sponsored theft of 31.5 terabytes from universities and companies.
The superseding indictment unsealed in the Southern District of New York charges 17 people affiliated with Tehran's Mabna Institute, adding eight defendants to the 2018 indictment of nine. The institute allegedly compromised over 100,000 professor email accounts worldwide, including 8,000 accounts at 144 US universities, and stole at least 31.5 terabytes of academic journals, dissertations, and e-books. US universities spent approximately $3.4 billion procuring the stolen data, and victims also included at least five federal and state agencies, 42 US companies, and 11 foreign companies including HBO. The State Department's Rewards for Justice program is offering up to $10 million for information on four of the defendants.
65
A bold new strategy or a dangerous precedent? Experts are divided on Trump's memo.
Trump presidential memorandum authorizes private-sector companies to conduct federally supervised hacking operations against transnational criminal organizations.
A newly signed presidential memorandum enlists private companies in federal law enforcement hacking operations aimed at transnational criminal organizations, with a 60-day window to establish the program. Experts told CyberScoop the shift raises attribution, targeting and constitutional questions, including risks of private firms accidentally attacking foreign governments and procedures for prior approval before targeting US persons. Critics likened the approach to historical letters of marque, while supporters including NSC cyber policy director Amanda Naylor framed it as bringing private-sector speed to the fight against cybercrime and fraud.
68
Germany moves to give spy agencies hacking and sabotage powers
Germany's cabinet approved a 732-page bill granting BND and BfV intelligence agencies new hacking, sabotage, and disinformation powers pending parliamentary approval.
Germany's cabinet approved draft legislation that would give the foreign intelligence service BND and domestic agency BfV active operational powers, including hacking foreign systems, sabotaging supply chains with faulty components, disabling servers of hostile state-sponsored hackers, and feeding false information to extremists inside Germany. The 732-page bill, the largest overhaul of postwar German spy laws, requires telecom carriers and digital providers to assist the agencies, bars measures endangering life, and imposes new statutory controls on how agencies use AI analysis, including judge-supervised spot checks of machine-generated outputs. The reforms stem from a Federal Constitutional Court ruling on surveillance proportionality and are expected to pass parliament, with the government aiming for the law to take effect next year; civil liberties groups plan to challenge it.
65
Trump turns to private sector in offensive hacking operations memo
Trump signed a national security memorandum authorizing vetted private companies to conduct offensive cyber operations against transnational criminal organizations under federal oversight.
The memorandum creates a federal coordination center program authorizing 'Participating Companies' to conduct Cyber Surveillance Operations and Cyber Effects Operations against foreign cyber-enabled transnational criminal organizations. Participating firms must contract with the Justice Department or Department of Homeland Security, undergo vetting, and comply with existing laws including the Computer Fraud and Abuse Act. The White House cited sustained fraud and cyber-enabled campaigns from TCOs as justification, building on a March fraud-focused executive order. Experts including Veracode co-founder Chris Wysopal called it a major shift in U.S. cyber policy, though it stops short of broader 'hack back' proposals.
78
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60