30
55
30
55
30
Confused about which VPN is right, US senator asks the NSA for guidance
Senator Ron Wyden asked the NSA to update public guidance on VPN configurations, questioning single-hop designs and services like Tor.
Sen. Ron Wyden (D-Ore.) sent a letter Wednesday to NSA director Gen. Joshua Rudd requesting updated public guidance on VPN best practices for Americans facing advanced foreign threats, including government personnel, contractors, and journalists. The letter highlights limitations such as decrypted traffic at single-hop termination servers, metadata like timestamps enabling nation-state profiling, and asks the NSA to assess multi-hop architectures, random delays, cryptographic padding, and specific services including Apple Private Relay, Nym, and Tor.
40
30
30
30
30
30
30
55
30
30
30
30
30
30
30
Risky Bulletin: Two TeamPCP members arrested in Australia
Australian Federal Police arrested two alleged TeamPCP members behind supply-chain worm attacks that stole over 500,000 credentials from compromised open-source libraries.
The AFP arrested alleged TeamPCP leader Ruben Thomson, 21, and Louis Gaebler, 23, near Perth; both were charged and remain in custody. The group inserted a self-spreading credential-stealing worm into open-source projects including Trivy, KICS, LiteLLM, and Telnyx, harvesting more than 500,000 credentials used for network access, ransomware, extortion, and sales. About 78,000 tokens and secrets from nearly 2,200 organizations leaked online last month, and the FBI supported the investigation that began in April.
74
30
30
30
30
ICE Wants to Know Everyone Who Bought a Certain Green Beanie From REI in the Last 2 Years
DHS subpoenaed REI for all Minneapolis-area customers who bought a specific green beanie since 2024, part of an investigation into 39 ICE protest defendants.
Court filings allege Homeland Security Investigations agents subpoenaed REI in March for transaction records of all persons in the greater Minneapolis–St. Paul area who purchased a specific dark green beanie since 2024. The subpoena was one of 92 sent in a federal case against 39 people, including journalists, who attended an ICE protest at a church. Companies responded differently: T-Mobile handed over six months of a defendant's call and text logs, Google refused a request for YouTube viewers, Reddit withdrew after a First Amendment objection, and Meta pushed back on at least one summons. The 1509 customs summonses require no judicial oversight, and the total number issued under the Trump administration is unknown.
32
42
30
30
30
30
30
55
30
30
30
30
30
55
55