Cybersecurity
25 years after 9/11, spy agencies face old lessons and new threats
Former intelligence officials describe a nation better equipped to disrupt terrorist plots, but still wrestling with the costs of its response and how to prevent the next crisis under escalating technology threats.
Cybersecurity
Lawmakers ask Commerce to sanction Indian firms involved in mercenary hacking
The “hack-for-hire” entities have systematically targeted newsrooms covering corporate fraud, legal teams in high-stakes litigation and NGOs.
Artificial Intelligence
Intelligence agencies warn of China’s large-scale AI model distillation efforts
Three agencies issued a joint statement warning that Chinese companies DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun and Z.AI have used the tactics to extract billions of tokens from U.S. models.
Cybersecurity
CIA cyber intelligence helped US forces capture Maduro, deputy director says
Michael Ellis credited the agency’s cyber intelligence officers with helping U.S. troops locate and apprehend the Venezuelan leader within minutes of landing.
Cybersecurity
Trump admin moves to block risky foreign technology from US power grid
A new executive order targets hardware, software and remote-access services and could require operators to isolate or replace equipment already in use.
Cybersecurity
FBI disables China-linked hacking tools used against US agencies
A hacking group used the tools to target networks belonging to NASA, the Federal Reserve, the National Institutes of Health, the U.S. Senate and the departments of Energy, Justice and Health and Human Services.
Policy
Lawmakers press Commerce to restrict Americans from aiding foreign spy agencies
A bipartisan group says unfinished export control rules leave civilian intelligence services able to obtain U.S. cyber, surveillance and AI assistance.
Cybersecurity
Treasury sanctions Iranian hackers tied to critical infrastructure breaches
Four of the five people named in the cyber action were also charged last week in the Justice Department’s expanded Mabna Institute case.
Cybersecurity
DOJ charges 17 Iranians in cybertheft campaign
Prosecutors say the Mabna Institute — which conducted intrusions for Iran’s Islamic Revolutionary Guard Corps, among other campaigns — stole 31.5 terabytes of academic data and breached email accounts at U.S. agencies and companies.
Cybersecurity
The Russian hurdle in Trump’s new offensive cyber program
The White House wants private companies to help take down cybercriminals overseas. But in Russia, the line between criminal hackers and the government is difficult to draw.
Policy
White House S&T strategy calls for new approaches to safeguard US research
The new guidance says the U.S. "will further strengthen its workforce by attracting and retaining top-tier global talent in critical national security S&T fields” — a departure from last year’s National Security Strategy that said global talent “undercuts American workers.”
Cybersecurity
CISA cautions against rigid rules for future of cyber vulnerability program
A top agency official said formal backing from Congress could strengthen the global vulnerability-tracking system but warned against measures that may limit its ability to adapt to ever-changing hacking threats.
Cybersecurity
AI advances are pushing governments to treat cyberattacks as routine, Western officials say
The remarks underscore a grim outlook for cyberdefenders showing that AI systems are able to exploit vulnerabilities faster than governments can patch them.
Artificial Intelligence
Top cyber official wants US open-source AI adopted worldwide
National Cyber Director Sean Cairncross’s remarks come as the White House has excluded open-weight models from voluntary security testing and as new hacking incidents underscored risks posed by autonomous AI.
Cybersecurity
Chinese telecom firms kept footholds in US networks despite federal crackdowns, House probe finds
China Mobile, China Telecom and China Unicom retained equipment, data center space and network ties after FCC restrictions, including a China Mobile-linked network that appeared in routes to Salt Typhoon servers.
Cybersecurity
CISA urges water utilities to take exposed systems down after Minnesota hacks
A memo distributed to water industry members and obtained by Nextgov/FCW makes mention of Iran but does not directly present evidence attributing the latest Minnesota incident to the country.
Cybersecurity
Amazon uncovers broad North Korean hacking campaign against open-source software
New findings connect the same Pyongyang-backed group to four compromises dating to 2025, revealing a larger operation than previously known.
Policy
FCC blocks approval of new foreign-made robots, power inverters
National security agencies said the devices could create supply-chain vulnerabilities, threaten critical infrastructure and enable surveillance or remote manipulation.
Cybersecurity
Russian hackers can steal government emails without victims clicking a link, cyber agencies warn
The Russia-linked Laundry Bear group has compromised more than 10 Western organizations through malicious emails that can trigger an exploit when they are viewed or previewed.
Artificial Intelligence