The report details a Russian-aligned espionage campaign against more than 20 organizations, an exploit foundry run by Chinese undergraduates and ShinyHunters-affiliated breaches, among other disrupted operations.

Authorities accuse the 36-year-old and co-conspirators of collecting more than 5,000 victim login credentials to various banks.

Sality’s peer-to-peer infrastructure allowed it to evade system-wide disruption efforts for an exceptionally long period. Authorities and cybersecurity experts finally brought it down.

The six-month program will be overseen by the Office of the National Cyber Director and Texas Cyber Command to “find out what works.”

The prolific ransomware group Qilin claimed responsibility for the attack. ATF insists the incident was limited to a standalone system and hasn’t impacted critical operations.

The “philosophical shift” that the memo authorizes raises legal, practical and moral questions, experts say.

The president went against his intelligence agencies’ conclusions about Iran being the likely suspect in the campaign.

Brad Blakestad, director of the National Quantum Coordination Office, also said encryption and measuring progress would pose challenges.

Laundry Bear exploited a zero-day vulnerability for five months before it was patched in November 2025, and the group is still actively exploiting vulnerable environments.

DTEX researchers found a series of transactions in a payment wallet showing North Korean IT worker salaries flowing into sanctioned entities that support the regime’s military programs.