• House leaders have stripped a bipartisan provision aimed at protecting civilian Defense Department workers’ collective bargaining rights after Senate Republicans balked at the prospect of clashing with President Trump over his efforts to excise unions from most federal agencies.

    Last July, the House Armed Services Committee voted to bar the Pentagon’s use of fiscal 2026 funds to implement Trump’s March executive order stripping two-thirds of the federal workforce of their collective bargaining rights, including the measure as part of the 2026 National Defense Authorization Act. The House voted 231-196 to pass the bill in September, leaving the provision intact.

    But when the House Rules Committee unveiled compromise language for the annual must-pass bill on Sunday, the measure, originally proposed by Rep. Donald Norcross, D-N.J., had disappeared. A source familiar with congressional negotiations told Government Executive that despite 16 House Republicans urging their Senate colleagues to support the measure, only Sen. Lisa Murkowski, R-Alaska, ultimately pushed for its inclusion.

    Matt Biggs, national president of the International Federation of Professional and Technical Engineers said the provision’s exclusion from the likely final version of the NDAA was a “disappointment.” Although there are other avenues for lawmakers to nullify the anti-union executive orders, like the Protect America’s Workforce act, which is slated for a vote on the House floor in the coming weeks, including the measure on an annual must-pass bill was seen as the most realistic.

    “We put a lot of effort into [the NDAA provision] and our members made a lot of calls,” he said. “If it was part of the NDAA, the White House wouldn’t have vetoed it. If it passed on its own, they could have, but the NDAA’s too important.”

    The American Federation of Government Employees on Monday called on lawmakers to vote against the bill. The House Rules Committee is set to consider the compromise bill on Tuesday.

    “Congress should not be in the business of weakening national security by weakening the workforce that makes national security possible,” said AFGE National President Everett Kelley. “DOD civilians are patriots. They serve this country with skill, honor and sacrifice. Denying them collective bargaining rights is wrong, it is harmful to the mission, and it has no place in a defense bill. If lawmakers are serious about supporting our military, they must send this bill back to conference, fix it, restore these protections and then pass an NDAA worthy of the men and women who defend this nation every day.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Nearly a year after Defense Secretary Pete Hegseth purged the top judge advocates general of the Army, Navy, and Air Force, lawmakers are poised to require an explanation if it happens again.

    A provision in the compromise version of the 2026 National Defense Authorization Act would require the defense secretary to provide Congress with notice and a reason for the removal soon after a top JAG’s dismissal.

    “If the Judge Advocate General is removed from office before the end of the term … the Secretary of Defense shall, not later than five days after the removal takes effect, submit to the Committees on Armed Services of the Senate and the House of Representatives notice that the Judge Advocate General is being removed and a statement of the reason for the removal,” the provision reads. 

    The provision was originally inserted in the Senate version of the NDAA, which passed in October. It appears in the 3,000-plus-page version agreed by House and Senate negotiators, which was released late Sunday evening and could see a House vote within days.

    Three days after Hegseth fired the services’ JAGs in February, he said that the lawyers were “roadblocks to orders that are given by a commander in chief.”

    The top JAGs—sometimes called TJAGs—are the principal legal advisers to leaders of their service branch.

    Fears are growing within the national-security legal community that military legal guidance is being ignored, especially as seemingly unjustified airstrikes on alleged drug boats continue. 

    Sen. Elizabeth Warren, D-Mass., a member of the Senate Armed Services Committee, inserted the language into the Senate’s version of the NDAA this summer. 

    “Secretary Hegseth’s attack on independent legal advisors doesn’t make anyone safer. I’m fighting to rein in this abuse of power and ensure transparency from this administration,” Warren said in a July news release.

    A Warren spokesperson had no further comment on Sunday evening.

    One former JAG said the language was a notable development, but was skeptical about how transparent the Pentagon would be about such removals. Military branches have often offered no more than some variation of the phrase “loss of trust and confidence” in explaining the dismissal of officers from top leadership roles. 

    “I hope that this helps. My fear is that the Department of Defense will cite generic rationale for removing the individual,” the former JAG said. “My other hope is that we never see a future TJAG removed in a way that this current administration has done it.”  

    The Air Force’s top legal role has remained vacant since Hegseth fired Lt. Gen. Charles Plummer on Feb. 21. Maj. Gen. Rebecca Vernon, who had served as the service’s deputy JAG, became acting TJAG earlier this year but stepped away from the job in October and is set to retire by Jan. 1, Defense One first reported. An Air Force spokesperson said there’s an acting TJAG but the deputy JAG position remains vacant.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers are calling attention to a new campaign dubbed JS#SMUGGLER that has been observed leveraging compromised websites as a distribution vector for a remote access trojan named NetSupport RAT. The attack chain, analyzed by Securonix, involves three main moving parts: An obfuscated JavaScript loader injected into a website, an HTML Application (HTA) that runs encrypted

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Last summer’s $156 billion defense spending boost through the reconciliation bill is likely “only just the beginning,” Defense Secretary Pete Hegseth told an audience at the Reagan National Defense Forum in California on Saturday.

    “We need a revived defense industrial base. We need those capabilities. We need them yesterday. And so, resource-wise, I think this room will be encouraged by what we'll see soon. But I don't want to get too ahead,” Hegseth said in his keynote address. 

    Context: U.S. defense spending has risen in recent years from $812 billion in fiscal year 2017 to $870.7 billion in fiscal year 2021 to $895.2 billion in 2025, Defense One’s Lauren C. Williams reports from Simi Valley. 

    “We received a historic boost in funding last year, and believe that is only just the beginning,” the Pentagon chief said, alluding to the $156 billion boost from budget reconciliation on top of the DOD’s proposed budget for 2026. That funding will be key to “supercharging” the defense industry, which is one of the Pentagon’s four “lines of effort,” along with homeland defense, pushing allies to increase defense spending, and deterring China. 

    Meanwhile, the White House may ask for a second reconciliation bill next year, Office of Management and Budget Director Russell Vought said at the defense forum. Continue reading, here. (Williams has more reporting below.) 

    New analysis: The lopsided cost of Operation Southern Spear means the U.S. military is sinking speedboats with a supercarrier, strategist Peter W. Singer of New America writes in an economics explainer for Defense One

    “Debates over the legality of U.S. military strikes on alleged drug-smuggling boats have obscured calculations of their cost,” Singer says. But while no U.S. casualties have been reported during the Pentagon’s war on alleged drug cartel boats, the campaign is consuming far more American treasure than cartel lucre, he warns. 

    Consider: The Pentagon has released few details about the 23 vessels it has blown up, but one was reported to be a civilian-type 39-foot Flipper-type motorboat with four 200-horsepower engines. A new one retails on Boats.com for $400,000, but the old, open-top motorboats in the videos must cost far less. The crew of the boats have been reported as making $500 per trip.

    However, “On the other side of the conflict is certainly the most expansive–and thus most expensive–military deployments in history for a counter-narcotics mission,” Singer writes. The first task force of warships deployed to the operation, which included an Amphibious assault ship and even a nuclear powered attack submarine, cost $19.8 billion to buy. They were later joined by the aircraft carrier Gerald R. Ford, which cost $12.9 billion to buy after $4.7 billion for research and development. Its three escorts pushed the purchase price of the Southern Spear fleet past $40 billion.

    The estimates for every hour of the carrier’s operation is roughly $333,000, while each escort consumes a comparatively cheaper $9,200 per hour, Singer explains. Then there are the munitions costs, as well as personnel pay and benefits for the roughly 15,000 US service members who have been deployed so far in the operation, including 5,000 ashore in Puerto Rico and 2,200 Marines aboard ships.   

    At the operational level, the cost to acquire the U.S. forces for this mission is at least seven times the annual revenue of their enemy and at least 5,000 times more than what the enemy paid for the speedboats they are fighting. “At the tactical level, the numbers are even more asymmetric,” Singer says. What’s more, if U.S. forces used four munitions for each strike—“twice to kill the crew and twice more to sink it,” as the Washington Post reported—that’s 320 to 1200 times the cartel’s cost. 

    Bottom line: “The operations in the Caribbean could soon face the same sustainability problem that surfaced in conflicts from Vietnam to Afghanistan,” Singer warns. “When the U.S. has to spend orders of magnitude more to neutralize a target than its foe spends to field or replace it, it enters into what businesses call a ‘losing equation’ that often adds up to failure.” There’s much more to his analysis, here

    Related reading: 


    Welcome to this Monday edition of The D Brief, a newsletter dedicated to developments affecting the future of U.S. national security, brought to you by Ben Watson and Bradley Peniston. It’s more important than ever to stay informed, so thank you for reading. Share your tips and feedback here. And if you’re not already subscribed, you can do that here. On this day just last year, Syrian dictator Bashar al-Assad fled the country as his regime abruptly collapsed after 13 years of civil war. 

    The U.S. Army just activated its new Western Hemisphere Command, which will replace Army Forces Command and eventually absorb Army North and Army South, Defense One’s Meghann Myers reported Friday. 

    The idea is to take FORSCOM’s mission of preparing troops for deployment and combine it with Army North’s experience in supporting civil authorities and Army South’s expertise in working with allies across the Caribbean, Central America and South America, an Army official told reporters last week. 

    In doing so, Gen. Andrew Poppas, who currently leads FORSCOM, will retire, and the Army’s deputy chief of staff for operations, Lt. Gen. Joe Ryan, will put on a fourth star and assume command of the newly minted USAWHC, or WESTHEM for short. 

    The reorganization follows the recent inactivation of Army Training and Doctrine Command, which merged with Army Futures Command to form Army Transformation and Training Command, netting the Army one less four-star organization. 

    It also feeds into the second Trump administration’s new National Security Strategy, including a forthcoming National Defense Strategy that promises to make military operations in support of domestic law enforcement a core mission. Continue reading, here

    Notable: Fort Bragg could get a bit more crowded. “Most of the civilian and military personnel now at Army North and Army South commands at Joint Base San Antonio-Fort Sam Houston could be headed to Fort Bragg, North Carolina,” the San Antonio Express-News reported Friday as well. “Army North currently has as many as 600 soldiers and civilian employees and Army South up to 500,” the newspaper reports, citing Army figures. 

    “Most of those have been told that they probably will have to move,” retired Army South commander, Maj. Gen. Freddie Valenzuela said. Read more, here

    Developing: The Navy’s frigate program is back on, sort of. Mere days after Navy Secretary John Phelan canceled the service’s yearslong delayed program, the White House greenlit a plan to design and build a frigate domestically as part of its proposed “Golden Fleet,” Secretary Phelan announced at the Reagan Forum on Saturday. 

    Trump “has signed off on what we are calling the Golden Fleet…We will continue to build ships that are the cornerstones of the fleet—carriers, destroyers, amphibs, submarines. But we need new ships and we need modern ships,” Phelan said, Defense One’s Lauren Williams reports from California. 

    Background: OMB Director Russell Vought said the decision to axe the program was driven by delays that grew from 15 percent during the first Trump administration to 85 percent during Trump’s second term. To turn that around, the government will have to “do things differently,” he said. Read more, here

    National Security Strategy reactions

    NATO reax: “The late Thursday release of the White House’s National Security Strategy, a document sketching the president’s foreign policy priorities and their ideological underpinnings, landed like a grenade in Brussels,” the Washington Post’s Ishaan Tharoor wrote Sunday.  Instead of focusing on the geopolitical challenge of Russia and China (as Trump’s first term NSS did), it took aim at Europe itself, warning against the ‘civilizational erasure’ of the continent thanks to unfettered migration and a feckless liberal establishment.” Tharoor rounds up notable social-media posts:

    • Donald Tusk, prime minister of Poland: “Dear American friends, Europe is your closest ally, not your problem. And we have common enemies. At least that’s how it has been in the last 80 years. We need to stick to this, this is the only reasonable strategy of our common security. Unless something has changed.”
    • Gérard Araud, who served as France’s ambassador to the United States as well as the United Nations: “…the stunning section on Europe reads like a far-right pamphlet.”
    • Carl Bildt, former Swedish prime minister: “The only part of the world where the new [U.S.] security strategy sees any threat to democracy seems to be Europe. Bizarre.”

    Another angle: Despite its “incoherent babble,” Trump’s NSS still contains “three valuable points,” former Bush administration official Eliot Cohen argued Friday in The Atlantic

    • First, “the United States has tended to ignore the Western Hemisphere until a crisis” erupts—e.g. the Cuban revolution or the near-collapse of Colombia.
    • Second, the document “shift[s] from understanding the [African] continent primarily through the perspective of development aid to one focused on commerce,” Cohen writes. 
    • And lastly “on Europe, the NSS is uncomfortably in the right ballpark in pointing out the challenge of mass migration,” he argues, noting the administration “has put its finger on a real problem.” Read the rest, here.   

    Historian’s reax: The “Trump administration is embracing the old idea of spheres of influence in which less powerful countries are controlled by great powers, a system in place before World War II and favored now by Russia’s president Vladimir Putin, among others,” which amounts to “a dramatic reworking of the foreign policy the U.S. has embraced since World War II,” Boston College’s Heather Cox Richardson wrote Friday. 

    Trump’s officials “have openly rejected the world based on shared values of equality and democracy for which Americans fought in World War II. In its place, they are building a world dominated by a small group of elites close to Trump, who are raking in vast amounts of money from their machinations,” Richardson warned Saturday, on the anniversary of the Japanese attack on Pearl Harbor. “Will we permit the destruction of American democracy on our watch?” she asked. 

    Another historian: If “the world is just a balance of power where law does not much matter, as the new National Security Strategy indicates, then it is hard to say what prevents countries attacked by the United States from resorting to any sort of violence they choose,” warns former Yale historian Tim Snyder. “For decades the United States has justified foreign invasions in the name of democracy (for better or for worse, usually for worse). Nicolás Maduro lost an election (in 2024) and stayed in power.” 

    “But however one adjudges past American interventions, now we are in a new situation: Trump does not even pretend to like democracy,” Snyder writes. And indeed, “there is no sign that the Trump administration is preparing for the security and economic support that a new democratic government would need.” More, here

    Additional reading: 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • This week in cybersecurity from the editors at Cybercrime Magazine

    Sausalito, Calif. – Dec. 8, 2025

    Read the full story from BreachLock

    Penetration testing is an offensive security testing methodology in which pentesters or “ethical hackers” deliberately hack into company networks, applications, and other systems, simulating real-world cyberattacks to identify and safely exploit vulnerabilities.

    The goal of a pentest is to identify the organization’s security vulnerabilities and provide recommendations that can help security practitioners strengthen their firm’s defense strategies and security posture.

    There are a few common mistakes made during pentesting that can prevent organizations from addressing the most critical vulnerabilities, create a false sense of security, and even increase their risk for an attack.

    In a blog post by BreachLock Labs, they explore three real-world lessons that can help your organization avoid these mistakes and effectively leverage pentesting to strengthen cybersecurity in today’s complex security landscape.

    BreachLock’s 2025 Penetration Testing Intelligence Report reveals that in 2025, “real-world exploitability rose sharply across sectors, fueled by a convergence of outdated systems, cloud misconfigurations, and increasingly sophisticated multi-step attack chains”.

    Read the Full Story



    Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

    • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
    • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
    • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
    • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
    • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
    • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
    • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
    • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
    • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

    Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

    The post 3 Real-World Penetration Testing Lessons For CISOS and Cybersecurity Teams appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • It’s been a week of chaos in code and calm in headlines. A bug that broke the internet’s favorite framework, hackers chasing AI tools, fake apps stealing cash, and record-breaking cyberattacks — all within days. If you blink, you’ll miss how fast the threat map is changing. New flaws are being found, published, and exploited in hours instead of weeks. AI-powered tools meant to help developers

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The holiday season compresses risk into a short, high-stakes window. Systems run hot, teams run lean, and attackers time automated campaigns to get maximum return. Multiple industry threat reports show that bot-driven fraud, credential stuffing and account takeover attempts intensify around peak shopping events, especially the weeks around Black Friday and Christmas.  Why holiday peaks

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have disclosed details of two new Android malware families dubbed FvncBot and SeedSnatcher, as another upgraded version of ClayRat has been spotted in the wild. The findings come from Intel 471, CYFIRMA, and Zimperium, respectively. FvncBot, which masquerades as a security app developed by mBank, targets mobile banking users in Poland. What’s notable about the malware

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A critical security flaw in the Sneeit Framework plugin for WordPress is being actively exploited in the wild, per data from Wordfence. The remote code execution vulnerability in question is CVE-2025-6389 (CVSS score: 9.8), which affects all versions of the plugin prior to and including 8.3. It has been patched in version 8.4, released on August 5, 2025. The plugin has more than 1,700 active

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • SIMI VALLEY, California.—The White House has greenlit a plan to design and build a frigate domestically as part of its proposed “Golden Fleet,” Navy Secretary John Phelan announced at the Reagan National Defense Forum on Saturday.

    President Donald Trump “has signed off on what we are calling the Golden Fleet…We will continue to build ships that are the cornerstones of the fleet—carriers, destroyers, amphibs, submarines. But we need new ships and we need modern ships,” Phelan said, referring to a conversation with the president, defense secretary, and White House budget director last week. 

    “We will be building a frigate. It will be based on an American design. It is something we can build that we think, actually, will be done before the old Constellation.”

    The announcement comes just over a week after Phelan canceled the U.S. Constellation-class frigate program, which was years behind schedule. The navy secretary was scant on details but hinted there was more to come on the “big, beautiful ship.” 

    Earlier in the day, OMB Director Russell Vought said the decision to axe the program was driven by delays that grew from 15 percent during the first Trump administration to 85 percent during Trump’s second term. To turn that around, the government will have to “do things differently,” he said.

    “It's not just market demand; it's execution at these companies to be able to make their contracts and stay on time. And we have a massive backlog. We have many programs that are overrun and this team is currently fixing them. But it's going to require doing things differently to be able to crack that cycle,” he said.

    Moving fast is the new normal

    The Navy is pushing decisively into unmanned maritime systems with a funding infusion from budget reconciliation. And for Phelan, that means prototyping, testing and producing quickly. 

    “The Navy basically had a little bit over 200 different unmanned tests going on across nine [program executive offices]. We've consolidated it down to one,” Phelan told reporters. “We've eliminated layers that allow us to test faster, iterate quicker, and get things contracted—which is what we were able to do here with Saronic at this particular junction.”

    The Navy surreptitiously bought an undisclosed number of small, 24-foot drone boats as part of a $392 million rapid acquisition contract with Saronic earlier this year—and it’s likely to serve as a blueprint for future buys, Phelan told reporters Saturday.  

    The Navy used an other transaction agreement through the Pentagon’s Defense Innovation Unit for a prototype and awarded a production contract less than a year later. Some $200 million was immediately put on contract to jumpstart production. Phelan declined to say how many watercraft were ordered. DefenseScoop first reported on the contract’s existence.

    Saronic can make about 2,000 of the Corsair vessels in its Austin, Texas, facility each year, CEO Dino Mavrookas told reporters Saturday. 

    Phelan, who vowed to speed up Navy contracting and spend less, said the drone boat deal was an example of how that might happen. 

    “This is exactly the kind of rapid prototyping discipline, scaling and responsible stewardship we need to maintain naval dominance as we transition to a hybrid manned-unmanned fleet. It proves that when new entrants bring credible capability to the table, the Department of the Navy will be a fast, serious and repeat customer,” he said. 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶