• The Air Force is sweeping some of the offices that oversee its acquisition programs into groups with similar missions, part of an effort that aligns with—but also predates—recent acquisition-reform guidance issued by the defense secretary.

    On Thursday, service officials revealed the first five of the new groups and the "portfolio acquisition executives" who will run them:

    Ostensibly, these new PAEs replace and supersede program executive officers who were focused on narrower efforts. But most of the uniformed and civilian PAEs were already running acquisition efforts focused on sets of related missions rather than individual programs.

    The new roles were seen as a key part of Hegseth’s November speech and memo to overhaul the existing defense industrial base and encourage faster acquisitions. 

    While some defense experts have praised the PAE model, one former defense official said the Air Force already had many of its portfolios more broadly focused on mission sets. 

    “From the Air Force perspective, they were pretty well aligned with mission sets to begin with,” the former official told Defense One. “Good things are happening here, but for the Air Force it’s more of a continuation of work that’s been going on for some time.”

    The Space Force will also have two PAEs to oversee acquisitions related to space access and space-based sensing and targeting missions, according to a department news release. An Air Force spokesperson did not respond with the names of the new space-related PAEs by publication time. 

    "This transformation is a generational opportunity for the Department of the Air Force,” Air Force Secretary Troy Meink said in the news release. "It enables us to holistically reform our enterprise—from requirements, to acquisition, to test—in order to support the rapid and efficient development of our warfighting capabilities in order to get the operators what they need when they need it.”

    But many of the service’s marquee acquisition programs now have been taken over by the Office of the Secretary of Defense. Weeks after Hegseth’s speech, the Pentagon took over  oversight of the Air Force’s biggest and costliest programs, sweeping them into a “Direct Reporting Portfolio Manager for Critical Major Weapons Systems.” Air Force Lt. Gen. Dale White was nominated to the role, which oversees programs such as the Sentinel and Minuteman III intercontinental ballistic missiles, the B-21 bomber, the F-47 fighter jet, and the VC-25B presidential aircraft. 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Researchers at Acronis have discovered a new campaign called Boto Cor-de-Rosa, where the Astaroth banking malware spreads like a worm through WhatsApp Web to steal contact lists and banking credentials.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A critical vulnerability (CVE-2026-21877) found by Upwind affects n8n automation tools. Learn why researchers are urging users to update to version 1.121.3 immediately to prevent remote code execution.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Marine Corps has selected Northrop Grumman and Kratos to develop its forthcoming Marine Corps Air-Ground Task Force Uncrewed Expeditionary Tactical Aircraft (MUX TACAIR) Collaborative Combat Aircraft, an unmanned wingman that will fly alongside manned fighter jets.

    Northrop will develop a mission kit and open-architecture software for Kratos’s existing VX-58 Valkyrie, according to a joint Thursday press release.

    “With more than 20 successful flight demonstrations in operationally relevant environments, Northrop Grumman and Kratos are offering the U.S. Marine Corps a low risk, expedited path to MUX TACAIR mission capability and persistent joint crewed and uncrewed expeditionary operations,” the release said.

    The initial award is for $231.5 million, Breaking Defense reported, over two years, through an other transaction agreement that bypasses the traditional procurement process and allows development to move more quickly.

    The Air Force has been leading larger, higher-profile efforts to develop robot wingmen—formally, combat collaborative aircraft—but the Marine Corps requested $58 million in its most recent budget request to fund the development of its own CCA.

    “We are committed to the development of a robust Combat Collaborative Aircraft capability and think this model of manned-unmanned teaming is just as relevant on the sea and under the sea,” Gen. Eric Smith, the service’s commandant, told the Senate Appropriations Committee in written testimony last summer. “We are exploring options that would provide our future MEUs with such capabilities.”

    Smith mentioned that the Corps had tested out the Valkyrie through the Rapid Defense Experimentation Reserve as part of the Marine Corps’ Penetrating Affordable Autonomous Collaborative Killer – Portfolio (PAACK-P) “experiment,” and that those lessons learned would inform the forthcoming MUC TACAIR program, aiming to pair the CCA with the F-35.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A 25-year-old Bigfork, Montana man, Jeremiah Daniel Starr, used over 50 phone numbers and a VPN to harass a victim he called his “best friend,” even staging a fake shooting. Learn more about the FBI investigation that traced 1,100 IP addresses to bring him to justice.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have disclosed details of a new campaign that uses WhatsApp as a distribution vector for a Windows banking trojan called Astaroth in attacks targeting Brazil. The campaign has been codenamed Boto Cor-de-Rosa by Acronis Threat Research Unit. “The malware retrieves the victim’s WhatsApp contact list and automatically sends malicious messages to each contact to further

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Developing: The White House says it will put the proceeds from selling seized Venezuelan oil into offshore accounts, so that the money would not be held by the U.S. Treasury but be controlled by President Trump, as he declared on social media Tuesday evening.

    The official line from the administration: “All proceeds from the sale of Venezuelan crude oil and oil products will first settle in U.S. controlled accounts at globally recognized banks,” the Department of Energy announced Wednesday. “The only oil transported in and out of Venezuela will be through legitimate and authorized channels consistent with U.S. law and national security,” according to a fact sheet. 

    This raises serious questions, Lisa Desjardins of PBS reported, including: 

    • “Who decides which U.S. bank(s) get this very large account?”   
    • “Will Congress have any say over how the funds are dispersed?” 
    • “Or, will President Trump + admin. unilaterally oversee *billions* of dollars in Venezuelan oil money?” 
    • “Will US or Venezuelan taxpayers have access to decisions about this money?”

    Greenland update: Secretary of State Marco Rubio is set to meet with Danish officials next week in the wake of Trump’s declared interest in acquiring the territory by force or otherwise. 

    Rubio told lawmakers this week Trump wants to buy Greenland, not invade it. But Danish officials for years have been adamant the island is not for sale. Indeed, the New York Times reported Thursday, “Denmark does not have the authority to sell the territory, and Greenland’s prime minister, Jens-Frederik Nielsen, has repeatedly scoffed at the idea, reiterating this week: ‘Our country is not for sale.’”

    Danish troops in Greenland would “shoot first, ask questions later” in response to an invasion, Denmark’s defence ministry confirmed on Wednesday. Under a policy in place since 1952, soldiers are required to “immediately” counter-attack invading forces without awaiting orders. Ministry officials have confirmed that the policy remains in place. More, here.

    Canadian officials are discussing “a voluntary civilian-defence force” to support its military after Trump floated the possibility of using “economic force” to turn America’s northern neighbor into its 51st state, The Economist reported Wednesday. Relatedly, “Plans are now regularly updated to deal with a surge of migrants who might want to enter Canada from the United States. Mr Trump’s predilection for sending troops into states run by Democrats while using his department of justice to prosecute his political opponents has compelled Canada to prepare for the event of civil strife next door.”


    Welcome to this Thursday edition of The D Brief, a newsletter focused on developments affecting the future of U.S. national security, brought to you by Ben Watson with Bradley Peniston. It’s more important than ever to stay informed, so we’d like to take a moment to thank you for reading. Share your tips and feedback here. And if you’re not already subscribed, you can do that here. On this day in 1814, Gen. Andrew Jackson led U.S. forces to victory in the Battle of New Orleans, unaware that U.S. and British officials had formally ended the War of 1812 about two weeks earlier.

    Trump 2.0 

    New: The president said he wants a $1.5 trillion defense budget for the coming year. That would amount to a roughly 50% increase from an already historically-high total for FY2026. 

    According to Trump, “This will allow us to build the ‘Dream Military’ that we have long been entitled to and, more importantly, that will keep us SAFE and SECURE, regardless of foe,” he wrote on social media Wednesday afternoon, just five days after sending the military to abduct Venezuela’s leader and less than three days since he threatened to annex Greenland, which is territory of America’s NATO ally Denmark. 

    Trump said his tariffs “and the tremendous Income that they bring” make a $1.5 trillion defense budget possible, thereby allegedly “producing an unparalleled Military Force, and having the ability to, at the same time, pay down Debt, and likewise, pay a substantial Dividend to moderate income Patriots within our Country!”

    Reality check: Trump’s apparent plan to dramatically boost defense spending “while paying down debt…is not based in mathematical reality,” NBC’s Sahil Kapur pointed out on social media. For one thing, Trump’s tariffs brought in roughly $236 billion through November, which is less than half of Trump’s proposed spending hike. 

    And far from paying down the national debt, the tariff income is dwarfed by last year’s federal budget deficit, which rose by $2.2 trillion during his first year in office, according to a recent USA Today analysis.

    Second opinion: “It is not clear to us that defense contractors have the capacity to absorb the magnitude of this increase even if it's spread over FY27-30,” analyst Byron Callan wrote in a note following Trump’s social media post. And during a mid-term election year, “An increase of this magnitude will put non-defense spending in sharper focus.” As a result, “Reconciliation might again be attempted by Congress, but the GOP margin in the House will be razor-thin through March, and without reconciliation, there would need to be 60 votes in the Senate to move this size increase forward.”

    What’s more, “An increase of this magnitude would appear to override efforts to find cost savings and other efficiencies in the DoD budget,” Callan warned. And it’s entirely unclear what kind of consequences that might have. 

    Trump also declared a pay cap for defense CEOs to encourage them to produce weapons faster, though it’s not yet clear how that might be enforced. 

    He also said he would bar defense companies from buying back stock and issuing dividends until they invest more to develop new technologies and increase production. Later on Wednesday, the White House released an executive order to that effect, Defense One’s Lauren C. Williams reports

    Trump: “From this moment forward, these Executives must build NEW and MODERN Production Plants, both for delivering and maintaining this important Equipment, and for building the latest Models of future Military Equipment. Until they do so, no Executive should be allowed to make in excess of $5 Million Dollars,” the president announced on his social media platform.  “I will not permit Dividends or Stock Buybacks for Defense Companies until such time as these problems are rectified,” he added. 

    In a separate post, Trump took particular aim at “Raytheon,” likely a reference to RTX. He said the company would receive no further defense contracts until it invests more in production capacity, nor be allowed to buy back its own stock “until they are able to get their act together.” 

    For the record: Boeing, Lockheed Martin, Northrop Grumman, and RTX did not respond to requests for comment on the president’s statements by publication. General Dynamics, HII, and L3Harris declined comment.

    Worth noting again: Trump didn’t specify how restricting buybacks or measuring research investments would be enforced, Williams writes. 

    Expert reax: For a number of years, some U.S. shipyards have maintained a “backlog” of ships paid for but not built or even started. “Yet we instinctively order more ships each year,” Mark Montgomery, senior director of the Foundation for the Defense of Democracies’ Center on Cyber and Technology Innovation said. “The yards could use this backlog to justify investments in modernizing the yards—or they could use this future revenue to justify payments such as dividends or stock buybacks. They have all too often chosen the latter.”

    “A lot of problems need to be addressed to get our shipbuilding system back in order, and this action will certainly not do this alone,” he said, “but it is part of an overall effort that includes more investments, partnering with successful Korean yards and more efficient design and acquisition processes.” Read more, here.  

    Around the Defense Department

    Congress pumps brakes on Army’s plans to outsource flight training. “Tucked into the 3,000-page National Defense Authorization Act, which was signed into law last month, is a provision stating that funds can’t “be obligated or expended to solicit proposals or award a contract for the implementation of any transformation of the Initial Entry Rotary Wing training program”—a reference to the Army’s Flight School Next plan to shift training for new helicopter pilots from an in-house school to a contractor-owned and -operated model, reports Defense One’s Thomas Novelly.

    Bidders winnowed: But right around the time the law was passed, the Army was notifying several bidders that they would move on to the next phase of the competition for the Flight School Next contract. Novelly has the names, here

    The Pentagon’s push to accelerate the tempo of battlefield adaptation is hindered by arms-purchase contracts that forbid troops to repair or modify their gear in the field, special operators and defense experts warn. They note that Ukrainian forces often must ship U.S.-supplied weapons out of the country for maintenance, but can modify Ukrainian-built drones to advance the tactical state of the art. Defense One’s Patrick Tucker reports, here.

    Another deadly shooting by ICE

    An ICE officer shot and killed a woman attempting to drive away from a stop in Minneapolis on Wednesday. “The woman, identified by the Minneapolis City Council as Renee Nicole Good, 37, was shot in the head on Jan. 7 in a residential neighborhood south of downtown Minneapolis. The fatal shooting was captured on video by witnesses and sparked widespread anger amid heightened political and community tensions over immigration activity in the city,” USA Today reported.

    Video evidence refutes Trump-administration officials’ attempts to portray the shooting as self-defense, the New York Times reports

    ICE officers have shot at least 14 people in the past year, according to The Trace, which tabulates incidents of gun violence. The total includes three people who were observing ICE and five who were driving away. At least four people have died after being shot by ICE. Read, here.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Zscaler ThreatLabz identifies three malicious NPM packages mimicking Bitcoin libraries. The NodeCordRAT virus uses Discord commands to exfiltrate MetaMask data and Chrome passwords.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A China-nexus threat actor known as UAT-7290 has been attributed to espionage-focused intrusions against entities in South Asia and Southeastern Europe. The activity cluster, which has been active since at least 2022, primarily focuses on extensive technical reconnaissance of target organizations before initiating attacks, ultimately leading to the deployment of malware families such as RushDrop

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Security researchers have identified two malicious Chrome extensions recording AI chats. Learn how to identify and remove these tools to protect your privacy.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶