-
A 22-year-old man from the U.S. state of Oregon has been charged with allegedly developing and overseeing a distributed denial-of-service (DDoS)-for-hire botnet called RapperBot. Ethan Foltz of Eugene, Oregon, has been identified as the administrator of the service, the U.S. Department of Justice (DoJ) said. The botnet has been used to carry out large-scale DDoS-for-hire attacks targeting
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The United Kingdom has dropped its push to require that tech giant Apple provide the country’s security officials with backdoor access to users’ encrypted iCloud backups, Director of National Intelligence Tulsi Gabbard said on Monday.
The Washington Post reported in January that the UK issued a secret order to Apple that directed the company to provide its law enforcement and intelligence personnel with the “blanket capability” to access customers’ encrypted files worldwide. The order would have affected Apple users across the world, including those in the U.S.
Under the UK’s 2016 Investigatory Powers Act — known colloquially as the Snooper’s Charter — Apple received the order to provide cloud data without any judicial review.
In an X post, Gabbard said that U.S. officials — including President Donald Trump and Vice President JD Vance — have been working with their UK counterparts over the past few months “to ensure Americans' private data remains private and our Constitutional rights and civil liberties are protected.”
She added that, “as a result, the UK has agreed to drop its mandate for Apple to provide a ‘back door’ that would have enabled access to the protected encrypted data of American citizens and encroached on our civil liberties.”
News of the UK order earlier this year received bipartisan pushback from some lawmakers and calls for the U.S. to reevaluate its cybersecurity and intelligence-sharing relationship with London.
The Clarifying Lawful Overseas Use of Data — or CLOUD — Act, which was enacted in 2018, provides U.S. law enforcement officials with the ability to obtain data from American companies that is stored on their overseas servers. The law also authorized the creation of bilateral data-sharing agreements between the U.S. and allies. The access agreement between the U.S. and UK went into effect in October 2022.
In a Feb. 13 letter to Gabbard, Sen. Ron Wyden, D-Ore., and Rep. Andy Biggs, R-Ariz., asked if the Trump administration was made aware of the UK’s order and its understanding of, in part, “the bilateral CLOUD Act agreement with regard to an exception to gag orders for notice to the U.S. government.”
In a reply later that month to the lawmakers’ missive, Gabbard said she had directed her attorneys to outline the implications of the UK’s order to Apple but added that the move “would be a clear and egregious violation of Americans’ privacy and civil liberties, and open up a serious vulnerability for cyber exploitation by adversarial actors.”
In response to a request for comment from Nextgov/FCW, an ODNI spokesperson pointed to an X post from the agency that praised the UK’s recent decision and cited Gabbard’s response to Wyden’s and Biggs’ letter.
Biggs and Wyden — along with Sen. Alex Padilla, D-Calif., and Reps. Warren Davidson, R-Ohio, and Zoe Lofgren, D-Calif. — also sent a letter in March to the UK’s Investigatory Powers Tribunal that called for the judicial body to “remove the cloak of secrecy related to notices given to American technology companies by the United Kingdom.”
Wyden similarly released draft legislation in February to modify the CLOUD Act’s requirements so that U.S. providers do not have to weaken their security standards to meet requests from foreign governments.
“I sounded the alarm that the UK's outrageous demands that Apple weaken encryption would put the security and privacy of all Americans at risk,” Wyden said in a statement to Nextgov/FCW. “If it's true the UK has folded, that's a win for everyone who values secure communications. However, the details of any agreement are extremely important, especially when it comes to other legal avenues the UK could use to obtain Americans' data, such as by delivering spyware or requiring US user data to be stored in the UK.”
Apple did not respond to a request for comment, although the tech giant moved earlier this year to remove its high-level Advanced Data Protection tool from the UK market. The company was also in the midst of legal action to overturn the order when the UK dropped its backdoor encryption push.
The UK Home Office told media outlets that it “does not comment on operational matters.”
Some organizations, like the nonprofit Center for Democracy and Technology, welcomed the news but also called for further changes when it comes to data-sharing agreements.
“The Administration should be more transparent about any deal it cut with the UK, and Congress should amend the CLOUD Act to prevent other countries from issuing similar orders to U.S. service providers,” Greg Nojeim, senior counsel and director of CDT’s security and surveillance project, said in a statement.
Nextgov/FCW Cybersecurity Reporter David DiMolfetta contributed to this report.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Threat actors are exploiting a nearly two-year-old security flaw in Apache ActiveMQ to gain persistent access to cloud Linux systems and deploy malware called DripDropper. But in an unusual twist, the unknown attackers have been observed patching the exploited vulnerability after securing initial access to prevent further exploitation by other adversaries and evade detection, Red Canary said in
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
If the Pentagon is to harness the promise of quantum-powered devices, it needs ways to connect them to today's data networks. But networking has been the “black sheep” of quantum research, says the leader of a DARPA program that's attempting to bridge the gaps.
“On this program, the challenge is: How do we integrate quantum systems on our current communication infrastructure?” said Allyson O’Brien, whose QuANET program—it's short for "quantum networks"—has been operating since March 2024. “What do they look like as sensors, as better timekeepers and as novel types of data carriers? What can we do with them that you would not be able to do with the traditional communications media we have now?”
O’Brien likens QuANET to the famed Advanced Research Projects Agency Network, from which the modern internet emerged. Her program aims to build upon this infrastructure to transmit quantum-generated information and use the inherently secure features of quantum communications to further safeguard U.S. secrets.
“Quantum systems are kind of the ‘what's next,’ and the QuANET program is looking at how we increase privacy and security, integrity and resiliency, and [reduce] some of the complexity,” she said.
Not every quantum-powered technology is part of QuaNET’s integration agenda. O’Brien is concerned with the transmission of quantum-time synchronization and quantum sensing and metrology data into current networks.
“We are looking at … can we use quantum systems to do things better? And 'better' is relative,” O’Brien said.
One use case she is exploring is for quantum sensors to improve channel monitoring to ensure seamless communication between critical infrastructure, such as hospitals and financial institutions, as well as to strengthen security.
“One of the reasons that channel monitoring is so difficult is it requires external hardware, and a lot of the bandwidth that you would use for communications goes into sensing instead,” O’Brien said. “So one of the things we're doing on QuANET is: ‘Can we integrate sensing with the communications?’”
Quantum computing, for now, is not a priority for QuANET.
“We are not looking at plugging into quantum computers,” she said. “In the future? Absolutely. [We’re] not preparing for quantum computers, although, okay, we do think one of the fundamentals that we’ll learn on this will absolutely help with that infrastructure.”
QuANET’s other chief deliverable is its hardware product, the qNIC, or quantum networking card. Traditional networking cards are designed to plug into devices and grant that device access to a larger network. The proposed qNIC will help standardize quantum information channels with their traditional node counterparts to effectively share quantum signals and information.
“By the end of the program, you could have a qNIC that you could plug into the laptop you're using right now,” O’Brien said. “The purpose for that is that we don't want a bunch of other equipment that people need to plug into their computers for it to do a function that it should already be able to do.”
In creating a viable qNIC that can be scaled, initially for government use, DARPA researchers will be looking into the best methods to improve error correction and bit rate times.
QuANET consists of three phases spanning 60 months, or five years. O’Brien said that they are in phase one now after qNIC design submissions. Phases two and three will look into the fiber infrastructure and over-air link extensions, respectively.
Network communications "is a difficult technology to talk about, but it's so important, especially when it doesn't work,” O’Brien said. “This is a huge divergence from the research that's being done in quantum networking today. The whole point of QuANET is to bring a new type of research that's much closer to the technology side, and looking at how to integrate this technology and make it usable.”
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
·
In a surprise, USAF chief announces upcoming retirement. Gen. David Allvin, a few months shy of halfway through his expected four-year term as Air Force chief of staff, has announced his intention to retire “on or about Nov. 1,” depending on when his replacement is confirmed.The former airlifter pilot is the latest casualty in the Trump administration’s replacement of the military’s top officers, according to the Washington Post. “Allvin was informed last week that he would be asked to retire and that the Pentagon under Defense Secretary Pete Hegseth wanted to go in another direction, said a person familiar with the matter, who like some others spoke on the condition of anonymity to discuss a sensitive issue. As a trade-off, the Pentagon would allow Allvin to announce the decision, this person said, adding, “It was certainly not his choice.”
Transparency note: Hegseth’s office did not respond to requests for comment. An Air Force spokesperson declined to comment.
Three more GOP governors are sending their National Guard troops to occupy the nation’s capital. “The announcements by Mississippi, Tennessee and Louisiana brought the number of state troops detailed to the president’s effort to more than 1,100—and the number of states to six,” the Associated Press reported Monday.
Rewind: Over the weekend, West Virginia’s Republican governor said he would send at least 300 troops while South Carolina said it’s sending 200 troops and Ohio offered up 150 of its National Guard for duty in Washington, D.C.
The troops have been assisting law enforcement with tasks like trash pickup, “crowd control and patrolling landmarks such as the National Mall and Union Station,” according to AP, which notes, “Their role has been limited thus far, and it remains unclear why additional troops would be needed, though attention-getting optics have long been a part of Trump’s playbook.”
Reminder: In his press conference announcing a takeover of the D.C. police and the Guard deployment, President Trump offered false and exaggerated crime statistics to justify his action—claiming the show of force was necessary to tame Washington’s out-of-control criminal activity, though actual crime in the city is at its lowest point in decades.
Mississippi Gov. Tate Reeves echoed those false claims to justify his troop deployment Monday, alleging like Trump, “Crime is out of control there, and it’s clear something must be done to combat it.”
Louisiana’s Gov. Jeff Landry went a bit further, and said he looked forward to more cities being occupied by National Guard troops. “We cannot allow our cities to be overcome by violence and lawlessness,” he said in a statement on Facebook Monday, and added, “I am proud to support this mission to return safety and sanity to Washington DC and cities all across our country, including right here in Louisiana.”
Commentary: What National Guardsmen in the nation’s capital need to hear. “You have every right to expect a clear mission, an unambiguous chain of command, and appropriate training,” advises Paula Thornhill, a retired U.S. Air Force brigadier general and a professor at Johns Hopkins University’s School of Advanced International Studies, writing Monday for Defense One.
Additional reading: “White House sending social media teams with FBI on some arrests in D.C.,” Reuters reported Monday.
Coverage continues below…
Welcome to this Tuesday edition of The D Brief, a newsletter dedicated to developments affecting the future of U.S. national security, brought to you by Ben Watson with Bradley Peniston. Share your tips and feedback here. And if you’re not already subscribed, you can do that here. On this day in 1953, The CIA and British intelligence helped overthrow the government of Mohammad Mosaddegh in Iran.
Developing: The Navy is planning to cut at least a third of its civilian public affairs force, Defense One’s Meghann Myers reported Monday. The Navy’s chief of information office is now on the clock to deliver a plan that will reduce the service’s civilian public-affairs staff by at least 35 percent, according to a memo signed by Navy Secretary John Phelan earlier this month.
The move would also centralize hiring for all civilian PAOs and all communications-related contracting to Department of the Navy headquarters. “This initiative is essential to eliminate duplicative roles, concentrate talent on the highest priority functions, focus contracting support where it is most needed and ensure alignment with commitment to mission-driven resource management, cost savings and operational lethality,” Phelan wrote in the memo, which gives the department 45 days from its Aug. 7 signing to submit a plan.
Panning out: The Navy and Marine Corps public affairs reorganization comes just weeks after the Army announced it would rebrand its central Office of the Chief of Public Affairs to the Army Global Communications Office, though cuts to force structure were not part of that announcement.
And earlier this year, the Army pushed out Brig. Gen. Amanda Azubuike, who had been serving as the chief of public affairs since June 2024. Rather than a uniformed service member, the service will soon have a political appointee helming its communications office: a fundraising consultant for North Carolina Republican campaigns named Rebecca Hodson.
Slashing Defense Department civilian jobs has been a key feature of the second Trump administration, going back to Defense Secretary Pete Hegseth’s directive in February to reduce their numbers by 5 to 8 percent, alongside a hiring freeze that rescinded existing job offers. That would add up to more than 60,000 of the 770,000 civilians who worked for DOD at the beginning of this year. Continue reading, here.
There’s now a new medal for the Pentagon’s border guards on migrant watch along the country’s wall with Mexico, according to a Defense Department memo dated last Wednesday. It’s called the Mexican Border Defense Medal, and soldiers will need to have worked within 100 miles of the border for at least 30 days, beginning the first day of Trump’s second term, to qualify. What sequence must it follow on the dress uniform? Read the bottom third of the memo to find out.
New podcast episode: The Pentagon’s Golden Dome clampdown. Six months into President Trump's return to the White House, here's what we know about the Pentagon's ambitious and controversial missile defense program, featuring Defense One’s Patrick Tucker, who attended the recent missile defense symposium in Huntsville, Ala. Listen on Spotify or wherever you get your podcasts.
Trump’s Ukraine meeting
Seven European leaders gathered at the White House to seek commitments about the war in Ukraine, three days after Trump hosted Putin in Alaska. In a Monday meeting that “often had a dreamlike quality — with made-for-TV moments and unexpected interludes,” the New York Times wrote this morning, the Europeans “won a potentially vital, if vague, expression of support from Mr. Trump for postwar security guarantees for Ukraine and sidestepped a discussion of territorial concessions, according to Chancellor Friedrich Merz of Germany. Still, they all but acquiesced to Mr. Trump’s abandonment of a cease-fire between Russia and Ukraine as a condition for further talks.”
Give it another week to 10 days to work out the next details, Ukraine’s Zelenskyy said Monday after the meeting with Trump. “Security guarantees will probably be 'unpacked' by our partners, and more and more details will emerge. All of this will somehow be formalised on paper within the next week to 10 days,” Zelenskyy said.
However, “The question of territories is something we will leave between me and Putin,” he added. Reuters has a bit more.
Report: Zelenskyy offered to buy $100 billion in U.S. arms in exchange for security guarantees. according to the Financial Times, writing off a document seen by the newspaper and citing “four people familiar with the matter.” The proffered deal also includes a $50 billion deal to produce drones with Ukrainian companies. Read on, here.
Bottom line, maybe: “Europe’s leaders essentially where they were before Mr. Trump’s meeting with President Vladimir V. Putin of Russia in Alaska last week: subject to the president’s faith that he can conjure a deal with the Russian leader to end the grinding war,” the New York Times reported Monday. See also another Times piece that lists five takeaways, including Trump’s insistence that the U.S. will send no peacekeeping troops to the wartorn country.
Tom Nichols’s take: “Perhaps the Europeans did the best they could, stiffening Trump’s spine a bit after whatever browbeating he took in Alaska. But in the end, all of Trump’s showmanship has resulted in no substantive progress. Putin’s war continues. That said, Alaska is still part of the United States, America is still in NATO, and Kyiv remains free—and in this second Trump presidency, perhaps that counts as a good-enough day.” Read that at The Atlantic.
And lastly: The high cost of Trump’s election lies. On Monday, right-wing channel Newsmax agreed to pay $67 million to Dominion Voting Systems for spreading lies that their voting technology had been rigged so Trump would lose the 2020 presidential election. When you add that to the $787 million Fox News agreed to pay for the same lies, we’re looking at a bill of over $850 million that Trump’s lies cost just these two businesses.
But Trump is still insisting he can’t lose an election without his opponents cheating. He used the complaint again Monday on social media, writing a lengthy diatribe vowing “to lead a movement to get rid of” mail-in ballots and voting machines in order to “bring HONESTY to the 2026 Midterm Elections.” Trump wrote the post three days after Russia’s Vladimir Putin allegedly told him in Alaska, “Your election was rigged because you have mail-in voting,” Trump said in an interview with Sean Hannity.
The problem: “the U.S. Constitution is very clear that no president has the power to dictate election rules,” because “The framers were determined to prevent that power from falling into the hands of a potential dictator and so gave it to the states and Congress,” Boston College’s Heather Cox Richardson observed Monday after Trump’s screed on social media.
One significant concern for the months ahead: Trump and his team appears to be “preparing to reject any election results that they don’t like,” Richardson warns, citing his declining mental faculties in front of European leaders Monday, a slowing economy, and growing discontent with his job performance.
Additional reading:
- “Trump raises end to mail-in ballots after claiming Putin questioned their security,” Axios reported Monday; the New York Times has more, reporting Saturday, here;
- See also, “The GOP spent millions supporting mail ballots. Now Trump’s attacking them again,” Politico reported Monday;
- And “No, President Trump Can't Ban Mail in Ballots or Voting Machines, as His Truth Social Post Suggests He Might Try to Do,” Election Law Blog explained Monday.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Financial institutions like trading and brokerage firms are the target of a new campaign that delivers a previously unreported remote access trojan called GodRAT. The malicious activity involves the “distribution of malicious .SCR (screen saver) files disguised as financial documents via Skype messenger,” Kaspersky researcher Saurabh Sharma said in a technical analysis published today. The
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Guest:
- Patrick Tucker, Defense One science and technology editor.
Related reading:
- “New Golden Dome details emerge from industry day,” Tucker reported on August 14;
- "Pete Hegseth Doesn’t Want to Talk About Golden Dome," former Naval War College professor Tom Nichols wrote for The Atlantic on August 8;
- “Lockheed Martin aims to test a missile-killing satellite by 2028,” also via Tucker, reporting August 5;
- "Effects of Lower Launch Costs on Previous Estimates for Space-Based, Boost-Phase Missile Defense," May 5, via the Congressional Budget Office with an estimated total price tag for Golden Dome somewhere between $831 billion to $542 billion;
- See also, "Trump wants a Golden Dome over America. Here's what it would take," via NPR's Geoff Brumfiel, reporting April 22.
Watch the futuristic, satirical news clips from 1987's "Robocop," via YouTube, here.
And you can find a trailer for the 1985 film, "Real Genius," also via YouTube, here.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶