-
Substack confirms a breach after hacker accessed internal user records now circulating on crime forums, exposing emails, phone numbers, and account metadata.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
·
Over 19,500 technology, data and telecommunications employees left their jobs with the federal government last year after President Donald Trump took office and began a crusade to shrink the government’s workforce, according to newly released government data.Now, it appears that the administration is trying to make up for the losses.
All six departments and agencies with the biggest losses of IT management employees — the departments of Defense, Treasury, Agriculture, Veterans Affairs and Homeland Security, as well as the General Services Administration — currently have IT jobs listed on the government’s hiring website, USAJobs.
The Trump administration is also looking to hire 1,000 new early-career technologists through its new U.S. Tech Force, which it launched late last year.
“Anything even tangentially related to tech — there’s a spot for you,” the administration’s chief information officer, Greg Barbaccia, recently told potential applicants.
In total, 352,285 federal employees left their posts between Jan. 20 and Dec. 31, 2025, according to data released by the Office of Personnel Management on Wednesday.
Among the government’s IT management, computer science, computer engineering, data science and telecommunications jobs, 19,519 employees left the government between Jan. 20 and Dec. 31, 2025, representing about 5.5% of all those that departed last year. With limited hiring, the net loss of tech employees was 17,228.
Asked by Nextgov/FCW during a January interview if it was a mistake for so many tech employees to leave the government, Barbaccia said, “there was quite a bit of disruption, obviously.”
“Disruption is not intrinsically a bad thing,” he said. “It remains to be seen. We haven't seen major system disruptions across the board.”
The loss of technology employees has stalled the overhaul of a key public health system that tracks diseases like tuberculosis, slowed the modernization of key tax systems at the IRS and put a government health benefits program for the U.S. Postal Service at risk of operational failure. Experts have also raised concerns about the government’s cyber defense in light of workforce losses.
The vast majority of the technology employees that left the government last year were not laid off, which forced only about 450 workers out of their jobs.
Many others retired, resigned or opted to take the administration’s deferred resignation offer, which the Department of Government Efficiency and Office of Personnel Management first extended via an email last January that warned, “we cannot give you full assurance regarding the certainty of your position.”
The Trump administration has emphasized that the majority of the government’s workforce losses in 2025 weren’t due to layoffs. But many of the former feds that left disagree with the characterization that their departures were voluntary, saying that they quit their posts because of toxic work environments or because they were threatened with layoffs if they didn’t accept the offer. Some of the administration’s layoff plans were also stalled by courts.
It remains to be seen how successful the government will be in recruiting new talent to take the place of feds who left the government.
Nextgov/FCW previously asked the head of the Office of Personnel Management Scott Kupor if the headlines about government layoffs and turmoil in 2025 had hurt the government’s recruitment pitch.
“The answer is unequivocally no,” he said.
“That’s not a surprising outcome, unfortunately, for those who have been through these things,” said Kupor when asked if layoffs ever went too far. “You do the best you can with the information you have at the time.”
He told Nextgov/FCW in an emailed statement this week that “the federal government has faced persistent gaps in critical tech skills for years, long before this administration.”
“Tech Force is one of several efforts to address those long-standing challenges by modernizing how government recruits and deploys technical talent, with a strong focus on bringing in early-career technologists,” he said. “It’s focused on filling hard-to-staff roles, accelerating hiring, and ensuring technologists are placed on high-impact missions where they can deliver real results.”
The Tech Force has received 6,000 applications so far, Barbaccia told reporters last week.
The young workers the Tech Force is targeting were among the most affected by Trump’s squeeze on the workforce.
“You saw a disproportionate number of young, tech-savvy federal employees being shown the door [last year],” Max Stier, president and CEO of the good government nonprofit Partnership for Public Service, told reporters last month.
The number of federal employees under the age of 30 went from 8.9% to 7.9%, he said, and some of the administration’s new programs to bring in talent are duplicating teams it shuttered.
“We expect, and unfortunately fear, that the larder will be restocked not with those that are expert, nonpartisan civil servants,” said Stier. “There is a structure being put in place to hire loyalists in their place.”
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The distributed denial-of-service (DDoS) botnet known as AISURU/Kimwolf has been attributed to a record-setting attack that peaked at 31.4 Terabits per second (Tbps) and lasted only 35 seconds. Cloudflare, which automatically detected and mitigated the activity, said it’s part of a growing number of hyper-volumetric HTTP DDoS attacks mounted by the botnet in the fourth quarter of 2025. The
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
·
New START expires: The treaty limits on the world’s largest nuclear arsenals are gone. The 15-year-old New START treaty expired at midnight, the last vestige of an arms-control regime that reduced the combined nuclear stockpiles of Moscow and Washington from some 60,000 warheads to a few thousand.Fears of nuclear proliferation. The evaporation of arms controls and the fading leadership of the United States have U.S. allies pondering nuclear-arms programs of their own, lawmakers and former U.S. officials said Wednesday on Capitol Hill.
“I am very concerned about the potential for proliferation, so-called friendly proliferation. I do not think it will be helpful to stability and security,” said Rose Gottemoeller, a former NATO deputy secretary general. “There are many, I would say, debates and discussions that have surprised us among our NATO allies.” Defense One’s Patrick Tucker has more from the Senate Armed Services Committee hearing, here.
U.S., Russia agree to resume high-level military-to-military dialogue. The United States broke off the relationship in late 2021, months before Russia broadened its invasion of Ukraine. The move follows meetings in UAE between Gen. Alexus G. Grynkewich, who leads U.S. European Command and is also NATO’s senior military commander, and senior Russian and Ukrainian military officials, according to a Thursday release from EUCOM.
Rewind: The two countries had maintained senior ties during and after the Cold War, and had even begun cooperating in military exercises—until Russia seized Crimea in 2014.
Ukraine struck a Russian missile-launch site in January. Ukrainian Flamingo missiles, and possibly other weapons, damaged hangar-type buildings used to prep intermediate-range and intercontinental ballistic missiles, Ukrainian officials posted to Telegram on Wednesday. Reuters could not immediately verify the statement independently, but has a bit more, here.
Wargaming invasion: Meanwhile, a tabletop simulation organized by a German newspaper and the country’s military suggests that the rest of Europe is far from ready to resist a Russian invasion. According to the Wall Street Journal, “The exercise simulating a Russian incursion into Lithuania, organized in December by Germany’s Die Welt newspaper together with the German Wargaming Center of the Helmut-Schmidt University of the German Armed Forces, became an object of heated conversation within Europe’s security establishment even before the newspaper published its results on Thursday.”
Why this matters: “A Russian incursion, or outright invasion, into countries of the North Atlantic Treaty Organization and the European Union has become more likely because of Europe’s tensions with President Trump over Greenland, Ukraine, trade and other matters, many European security and political leaders say.” Read more, here.
Welcome to this Thursday edition of The D Brief, a newsletter focused on developments affecting the future of U.S. national security, brought to you by Ben Watson with Bradley Peniston. It’s more important than ever to stay informed, so we’d like to take a moment to thank you for reading. Share your tips and feedback here. And if you’re not already subscribed, you can do that here. On this day in 1988, Panama's military ruler Gen. Manuel Noriega was indicted in a U.S. court on drug smuggling and money laundering charges. The U.S. launched an invasion of Panama at the end of the year, leading to Noriega’s surrender and capture on Jan. 3, 1989.
Iran and the Middle East
U.S. and Iranian officials are set to talk Friday in Oman, though the outlook for those talks is dim, analysts at the Washington-based Institute for the Study of War said in their Wednesday analysis.
Differing goals: The U.S. side wants to discuss Iran’s nuclear and ballistic missile programs as well as its support for proxy groups across the region, but Iranian officials want to limit discussions to their nuclear program only.
Iranian officials seem to be signaling they are unafraid of a prolonged regional war should the U.S. military carry out additional attacks inside Iran, which is also a concern of White House officials, ISW writes.
And for what it’s worth, the Navy’s guided-missile destroyer USS Delbert D. Black departed port in Israel on Sunday, U.S. military officials said Thursday ahead of talks with Iranian officials in Oman.
The U.S. Navy has at least eight other vessels in the vicinity of Iran, including the USS Abraham Lincoln aircraft carrier. That’s according to open-source monitors sharing a regional map on social media Wednesday.
The U.S. fleet deployed to the Middle East is nearly as large as the one deployed near Venezuela, open-source tracker Ian Ellis observed online Monday. “The primary difference is 3x littoral combat ships (with mine countermeasures package) in the Middle East vs 3-ship Amphibious Ready Group + Marine Expeditionary Unit in Caribbean,” he said.
U.S. forces in the region attacked ISIS fighters with five recent strikes, Central Command officials said Wednesday. Targets included a “communication site, critical logistics node, and weapons storage facilities” via at least “50 precision munitions delivered by fixed-wing, rotary-wing, and unmanned aircraft,” CENTCOM said in a statement.
The U.S. and regional partners have killed or captured more than 50 alleged ISIS militants since mid-December. That includes a man named Bilal Hasan al-Jasim, who CENTCOM says was linked to a Dec. 13 attack that killed two U.S. troops and an interpreter at a Syrian base in Palmyra.
Deportation nation
The White House is keeping 2,300 immigration officers in Minnesota, a city with just 600 police. Homeland Security officials sent 3,000 or so immigration agents to the city for their Operation Metro Surge crackdown, which began in December. But after their presence sparked protests and agents killed two Americans in the streets, President Trump’s “border czar” Tom Homan said Wednesday 700 agents would leave the city soon.
Their outsized presence still raises questions about why Minnesota, a state with an estimated 130,000 undocumented immigrants, was the administration’s first choice for an agent presence so large and out of proportion to local police—especially when Florida and Texas are estimated to have undocumented immigrant populations orders of magnitude larger with 1.6 million in Florida and 2.1 million in Texas, according to a 2023 report from the Pew Research Center.
The White House claims fraud allegations from a debunked video about Somali-American daycare centers are a large part of what drew their attention to Minnesota. That video went viral on right-wing networks in December; most immigration agents arrived in early January. It makes little difference to the administration and its online supporters that many of their claims about immigrants are not true (Haitian-Americans eating pets, e.g.), or that dozens of initial allegations by administration officials have fallen apart in court—including their prosecution of school teacher Marimar Martinez, who was shot five times in Chicago last October. DHS officials later claimed she was a “domestic terrorist” who “ambushed” them with her car.
After Martinez’s attorney challenged the evidence, the case fell apart and the administration asked the court to dismiss the charges with prejudice so they can’t be filed again. (She detailed that case Tuesday before members of Congress in Washington.)
But that didn’t stop Supreme Court Justice Samuel Alito from repeating the administration’s false portrayal of the Martinez case in his dissenting opinion for Trump v. Illinois, the late-December SCOTUS case blocking Trump National Guard deployment in Chicago.
Others see an administration trying to impose its will on a state and region that did not vote for Trump in recent elections. David French argued that case last week in the New York Times. Indeed, Trump’s top immigration advisor Stephen Miller wrote online Sunday that he believes Democrats in Minnesota “after losing an election, launched an armed resistance to stop the federal government from reversing the invasion.”
To that end, “ICE has likely violated more court orders in January 2026 than some federal agencies have violated in their entire existence,” the chief judge for the U.S. District Court of Minnesota said in a decision released last week. In that document, the judge cataloged a total of 96 court orders that he said ICE had violated in 74 different cases.
Former DHS official Paul Rosenzweig has some ideas for how to reform ICE, and they begin with training and recruitment changes, he wrote Wednesday in The Atlantic. Rosenzweig, a former DHS deputy assistant secretary for policy from 2005 to 2009, recommends bumping the minimum age back up to 21 and adding “enhanced training on constitutional law, while significantly reducing its emphasis on SWAT-like uses of force.” He also advises dropping “broad sweeps in urban environments” and opting instead “for targeted enforcement against identified subjects.” However, such changes “will require immense political capital and lots of hard work,” he admits. Read more (gift link), here.
Additional reading: “The Real Story Behind the Midnight Immigration Raid on a Chicago Apartment Building,” via ProPublica reporting Wednesday from still more inaccurate claims from the White House that later evaporated upon closer inspection.
Etc.
In case you missed it, a judge appears to be skeptical of Pentagon chief Pete Hegseth’s effort to demote former astronaut and retired Navy Capt. Sen. Mark Kelly, D-Arizona, the Washington Post reported Wednesday. Kelly had joined other lawmakers in a video this fall warning troops against following illegal orders, which is a warning Hegseth himself issued 10 years ago before working in the Trump administration. “Our laws are clear. You can refuse illegal orders,” Kelly said in the video.
Trump responded angrily, and said on social media Kelly’s message amounted to “SEDITIOUS BEHAVIOUR, punishable by DEATH.”
Hegseth responded with a formal letter of censure for Kelly and claimed the lawmaker had “undermined the chain of command,” “counseled disobedience” and displayed “conduct unbecoming an officer.” He also launched disciplinary proceedings to reduce Kelly’s rank and retirement benefits.
But: “That’s never been done before,” U.S. District Judge Richard J. Leon said at a hearing on the matter Tuesday. “You’re asking me to do something the Supreme Court’s never done,” Leon added, and later said he intends to rule on the matter by next Wednesday. He also said he expects his ruling to be appealed.
“Today was a day in court, not just for my constitutional rights, but for millions of retired service members, and really all Americans,” Kelly told reporters at the hearing this week. “There’s nothing more fundamental to our democracy than the freedom of speech and the freedom to speak out about our government.” More, here.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Godent has announced the launch of its scanner-as-a-service program for European DSOs, combining free intraoral scanners with a fully integrated digital lab infrastructure to modernize dental workflows.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Crypto scams are surging worldwide, from pig butchering to fake trading platforms and deepfakes, draining victims while fraud teams struggle to keep up.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft details 3 Python Infostealers hitting macOS users via fake AI tools, Google ads, and Terminal tricks to steal passwords and crypto, then erase traces.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
This week in cybersecurity from the editors at Cybercrime Magazine
Sausalito, Calif. – Feb. 5, 2026Lack of access to executives and the board is a red flag and a top reason why chief information security officers decide to leave their jobs, according to Steve Morgan, founder of Cybersecurity Ventures. He cites lack of support as another top reason why CISOs leave.
Splunk’s 2025 CISO report found that only 29 percent of respondents had adequate budget compared to 41 percent of boards who felt cybersecurity budgets were adequate.
CISOs can change culture to turn a red flag into a green flag, writes Deb Radcliffe, an investigative journalist and analyst focused on computer crime and security, in a feature article for CSO. But knowing when and how to do so depends on various indicators.
Radcliffe’s article can help a CISO answer the frequently asked question: Should I stay or should I go?
“That’s also the name of a song by The Clash,” Morgan posted on LinkedIn. “Remember the lyrics – If you don’t want me, set me free. If you’ve got a good CISO, then Cybercrime Magazine suggests you pay them that way and invite them into the boardroom, Otherwise they’ll be gone when you need them the most.”
Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:
- SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
- NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
- HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
- VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
- M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
- BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
- PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
- PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
- RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.
Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.
The post CISO FAQ: Should I Stay Or Should I Go? appeared first on Cybercrime Magazine.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Indian users’ trust in government services through a sophisticated Android malware campaign that impersonates Regional Transport Office (RTO) challan notifications. This campaign represents an evolution from previous RTO-themed malware, featuring advanced anti-analysis techniques, a modular three-stage architecture, and a structured backend infrastructure for data collection and remote operations. The malware spreads through social engineering tactics, […]
The post Cyberattackers Use Fake RTO Challan Alerts to Spread Android Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
ShadowSyndicate, a sophisticated cybercrime cluster first identified in 2023, has evolved its infrastructure management tactics by implementing a previously unreported server transition technique. This method involves rotating SSH fingerprints across multiple servers to obscure operational continuity. However, operational security (OPSEC) errors have allowed researchers to trace these connections. The threat actor orchestrates large server clusters […]
The post ShadowSyndicate Leverages Server Transition Technique in Latest Ransomware Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶


