Authorities in Australia said Wednesday that they arrested two men accused of participating in cybercrimes for TeamPCP, a prolific group of hackers that, over nine months, has carried out a relentless series of supply-chain attacks that infected more than 1,000 organizations worldwide.
In a statement, the Australian Federal Police said the two men were arrested and charged with 14 offenses. The statement said the men were members of TeamPCP, which by the authorities’ count, compromised more than 1,000 organizations worldwide. The statement didn’t identify the men, except to say they lived in the Western Australian towns of Cottesloe and Mandurah. KrebsOnSecurity, citing a lengthy investigation, provided what it reports to be both defendants' names, along with an extensive background of their lives and the mistakes that led to their downfall.
The hacks that keep on hacking
TeamPCP has vexed law enforcement officials and security personnel around the world since it emerged in December. The group is best known for a sustained series of supply-chain attacks that laced open source software with malware that self-propagated from one package to another. The viral infections worked by targeting organizations’ CI/CD pipelines, which are used to rapidly develop, update, and deploy software.
Terabytes worth of credentials, many belonging to the world’s biggest and most sensitive organizations, have been exposed in a supply-chain attack on LiteLLM, an open source tool that streamlines AI-driven software development. Microsoft, Amazon, Cisco, Samsung, and Salesforce are only a handful of the entities whose access secrets were exposed.
The revelation was posted on Tuesday and Wednesday by security firms CloudSEK and Hudson Rock. CloudSEK said it found cloud keys, repository tokens, SSH keys, Kubernetes secrets, package publishing credentials, environment variables, and AI provider keys that could allow attackers to gain access to more than 2,500 organizations.
40 minutes is all it takes
The credentials were extracted during a 40-minute window in March while the victims used compromised versions of LiteLLM downloaded from the package’s official location in the Python Package Index repository. Hudson Rock said it made the discovery after analyzing a 195TB file that it obtained. Neither firm identified the source of the information.
Apple has published a (temporary, it turns out) guide showing eligible Mac users in mainland China how to connect Alibaba’s Qwen artificial intelligence service to Siri and the company’s Writing Tools feature.
The update, detailed in a Chinese-language support document, allows users who opt in to leverage Qwen — Alibaba’s family of generative AI models — for more detailed responses through Siri, including analysis of photos and documents. Writing Tools can also draw on the service to generate text or images based on user descriptions.
The feature is available on Macs running macOS 26.6 or later, subject to China-specific conditions. Users must activate the extension and sign in to a Qwen account. According to Apple’s guide, Alibaba is prohibited from using any materials processed through the integration to train or improve its models.
The Mac-focused arrangement comes as Apple seeks to strengthen its position in China’s competitive AI PC market. The company has been losing ground to domestic rivals such as Lenovo and Huawei, which have aggressively promoted locally developed AI capabilities. Mac shipments in mainland China fell 9% year-on-year in the first quarter to about 800,000 units, giving Apple a 9% share of the PC market, according to research firm Omdia. Lenovo held 31% and Huawei 16%.
By integrating Qwen, Apple gains a locally compliant way to deliver advanced document analysis, image handling, and content-creation tools while retaining control of the Mac interface. For Alibaba, the partnership expands Qwen’s reach beyond its own apps and cloud services.
Alibaba has previously stated that Qwen will power Apple Intelligence across iPhone, iPad, Mac, and Vision Pro devices in China. Apple’s now unpublished guide, however, currently covered only Macs. Alibaba this week also released Qwen3.8-Max, a 2.4-trillion-parameter model it describes as its most capable to date, though Apple’s documentation did not specify which Qwen version will be used in the Mac extension.
MacDailyNews Take: Apple briefly published a Chinese-language support guide on its website (around August 8, 2026) explaining how eligible Mac users in mainland China could connect Alibaba’s Qwen AI to Siri and Writing Tools. The document was titled something along the lines of “在Mac上配合Apple智能使用千问” (“Use Qwen with Apple Intelligence on Mac”).
It was removed within about a day (by August 9th). Multiple reports have confirmed the takedown. Apple customer service in China stated that the feature integrating Apple Intelligence with Qwen has not yet been officially launched in mainland China, and they had not received notice of such a release.
In a nutshell, with a support guide clearly ready to go, CCP-sanctioned AI is coming soon to Macs in China.
Please help support MacDailyNews — and enjoy subscriber-only articles, comments, chat, and more — by subscribing to our Substack: macdailynews.substack.com. Thank you!
Já tratamos aqui do Wispr Flow, um aplicativo que ganhou popularidade por aprimorar a experiência de ditado nos sistemas da Apple. Agora, quem utiliza o app no macOS poderá acessar o Notetaker, um assistente de reuniões empurrado por inteligência artificial (IA).
O Notetaker fornece contexto adicional a transcrições, resumos e anotações com base em calendários, aplicativos conectados (como o Slack) e dicionários personalizados. Seu funcionamento é semelhante ao do Granola, aplicativo sobre o qual já falamos por aqui — usuários da plataforma, inclusive, podem importar todo o seu histórico para o Notetaker com apenas um clique.
Além de organizar transcrições, a ferramenta é capaz de deixar o usuário ciente de informações relevantes antes de reuniões, obtendo contexto a partir dos apps de terceiros em que o Notetaker foi integrado.
Após o encerramento de uma reunião, o usuário ainda pode retomar o histórico fazendo perguntas, as quais são respondidas com a indicação da minutagem e o link para o momento exato em que a resposta do assistente se baseou.
O Notetaker é compatível com basicamente todo aplicativo executado no macOS, incluindo apps de reunião como Zoom, Google Meet, Microsoft Teams e Slack. Ele conta ainda com suporte à tecnologia MCP, permitindo levar todos os seus resumos e anotações para outros aplicativos de IA.
A novidade já está disponível no macOS e, segundo a Wispr, deverá chegar “em breve” ao Windows.
Taiwanese prosecutors on Monday indicted a former deputy manager at Taiwan Semiconductor Manufacturing Company (TSMC) for allegedly stealing trade secrets involving technologies designated as national core technologies, with the intent to use them in China.
The defendant, identified by the surname Chen, faces charges under Taiwan’s National Security Act and the Trade Secrets Act. Prosecutors are seeking a seven-year prison sentence.
According to the indictment, Chen conspired with a Hong Kong national between 2023 and 2024 to establish CSMAC, a semiconductor materials analysis company in China. He is accused of copying 21 TSMC documents containing national core technologies and other proprietary trade secrets for use in the new venture.
TSMC, the world’s largest contract chipmaker and a key supplier to companies such as Nvidia and Apple, detected the unauthorized copying through an internal investigation and successfully recovered all duplicated documents. The Hong Kong co-conspirator was not prosecuted because he had died. Chen remains in custody, and Reuters was unable to reach him for comment. TSMC declined to comment on the case.
Prosecutors described this as Taiwan’s first indictment involving the alleged theft of trade secrets related to technologies officially designated as national core technologies for intended use in China.
The case underscores heightened concerns in Taiwan over China’s efforts to recruit Taiwanese semiconductor talent and acquire advanced chip know-how. In response, Taiwan has significantly tightened protections for technologies deemed critical to its economic and national security.
MacDailyNews Take: TSMC clearly plays a central role in the global semiconductor supply chain, making the protection of its intellectual property a matter of strategic importance far beyond Taiwan’s borders.
Please help support MacDailyNews — and enjoy subscriber-only articles, comments, chat, and more — by subscribing to our Substack: macdailynews.substack.com. Thank you!
A CP – Comboios de Portugal lançou um projeto-piloto com tecnologia Starlink num Alfa Pendular, inserindo-se numa vaga global que já transformou a conectividade em dezenas de companhias aéreas e operadores ferroviários europeus.
Welcome to this week’s installment of The Intelligence Brief… in a recent sworn statement, it was revealed that the Pentagon has reportedly leveraged Elon Musk’s xAI to assist in the launch of as many as 2,000 munitions in the recent U.S. war with Iran. In our coverage, we’ll be looking at 1) how the recent revelations were brought to light in a lawsuit focused on possible violations of the Clean Air Act, 2) how a “frontier” AI chatbot became key part of the Pentagon’s military efforts, and 3) why lawmakers are sounding alarms over the potential misuse of AI systems, and the need for ensuring their safe use while restricting major decisions to human operators.
Quote of the Week
“We must act now—not to stifle technological progress, but to establish clear rules of the road that keep humans in charge and keep AI’s use in warfare smart and safe.”
– U.S. Senator Kirsten Gillibrand
If you enjoy the news and perspectives offered by The Debrief, make sure that you aren’t missing our stories by making us one of your “preferred sources” on Google News. You can simply follow this link to add The Debrief to your list of favorites, and you can read more about Google’s preferred sources in our article here.
Get all the latest stories from The Debrief, with more breaking stories at the end of this week’s newsletter.
Musk’s AI Chatbot Helped U.S. Forces Fire Missiles
This week, as an initial deal aiming to end the U.S. war with Iran comes to fruition, it was revealed that thousands of missiles launched by the U.S. were fired by Elon Musk’s Grok chatbot.
The revelation emerged as part of a sworn statement pushing to protect the military’s use of Musk’s AI systems that could be impacted by a lawsuit, which alleges his xAI data centers are contributing to illegal pollution in black communities.
The statement, made by Cameron Stanley, the Pentagon’s chief digital and artificial intelligence officer, states that Musk’s AI chatbot helped to facilitate the deployment of “over 2,000 munitions to 2,000 distinct targets within 96 hours during Operation Epic Fury,” which Stanley called “a testament to the greatly increased operational efficiency made possible by the Grok Gov Model.”
A “Frontier” AI Chatbot
In Stanley’s sworn statement this week, the Pentagon official tasked with overseeing the Department of War’s use of AI wrote that xAI’s Grok is one of just four proprietary AI models “capable of supporting national security applications.”
Stanley wrote that xAI also “remains one of just three enterprise providers equipped to sustain mission-critical operations across Secret and Top-Secret classified networks for the foreseeable future due to the enormous resources required for initial certification.”
“DoW currently relies on derivatives of xAl’s commercial offerings known as the Grok Gov Model,” according to Stanley, who goes on to note in his statement that the AI chatbot has been deployed in systems that include Maven Smart Systems, where it assists in supporting “vital national security missions, including targeting, intelligence, readiness, and recruitment,” and also aids in a range of other military tasks.
“The Grok Gov Model offers features unique to xAI that are found in no other frontier Al model,” Stanley wrote. As an illustration of its capability, Stanley then made the chilling revelation of just how involved in military activities the xAI chatbot has recently become.
Grok Goes to War
“To further illustrate the uses of the Grok Gov Model within DoW, MSS frontier workflows enabled U.S. forces to deploy over 2,000 munitions to 2,000 distinct targets within 96 hours during Operation Epic Fury, a testament to the greatly increased operational efficiency made possible by the Grok Gov Model,” Stanley wrote in his testimony.
As reported by The Independent, the sworn statement provided by Stanley appears to represent the first confirmation by an official within the Trump Administration that Elon Musk’s AI is being used to control U.S. weapons used against Iran.
Since the conflict began in February, the Trump administration has faced scrutiny over U.S.-led attacks that have resulted in civilian deaths, with mounting questions over the military’s use of AI during the conflict.
In an analysis by the Lieber Institute at West Point, Jessica Dorsey and Luke Moffett noted that AI systems “are frequently framed as ushering in an era of unprecedented precision and efficiency in warfare,” but in reality, issues that include recent figures involving as many as 1,700 civilian deaths as of May 2026 “calls that narrative into serious question.”
“CENTCOM claimed it was generating 1,000 targets per hour,” Moffett and Dorsey wrote, adding that while “such capabilities are often framed as enhancing precision… they also introduce new layers of abstraction between decision-makers and the consequences of their actions.”
Pending Court Rulings Could Impact the Pentagon’s AI Use
The U.S. Department of Justice has argued that a pending court ruling could significantly impact the Pentagon’s use of AI if it is prevented from deploying xAI across its systems.
In an effort to prevent such setbacks, the Trump administration has requested that a lawsuit launched by the NAACP be dismissed by a Mississippi-based federal judge. The lawsuit claims that Musk’s xAI Colossus 2 data center, which relies on several dozen gas-powered turbines, is operating in violation of the Clean Air Act. Presently, the turbines are being operated without permits, the lawsuit asserts.
In his sworn statement this week, Stanley called Musk’s xAI systems a “long-term strategic tool vital to maintaining our technological advantage against adversaries.”
However, opponents of such measures in Washington argue that new regulations must help to ensure that crucial military decisions—especially those which impact human lives—must also be made by humans.
“The most critical decisions affecting our national security and the lives of our service members must always be made by human beings, not unaccountable machines,” wrote U.S. Senator Kirsten Gillibrand (D, NY) in a statement earlier in June.
Gillibrand also recently introduced a bill that aims to restrict military decisions that could potentially impact human lives to human operators, and to implement a ban on AI in governing the use of nuclear weapons, as well as autonomous weapons capabilities and domestic surveillance.
In her statement this month, Gillibrand argued that the Pentagon “is moving toward deploying incredibly powerful AI technology without commonsense guardrails in place, which could have catastrophic consequences that make all of us less safe.”
“We must act now—not to stifle technological progress, but to establish clear rules of the road that keep humans in charge and keep AI’s use in warfare smart and safe,” Gillibrand added.
The US Department of Justice has asked a federal court to throw out a Clean Air Act lawsuit against Elon Musk’s xAI, arguing that the company’s unpermitted gas turbines near Memphis are a matter of “national, economic, and energy security.”
The move puts the Trump administration in court alongside Musk to defend dozens of methane-burning turbines that have been running without air permits in one of the most polluted regions of the country.
The Trump administration is trying to help Elon Musk's xAI Corp. beat a Clean Air Act lawsuit filed by the National Association for the Advancement of Colored People (NAACP). The US said the NAACP lawsuit threatens an xAI data center that powers Grok systems needed by the military.
The NAACP sued xAI and subsidiary MZX Tech in April, alleging that they violated the Clean Air Act by operating 27 gas turbines without an air permit in Southaven, Mississippi. The number of unpermitted turbines rose to 57 by mid-May and there were plans to install two more, the NAACP said in a June 12 filing.
"Defendants’ Colossus Gas Plant powers xAI’s nearby Colossus 2 data center, which in turn powers the chatbot 'Grok,'" the lawsuit said. The gas turbines have fueled both health concerns and noise complaints.
A so-called software supply chain attack, in which hackers corrupt a legitimate piece of software to hide their own malicious code, was once a relatively rare event but one that haunted the cybersecurity world with its insidious threat of turning any innocent application into a dangerous foothold in a victim’s network. Now one group of cybercriminals has turned that occasional nightmare into a near-weekly episode, corrupting hundreds of open source tools, extorting victims for profit, and sowing a new level of distrust in an entire ecosystem used to create the world’s software.
On Tuesday night, open source code platform GitHub announced that it had been breached by hackers in one such software supply chain attack: A GitHub developer had installed a “poisoned” extension for VSCode, a plug-in for a commonly used code editor that, like GitHub itself, is owned by Microsoft. As a result, the hackers behind the breach, an increasingly notorious group called TeamPCP, claim to have accessed around 4,000 of GitHub’s code repositories. GitHub’s statement confirmed that it had found at least 3,800 compromised repositories while noting that, based on its findings so far, they all contained GitHub’s own code, not that of customers.
“We are here today to advertise GitHub’s source code and internal orgs for sale,” TeamPCP wrote on BreachForums, a forum and marketplace for cybercriminals. “Everything for the main platform is there and I very am happy to send samples to interested buyers to verify absolute authenticity.”
Login
