This week marks 25 years since the shocking attacks of September 11, 2001. Why did the civilized world respond as it did?

Source

Authorities in Australia said Wednesday that they arrested two men accused of participating in cybercrimes for TeamPCP, a prolific group of hackers that, over nine months, has carried out a relentless series of supply-chain attacks that infected more than 1,000 organizations worldwide.

In a statement, the Australian Federal Police said the two men were arrested and charged with 14 offenses. The statement said the men were members of TeamPCP, which by the authorities’ count, compromised more than 1,000 organizations worldwide. The statement didn’t identify the men, except to say they lived in the Western Australian towns of Cottesloe and Mandurah. KrebsOnSecurity, citing a lengthy investigation, provided what it reports to be both defendants' names, along with an extensive background of their lives and the mistakes that led to their downfall.

The hacks that keep on hacking

TeamPCP has vexed law enforcement officials and security personnel around the world since it emerged in December. The group is best known for a sustained series of supply-chain attacks that laced open source software with malware that self-propagated from one package to another. The viral infections worked by targeting organizations’ CI/CD pipelines, which are used to rapidly develop, update, and deploy software.

Read full article

Comments

© Australian Federal Police

Amy Howe:

The Supreme Court on Monday ruled that when law enforcement officials used a “geofence warrant” – a warrant that instructed Google to provide location data for cellphone users who were near a particular place during a specific time period – to obtain evidence used to convict a Virginia man of a 2019 bank robbery, they conducted a “search” for purposes of the Fourth Amendment. By a vote of 6-3, the justices sent Okello Chatrie’s case back to the lower court for it to consider whether, as the Fourth Amendment requires, the search was “reasonable.”

Writing for the majority, Justice Elena Kagan emphasized that “[a]n individual has a reasonable expectation of privacy in records about his cell phone’s location, and police intrude on that constitutionally protected interest when they demand the information—even though for only a limited time, and from a third-party tech company.”

[…]

For purposes of whether the government conducted a search, Kagan said, it does not matter that law enforcement officials “access[ed] only a short amount of cell-phone location information.” […] Nor does it matter, Kagan continued, that Chatrie gave Google permission to collect and use the location data.

Previously:

• Google Maps Is Killing Timeline for Web

More cities and towns deployed drones to spot illegal fireworks during the Fourth of July celebrations commemorating America’s 250th anniversary—leading to a $100,000 fine in one instance and coming as part of a broader national trend of first responders turning to drone surveillance.

Police and fire departments have described using both increased drone surveillance and steep fines to deter people from shooting off illegal fireworks, with many departments publicizing their drone videos on social media and warning that their drones will be watching in the future. Incidents involving illegal fireworks have led to costly fires, injuries, and even multiple deaths each year, along with creating local air and noise pollution for residential neighborhoods.

This year, the $100,000 fine for illegal fireworks came from the Sacramento Fire Department in Northern California deploying its own drones for the first time on the Fourth of July, according to CBS News Sacramento. Sacramento Fire Captain Justin Sylvia described the fire department’s drones as being capable of recording scenes in high-resolution video to help investigators identify the house or closest location using Google Maps.

Read full article

Comments

© MediaNews Group/Orange County Register via Getty Images / Contributor

International authorities and a raft of private technology companies say they have disrupted a cybercrime “assembly line” that allowed crooks to collect millions of login credentials and steal more than $47 million in ransom payments and by other fraudulent means.

The crux of the operation was the simultaneous targeting of two unrelated tools that are widely used in various online scams. The first is Amadey, a malware-as-a-service platform for compromising devices and delivering malicious payloads for ransomware and other scams. Amadey has been observed in the wild since at least 2018 and was seen last year abusing GitHub as it collected system information from infected devices and installed customized payloads. The second tool was StealC, an infostealer-as-a-service platform that collects credentials, authentication cookies, cryptocurrency wallets, browser extensions, and files whose names match customer-defined patterns.

Severing a critical link in the cybercrime chain

Amadey and StealC are separate tools that are run independently of each other. Given their widespread use, however, many customers use both in their individual cybercrime activities. The tools also, it turns out, relied on some of the same underlying infrastructure to run. Microsoft said it made this determination after analyzing the tools using AI. This insight allowed Microsoft attorneys to seek an order disrupting both at the same time.

Read full article

Comments

© Alex Schmidt / Getty Images

In a supposed “nationwide first” use of drones to disarm a person, the Sacramento County Sheriff’s Office in California promoted a video showing how a small quadcopter drone used a dangling magnet to remove a knife from the hand of a motionless suspect.

The promotional video shared to Facebook and Instagram on June 22, 2026, uses the Mission: Impossible film franchise theme to dramatize video footage of the incident that took place earlier in the month, which involved what the video describes as a “felony suspect armed with a knife and a firearm” who “was not responding to negotiators.” The sheriff’s office is just one among hundreds of US police departments and sheriff’s offices that have deployed camera-equipped drones to assist first responders.

In a Facebook post, the Sacramento County Sheriff’s Office described having surrounded the suspect’s residence with a SWAT team after the “known felon and parolee-at-large was seen earlier with a firearm.” A first drone deployed to the scene located the suspect hiding in a corner of the garage, but also spotted the motionless suspect holding a knife in one outstretched arm.

Read full article

Comments

© Sacramento County Sheriff’s Office

In a supposed “nationwide first” use of drones to disarm a person, the Sacramento County Sheriff’s Office in California promoted a video showing how a small quadcopter drone used a dangling magnet to remove a knife from the hand of a motionless suspect.

The promotional video shared to Facebook and Instagram on June 22, 2026, uses the Mission: Impossible film franchise theme to dramatize video footage of the incident that took place earlier in the month, which involved what the video describes as a “felony suspect armed with a knife and a firearm” who “was not responding to negotiators.” The sheriff’s office is just one among hundreds of US police departments and sheriff’s offices that have deployed camera-equipped drones to assist first responders.

In a Facebook post, the Sacramento County Sheriff’s Office described having surrounded the suspect’s residence with a SWAT team after the “known felon and parolee-at-large was seen earlier with a firearm.” A first drone deployed to the scene located the suspect hiding in a corner of the garage, but also spotted the motionless suspect holding a knife in one outstretched arm.

Read full article

Comments

© Sacramento County Sheriff’s Office

The FBI’s Fake Town for Real Hacks The FBI built an entire American town that exists for one