■■■■□ 🚨 Google reveals undercover Mandiant analyst infiltrated TeamPCP during massive supply-chain hacking spree

Google says an undercover Mandiant analyst infiltrated TeamPCP's inner circle as the hacking group compromised open-source software and ultimately breached more than 1,000 companies.
⠀
The analyst gained access to TeamPCP's core "CanisterWorm" chat in March, joining a group of roughly 12 members and watching the operation from the inside.
⠀
The mole also gained access to a server containing credentials stolen from victims, including usernames, passwords, and access tokens.

Google used that visibility to alert cloud and technology providers, revoke compromised credentials, and send hundreds of notifications to affected organizations.
⠀
The operation also exposed a TeamPCP member developing an AI-assisted zero-day capable of bypassing two-factor authentication in widely used login software.

Google obtained the exploit code, verified that it worked after minor modifications, and privately notified the developer so the vulnerability could be patched.
⠀
TeamPCP's campaign compromised hundreds of open-source packages and affected organizations including GitHub, Mistral AI, Mercor, the European Commission, and employee devices at OpenAI.
⠀
Google says operational security mistakes later helped investigators identify an alleged TeamPCP member, with information passed to the FBI.

Two Australians accused of being principal participants in TeamPCP were arrested last month.

■■■□□ 🇺🇸⚡️ — Hackers from the ShinyHunters group have stolen sensitive FBI personnel records, including psychiatric evaluations, medical histories and information about agents working on counterintelligence investigations, Reuters reports.

The group claims to have obtained between 2-3 TB of data after breaching FBI systems.

Reuters partially authenticated several leaked documents, including medical examinations and mental health assessments, but could not verify the full extent of the breach or the hackers’ claims of access to internal FBI medical databases.

The FBI says it is “aggressively investigating” the reported breach.

☁️ Italian firm Dataflow Security, founded in 2019 by young hacker Luca Todesco, develops high-value exploits; including zero-click tools that break into computers and smartphones and has grown rapidly into a multimillion-euro supplier for governments and spyware makers.

An investigation shows deep ties to Israel’s intelligence and military-cyber world:
former senior Mossad official Eyal Tsir Cohen (shortlisted in 2025 to lead Shin Bet) now heads its two Israeli subsidiaries, while staff include veterans of Unit 8200 and former NSO Group employees.

https://irpimedia.irpi.eu/en-inside-the-secretive-cyberweapons-company-that-won-over-israels-intelligence-elite/

■■■■□ 🇺🇸️ — Palantir co-founder Peter Thiel:

I think everybody says that the Antichrist is a crazy idea, and the reality is they actually secretly agree with me.

■■■■□ 🇺🇸🇷🇺🇺🇳⚡️ — The U.S. and Russia worked together to weaken proposed UN restrictions on lethal autonomous weapons during negotiations in Geneva earlier this month, according to WaPo.

During a closed-door session, with UN cameras switched off and civil society observers excluded, Washington and Moscow each deployed approximately 10 lawyers, nearly twice the representation of other delegations. The two teams pushed through changes so rapidly that smaller delegations struggled to keep up.

The changes removed provisions requiring AI weapons to operate predictably and reliably, account for ethical considerations, and undergo human review of AI-selected targets before strikes.

The negotiations remain nonbinding but could eventually produce an international treaty.

Talks are scheduled to resume in November, while the Pentagon separately reviews its own rules on autonomous weapons.

📱 Telegram OSINT tactics