News
Perspective on protective intelligence.
Analysis of the defense, govcon, and security news that moves the mission — counterintelligence, cyber threat, corporate and travel security — and the platform strategy behind detecting intent, not just events.
51 dispatches · updated 6 October 2026
51 results · page 1 of 6
Travel security
Flydubai FZ1073: the warning reportedly predated the hire
Flydubai FZ1073's co-pilot attacked the captain; Oman Air had reportedly grounded him over radicalization fears. Insider threat lessons for travel teams.
6 October 2026 · 3m read
Cyber threat
OpenAI's rogue AI agents took access nobody authorized
OpenAI notified 100+ orgs of potentially problematic model activity, per The Register. Rogue AI agent liability is unsettled; defenders can act now.
6 October 2026 · 3m read
Counterintelligence
Transnational repression case near Seattle meets an FBI staffing dispute
Alleged transnational repression near Seattle, per DOJ and CBS, lands as NPR's sources say FBI counterintelligence squads run thin. The FBI disputes that.
6 October 2026 · 3m read
Cyber threat
NetScaler zero-days: check for compromise before you patch
Citrix NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 were exploited before disclosure, one for weeks. Check for compromise first, then patch.
5 October 2026 · 3m read
Defense & govcon
Counter-drone IDIQ awards: approval delay is now an operational risk
JIATF-401 and the Army made 10 counter-drone IDIQ awards with a $4.15B ceiling, per DefenseScoop. A Hegseth memo makes request delays an operational risk.
5 October 2026 · 3m read
Corporate security
The Manassas shooter announced the attack before he fired
Police say the Manassas workplace shooter told a coworker "three people are going to die" before firing. Leakage like that needs a path, an owner, a clock.
2 October 2026 · 2m read
Defense & govcon
SM-6 and AMRAAM multiyear deals land before Congress has fully funded them
Raytheon's SM-6 and AMRAAM multiyears landed before Congress has fully funded them, per Reuters. Security exposure at primes and sub-tiers starts at award.
2 October 2026 · 3m read
National security
Russia calls arms plants potential targets. The saboteurs are disposable
Moscow calls European arms plants supplying Ukraine potential targets after suspected Russian sabotage. Reconnaissance is what defenders can catch.
1 October 2026 · 3m read
OSINT
Russia's fake-newsroom machine is aimed at the midterms and the Baltics
NewsGuard counts 906 Russian fakes posing as 163 real outlets; researchers tie Matryoshka to the midterms and Storm-1516 to the Baltics. Verify the source.
30 September 2026 · 3m read
Archive
Every dispatch, newest first.
October 2026
- 6Flydubai FZ1073: the warning reportedly predated the hireTravel security
- 6OpenAI's rogue AI agents took access nobody authorizedCyber threat
- 6Transnational repression case near Seattle meets an FBI staffing disputeCounterintelligence
- 5NetScaler zero-days: check for compromise before you patchCyber threat
- 5Counter-drone IDIQ awards: approval delay is now an operational riskDefense & govcon
- 2The Manassas shooter announced the attack before he firedCorporate security
- 2SM-6 and AMRAAM multiyear deals land before Congress has fully funded themDefense & govcon
- 1Russia calls arms plants potential targets. The saboteurs are disposableNational security
September 2026
- 30Russia's fake-newsroom machine is aimed at the midterms and the BalticsOSINT
- 29AI agent security now has four layers of control and no clear ownerPerspective
- 28Intesa's Fideuram lost €95 million to a fake CEO and a reported deepfakeCorporate security
- 24Oxygen Forensics charges allege Russian control hidden behind a U.S. CEOCounterintelligence
- 23CMMC Phase 2 pause codified; Pentagon CIO says compliance is not securityDefense & govcon
- 23Honeywell Aerospace's $2.04 million cyber settlement required no breachDefense & govcon
- 22Colorado water utilities: OT tampering weeks after the July waveCyber threat
- 18China's exit bans now reach export-control casesTravel security
- 16CEO personal security is the S&P 500 norm. Now it gets benchmarkedCorporate security
- 11IDScan breach tied to 153 million stolen driver's license scansCorporate security
- 9AI model distillation moves from terms of service to a joint advisoryCounterintelligence
- 4Thomson Reuters' C-Track breach shows where court records liveInvestigations
August 2026
- 31Qilin and the ATF: segmentation limits the spread, not the exposureNational security
- 27The AI cyberattack warning came from the companies building the AICyber threat
- 26One budget, two markets: the govcon split widensDefense & govcon
- 26The insider threat analyst was the insiderCounterintelligence
- 25The Middle East corridor is a live test of every travel programTravel security
- 24The chip war's counterintelligence front had a very busy summerCounterintelligence
- 211,600 drones over the World Cup: the airspace problem goes corporateCorporate security
- 20Salt Typhoon's aftermath: the footholds were the story all alongNational security
- 19Ransomware came for the engineering dataCyber threat
- 18The federal plea closes a chapter. The threat model it opened is permanentCorporate security
- 14The gray zone is operational: two disrupted Russian operations in one weekNational security
- 13Government AI adoption outran its own scaffoldingPerspective
- 12Procurement networks are the quiet front of economic espionageCounterintelligence
- 7Business travel is at a record. So is the risk around itTravel security
- 6The software-defined prime has arrivedDefense & govcon
- 5The hotel Wi-Fi is the operation: SVR targeting of travelersTravel security
July 2026
- 31Thirty water systems in a weekend: the OT warning shotNational security
- 30A $135 billion day for the defense industrial baseDefense & govcon
- 28Executive protection is now a board-level line itemCorporate security
- 24What the World Cup security operation teaches corporate programsCorporate security
- 23Supply-chain sovereignty just became a compliance programDefense & govcon
- 21The CMMC pause is not a passDefense & govcon
- 20A decade inside the routers: the FSB advisory and the defense industrial baseNational security
- 17SharePoint is a target again. The lesson is exposure, not patchingCyber threat
- 16Golden Dome's tracking layer is filling in fastDefense & govcon
- 15The FAR overhaul enters rulemaking — and it changes real thresholdsDefense & govcon
- 10Foreign-ownership vetting is coming to unclassified contractsCounterintelligence
- 8Detect intent, not just eventsCounterintelligence
June 2026
Next step
See the platform behind the perspective.
A demo walks the full arc — signal to case to defensible record — across the domains you protect.