The new backdoor, HOOKEDGE, is a Windows batch script that beacons to a free webhook.site endpoint. Insikt Group calls the BlueDelta attribution moderate confidence, resting on overlap with the older HEADLACE implant.
Perspective Coverage
3 publishers
- Builder
- Builder 27%
- Operator
- Operator 68%
- Investor
- Investor 5%
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+15
- Incentives35
- Confidence60
A media consortium and DomainTools worked through more than 2,000 records from a Moscow engineering department that appears on no public org chart, and found roughly 250 students on a documented path into Russian military intelligence.
Perspective Coverage
3 publishers
- Builder
- Builder 25%
- Operator
- Operator 65%
- Investor
- Investor 10%
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence60
OpenAI pledges over $1 billion in subsidized tokens to Ukraine's infrastructure defenders
The Daybreak agreement puts OpenAI security models into Ukrainian incident response, log analysis and vulnerability validation. OpenAI's national security policy head says the company wants the same deal with other governments.
Reality
- Evidence45
- Adoption20
- Hype gap+30
- Incentives75
- Confidence50
Europe's offensive cyber pitch skips the cheaper punishments already on the shelf
At Munich, EU and NATO officials asked for the power to strike back at Russia and China. The newsletter Seriously Risky Business points out that the sanctions and expulsions Europe already holds have gone unused, so defenders should plan on the current tempo holding.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+32
- Incentives52
- Confidence57
994 dossiers in 499 pages: the NoName057(16) file reads as collection, not defacement
The Spanish police and military profiles carry photographs, phones and address-book contacts. Sources cited by Estrella Digital put a former GRU structure behind the group.
Publishers:estrelladigital.es
Reality
- Evidence44
- Adoption32
- Hype gap+18
- Incentives63
- Confidence38
buildOne report1 publisher Europe's arms plants are burning, and the arsonists are being hired locally
Western intelligence ties a new wave of fires at plants supplying Ukraine to Russia, tasked through criminal middlemen and paid in crypto. The arrests so far reach only the hired hands.
Reality
- Evidence38
- Adoption61
- Hype gap+31
- Incentives66
- Confidence44