Is Cyber missing the Marque?

The White House is considering a program allowing private cybersecurity companies to conduct offensive cyber operations against transnational criminal organizations outside the United States, a move that significantly expands the scope of government-sanctioned cyber activity. This initiative raises critical questions about attribution, oversight, and the potential for international friction. Simultaneously, Talos has identified a Chinese-speaking cybercrime group, UAT-10147, leveraging AI to automate attacks and develop custom malware, including a new backdoor implant named SPECTRE. Several critical vulnerabilities, including a zero-click flaw in GitLab and macOS, are actively being exploited in the wild, highlighting ongoing security risks. The overall takeaway is a shift in government policy toward proactive cyber operations, coupled with the continued threat landscape from sophisticated actors like UAT-10147.