The Great Firewall is blocking Tumblr in China. Observers see this as possible preparation for this weekend’s anniversary of the Tiananmen Square massacre.

ISIS announces a ban on satellite television in Mosul, which it continues, for now, to control. The ban’s being enforced by physical destruction of satellite dishes.

A RiskIQ scan suggests that outdated Wordpress and Drupal installations are exposing large enterprises to the risk of a major data compromise. The old versions of the content management systems still in widespread use are seen as a likely source of new Panama-Papers-style leaks. (No such leaks yet, but there’s much pointing with alarm.)

Trustwave, which has been investigating the alleged Windows zero-day that’s up for auction in the black market, thinks signs point to its being a legitimate vulnerability. But investigation continues.

Elsewhere in the black market, Forcepoint notices that skid coders are selling Jigsaw ransomware’s source code for $139, which seems low even given Jigsaw’s typical $150 ransom demand. Forcepoint’s conclusion: cyberspace has its fair share of dumb money and petty, easy crime.

FireEye describes “Irongate,” ICS malware affecting Siemens PLCs. It’s being called “son of Stuxnet,” but it looks more like a proof-of-concept used in pentesting.

NATO is expected to declare cyberspace an operational domain soon. Old news, at least for prominent NATO members, but Russia Today looks on with factitious alarm. (Tip-off scare words: “German general.”)

Some cyber sector M&A activity is under discussion, and Palantir, Parsons, and SAIC all win places on large US cyber contracts.