Experts think the CrashOverride malware used against Ukraine last December represented the culmination of a long and patient campaign prepared by infestations of Havex and BlackEnergy. WIRED puts it directly: Ukraine "became Russia's test lab for cyberwar." Observers think Russia now has a proven cyber weapon ready for use.
Deutsche Welle says reports that President Trump will meet Ukrainian President Petro Poroshenko before he meets Russia's President Putin are causing a sensation in Kiev.
The European Union has decided to adopt a united front with respect to answering cyber attacks with sanctions.
It appears a single black hat may be the fons et origo of 2017's dramatic increase in Android malware infestations. Bleeping Computer tracks "Maza-in" (his—hers?—nom du hack) in various underground fora and sees signs that he's both created and shared the code for Bank Bot and Mazar Bot.
Trend Micro says Erebus has resurfaced in the form of Linux ransomware. The initial infestation is in South Korea.
In industry news, award protests over, Raytheon with keep its billion-dollar contract to provide cybersecurity services and solutions to the US Department of Homeland Security.
French police begin rolling up the network of a jihadist killer in Paris. In the UK, no such network has so far been discerned in the case of the man who attacked Muslims leaving their Ramadan place of worship.
Results of a US Defense Department Inspector General look at NSA's insider threat program suggests the agency has a lot of work ahead of it.