Senior US counterintelligence official William Evanina warned that Chinese intelligence services are actively using LinkedIn to recruit American agents. Much of the activity involves catphishing. British and German security authorities had earlier issued similar warnings.

A cyberspy crew called "WindShift" is exploiting MacOS vulnerabilities in an espionage campaign directed against the Gulf Cooperation Council (Saudi Arabia, Kuwait, the UAE, Qatar, Bahrain and Oman). The malware payload is distributed in spearphishing attacks. There's no further attribution from Dark Matter, the company announcing the discovery. They promise more details later.

Qihoo 360 warns that GlobeImposter ransomware is now out in more than twenty variants, and they expect it to continue to evolve and spread. The researchers consider it the most troubling family of ransomware currently in circulation.

Russia would like to block the Telegram encrypted messaging service, but their attempts have been unsuccessful. The organs haven't yet come up with a way of stopping Telegram without also stopping a lot of other traffic, and that's unacceptable collateral damage.

The Five Eyes met this week and reaffirmed their commitment to cooperating in cyberspace, especially with respect to counterterrorism, human trafficking, and law enforcement, but also to stop "foreign" (read here, mostly, "Russian," with a touch of the other Familiar Four) influence operations. They also indicate that there will be no near-term surrender in the Crypto Wars.

Google's Titan security key, introduced recently with pride and aplomb, is manufactured in China, which has prompted spoilsports to ask for some transparency about supply chain security.