A new variant of Shamoon malware has been reported in the attack against Italian oil-field services company Saipem (Reuters). Shamoon first surfaced in 2012 attacks against Saudi Aramco, It's a wiper, and its earlier uses have generally been associated with Iran (Infosecurity Magazine). The attack on Saipem may have been staged through Chennai, India (Offshore Technology).
The US hasn't yet indicted Chinese nationals on hacking charges, nor have new sanctions been levied, but the anticipated public denunciation of Chinese activities in cyberspace has begun (Wall Street Journal). Senior counterintelligence officials delivered harsh remarks yesterday in testimony before the Senate Judiciary Committee. Representatives of the FBI, DHS, and Justice Department outlined a view of Chinese strategy designed to supplant US world technological and economic leadership. The playbook is "rob, replicate, and replace," as Assistant Attorney General Demers put it (Washington Post).
Indictments are still widely expected, as investigation of the Marriott breach increasingly looks toward Chinese intelligence services as likely culprits (WIRED).
The Senate hearings were noteworthy for warnings about influence operations exercised in universities through Confucius Institutes. In the UK, MPs also warned of Chinese presence in universities, but the British problem is seen as excessive coziness with Huawei (Telegraph).
China has taken a second Canadian citizen into custody even as Huawei's CFO posts bail in Vancouver (CNN).
British Prime Minister May survived her party's confidence vote yesterday evening (BBC). France's President Macron, his concessions largely rejected by the Gilets Jaunes (France 24), now faces his own no-confidence challenge (Express).