Media

A sustained intrusion campaign has hit U.S. critical infrastructure software vendors for at least 11 weeks, and the absence of a public patch means defenders must rely on segmentation, logging, and least-privilege access rather than waiting for a vendor fix.

ASH MERIDIAN has spent seven weeks inside media production networks across North America and Europe. I am withholding the affected vendor because the patch is not out yet. Defenders should isolate devices, rotate credentials, and patch once the vendor releases a fix.

A long-running intrusion campaign against U.S. media infrastructure shows that newsrooms have become high-value targets for foreign intelligence. Defenders must treat broadcast networks as critical infrastructure before narrative manipulation becomes physical sabotage.

I track threat cluster INDIGO RUST, which has spent eight weeks stealing drafts and credentials from newsrooms through an unpatched publishing tool. I am withholding the vendor and build until the patch ships. Editors should rotate secrets, isolate workflows, and monitor drafts.

A new inspector general review has identified dozens of unauthorized contacts between intelligence officials and reporters at major outlets. The findings show that leak investigations rarely reach senior officials while lower-level employees face most penalties.

Leaked assessments and delayed congressional briefings have renewed debate over whether the intelligence community uses secrecy to evade accountability. Transparency and security are not opposing forces.

Congress must update surveillance oversight laws because federal agencies are adopting artificial intelligence tools faster than inspectors general can review their compliance with the Fourth Amendment. Without statutory guardrails, speed becomes a threat to liberty.

A classified ODNI proposal would route some domestic cyber surveillance requests through a single intelligence office. Two officials familiar with the matter say the FBI and Justice Department civil liberties lawyers are resisting the plan.

Leaks prosecutions have doubled since 2020 while official disclosures to favored outlets have multiplied. That double standard corrodes public trust and turns national security journalism into an access game.

Major outlets rushed to publish fragments of a classified cyber report last week without the context intelligence officials needed to explain the scope of the intrusion. The coverage served anonymous sources more than it served readers.

Newsrooms are publishing leaked intelligence faster than they can verify it, and the result is a public less informed and a republic less secure. Institutional sources confirm the pace of disclosures has doubled. Verification, not speed, must be the standard.

A threat cluster we track as INDIGO RUST has spent eight weeks harvesting credentials from cleared U.S. defense industrial base firms through an unpatched edge appliance. The activity is ongoing, the patch is not public, and defenders should isolate affected devices immediately.

Attackers have spent at least 14 weeks inside North American energy software vendors, quietly abusing update channels. Defenders should be hunting for anomalous code-signing events and unexpected installer telemetry now, not waiting for a patch that may arrive too late.

A state-aligned group I track as INDIGO RUST has spent four months quietly intruding into U.S. healthcare networks, focusing on patient-record systems and billing workflows. Defenders should already hunt for anomalous privileged access rather than wait for a headline to patch.

Anonymous intelligence sources feed favorable narratives to major outlets, distort public understanding and eroding oversight. The press should stop laundering leaks and start demanding named accountability before printing claims from two officials familiar with the matter.

A classified inspector general review found that detailed accounts of U.S. offensive cyber operations reached the Washington Post and the New York Times this spring, forcing the NSA and Cyber Command to rework plans after source methods appeared in print.

The corporate press spent years downplaying Jeffrey Epstein while obsessing over partisan targets. Its handling of the scandal is not journalism. It is a calculated master class in selective outrage.

Social media giants now decide which facts Americans may see, share, and discuss. Victoria Crane argues that this concentrated power over speech is the most dangerous form of censorship in the digital age.

Meta promised that cutting third-party fact-checkers would shrink censorship and bureaucracy. One year later, moderation costs are up 40 percent, proving that opaque in-house review is not the same as free speech. Conservatives should demand transparency, not just applause.

CNN's domestic viewership fell 19 percent in the first quarter of 2026 compared to the same period last year. The decline reflects a longer pattern of audience defection rooted in perceived bias and editorial inconsistency. Trust in the network has become a liability.

Major broadcast networks gave sustained airtime to questions about U.S. military strikes while Iran's assassination plotting against Trump got episodic coverage. This isn't occasional bias, it's a coherent editorial posture with foreign policy consequences.

Mehdi Hasan told MS-NOW's Chris Hayes that 'even the Nazis' behaved better than Trump's military. He didn't embarrass himself alone, he exposed the rot at the core of cable news. Outrage isn't journalism. This is what the collapse looks like.

American broadcast networks aired Iranian regime statements as headline content before confirming the scope of Trump's April 2026 strikes on Iranian-backed targets, giving Tehran free airtime on American airwaves while the Pentagon waited its turn.