Cyberattack Targets ICE List Wiki Ahead of Federal Agent Data Leak A major cyberattack disrupted the ICE List Wiki a Netherlands-based activist platform just as it prepared to publish the identities of thousands of U.S. federal agents, primarily from Immigration and Customs Enforcement (ICE). The site, run by activist Dominick Skinner, was hit by a sustained distributed denial-of-service (DDoS) attack last Tuesday evening, flooding its servers with malicious traffic and forcing it offline. The leaked data, provided by a Department of Homeland Security (DHS) whistleblower, includes names, personal phone numbers, and work histories of approximately 4,500 ICE and Border Patrol employees. The whistleblower’s decision to release the information was reportedly triggered by the fatal shooting of 37-year-old Renee Nicole Good by an ICE agent in Minneapolis on January 7, 2026. Activists quickly identified the officer involved as Jonathan E. Ross, with the incident described as the "last straw" for the whistleblower. While the site has since resumed operations, Skinner noted that much of the attack traffic appeared to originate from a Russian bot farm, though the true source remains obscured by proxy networks. The sophistication of the assault suggests a coordinated effort to suppress the leak. Despite the disruption, Skinner’s team operating from the Netherlands to avoid U.S. jurisdiction plans to proceed with publishing the data, though they intend to exclude certain personnel, such as medical and childcare staff. The group is also migrating to more secure servers to prevent future disruptions.

Massive DHS Data Breach Exposes Thousands of ICE and Border Patrol Agents A whistleblower leak has exposed sensitive details of approximately 4,500 U.S. Department of Homeland Security (DHS) employees, including nearly 2,000 frontline Immigration and Customs Enforcement (ICE) and Border Patrol agents. The dataset believed to be the largest breach of DHS staff data to date includes names, work emails, phone numbers, job roles, and some résumé information. The leak was published by ICE List, a volunteer-run accountability project led by Dominick Skinner, a Netherlands-based activist. Skinner stated the data was received on Monday, following the fatal shooting of Renee Nicole Good, a protester killed by ICE agent Jonathan Ross in Minneapolis on January 7. The incident has sparked nationwide outrage, with critics accusing DHS of failing to hold agents accountable. Skinner, whose project operates outside U.S. jurisdiction to avoid takedowns, said the leak reflects growing internal discontent within federal immigration agencies. Since Good’s death, public submissions to ICE List which documents agent identities and raid details have surged, with reports coming from hotel staff, bar employees, and neighbors of agents. The site previously held data on around 2,000 staff but now possesses records on approximately 6,500. DHS has long shielded agent identities for safety reasons, but Skinner argues transparency is necessary for reform. He plans to publish verified names, stating that working for ICE or Customs and Border Protection (CBP) is "a bad move on a moral level." Two former ICE employees have already requested removal from the site after quitting. DHS officials condemned the leak, warning it endangers agents and their families. Assistant Secretary Tricia McLaughlin defended ICE’s work, citing arrests of violent criminals, but acknowledged exceptions for roles like childcare providers and nurses. Meanwhile, the agency faces backlash over Ross, who allegedly misled neighbors about his job, claiming to be a botanist. The breach underscores escalating tensions between federal immigration enforcement and public accountability efforts.

Cybersecurity & Privacy Roundup: AI Flaws, ICE Surveillance, FBI Raids, and Military Cyber Ops This week’s cybersecurity developments highlight critical vulnerabilities, government surveillance practices, and high-stakes digital warfare with implications for privacy, national security, and AI-driven risks. ### ICE & CBP’s Controversial Face Recognition App A WIRED investigation revealed that U.S. Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP) are deploying Mobile Fortify, a facial recognition app used nationwide to identify individuals. However, the app was not designed to verify identities and was approved for DHS use only after relaxing the agency’s own privacy rules. The report also exposed the militarized tactics of ICE and CBP units, including agents linked to shooting deaths of U.S. citizens in Minneapolis. Meanwhile, a Public Service Alliance report warned that data brokers are fueling threats against public servants, whose personal information remains largely unprotected under state privacy laws. ### AI-Generated Code Exposes Major Security Flaw Security firm Wiz uncovered a critical vulnerability in Moltbook, a social network for AI agents billed as a "Reddit-like" platform. The flaw, stemming from mishandled private keys in AI-generated JavaScript code, exposed thousands of user email addresses and millions of API credentials, enabling full account impersonation and access to private AI communications. Moltbook’s founder, Matt Schlicht, admitted the site was "vibe-coded" entirely by AI raising concerns about the security risks of AI-written software. While the flaw has been patched, it underscores the dangers of over-reliance on AI for critical infrastructure. ### FBI Raid Highlights iPhone Security Safeguards The FBI’s raid on *Washington Post* reporter Hannah Natanson’s home, part of an investigation into alleged leaks by a federal contractor, demonstrated how biometric authentication can be exploited to access devices. However, Apple’s Lockdown Mode designed to block spyware like NSO Group’s Pegasus prevented the FBI’s Computer Analysis Response Team (CART) from extracting data from Natanson’s iPhone. The incident, detailed in a court filing reported by *404 Media, reveals how Lockdown Mode’s peripheral-blocking feature can thwart forensic tools like Graykey and Cellebrite*. ### Starlink Disrupts Russian Military Communications In a major win for Ukraine, SpaceX’s Starlink disabled Russian military access to its satellite network, causing a communications blackout for frontline troops. The move followed a request from Ukraine’s defense minister and dealt a severe blow to Russia’s drone operations, with one Ukrainian adviser calling it a "catastrophe" for enemy forces. The development adds another layer to Starlink’s complex role in the war, which has previously seen Elon Musk’s company restrict Ukrainian drone strikes over concerns about escalation. ### U.S. Cyber Command Disables Iranian Missile Defenses A 2023 U.S. Cyber Command operation, revealed by The Record, used digital weapons to disrupt Iran’s air missile defense systems during a kinetic strike on Iran’s nuclear program. The cyberattack, leveraging NSA intelligence, exploited a vulnerability to prevent Iran from launching surface-to-air missiles at American warplanes. A Cyber Command spokesperson confirmed the operation, stating the unit is "fully equipped to execute the orders of the commander-in-chief" in any theater. From AI-generated security flaws to government surveillance overreach and cyber warfare, these incidents underscore the evolving threats in digital security and the high stakes of getting it wrong.

US Immigration and Customs Enforcement accidentally exposed the names, birthdates, nationalities and locations of more than 6,000 immigrants who claimed to be fleeing torture and persecution to its website. The unprecedented data dump exposed the immigrants to retaliation from the very individuals, gangs and governments they fled, attorneys for people who have sought protection in the U.S