Day: June 6, 2026

Salt Typhoon: The Campaign Against American Surveillance
It is strategic intelligence collection designed to map and potentially neutralize American law enforcement capabilities.
#FBI  #Cybersecurity  #Counterintelligence  #Security
The counterintelligence implications are severe. If a foreign intelligence service gains access to FBI surveillance target data, any assets, intermediaries, or subjects under FBI surveillance could be identified and potentially warned. Active investigations could be compromised. Sources and methods could be exposed. The damage extends beyond data theft into operational intelligence that affects national security.

FBI Surveillance Network Breached: Salt Typhoon’s Quiet War on American Law Enforcement Infrastructure – Security Boulevard  securityboulevard.com/2026/0…
The Federal Bureau of Investigation has formally classified a cyber intrusion into one of its internal surveillance systems as a “major incident” under federal data security law. This designation, one of the most serious breach classifications available under federal statute, indicates that sensitive law enforcement data may have been substantially compromised.

Together, Salt Typhoon, Volt Typhoon, and Flax Typhoon represent a coordinated effort to penetrate every layer of American critical infrastructure.

See also:
share.google/aimode/7GnxOQb9…
The Federal Bureau of Investigation (FBI) formally classified a cyber intrusion into its internal surveillance infrastructure as a “major incident” under federal data security law. First detected on February 17, 2026, after investigators flagged abnormal log information, the compromise specifically targeted the FBI’s Digital Collection Systems Network. This system processes highly sensitive law enforcement information, including wiretap returns, pen register metadata, and routing data for active investigations. [1, 2, 3, 4]
U.S. officials and investigators have pointed directly to Salt Typhoon, a sophisticated threat actor closely linked to China’s Ministry of State Security (MSS). The intrusion represents a direct, strategic continuation of the group’s multi-year cyber-espionage campaign designed to map and neutralize American law enforcement and national security capabilities. [1, 5]
The Supply Chain Exploit: The CALEA Backdoor
The foundational vulnerability enabling Salt Typhoon’s continuous access relies on third-party telecommunications infrastructure. Under the 1994 Communications Assistance for Law Enforcement Act (CALEA), commercial telecom carriers are required by law to maintain built-in mechanisms that allow law enforcement to execute court-ordered wiretaps. [1, 6, 7]

The Entry Point: Instead of penetrating the FBI’s primary fortified perimeter directly, Salt Typhoon systematically compromised the “lawful intercept” systems embedded inside major commercial internet and phone providers. [1, 7]
The Scope: Declassified threat intelligence confirms that the threat actors compromised major U.S. carriers for periods ranging between 8 to 18 months, with multiple carriers breached via a single managed-services provider. [8]
The 2026 Shift: While the initial 2024–2025 waves of the Salt Typhoon campaign focused on siphoning tens of millions of American call metadata records and targeting political campaigns, the early 2026 intrusion showed the group pivoting its methods to compromise the FBI’s end of that shared infrastructure. [1, 9]

Strategic Impact on Law Enforcement
The breach is categorized by security analysts as strategic intelligence collection rather than traditional cybercrime. By gaining visibility into the Digital Collection Systems Network, the hackers effectively inverted the surveillance apparatus: [1, 6, 10]

Counter-Espionage Blindspots: The adversary gained the potential capability to monitor federal target selection lists. This allows foreign intelligence services to see exactly who the FBI is investigating, tracking, or wiretapping in real time. [1, 11, 12]
Compromised Target Data: Though the systems are unclassified, they contain sensitive routing information, IP addresses, and communications metadata that could compromise active field operations and endanger undercover assets or surveillance targets. [1, 4]
The Eviction Dilemma: The Cybersecurity and Infrastructure Security Agency (CISA) and the FBI engaged in an extensive nine-month eviction process ending in early 2026 that required physical hardware replacement. However, lawmakers and intelligence officials warn that because the architectural flaws in CALEA-mandated compliance platforms remain unresolved, the vulnerability stays structurally exposed. [8, 9, 13, 14]

A Triad of State-Sponsored Threats [9]
Salt Typhoon operates as part of a broader, multi-layered cyber posture deployed by state-sponsored Chinese actors targeting different facets of U.S. security. Security frameworks track them alongside parallel operations: [1, 9]

Volt Typhoon: Focuses on the physical layer, using “living off the land” techniques to burrow into U.S. critical infrastructure—such as water facilities, ports, and energy grids—to pre-position for disruptive kinetic attacks during a geopolitical conflict. [1, 15]
Flax Typhoon: Targets telecommunications, internet-of-things (IoT) device botnets, and utility footprints to maintain supplementary network access. [1, 15]
Salt Typhoon: Acts as the data and core intelligence aggregator, zeroing in directly on the underlying routing infrastructure, telecom data pipelines, and government surveillance mechanisms. [1, 15]

In response to the recurring exploits, the FBI and CISA have published updated security parameters via a Joint Cybersecurity Advisory urging network defenders and private carriers to enforce stricter zero-trust segmentations around lawful interception pathways. [16]
Would you like to explore the legislative changes proposed to secure CALEA infrastructure, or would you prefer an analysis of the specific technical tactics Salt Typhoon uses to remain undetected?

[1]  securityboulevard.com
[2]  hstoday.us
[3]  facebook.com
[4]  wsj.com
[5]  youtube.com
[6]  nbcnews.com
[7]  nextgov.com
[8]  cyberwarrior76.substack.com
[9]  cpomagazine.com
[10]  hstoday.us
[11]  newlinesinstitute.org
[12]  yahoo.com
[13]  cisa.gov
[14]  politico.com
[15]  congress.gov
[16]  fbi.gov
–

— Michael Novakhov (@mikenov) Jun 6, 2026

#FBI  #Cybersecurity  #Security
FBI Surveillance Network Breached: Salt Typhoon’s Quiet War on American Law Enforcement Infrastructure – Security Boulevard  securityboulevard.com/2026/0…
The Federal Bureau of Investigation has formally classified a cyber intrusion into one of its internal surveillance systems as a “major incident” under federal data security law. This designation, one of the most serious breach classifications available under federal statute, indicates that sensitive law enforcement data may have been substantially compromised.

— Michael Novakhov (@mikenov) Jun 6, 2026

#CIA  #FBI  #Mossad
x.com/mikenov/status/2063180…Michael Novakhov (@mikenov) #ODNI
President Donald  #Trump said he wants Acting Director of National Intelligence Bill  #Pulte to begin slashing staff at the agency, he told The Wall Street Journal Friday, as his appointment of Pulte, a controversial figure in the Trump administration, has been widely criticized. – Google Search  google.com/search?q=Presiden…—  https://x.com/mikenov/status/2063180576056590835

— Michael Novakhov (@mikenov) Jun 6, 2026

#ODNI
President Donald  #Trump said he wants Acting Director of National Intelligence Bill  #Pulte to begin slashing staff at the agency, he told The Wall Street Journal Friday, as his appointment of Pulte, a controversial figure in the Trump administration, has been widely criticized. – Google Search  google.com/search?q=Presiden…

— Michael Novakhov (@mikenov) Jun 6, 2026

#CIA  #FBI  #ODNI
Trump Wants Pulte To Make Intelligence Agency ‘Smaller’ With Mass Firings  bundle.app/en/finance/trump-…
President Donald Trump said he wants Acting Director of National Intelligence Bill Pulte to begin slashing staff at the agency, he told The Wall Street Journal Friday, as his appointment of Pulte, a controversial figure in the Trump administration, has been widely criticized.
See also:
share.google/aimode/RzbWPqCD…
President Donald Trump has requested that newly appointed Acting Director of National Intelligence Bill Pulte begin slashing staff, telling The Wall Street Journal that the agency has been “way too high for way too long”. Pulte, the former head of the Federal Housing Finance Agency, was appointed following the sudden resignation of Tulsi Gabbard. Trump plans to use Pulte’s temporary status to carry out sweeping personnel cuts targeting career officials. [1, 2, 3, 4, 5]
Key Details of the Staffing Cuts

Targeting Prior Administrations: Trump specifically noted that the downsized agency contains personnel who “shouldn’t be there”, referencing intelligence community officials who served under Democratic administrations. [4]
Pre-empting a Permanent Nominee: Trump aims for Pulte to handle the “hard work” of downsizing so a permanent nominee will not be saddled with the political fallout of mass firings. [4]
Continuation of Previous Cuts: The Office of the Director of National Intelligence (ODNI) had already faced a 40% workforce reduction and a $700 million annual budget cut under Gabbard. [6]

Widespread Political Backlash [1]

Lack of Intelligence Experience: Critics and opposition lawmakers have highlighted Pulte’s complete lack of national security or intelligence expertise. [4]
Surveillance Program Snarled: On Capitol Hill, the appointment has disrupted the renewal of a critical national security surveillance program. [5]
Erosion of Trust: Key Congressional Democrats stated they do not trust Pulte to oversee the 18 intelligence agencies or help manage delicate surveillance operations. [5]

Short-Term Nature of the Role
Trump clarified to reporters that Pulte will not be formally nominated for the permanent position. Pulte will remain in the acting role only until a permanent successor is confirmed. Trump noted that the administration is actively interviewing five potential candidates to fill the role long-term. [4, 5]

[1]  forbes.com
[2]  facebook.com
[3]  spectrumlocalnews.com
[4]  yahoo.com
[5]  krcgtv.com
[6]  facebook.com
–

— Michael Novakhov (@mikenov) Jun 6, 2026

❗️”Armenia’s elections will not be considered legitimate,” — Medvedev

According to Russia’s most famous drinking enthusiast, Nikol Pashinyan is allegedly trying to remove all of his political rivals before the vote, meaning the results would not reflect the genuine will of the people.

Funny. Those accusations are usually aimed at a very different country.

— @nexta_tv Jun 6, 2026