Loading story…
The Trump administration has enacted a series of policy changes and executive actions that significantly affect the United States' approach to cybersecurity, privacy, and surveillance. These measures include directives targeting so-called 'anti-American' activities, expanded definitions of domestic terrorism, and increased monitoring of both citizens and government employees. Notably, a national security directive (NSPM-7) and memos from the Attorney General have broadened the scope of surveillance and incentivized public reporting of suspected domestic threats, raising concerns about civil liberties and the potential chilling effect on free speech and dissent.
In parallel, federal agencies such as Immigration and Customs Enforcement (ICE) are seeking to upgrade their cybersecurity operations, with a focus on enhanced internal monitoring and data collection to support leak investigations and law enforcement activities. These efforts reflect a broader trend of linking cybersecurity operations with investigative functions, using automated tools to flag suspicious behavior and maintain comprehensive digital records. The cumulative effect of these policies is a marked increase in government surveillance capabilities and a shift in the balance between national security and individual privacy rights.
See the reporting duties and controls this puts on the clock.
3 events from the most recent confirmed update back to the earliest known activity.
Secretary of State Marco Rubio reportedly authorized a State Department campaign instructing U.S. embassies and consulates to counter foreign propaganda through coordinated messaging, including use of X, local influencers, academics, and community leaders. The reported guidance also called for coordination with Pentagon information operations and endorsed X Community Notes as a tool against anti-American narratives.
During 2025, the Trump administration carried out broad changes across federal agencies, including layoffs, leadership removals, budget cuts, and the dismantling of oversight and cybercrime-related functions. These actions were described as reducing federal cybersecurity, privacy, and investigative capacity while expanding government surveillance powers.
ICE sought to renew its Cyber Defense and Intelligence Support Services contract to expand collection, storage, and analysis of employee system logs and device data. The upgrade was intended to support faster internal investigations and tighter integration between cybersecurity and investigative offices.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
4 references tracked. Mallory keeps watching after this page renders.
techdirt.com
Open sourcetheguardian.com
Open sourcekrebsonsecurity.com
Open sourcewired.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The **Trump administration** is moving to loosen long-standing restrictions on sharing domestic law enforcement information with the **CIA and other intelligence agencies**, potentially opening access to databases containing hundreds of millions of records, including FBI case files, banking records, and investigative material involving law-abiding Americans. Officials said the changes are being justified as part of efforts to target drug cartels and other transnational criminal groups that the administration has designated as terrorists, but the process has reportedly unfolded with **little transparency, limited legal debate, and minimal notice to Congress**, raising significant civil-liberties concerns. The broader policy debate over U.S. surveillance powers is reflected in parallel criticism of **Section 702** reauthorization efforts, with privacy advocates arguing that existing authorities already enable excessive collection and weak safeguards for Americans' data. Proposed reforms in the **SAFE Act** are being presented as an attempt to impose stronger limits on surveillance and intelligence access, underscoring concern that the government is expanding intelligence collection and information-sharing authorities faster than oversight and privacy protections are being strengthened.
Jun 29, 2026
Reporting described a Trump administration directive ordering U.S. diplomats to **lobby against foreign “data sovereignty” and data-localization laws** that would constrain how U.S. technology companies handle non-U.S. citizens’ data. The cable argues such regulations would hinder **AI and cloud services**, disrupt global data flows, raise costs, and potentially increase cybersecurity risk, while also warning that localization could expand state control in ways that undermine civil liberties and enable censorship; diplomats were also instructed to track sovereignty proposals and promote mechanisms such as the **Global Cross-Border Privacy Rules Forum** to support “trusted” international data transfers. Separately, the administration was reported to be seeking a **clean reauthorization of FISA Section 702**, preserving the ability to compel providers to furnish communications of foreign targets abroad without a warrant and without adding a warrant requirement for queries involving U.S.-person data held in 702 databases. The debate is occurring amid documented compliance and civil-liberties concerns, including acknowledged **improper FBI queries** (e.g., related to January 6 and 2020 protest activity). Commentary on AI and democracy provided broader context on how AI-driven “arms races” and industry lobbying can reshape governance and citizen-state relationships, but it did not add incident-level cybersecurity details tied to the diplomatic cable or Section 702 reauthorization effort.
Jun 29, 2026
Senior US officials and lawmakers are escalating oversight and policy debates around **surveillance authorities and intelligence handling**. The White House confirmed it will convene a high-level meeting with senior national security leaders and key members of Congress to discuss reauthorizing **FISA Section 702**, which is set to lapse without congressional action; the authority enables warrantless targeting of foreigners’ communications but can incidentally collect Americans’ communications, fueling renewed civil-liberties and warrant-requirement disputes. Separately, Director of National Intelligence **Tulsi Gabbard** is facing scrutiny on multiple fronts, including a **whistleblower complaint** alleging unusual restrictions on dissemination of highly classified NSA-derived intelligence and claims she directed the NSA not to publish a report and instead route details to her office; Gabbard’s office denies wrongdoing and says her actions were lawful, while the underlying complaint remains highly classified. Parallel oversight pressure is also building around **domestic-facing security and data practices**. The DHS Office of Inspector General launched an audit into how DHS components—initially focusing on **ICE** and the **Office of Biometric Identity Management**—collect, manage, share, and secure **PII and biometric data** used in immigration enforcement, following lawmakers’ concerns about facial recognition and license-plate data collection. In a separate but related governance controversy, Gabbard’s expanded involvement in **election security**—including participation around an FBI raid of a local elections office and actions involving voting systems that her team said had cybersecurity vulnerabilities—has raised questions about mandate boundaries between foreign-interference missions and domestic election administration. In contrast, the CIA’s announcement of a new acquisition framework to speed technology adoption is primarily an internal modernization/procurement change and does not materially advance the surveillance/oversight storyline beyond general national-security context.
Jun 29, 2026