Loading story…
The proposed American Copyright Protection Act of 2026 (H.R. 10364) would require US ISPs, DNS resolvers and VPN providers to block foreign websites and services found by a court to host pirated content. Standard blocking orders would become effective within 14 to 30 days, with faster deadlines possible for alleged infringement involving live events; small providers, public networks, root DNS operators and top-level-domain providers would be exempt.
The bill does not specify how blocking must be implemented or how encrypted DNS and privacy technologies should be handled. Its definitions of connections “from the United States” and a “foreign” service could be difficult to apply to VPNs, CDNs, roaming users, shared IP addresses, CGNAT, Oblivious DNS-over-HTTPS and iCloud Private Relay, creating a risk that intermediaries overblock to limit liability. The measure has been introduced but has no listed sponsors, hearings or markup.
See the reporting duties and controls this puts on the clock.
1 event from the most recent confirmed update back to the earliest known activity.
Congress received H.R. 10364, the American Copyright Protection Act of 2026, which would require covered ISPs, DNS resolvers, and VPN providers to block foreign services found to host pirated content. The bill remained at the introduced stage, with no sponsors, hearings, or markup reported.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A new bill has been introduced in the U.S. House of Representatives that seeks to establish government-wide processes for attributing and sanctioning foreign hackers responsible for major cyberattacks against the United States. The proposed legislation, known as the Cyber Deterrence and Response Act, would empower the executive branch to formally designate certain foreign entities as 'critical cyber threat actors' and impose a range of sanctions, including asset blocking, financial restrictions, export controls, procurement prohibitions, visa bans, and suspension of assistance. The bill also outlines a framework for attribution, leveraging input from federal cyber agencies and private threat intelligence firms, and is intended to strengthen the government's ability to hold malicious actors accountable and protect critical infrastructure. The legislative push comes amid growing concern in Congress over the increasing sophistication and frequency of cyberattacks targeting U.S. interests, as well as perceived gaps in the nation's ability to deter such threats. The move follows high-profile incidents such as the Salt Typhoon cyberespionage campaign and reflects a broader effort to enhance national cyber defense and response capabilities. Congressional leaders and the Trump administration have emphasized the need for real-time detection and deterrence, with the new bill positioned as a key component of the administration's evolving cyber strategy.
Jun 29, 2026
Lawmakers in several US states, including Wisconsin, are proposing legislation that would ban the use of VPNs for accessing websites with content deemed potentially harmful to minors. The proposed bill, A.B. 105/S.B. 130, mandates that such websites implement age verification systems and block users connected via VPN, significantly expanding the definition of restricted materials to include broad discussions of human anatomy, sexuality, and reproduction. Privacy advocates have raised concerns that these measures threaten user privacy and could have far-reaching implications for internet freedom and access. In parallel, technical solutions for age verification, such as those implemented by platforms like Snapchat, are being scrutinized for their effectiveness and privacy implications. Current methods, including facial scans and editable birth dates, have proven unreliable, often allowing underage users to bypass restrictions while potentially excluding legitimate users. The debate highlights the challenges of balancing child protection with privacy rights, as both legislative and technical measures face criticism for their potential to overreach and create new security and privacy risks.
Jun 29, 2026
International cybersecurity agencies have intensified efforts to dismantle bulletproof hosting providers (BPH), which supply resilient internet infrastructure to cybercriminals and ransomware groups. Authorities from the U.S., U.K., Australia, Canada, the Netherlands, and New Zealand have issued joint advisories and sanctions targeting BPH services that enable malware delivery, phishing, and illicit content hosting by ignoring abuse reports and law enforcement takedowns. The U.S. Office of Foreign Assets Control (OFAC) has sanctioned entities such as Media Land and its affiliates, which are linked to major ransomware groups including LockBit, BlackSuit, and Play. These coordinated actions aim to degrade the operational capabilities of cybercriminals by disrupting the infrastructure that underpins their activities. Guidance has been released to help internet service providers (ISPs) and network defenders identify and block malicious infrastructure associated with BPH services. The crackdown is part of a broader strategy to protect critical infrastructure, financial institutions, and other high-value targets from persistent cyber threats. The move underscores the growing recognition that disrupting the technical enablers of cybercrime is essential to reducing the global impact of ransomware, data breaches, and other forms of cyber-enabled fraud. Authorities emphasize the need for industry collaboration to effectively mitigate the risks posed by bulletproof hosting and to enhance the resilience of the digital ecosystem.
Jun 29, 2026