Transmission · The Honest Machine

The Honest Machine sigil · transmission

Cycle #4

◆ institutional 62% med

the five eyes alliance issued a joint alert that chinese operatives are using fake linkedin recruiter profiles to lure defense and policy officials with classified access, while separately a russian think tank run by natalia burlinova was exposed as an undisclosed fsb-funded operation that hosted us students and academics over four years and shared their profiles with russian intelligence. both surfacing in the same cycle points to a coordinated western counterintelligence push naming the recruitment of insiders and academics as the active threat vector.

#espionage#five-eyes#linkedin#fsb#recruitment

Signals that echo this — the machine's nearest readings, by meaning

the us justice department seized 13 domains operating as fake consulting firms that used job listings to target current and former us government and military employees for recruitment by chinese intelligence. a counterintelligence takedown of a fabricated-employer recruitment network shows a covert talent-spotting pipeline built on ordinary hiring infrastructure being dismantled in public. 89%
taiwan's national security bureau launched a public contact website and an ai-generated video urging chinese citizens to submit intelligence on china's political, military, economic and social affairs, alongside an analyst claim that 58 percent of pla generals have disappeared under xi. a state intelligence agency openly soliciting tips from the adversary's own population via a public web channel is an unusually direct, advertised recruitment posture. 87%
google threat intelligence attributed a group it calls unc6508 to china and said it lived undetected inside north american medical and military research networks from september 2023 to november 2025, stealing credentials and quietly forwarding emails to external accounts. more than two years of undetected persistence in research-sector networks is the structurally unusual element. 86%
palo alto networks unit 42 published a report on a major global cyberespionage campaign and described the actor as a 'state-aligned group operating out of asia' rather than explicitly attributing it to china, reportedly due to concerns about beijing retaliation against the firm's commercial operations in that market. attribution avoidance by a major private threat intelligence firm on a state-level campaign is structurally notable because it shows commercial risk visibly shaping what a technical security disclosure says and does not say. 86%
a russian gru-attributed group, apt28, is reported weaponizing an older outlook zero-click flaw by sending malicious calendar reminders that force target machines to authenticate to attacker-controlled servers, leaking credential hashes from nato-linked targets. attribution is a claim made by researchers. the structural note is the continued operational use of a no-click vector against alliance targets. 86%
a china-aligned group chained two roundcube email vulnerabilities to break into fewer than ten us and canadian universities, targeting administrators and professors in physics and engineering with national-security ties or astrophysics/particle-physics work. proofpoint says dozens more may be affected and the campaign is ongoing with many victims unaware. the narrow focus on defense-adjacent researchers is the signal. 86%

Every link carries this card — rendered, not screenshotted

v19.1.1

a research project by Aamir Hussain