[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fB3YsEun59atZrXrXWFo4nJzhgTjv9C05h46E3-I60xE":3},{"article":4,"iocs":43,"watch_terms":50,"solutions":51,"lesson":136},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":30},"67defccf-abb4-4ee9-ade8-d1e97cedbf1e","US Army websites defaced with pro-Kurdish sentiments, insults to Trump","us-army-websites-defaced-with-pro-kurdish-sentiments-insults-to-trump-3aff13","At least two websites appear to be victim to 404 hijacking attacks. Army officials took the sites down after being contacted by CyberScoop. The post US Army websites defaced with pro-Kurdish sentiments, insults to Trump appeared first on CyberScoop.","Multiple U.S. Army subdomains were defaced using a 404 hijacking campaign, displaying pro-Kurdish messages and insults to political figures. The affected sites, oil.army.mil and ai2c.army.mil, were hosted on a legacy third-party platform and have since been taken offline. The incident is under investigation by Army cyber investigators.","US Army websites defaced with pro-Kurdish sentiments and insults to Trump.","https:\u002F\u002Fcyberscoop.com\u002Fus-army-websites-defaced-404-hijacking-kurdistan\u002F","https:\u002F\u002Fcyberscoop.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F3\u002F2026\u002F07\u002Farmy-header.jpeg","2026-07-06T17:50:25+00:00","2026-07-06T18:00:30.656696+00:00",7,[17,20,22],{"name":18,"type":19},"WordPress","product",{"name":21,"type":19},"Microsoft cloud infrastructure",{"name":23,"type":24},"Kurdish sr","threat_actor","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":25,"icon":27,"name":28,"slug":29},null,"Nation-state","nation-state",[31,36,38],{"category":32},{"id":33,"icon":27,"name":34,"slug":35},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":37},{"id":25,"icon":27,"name":28,"slug":29},{"category":39},{"id":40,"icon":27,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[44,48],{"type":45,"value":46,"context":47},"domain","oil.army.mil","Defaced U.S. Army website",{"type":45,"value":49,"context":47},"ai2c.army.mil",[18,21],{"controls":52,"vendors":132},[53,82,103],{"slug":54,"name":55,"problem":56,"products":57},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":83,"name":84,"problem":85,"products":86},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[87,95],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":104,"name":105,"problem":106,"products":107},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",[108,116,124],{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"vega","Vega","\u002Fvendor-logos\u002Fvega.png","vega-agentic-detection","Agentic Detection","https:\u002F\u002Fvega.io\u002Fplatform\u002Fagentic-detection","Detection rules that run across security data in the stores where it already lives, so logs do not have to be moved into a central SIEM first.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xsiam","Cortex XSIAM","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xsiam","AI-driven security operations platform that centralises security data, detection, automation and response for the SOC.",[133],{"slug":96,"name":97,"logo_path":98,"roles":134},[135],"affected",{"slug":137,"title":138,"body":139,"framework_refs":140,"framework_notes":151},"legacy-third-party-hosting-enables-us-army-website-defacement","Legacy Third-Party Hosting Enables US Army Website Defacement","Multiple U.S. Army subdomains were defaced after attackers exploited a '404 hijacking' technique against sites hosted on an outdated, legacy third-party platform. The root cause lies in a failure to maintain proper configuration oversight and lifecycle management of externally hosted government web assets. Legacy platforms that are no longer actively maintained introduce significant attack surface that adversaries can easily exploit. This incident highlights the danger of retaining third-party hosting arrangements beyond the supported life of the underlying infrastructure, particularly for government-affiliated domains. Even subdomains perceived as low-value can serve as launchpads for reputational damage, disinformation, or further exploitation.",[141,142,143,144,145,146,147,148,149,150],"CIS Control 1 – Inventory and Control of Enterprise Assets","CIS Control 2 – Inventory and Control of Software Assets","CIS Control 16 – Application Software Security","NIST SP 800-53 CM-8 (System Component Inventory)","NIST SP 800-53 SA-9 (External System Services)","NIST SP 800-53 SI-7 (Software, Firmware, and Information Integrity)","NIST CSF ID.AM-1 (Asset Management)","NIST CSF PR.IP-1 (Baseline Configuration)","ITIL Service Configuration Management","DoD CMMC Practice CM.2.061 (Establish and Maintain Baseline Configurations)",{}]