Tom Winter

NBC News National Law Enforcement & Intelligence Correspondent. Focused on Police, Courts, Corruption, Cyber Security, CT, and CI stories in the Eastern U.S.

[Tom Winter @Tom_Winter]

NEW: James Comey charged for a third time by the Trump administration.

Story: https://t.co/C2yL87GDZW

[NBC News @NBCNews]

BREAKING: Illinois man charged with sending threatening letters containing white substance to members of Congress. https://t.co/aDToy2enEA

[NBC News @NBCNews]

NEW: Anthropic’s IPO filing reveals an $80 billion loss as AI bubble fears and cybersecurity concerns grow. https://t.co/wfXKH5ZnkN

[NBC News @NBCNews]

Since June thieves have made away with more than $100 million in data center freight, according to several industry leaders, consultants and investigators advising law enforcement. https://t.co/zj0gAUTQRq

[dpa news agency @dpa_intl]

Eagle's Nest, a Bavarian mountain retreated formerly used by Adolf Hitler, has been largely destroyed by a fire overnight https://t.co/Z3XjjUZMJa

[Tom Winter @Tom_Winter]

NBC News: Retired NYPD officer faces murder charge following George Washington Bridge shooting.

Reported w/ @jonathan4ny @idasiegal4ny and @amyboon

https://t.co/98By5RgiHJ

[Tyler Kingkade @tylerkingkade]

NEW: Last school year, a 7th grader viewed 4,700 YouTube videos during class.

An 8th grader viewed 5,700 videos in class.

A 2nd grader viewed ~500 in just 2 months.

Less than 5% were educational.

@nbcnews analyzed the YouTube watch histories of students from across the country. My new story shows how far some take it on their school laptops and iPads -->

https://t.co/17s6kgsYPA

[Tom Winter @Tom_Winter]

NBC News: Critical vulnerabilities in PHP spark rush to update systems.

Story from @kevincollier https://t.co/Rvl1cX21Ol

[FBI Cyber Division @FBICyberDiv]

Two critical vulnerabilities have been identified in PHP, a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks.

The FBI urges organizations to take the following steps now:

➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.

➡️ Immediately update affected PHP installations following the guidance on https://t.co/rDrPSxB3zX. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.

➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.

➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or https://t.co/iqgVZIbCru. Those reports help us identify the actors involved and warn other organizations before they become victims.

For the latest information, follow PHP’s announcement on https://t.co/rDrPSxB3zX, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.

[Tom Winter @Tom_Winter]

Appears that two critical vulnerabilities have been discovered and the NSA and FBI are urging site operators to immediately patch and detect them.

[NSA Cyber @NSACyber]

Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.

[Rob Wile @rjwile]

This is an incredible project: NBC News asked parents to check their kids' YouTube history during school hours — and the results show kids are spending huge chunks of the day watching videos that have nothing to do with learning

https://t.co/R9vn2LIcEj

[Tom Winter @Tom_Winter]

@JohnCarreyrou @nytimes Saw it last night and I think your thoughts are quite helpful as it has been a few years since I read your extraordinary book.

I wish Fieldler had asked her questions about whistleblower intimidation and her legal tactics as a means of challenging some of the assertions.

[Tom Winter @Tom_Winter]

@Alaskar_x Are you going to update your thread with your baseless accusation, the framing shapes public perception immediately as you say.

[Tom Winter @Tom_Winter]

@anblanx LINK: https://t.co/QsgMn3nRXy

[Tom Winter @Tom_Winter]

NBC News: Federal prosecutors say it was the Saudi military who paid for the family of Abdulrahman Alfozan to fly to Saudi Arabia about 36 hours after his arrest.

Alfozan is the man accused of planting a surreptitious recording device at OpenAI.

[Tom Winter @Tom_Winter]

The New York Times was in court today for the hearing where they report: “On Monday, Nas Yasmin, a lawyer representing Mr. Alfozan, said the military official who had booked the flight was Ms. Alassaf’s brother-in-law, a Saudi naval officer. Mr. Pernik said the flight had been paid for with a “personal card.”

[Tom Winter @Tom_Winter]

@Alaskar_x @BillMelugin_ At the time I sent the tweet the hearing had not happened yet. This afternoon an attorney for Alfozan stated the information you just described. Nothing was left out at the time of the tweet.

[Tom Winter @Tom_Winter]

@CraigKn71321652 https://t.co/kW7yWIF1Dl