[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"public-config":3,"i-flag:ph-4x3":14,"i-flag:us-4x3":19,"i-flag:de-4x3":21,"i-flag:hk-4x3":23,"i-tabler:lifebuoy":25,"i-tabler:timeline":28,"i-tabler:apps":30,"i-tabler:package":32,"i-tabler:circle-half-2":34,"i-tabler:sun":36,"i-tabler:moon":38,"i-tabler:menu-2":40,"i-tabler:user":42,"i-tabler:notebook":44,"i-simple-icons:forgejo":46,"i-tabler:shield-lock":48,"i-tabler:tools":50,"i-tabler:calendar":52,"i-tabler:x":54,"$f2fv430fv6mig7":56,"i-tabler:arrow-left":120,"i-tabler:tag":122},{"matomo":4,"booking":7,"site":9,"blog":11,"newsletter":12},{"enabled":5,"siteId":6},true,"7",{"enabled":5,"url":8},"https:\u002F\u002Fcal.com\u002Fjdbungart",{"url":10},"https:\u002F\u002Fjdneer.com",{"enabled":5},{"enabled":13},false,{"left":15,"top":15,"width":16,"height":17,"rotate":15,"vFlip":13,"hFlip":13,"body":18},0,640,480,"\u003Cpath fill=\"#0038a8\" d=\"M0 0h640v240H0z\"\u002F>\u003Cpath fill=\"#ce1126\" d=\"M0 240h640v240H0z\"\u002F>\u003Cpath fill=\"#fff\" d=\"M415.7 240L0 480V0\"\u002F>\u003Cpath fill=\"#fcd116\" d=\"M26.7 42.4L41 55l16.6-9.2l-7.4 17.5l14 13l-19-1.6l-8.1 17.2l-4.3-18.5L14 71l16.3-10zm323.8 172.3l.4 19l18 6.3l-18 6.2l-.4 19l-11.5-15.1l-18.2 5.5l10.8-15.6l-10.8-15.6l18.2 5.5zM37.2 388.1l8 17.2l19-1.6l-13.9 13l7.4 17.5l-16.6-9.1l-14.4 12.4l3.6-18.7L14 409l18.9-2.4zm114.2-249l-6.2 6.2l3.1 47l-3 .3l-5.7-42.9l-5.1 5l7.6 38.4a48 48 0 0 0-17.2 7.1l-21.7-32.4H96l26.4 34.3l-2.4 2l-31.1-35.5h-8.8v8.8l35.4 31l-2 2.5l-34.3-26.3v7.1l32.5 21.7q-5.2 7.8-7.1 17.2L66.3 223l-5.1 5l42.9 5.7q-.3 1.6-.3 3.1l-47-3l-6.2 6.2l6.2 6.2l47-3.1l.3 3.1l-42.9 5.7l5 5l38.4-7.6a48 48 0 0 0 7.1 17.2l-32.5 21.7v7.2l34.3-26.3l2 2.4l-35.4 31v8.8H89l31-35.4l2.5 2L96 312.2h7.2l21.7-32.5q7.8 5.2 17.2 7.1l-7.6 38.4l5 5l5.7-42.9q1.5.3 3.1.3l-3 47l6.1 6.2l6.3-6.2l-3.1-47l3-.3l5.7 43l5.1-5.1l-7.6-38.4a48 48 0 0 0 17.2-7.1l21.7 32.5h7.2l-26.4-34.3l2.4-2l31.1 35.4h8.8v-8.8l-35.4-31l2-2.4l34.3 26.3v-7.2l-32.5-21.7q5.2-7.8 7.1-17.2l38.3 7.6l5.1-5l-42.9-5.7q.3-1.5.3-3.1l47 3l6.2-6.1l-6.2-6.2l-47 3l-.3-3l42.9-5.7l-5-5l-38.4 7.5a48 48 0 0 0-7.1-17.2l32.5-21.7v-7.1l-34.3 26.3l-2-2.4l35.4-31v-8.9H214l-31 35.5l-2.5-2l26.4-34.3h-7.2L178 200.2q-7.8-5.2-17.2-7.1l7.6-38.3l-5-5l-5.7 42.8l-3.1-.3l3-47z\"\u002F>",{"left":15,"top":15,"width":16,"height":17,"rotate":15,"vFlip":13,"hFlip":13,"body":20},"\u003Cpath fill=\"#bd3d44\" d=\"M0 0h640v480H0\"\u002F>\u003Cpath stroke=\"#fff\" stroke-width=\"37\" d=\"M0 55.3h640M0 129h640M0 203h640M0 277h640M0 351h640M0 425h640\"\u002F>\u003Cpath fill=\"#192f5d\" d=\"M0 0h364.8v258.5H0\"\u002F>\u003Cmarker id=\"SVGEq3dreKJ\" markerHeight=\"30\" markerWidth=\"30\">\u003Cpath fill=\"#fff\" d=\"m14 0l9 27L0 10h28L5 27z\"\u002F>\u003C\u002Fmarker>\u003Cpath fill=\"none\" marker-mid=\"url(#SVGEq3dreKJ)\" d=\"m0 0l16 11h61h61h61h61h60L47 37h61h61h60h61L16 63h61h61h61h61h60L47 89h61h61h60h61L16 115h61h61h61h61h60L47 141h61h61h60h61L16 166h61h61h61h61h60L47 192h61h61h60h61L16 218h61h61h61h61h60z\"\u002F>",{"left":15,"top":15,"width":16,"height":17,"rotate":15,"vFlip":13,"hFlip":13,"body":22},"\u003Cpath fill=\"#fc0\" d=\"M0 320h640v160H0z\"\u002F>\u003Cpath fill=\"#000001\" d=\"M0 0h640v160H0z\"\u002F>\u003Cpath fill=\"red\" d=\"M0 160h640v160H0z\"\u002F>",{"left":15,"top":15,"width":16,"height":17,"rotate":15,"vFlip":13,"hFlip":13,"body":24},"\u003Cpath fill=\"#ec1b2e\" d=\"M0 0h640v480H0\"\u002F>\u003Cpath id=\"SVG5tfvBPpj\" fill=\"#fff\" d=\"M346.3 103.1C267 98 230.6 201.9 305.6 240.3c-26-22.4-20.6-55.3-10.1-72.4l1.9 1.1c-13.8 23.5-11.2 52.7 11.1 71c-12.7-12.3-9.5-39 12.1-48.9s23.6-39.3 16.4-49.1q-14.7-25.6 9.3-38.9M307.9 164l-4.7 7.4l-1.8-8.6l-8.6-2.3l7.8-4.3l-.6-8.9l6.5 6.1l8.3-3.3l-3.7 8.1l5.6 6.8z\"\u002F>\u003Cuse href=\"#SVG5tfvBPpj\" transform=\"rotate(72 312.5 243.5)\"\u002F>\u003Cuse href=\"#SVG5tfvBPpj\" transform=\"rotate(144 312.5 243.5)\"\u002F>\u003Cuse href=\"#SVG5tfvBPpj\" transform=\"rotate(216 312.5 243.5)\"\u002F>\u003Cuse href=\"#SVG5tfvBPpj\" transform=\"rotate(288 312.5 243.5)\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":27},24,"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M8 12a4 4 0 1 0 8 0a4 4 0 1 0-8 0\"\u002F>\u003Cpath d=\"M3 12a9 9 0 1 0 18 0a9 9 0 1 0-18 0m12 3l3.35 3.35M9 15l-3.35 3.35m0-12.7L9 9m9.35-3.35L15 9\"\u002F>\u003C\u002Fg>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":29},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"m4 16l6-7l5 5l5-6\"\u002F>\u003Cpath d=\"M14 14a1 1 0 1 0 2 0a1 1 0 1 0-2 0M9 9a1 1 0 1 0 2 0a1 1 0 1 0-2 0m-6 7a1 1 0 1 0 2 0a1 1 0 1 0-2 0m16-8a1 1 0 1 0 2 0a1 1 0 1 0-2 0\"\u002F>\u003C\u002Fg>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":31},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 5a1 1 0 0 1 1-1h4a1 1 0 0 1 1 1v4a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1zm0 10a1 1 0 0 1 1-1h4a1 1 0 0 1 1 1v4a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1zm10 0a1 1 0 0 1 1-1h4a1 1 0 0 1 1 1v4a1 1 0 0 1-1 1h-4a1 1 0 0 1-1-1zm0-8h6m-3-3v6\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":33},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"m12 3l8 4.5v9L12 21l-8-4.5v-9zm0 9l8-4.5M12 12v9m0-9L4 7.5m12-2.25l-8 4.5\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":35},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M3 12a9 9 0 1 0 18 0a9 9 0 1 0-18 0m9-9v18m0-7l7-7m-7 12l8.5-8.5M12 9l4.5-4.5\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":37},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M8 12a4 4 0 1 0 8 0a4 4 0 1 0-8 0m-5 0h1m8-9v1m8 8h1m-9 8v1M5.6 5.6l.7.7m12.1-.7l-.7.7m0 11.4l.7.7m-12.1-.7l-.7.7\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":39},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M12 3h.393a7.5 7.5 0 0 0 7.92 12.446A9 9 0 1 1 12 2.992z\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":41},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 6h16M4 12h16M4 18h16\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":43},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M8 7a4 4 0 1 0 8 0a4 4 0 0 0-8 0M6 21v-2a4 4 0 0 1 4-4h4a4 4 0 0 1 4 4v2\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":45},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M6 4h11a2 2 0 0 1 2 2v12a2 2 0 0 1-2 2H6a1 1 0 0 1-1-1V5a1 1 0 0 1 1-1m3 0v18m4-14h2m-2 4h2\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":47},"\u003Cpath fill=\"currentColor\" d=\"M16.777 0a2.9 2.9 0 1 1-2.529 4.322H12.91a4.266 4.266 0 0 0-4.265 4.195v2.118a7.08 7.08 0 0 1 4.147-1.42l.118-.002h1.338a2.9 2.9 0 0 1 5.43 1.422a2.9 2.9 0 0 1-5.43 1.422H12.91a4.266 4.266 0 0 0-4.265 4.195v2.319A2.9 2.9 0 0 1 7.222 24A2.9 2.9 0 0 1 5.8 18.57V8.589a7.11 7.11 0 0 1 6.991-7.108l.118-.001h1.338A2.9 2.9 0 0 1 16.778 0M7.223 19.905a1.194 1.194 0 1 0 0 2.389a1.194 1.194 0 0 0 0-2.389m9.554-10.464a1.194 1.194 0 1 0 0 2.389a1.194 1.194 0 0 0 0-2.39m0-7.735a1.194 1.194 0 1 0 0 2.389a1.194 1.194 0 0 0 0-2.389\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":49},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M12 3a12 12 0 0 0 8.5 3A12 12 0 0 1 12 21A12 12 0 0 1 3.5 6A12 12 0 0 0 12 3\"\u002F>\u003Cpath d=\"M11 11a1 1 0 1 0 2 0a1 1 0 1 0-2 0m1 1v2.5\"\u002F>\u003C\u002Fg>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":51},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M3 21h4L20 8a1.5 1.5 0 0 0-4-4L3 17zM14.5 5.5l4 4\"\u002F>\u003Cpath d=\"M12 8L7 3L3 7l5 5M7 8L5.5 9.5M16 12l5 5l-4 4l-5-5m4 1l-1.5 1.5\"\u002F>\u003C\u002Fg>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":53},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 7a2 2 0 0 1 2-2h12a2 2 0 0 1 2 2v12a2 2 0 0 1-2 2H6a2 2 0 0 1-2-2zm12-4v4M8 3v4m-4 4h16m-9 4h1m0 0v3\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":55},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M18 6L6 18M6 6l12 12\"\u002F>",{"slug":57,"title":58,"excerpt":59,"image":60,"publishedAt":61,"topics":62,"readMinutes":69,"html":70,"metaTitle":58,"metaDescription":71,"shareImage":72,"updatedAt":61,"author":76,"related":78},"insider-threat-lab-poisoning-cases","The Threat Was Already Badged In: Insider Lessons From Two Lab Poisoning Cases","A Wyoming grad student is accused of poisoning an officemate, and the internet already called it espionage. The charge says assault. What the court record actually shows, and the access, procurement, and reporting controls that would have caught it sooner.","\u002Fcontent\u002Fimages\u002F2026\u002F10\u002Finsider-night-office-brunobd-unsplash.jpg","2026-10-25T14:00:00.000+08:00",[63,66],{"key":64,"label":65},"opinion","Opinion",{"key":67,"label":68},"security","Security",6,"\u003Cp>A LinkedIn post landed in my feed last week with everything a viral security story needs: a university lab, a neurotoxin in a colleague's tea, cancer research, footage after midnight, and an arrest at LAX on the way to China. It was framed as research theft by a foreign state. I went and read what the court record and the university actually say. The real story is less cinematic, and far more useful for anyone who runs a facility.\u003C\u002Fp>\u003Cp>Everything below about the accused is an allegation. Nobody has been convicted, and the accused is presumed innocent.\u003C\u002Fp>\u003Ch2 id=\"what-is-actually-on-the-record-in-wyoming\">What is actually on the record in Wyoming\u003C\u002Fh2>\u003Cp>On October 13, 2026, the \u003Ca href=\"https:\u002F\u002Fwww.uwyo.edu\u002Fnews\u002F2026\u002F10\u002Fuw-graduate-student-charged-with-assault-on-campus.html?ref=ghost.jdneer.com\">University of Wyoming announced\u003C\u002Fa> that a graduate student \"has been charged with aggravated assault in connection with allegations that she used a substance to harm a colleague in a UW laboratory.\" The charge was filed in Albany County Circuit Court after a UW Police Department investigation. The university added a line every reader should keep in mind: \"These are only allegations, and individuals are presumed innocent pending trial or resulting conviction in any matter.\"\u003C\u002Fp>\u003Cp>According to the police affidavit, as reported by \u003Ca href=\"https:\u002F\u002Fcowboystatedaily.com\u002F2026\u002F10\u002F14\u002Fchinese-national-studying-at-uw-tries-to-flee-after-charged-with-poisoning-colleague\u002F?ref=ghost.jdneer.com\">Cowboy State Daily\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwww.cnn.com\u002F2026\u002F10\u002F17\u002Fus\u002Fwyoming-student-poisoning-case?ref=ghost.jdneer.com\">CNN\u003C\u002Fa>, the accused is Aili Wang, 32, a microbiology graduate student. She faces one felony count, reported as aggravated assault and battery. That is the whole charge. There is no theft, trade secret, or espionage charge.\u003C\u002Fp>\u003Cp>The affidavit alleges that:\u003C\u002Fp>\u003Cul>\u003Cli>A fellow doctoral student, identified only as \"KT,\" developed tingling, numbness, and leg weakness starting around August 10, and kept seeing doctors without an answer.\u003C\u002Fli>\u003Cli>He noticed his hot water tasted off. Water from the coffee maker he used to make tea, tested by colleagues in a UW chemistry lab, showed high levels of acrylamide, a neurotoxin. Only his coffee maker tested positive among the samples taken.\u003C\u002Fli>\u003Cli>Cameras placed in the shared office by a professor, by campus police, and by the victim himself allegedly showed the accused going through his desk, inspecting his coffee tin, rinsing his mug with liquid from her own mug, photographing and \"manipulating notebooks\" on his desk, and looking into his coffee maker.\u003C\u002Fli>\u003Cli>Card-swipe records allegedly show her entering the area just after midnight on September 18 and on October 1.\u003C\u002Fli>\u003Cli>University IT data allegedly showed her university email account was used to order acrylamide on eBay twice, in June and August. On October 5, the day police interviewed her, the account allegedly asked eBay to delete its order history. She told the detective she had not used acrylamide in years.\u003C\u002Fli>\u003Cli>Prosecutors say she was arrested on October 6 at Los Angeles International Airport while trying to return to China, carrying laptops, storage devices, and documents.\u003C\u002Fli>\u003C\u002Ful>\u003Cp>The affidavit says the two \"have not gotten along.\" The victim told police his research was patent pending, and police noted the accused had worked on similar research before coming to the US. Their supervising professor told investigators she had no reason to access his notes, because their current fields are unrelated. That is the full basis for the \"stealing cancer research\" framing. It is a question worth asking. It is not a charge, and nobody has alleged a foreign government was involved.\u003C\u002Fp>\u003Ch2 id=\"the-berkeley-case-is-not-similar-in-the-way-it-was-sold\">The Berkeley case is not \"similar\" in the way it was sold\u003C\u002Fh2>\u003Cp>The LinkedIn post also pointed to \"a similar poisoning case at Berkeley.\" That one is real, but it was not at UC Berkeley and it had nothing to do with espionage. In 2019 an engineer at a private firm, Berkeley Engineering and Research, was \u003Ca href=\"https:\u002F\u002Fassets1.cbsnewsstatic.com\u002Fi\u002Fcbslocal\u002Fwp-content\u002Fuploads\u002Fsites\u002F15116056\u002F2019\u002F04\u002Fxu-complaint.pdf?ref=ghost.jdneer.com\">charged by Alameda County prosecutors\u003C\u002Fa> with attempted murder and two counts of poisoning a coworker's water with cadmium. A spy camera the victim set up in her own office allegedly captured him pouring something into her water bottle. He \u003Ca href=\"https:\u002F\u002Fwww.berkeleyscanner.com\u002F2024\u002F04\u002F04\u002Fcourts\u002Fberkeley-attempted-murder-case-poisoning-plea-deal-david-xu\u002F?ref=ghost.jdneer.com\">pleaded no contest to one poisoning count\u003C\u002Fa> in 2023, the other charges were dropped, and he was sentenced to probation. In October 2026, after he completed probation, a judge \u003Ca href=\"https:\u002F\u002Fwww.dailycal.org\u002Fnews\u002Fcity\u002Fcrime-and-safety\u002Fjudge-dismisses-felony-charges-of-berkeley-researcher-who-poisoned-co-worker-in-2019\u002Farticle_5816647a-34fc-4975-b41c-c5e88de9afe7.html?ref=ghost.jdneer.com\">dismissed the conviction\u003C\u002Fa> under California law, over the victim's objection.\u003C\u002Fp>\u003Cp>The common thread is not a country. It is a coworker with daily, trusted, unwatched access to someone's desk, drink, and work, and a victim who had to install their own camera before anyone believed something was wrong.\u003C\u002Fp>\u003Ch2 id=\"geopolitics-on-someones-home-turf-and-how-it-gets-spun\">Geopolitics on someone's home turf, and how it gets spun\u003C\u002Fh2>\u003Cp>State-linked research theft is real. The US Justice Department still treats economic espionage and pressure on researchers by hostile governments as a national security priority. But the way we talk about it matters, and the US has already run the experiment of getting it wrong.\u003C\u002Fp>\u003Cp>The DOJ's \"China Initiative,\" launched in 2018, was \u003Ca href=\"https:\u002F\u002Fwww.justice.gov\u002Farchives\u002Fopa\u002Fspeech\u002Fassistant-attorney-general-matthew-olsen-delivers-remarks-countering-nation-state-threats?ref=ghost.jdneer.com\">ended on February 23, 2022\u003C\u002Fa>. Assistant Attorney General Matthew Olsen said the department had heard concerns that it \"fueled a narrative of intolerance and bias,\" and that its research grant prosecutions created \"a chilling atmosphere for scientists and scholars.\" He concluded \"this initiative is not the right approach\" and replaced it with a strategy covering threats from several countries. An \u003Ca href=\"https:\u002F\u002Fwww.technologyreview.com\u002F2021\u002F12\u002F02\u002F1040656\u002Fchina-initative-us-justice-department\u002F?ref=ghost.jdneer.com\">MIT Technology Review analysis\u003C\u002Fa> of 77 known cases found that only 19 involved Economic Espionage Act charges, that only about a quarter of those charged had been convicted, and that 130 of 148 people charged, 88 percent, were of Chinese heritage.\u003C\u002Fp>\u003Cp>We are watching the same pattern again in Laramie. Within days, \u003Ca href=\"https:\u002F\u002Fwww.wyomingnews.com\u002Fnews\u002Flocal_news\u002Funiversity-of-wyoming-stands-by-students-after-poisoning-accusation-leads-to-hateful-and-racist-remarks\u002Farticle_b8bb812b-5af2-4830-8dab-332439f0d313.html?ref=ghost.jdneer.com\">the university's graduate dean wrote to students\u003C\u002Fa> that the case \"has led to hateful and racist remarks, particularly on social media,\" and invited international students to a support meeting. A colleague is allegedly harmed, and thousands of uninvolved students and researchers pay for it.\u003C\u002Fp>\u003Cp>Here is my position. Origin is not a risk indicator. Behavior and access are. Profiling by nationality sends your investigators after the wrong people, poisons the trust that makes people report real concerns, and drives away exactly the talent you are trying to protect. In both cases above, what gave the game away was behavior: after-hours entry, touching someone else's things, buying a toxin through an institutional account, and trying to erase the trail.\u003C\u002Fp>\u003Ch2 id=\"vetting-continuous-behavioral-and-fair\">Vetting: continuous, behavioral, and fair\u003C\u002Fh2>\u003Cul>\u003Cli>\u003Cstrong>Vet the role, not the passport.\u003C\u002Fstrong> Apply the same screening to everyone with access to the same assets. Document it.\u003C\u002Fli>\u003Cli>\u003Cstrong>Treat vetting as ongoing.\u003C\u002Fstrong> Most insiders pass the background check. Changes in behavior, conflicts with coworkers, and access that no longer matches the job matter more than the file from hiring day.\u003C\u002Fli>\u003Cli>\u003Cstrong>Take conflict seriously.\u003C\u002Fstrong> In Wyoming, the supervisor said the accused showed animosity mostly by avoiding people. Persistent interpersonal conflict in a lab with hazardous materials deserves a documented conversation, not a shrug.\u003C\u002Fli>\u003C\u002Ful>\u003Ch2 id=\"physical-security-the-boring-controls-that-catch-people\">Physical security: the boring controls that catch people\u003C\u002Fh2>\u003Cul>\u003Cli>\u003Cstrong>Log after-hours access and actually review it.\u003C\u002Fstrong> The card-swipe data existed in Wyoming. Flag entries outside a person's normal pattern, especially into spaces they share with someone they are in conflict with.\u003C\u002Fli>\u003Cli>\u003Cstrong>Two-person rules\u003C\u002Fstrong> for sensitive labs, chemical stores, and high-value research spaces outside business hours.\u003C\u002Fli>\u003Cli>\u003Cstrong>CCTV on entrances and shared spaces\u003C\u002Fstrong>, with clear policy and retention, so victims do not have to buy their own spy cameras.\u003C\u002Fli>\u003Cli>\u003Cstrong>Control hazardous materials end to end.\u003C\u002Fstrong> Inventory and sign-out for toxic chemicals, and screen purchases made through institutional accounts and email, including consumer marketplaces. A toxin delivered to a lab through a university account should never be invisible.\u003C\u002Fli>\u003Cli>\u003Cstrong>Lockable personal storage\u003C\u002Fstrong> for notebooks and work, and a culture where unattended food and drink in shared labs is not the norm.\u003C\u002Fli>\u003C\u002Ful>\u003Ch2 id=\"logical-security-protect-the-work-not-just-the-door\">Logical security: protect the work, not just the door\u003C\u002Fh2>\u003Cul>\u003Cli>\u003Cstrong>Least privilege.\u003C\u002Fstrong> If someone has \"no reason to access\" a colleague's research, the systems should agree. Segment shared drives, ELNs, and repositories by project.\u003C\u002Fli>\u003Cli>\u003Cstrong>Data-loss controls\u003C\u002Fstrong> on removable media, bulk downloads, personal cloud sync, and phone photos of paper notebooks in sensitive areas.\u003C\u002Fli>\u003Cli>\u003Cstrong>Watch for evidence deletion.\u003C\u002Fstrong> Sudden account or history deletion right after an interview or incident is a signal worth an automatic alert.\u003C\u002Fli>\u003Cli>\u003Cstrong>Offboarding and travel triggers.\u003C\u002Fstrong> Abrupt departures, unannounced international travel during an open inquiry, or resignation with large data pulls should prompt an immediate access review. Do this for everyone, or do not do it at all.\u003C\u002Fli>\u003C\u002Ful>\u003Ch2 id=\"reporting-make-it-easy-to-speak-up-early\">Reporting: make it easy to speak up early\u003C\u002Fh2>\u003Cp>The victim in Wyoming told professors his water tasted off weeks before anyone acted. That is not a criticism of them. Nobody expects poison. It is a reason to build a simple, trusted path for \"something feels wrong\" reports, health or security, that someone is required to follow up on. Link occupational health, campus or site security, and IT, so a strange illness, a strange purchase, and a strange badge swipe can meet in one place.\u003C\u002Fp>\u003Ch2 id=\"a-quick-checklist\">A quick checklist\u003C\u002Fh2>\u003Col>\u003Cli>After-hours badge entries reviewed weekly, with alerts on pattern breaks.\u003C\u002Fli>\u003Cli>Two-person rule for sensitive labs and chemical stores after hours.\u003C\u002Fli>\u003Cli>CCTV on lab entrances and shared offices, with written policy.\u003C\u002Fli>\u003Cli>Hazardous chemical inventory, sign-out, and purchase screening, including institutional email on marketplaces.\u003C\u002Fli>\u003Cli>Least-privilege access to research data, reviewed each term or quarter.\u003C\u002Fli>\u003Cli>Data-loss controls on USB, cloud sync, and bulk downloads.\u003C\u002Fli>\u003Cli>Alerts on account deletion or log wiping after incidents.\u003C\u002Fli>\u003Cli>Access review triggered by abrupt departure, unusual travel during an inquiry, or role change.\u003C\u002Fli>\u003Cli>A no-blame reporting channel shared by health, security, and IT.\u003C\u002Fli>\u003Cli>Identical rules for everyone, regardless of nationality or origin.\u003C\u002Fli>\u003C\u002Fol>\u003Cp>The threat in both of these cases was already badged in. Your controls should assume that, and your culture should never assume it based on where someone was born.\u003C\u002Fp>\u003Cp>\u003Cem>Sources: \u003C\u002Fem>\u003Ca href=\"https:\u002F\u002Fwww.uwyo.edu\u002Fnews\u002F2026\u002F10\u002Fuw-graduate-student-charged-with-assault-on-campus.html?ref=ghost.jdneer.com\">\u003Cem>University of Wyoming statement (Oct 13, 2026)\u003C\u002Fem>\u003C\u002Fa>\u003Cem>, \u003C\u002Fem>\u003Ca href=\"https:\u002F\u002Fcowboystatedaily.com\u002F2026\u002F10\u002F14\u002Fchinese-national-studying-at-uw-tries-to-flee-after-charged-with-poisoning-colleague\u002F?ref=ghost.jdneer.com\">\u003Cem>Cowboy State Daily on the police affidavit and bond petition\u003C\u002Fem>\u003C\u002Fa>\u003Cem>, \u003C\u002Fem>\u003Ca href=\"https:\u002F\u002Fwww.cnn.com\u002F2026\u002F10\u002F17\u002Fus\u002Fwyoming-student-poisoning-case?ref=ghost.jdneer.com\">\u003Cem>CNN (Oct 17, 2026)\u003C\u002Fem>\u003C\u002Fa>\u003Cem>, \u003C\u002Fem>\u003Ca href=\"https:\u002F\u002Fapnews.com\u002Farticle\u002Fwyoming-grad-student-poisoning-arrested-83a128cf28dd3762ac122b1f614db1ca?ref=ghost.jdneer.com\">\u003Cem>AP\u003C\u002Fem>\u003C\u002Fa>\u003Cem>, \u003C\u002Fem>\u003Ca href=\"https:\u002F\u002Fwww.wyomingnews.com\u002Fnews\u002Flocal_news\u002Funiversity-of-wyoming-stands-by-students-after-poisoning-accusation-leads-to-hateful-and-racist-remarks\u002Farticle_b8bb812b-5af2-4830-8dab-332439f0d313.html?ref=ghost.jdneer.com\">\u003Cem>WyoFile via Wyoming Tribune Eagle\u003C\u002Fem>\u003C\u002Fa>\u003Cem>, \u003C\u002Fem>\u003Ca href=\"https:\u002F\u002Fassets1.cbsnewsstatic.com\u002Fi\u002Fcbslocal\u002Fwp-content\u002Fuploads\u002Fsites\u002F15116056\u002F2019\u002F04\u002Fxu-complaint.pdf?ref=ghost.jdneer.com\">\u003Cem>Alameda County criminal complaint, 19-CR-004967 (PDF)\u003C\u002Fem>\u003C\u002Fa>\u003Cem>, \u003C\u002Fem>\u003Ca href=\"https:\u002F\u002Fwww.berkeleyscanner.com\u002F2024\u002F04\u002F04\u002Fcourts\u002Fberkeley-attempted-murder-case-poisoning-plea-deal-david-xu\u002F?ref=ghost.jdneer.com\">\u003Cem>The Berkeley Scanner\u003C\u002Fem>\u003C\u002Fa>\u003Cem>, \u003C\u002Fem>\u003Ca href=\"https:\u002F\u002Fwww.dailycal.org\u002Fnews\u002Fcity\u002Fcrime-and-safety\u002Fjudge-dismisses-felony-charges-of-berkeley-researcher-who-poisoned-co-worker-in-2019\u002Farticle_5816647a-34fc-4975-b41c-c5e88de9afe7.html?ref=ghost.jdneer.com\">\u003Cem>The Daily Californian\u003C\u002Fem>\u003C\u002Fa>\u003Cem>, \u003C\u002Fem>\u003Ca href=\"https:\u002F\u002Fwww.justice.gov\u002Farchives\u002Fopa\u002Fspeech\u002Fassistant-attorney-general-matthew-olsen-delivers-remarks-countering-nation-state-threats?ref=ghost.jdneer.com\">\u003Cem>DOJ, AAG Olsen remarks (Feb 23, 2022)\u003C\u002Fem>\u003C\u002Fa>\u003Cem>, \u003C\u002Fem>\u003Ca href=\"https:\u002F\u002Fwww.technologyreview.com\u002F2021\u002F12\u002F02\u002F1040656\u002Fchina-initative-us-justice-department\u002F?ref=ghost.jdneer.com\">\u003Cem>MIT Technology Review China Initiative database\u003C\u002Fem>\u003C\u002Fa>\u003Cem>.\u003C\u002Fem>\u003C\u002Fp>","A Wyoming grad student is accused of poisoning an officemate, and the internet already called it espionage. The charge says assault. What the court record...",{"src":60,"height":73,"width":74,"type":75},900,1600,"image\u002Fjpeg",{"name":77,"url":10,"owner":5},"JD Bungart",[79,91,102,111],{"slug":80,"title":81,"excerpt":82,"image":83,"publishedAt":84,"topics":85,"readMinutes":90},"http2shell-cve-2026-111497-brotli-decoder","HTTP2Shell (CVE-2026-111497): What the Brotli Decoder Bug Really Hits, and How to Patch","CVE-2026-111497 is an out-of-bounds write in Google's Brotli decoder, 1.0.3 through 1.2.0. Fixed in 1.0.10, 1.1.1 and 1.2.1, plus Node.js, Bun, Python, Envoy and .NET updates. You are exposed if you decode untrusted Brotli data. Not in CISA KEV.","\u002Fcontent\u002Fimages\u002F2026\u002F10\u002Fhttp2shell_cve_2026_111497_v2.png","2026-10-26T20:51:27.000+08:00",[86,89],{"key":87,"label":88},"advisories","Advisories",{"key":67,"label":68},1,{"slug":92,"title":93,"excerpt":94,"image":95,"publishedAt":96,"topics":97,"readMinutes":90},"package-cooldowns-github-package-firewall-npm-pnpm-bun-pip-uv-poetry","Package Cooldowns Compared: GitHub Package Firewall vs. What npm, pnpm, Yarn, Bun, pip, uv and Poetry Already Do","GitHub now offers an install-time firewall for npm, free in preview and metered later. Most package managers already ship a free cooldown. Here is what each tool does, the copy-paste config, and where cooldowns stop helping.","\u002Fcontent\u002Fimages\u002F2026\u002F10\u002Fpkg-cooldowns-conveyor-alberto-rodriguez-unsplash.jpg","2026-10-26T14:00:00.000+08:00",[98,101],{"key":99,"label":100},"guides","Guides",{"key":67,"label":68},{"slug":103,"title":104,"excerpt":105,"image":106,"publishedAt":107,"topics":108,"readMinutes":90},"tailscale-ssh-tailworm-mesh-vpn-agent-risk","Your Mesh VPN Agent Is Root on Every Box. Tailworm Is the Reminder.","A researcher showed one hacked Tailscale node reaching root on other servers through Tailscale SSH forwarding. No patch yet. Here is why mesh VPN agents deserve the same suspicion as any privileged daemon.","\u002Fcontent\u002Fimages\u002F2026\u002F10\u002Ftailworm-padlock-light-trails-flyd-unsplash.jpg","2026-10-26T12:00:00.000+08:00",[109,110],{"key":64,"label":65},{"key":67,"label":68},{"slug":112,"title":113,"excerpt":114,"image":115,"publishedAt":116,"topics":117,"readMinutes":90},"emudhra-ca-weak-keys-chain-of-trust","eMudhra Broke Almost Nothing, and Still Dented the Chain of Trust","Eight eMudhra intermediate CA keys turned out to be numbers under 256. Browsers blocked them within hours, almost no site broke, and eMudhra is leaving the TLS business. The service impact was tiny. The lesson for the chain of trust is not.","\u002Fcontent\u002Fimages\u002F2026\u002F10\u002Femudhra-keys-iolandino-baiano-unsplash.jpg","2026-10-25T16:00:00.000+08:00",[118,119],{"key":64,"label":65},{"key":67,"label":68},{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":121},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M5 12h14M5 12l6 6m-6-6l6-6\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":123},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M6.5 7.5a1 1 0 1 0 2 0a1 1 0 1 0-2 0\"\u002F>\u003Cpath d=\"M3 6v5.172a2 2 0 0 0 .586 1.414l7.71 7.71a2.41 2.41 0 0 0 3.408 0l5.592-5.592a2.41 2.41 0 0 0 0-3.408l-7.71-7.71A2 2 0 0 0 11.172 3H6a3 3 0 0 0-3 3\"\u002F>\u003C\u002Fg>"]