Tech
How an ex-L3 Harris Trenchant boss stole and sold cyber exploits to Russia
Peter Williams, the former general manager of Trenchant, a division of defense contractor L3Harris that develops surveillance and hacking tools for Western governments, pleaded guilty last week to stealing some of those tools and selling them to a Russian broker.
A court document filed in the case, as well as exclusive reporting by TechCrunch and interviews with Williams’ former colleagues, explained how Williams was able to steal the highly valuable and sensitive exploits from Trenchant.
Williams, a 39-year-old Australian citizen who was known inside the company as “Doogie,” admitted to prosecutors that he stole and sold eight exploits, or “zero-days,” which are security flaws in software that are unknown to its maker and are extremely valuable to hack into a target’s devices. Williams said some of those exploits, which he stole from his own company Trenchant, were worth $35 million, but he only received $1.3 million in cryptocurrency from the Russian broker. Williams sold the eight exploits over the course of several years, between 2022 and July 2025.
Thanks to his position and tenure at Trenchant, according to the court document, Williams “maintained ‘super-user’ access” to the company’s “internal, access-controlled, multi-factor authenticated” secure network where its hacking tools were stored, and to which only employees with a “need to know” had access.
As a “super-user,” Williams could view all the activity, logs, and data associated with Trenchant’s secure network, including its exploits, the court document notes. Williams’ company network access gave him “full access” to Trenchant’s proprietary information and trade secrets.
Abusing this wide-ranging access, Williams used a portable external hard drive to transfer the exploits out of the secure networks in Trenchant’s offices in Sydney, Australia and Washington D.C., and then onto a personal device. At that point, Williams sent the stolen tools via encrypted channels to the Russian broker, per the court document.
A former Trenchant employee with knowledge of the company’s internal IT systems told TechCrunch that Williams “was in the very high echelon of trust” within the company as part of the senior leadership team. Williams had worked at the company for years, including prior to L3Harris’ acquisition of Azimuth and Linchpin Labs, two sister startups that merged into Trenchant.
“He was, in my opinion, perceived to be beyond reproach,” said the former employee, who asked to remain anonymous as they were not authorized to speak about their work at Trenchant.
“No one had any supervision over him at all. He was kind of allowed to do things the way he wanted to,” they said.
Contact Us
Do you have more information about this case, and the alleged leak of Trenchant hacking tools? From a non-work device, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Telegram, Keybase and Wire @lorenzofb, or by email.
Another former employee, who also asked to not be named, said that “the general awareness is that whoever is the [general manager] would have unfettered access to everything.”
Before the acquisition, Williams worked at Linchpin Labs, and before then at Australian Signals Directorate, the country’s intelligence agency tasked with digital and electronic eavesdropping, according to the cybersecurity podcast Risky Business.
Sara Banda, a spokesperson for L3Harris did not respond to a request for comment.
‘Grave damage’
In October 2024, Trenchant “was alerted” that one of its products had leaked and was in the possession of “an unauthorized software broker,” per the court document. Williams was put in charge of the investigation into the leak, which ruled out a hack of the company’s network but found that a former employee “had improperly accessed the internet from an air-gapped device,” according to the court document.
As TechCrunch previously and exclusively reported, Williams fired a Trenchant developer in February 2025 after accusing him of being double employed. The fired employee later learned from some of his former colleagues that Williams accused him of stealing Chrome zero-days, which he had no access to since he worked on developing exploits for iPhones and iPads. By March, Apple notified the former employee that his iPhone had been targeted by “mercenary spyware attack.”
In an interview with TechCrunch, the former Trenchant developer said he believed Williams framed him to cover up his own actions. It’s unclear if the former developer is the same employee mentioned in the court document.
In July, the FBI interviewed Williams, who told the agents that “the most likely way” to steal products from the secure network would be for someone with access to that network to download the products to an “air‑gapped device […] like a mobile telephone or external drive.” (An air-gapped device is a computer or server that has no access to the internet.)
As it turned out, that’s exactly what Williams confessed to the FBI in August after being confronted with evidence of his crimes. Williams told the FBI that he recognized his code being used by a South Korean broker after he sold it to the Russian broker; though, it remains unclear how Trenchant’s code ended up with the South Korean broker to begin with.
Williams used the alias “John Taylor,” a foreign email provider, and unspecified encrypted apps when interacting with the Russian broker, likely Operation Zero. This is a Russia-based broker that offers up to $20 million for tools to hack Android phones and iPhones, which it says it sells to “Russian private and government organizations only.”
Wired was first to report that Williams likely sold the stolen tools to Operation Zero, given that the court document mentions a September 2023 post on social media announcing an increase in the unnamed broker’s “bounty payouts from $200,000 to $20,000,000,” which matches an Operation Zero post on X at the time.
Operation Zero did not respond to TechCrunch’s request for comment.
Williams sold the first exploit for $240,000, with the promise of additional payments after confirming the tool’s performance, and for subsequent technical support to keep the tool updated. After this initial sale, Williams sold another seven exploits, agreeing to a total payment of $4 million, although he ended up only receiving $1.3 million, according to the court document.
Williams’ case has rocked the offensive cybersecurity community, where his rumored arrest had been a topic of conversation for weeks, according to multiple people who work in the industry.
Some of these industry insiders see Williams’ actions as causing grave damage.
“It’s a betrayal to the Western national security apparatus, and it’s a betrayal towards the worst kind of threat actor that we have right now, which is Russia,” said the former Trenchant employee with knowledge of the company’s IT systems told TechCrunch.
“Because these secrets have been given to an adversary that absolutely is going to undermine our capabilities and is going to potentially even use them against other targets.”
Tech
Waymo starts autonomous testing in Philadelphia
Waymo is adding another four cities to its growing list of robotaxi rollouts. The company announced Wednesday it has begun testing its autonomous vehicles (with a safety monitor) in Philadelphia, and that it will start manual driving to collect data in Baltimore, St. Louis, and Pittsburgh.
Waymo did not offer a timeline for when it plans to launch commercial services in those locations, nor do we know whether the Alphabet-owned company will partner with other companies to operate robotaxis in each one. That has been the move in cities like Atlanta and Austin, for example, where Waymo has partnered with Uber to advance its robotaxi rollout.
But the new locations join a list of over 20 cities where the company is either offering rides, prepping a commercial launch, or testing. Waymo is also now offering rides on freeways in Los Angeles, Phoenix, and the San Francisco Bay Area. The company plans to be doing one million rides per week by the end of 2026.
Waymo has done all this while claiming to be operating at a level five times safer than humans, according to data the company recently released.
But the expansion has not come without its issues. The National Highway Traffic Safety Administration is investigating how the company’s vehicles operate near school buses, after a Waymo was filmed driving around a stopped bus in Atlanta in September.
This week, Austin news outlet KXAN published a report showing Waymo’s vehicles have driven past school buses that were in the process of unloading or loading children multiple times — including after Waymo claims to have shipped software updates to address the problem.
Techcrunch event
San Francisco
|
October 13-15, 2026
Tech
Spotify Wrapped 2025 adds its first multiplayer feature with ‘Wrapped Party’
Spotify Wrapped is back. After last year’s widely criticized flop that included an AI podcast as its highlight, the streamer’s highly anticipated annual review feature has returned to its roots. This year, Spotify is doubling down on what it knows works best: deep dives into your streaming data, creative experiences, messages from favorite artists, and other social features.
The company claims that Wrapped 2025 is its biggest, as it’s introducing nearly a dozen new features in addition to its old standbys, like top songs and artists. Plus, it’s offering more visibility into users’ data than in years past. For the first time, Spotify Wrapped is adding a live multiplayer feature to compare your listening data with friends.
Wrapped Party, Wrapped’s first live interactive experience, allows you to invite up to nine friends to compare listening stats.

Also new this year, your Top Songs Playlist will include the play counts for each of the top songs, so you can actually see how much time you spent with your favorite tracks.
Other standout features this year include an interactive Top Song Quiz, a Listening Age feature, and Wrapped Clubs, which match you to one of six unique listening styles.
The company believes these additions will not only bring back the personalized, engaging experience that users have long expected from Wrapped, but will take it a step further by making it more interactive than before.
In the Top Song Quiz, for instance, you can try to guess which top song soundtracked your year before seeing the results.
Techcrunch event
San Francisco
|
October 13-15, 2026

The new interactive Wrapped Party feature isn’t just about comparing the personal streaming data you’ve already received to your friends’ data, as that’s something people already do on social media. Instead, the feature presents unique data stories for your group, like who’s the “most obsessed fan,” the “early bird,” the most “picky listener,” or even something as nice as the “dinner table explainer,” meaning the person who listens to the most news podcasts.

Spotify says these awards update dynamically every time you join a Wrapped Party, so no two sessions are ever the same — even if you run through them again with the same group of friends.
The new Wrapped Clubs, meanwhile, will group you into one of half a dozen listening styles, like the “Soft Hearts Club,” the “Club Serotonin,” the “Full Charge Crew,” the “Cosmic Stereo Club,” and others. You’ll also receive a role in the club based on your listening data. You might be a club leader if your listening choices strongly matches the club’s values, a scout if you’re always seeking out new releases, or an archivist if you listen to music from past eras.

Another feature, Listening Age, compares your 2025 music listening to others in your age group. To calculate your age, the feature considers the release years of the tracks you listen to most. From there, it identifies the five-year span of music that you engaged with more than other listeners your age.

As in prior years, you’ll see your top songs, top artists, top genres, and, for the first time, top albums. If you engaged with audiobooks and podcasts, you’ll see metrics for those as well. Artists, writers, and podcasters will have their own version of Wrapped as before. And top fans will again receive video messages from their favorite artists, podcasters, and, now, authors.
You’ll also receive a playlist of your top songs of the year, as before.

What you won’t find in this year’s Wrapped is any feature that advertises it was made with AI.
In a press briefing on Tuesday, Spotify’s Senior Director of Global Marketing, Matt Luhks, admitted the company received a “lot of feedback” about its 2024 AI-focused Wrapped experience, saying it was a “mix of positive and ‘more constructive feedback,’” despite the feature driving more engagement than prior years.
“We take all of that in. We use that as information, insights, [and] inspiration for how we approached Wrapped this year,” he said in a press event ahead of today’s launch.
“What our users tell us about Wrapped means a lot to us, so it was really informative in how we approached Wrapped this year. And what we tried to build was the most creative, most innovative, most engaging Wrapped ever,” he added, setting a high bar for the 2025 edition of the now 11-year-old annual year-in-review feature.
“We’re the original and, we believe, still the best,” Luhks said.

Still, AI was a part of the Wrapped experience. Though the company claims the overall experience was not made with AI, it does leverage a LLM (large language model) to add a storytelling layer to Wrapped’s facts and figures, and natural language summaries in other parts of its experience, looking back on your data.
Spotify’s attempt to fix Wrapped after a notable stumble comes as the streamer faces increased competition from Apple, Amazon, YouTube, and others, which have all launched their own annual review features, inspired by Wrapped.
“Everyone seems to have their own version of Wrapped. Now, there’s a lot of reviews and replays and rewinds out there, but we believe that Wrapped still sets the bar for these year-end recaps,” Luhks said.
Along with the consumer experience, Spotify shared its top artists, songs, albums, podcasts, and audiobooks for the year, with top winners that included, respectively, Bad Bunny (top song and album), Joe Rogan (“The Joe Rogan Experience” podcast), and Rebeca Yarros (author of “Fourth Wing”).
Tech
Nothing looks to its community to raise $5M, wants to be ‘IPO-ready’ in 3 years
Hardware maker Nothing is letting its user base buy its stock as part of a new community investment round of $5 million. The new round, which opens on December 10, will enable consumers to buy the company’s shares at its Series C valuation of $1.3 billion.
The company said it has so far raised $8 million in total from over 8,000 people across two previous community investment rounds. It held its first community funding event in 2021, aiming to raise $1.5 million.
“This isn’t about raising capital, it’s about giving our community/fans a chance to invest while we’re private and join us on the journey,” a spokesperson for Nothing told TechCrunch.
Community investors have a rotating seat on the company’s board, but it is unclear what else they get for investing in the company through such rounds.
Nothing raised $200 million in its Series C back in September from investors including Tiger Global, GV, Highland Europe, EQT, Latitude, I2BF and Tapestry. The company has raised $450 million to date.
The community round comes as Nothing makes changes to its corporate structure as it tries to increase its share of a smartphone market dominated by giants like Samsung and Apple. The company is spinning off its budget CMF brand, and plans to explore AI-centric devices while it keeps building smartphones and audio products. And Nothing claims it crossed $1 billion in cumulative revenue this year, up 150% from 2024.
The startup is working to be “IPO-ready” in three years, CEO Carl Pei told TechCrunch in an email. “The timing will depend on market conditions and what makes sense for the business at that point in time,” he said.
Techcrunch event
San Francisco
|
October 13-15, 2026
“What’s important is that we’re already operating with that discipline now. We’re building the systems, the governance, the financial discipline that a public company needs. It forces us to think longer-term and make smarter decisions that prioritise sustainable growth,” Pei added.
It’s not clear if Nothing aims to raise another round before an IPO. When asked about its fundraising plans, a Nothing spokesperson said the company is not thinking about raising capital immediately, but it wouldn’t be averse to those conversations.
Those interested in investing in the community round can use platforms like Wefunder and Crowdcube to participate.
-
Sports2 days agoUS Denied World Cup Visa For Mum of Cape Verde Goalkeeper Vozinha
-
Sports1 day agoSaudi Arabia the Only 2026 World Cup Flag That Cannot Touch Ground
-
Sports2 days agoRafael van der Vaart Accused of Making Racist Japan Comments
-
Sports2 days agoFIFA Ban Pre-Revolutionary Iran Flags From World Cup Stadiums
-
Sports2 days agoEmma Hayes Praised For Using Drinks Break For Tactical Analysis
-
Sports1 day agoRodri Labelled ‘Salty’ For Cape Verde Comments After Spain Draw
-
Sports8 hours agoClip of Zinedine Zidane in the Stands During Argentina 3-0 Algeria Goes Viral
-
Sports21 hours agoPetition Demands FIFA Probe into Scotland 1-0 Haiti World Cup Match
