Two websites run by the US Army were defaced by hacktivists with pro-Kurdish messages and attacks on President Donald Trump, in the latest incident involving hackers compromising US federal government systems. The affected sites — the Open Innovation Lab and the AI Integration Center, which test and integrate AI and other emerging technologies — have reportedly since been fixed after the Army took them down. The case highlights ongoing security weaknesses in government-run web infrastructure.

According to security researcher Ronald Lovelace, who spoke to Cyberscoop (which first reported the story), the sites' error pages were altered to appear when users visited a non-existent page, displaying messages calling Trump a "pedophile" and a "thief" — likely a reference to his extensive naming in Justice Department files relating to the late convicted sex offender Jeffrey Epstein. The messages also referenced Tom Barrack, the US ambassador to Turkey, and called for a "free Kurdistan." The sites appear to run on WordPress with several plug-ins that can be targeted by attackers; it is unclear whether any data was stolen, and the Army is investigating. The incident follows other recent breaches of federal systems, including the Department of Homeland Security, which confirmed a separate intrusion into one of its intelligence-sharing platforms this week.