Plutonium

Plutonium, also known as Jumpy Pisces and Andariel, is a notable threat actor historically involved in cyberespionage, financial crime, and ransomware attacks. Recent reports have revealed that advanced persistent threats (APTs) backed by Plutonium have been breaching the Sellafield's IT systems, which holds the world's largest store of plutonium, since 2015. These breaches were allegedly consistently covered up by senior staff at the site, raising significant concerns about nuclear security and the potential misuse of radioactive materials. In parallel to these cybersecurity threats, the geopolitical landscape has seen heightened nuclear activity. The U.N. atomic agency and foreign experts recently reported that North Korea appears to have started operating a light-water reactor at its main nuclear complex, potentially securing a new source for weapons-grade plutonium. This development comes alongside claims that the country intends to ramp up production of plutonium and uranium, likely as a strategy to strengthen its negotiating position on the international stage. These developments underscore the complex challenges facing nuclear security. Loose regulatory environments, such as those documented by former Atomic Energy Commission (AEC) chairman Seaborg, can make tracking losses in the nuclear industry difficult. Meanwhile, threat actors like Plutonium exploit vulnerabilities in IT systems, posing further risks. As we move forward, it is crucial to address both physical and digital security gaps to prevent the misuse of nuclear material.