To add a point to the article, I think they went too far in their operations saying to "open up on any government operation". Civil Disobedience, and taking down websites is one thing, leaking sensitive information is an entirely different story. This is also Fox news, so I don't know how bias or if this story is even the truth, so I'm taking it with a grain of salt.
Technically speaking, either word works, but you need more than the OED to properly communicate meaning.
And, I disagree with your analysis of "for." I am an english speaker living in the northeastern United States, and hear "for" differently than you describe.
"Working with" usually indicates that they're a witness of some sort helping with the investigation. You wouldn't say that a murder witness is "working for the police", you would say that they were "working with the police".
News article headlines are allowed greater latitude to break other grammatical rules.
Certainly not a very credible citation, but it shows that the poster didn't generate the sensationalist title from thin air.
I'm too lazy right now to dig up the link on NPR's site though :(
According to the article the case here seems to the latter and not as the title here make it seem the former.