-
SAP has rolled out security fixes for 13 new security issues, including additional hardening for a maximum-severity bug in SAP NetWeaver AS Java that could result in arbitrary command execution. The vulnerability, tracked as CVE-2025-42944, carries a CVSS score of 10.0. It has been described as a case of insecure deserialization. “Due to a deserialization vulnerability in SAP NetWeaver, an
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Security researchers have unveiled a sophisticated new attack technique dubbed “Pixnapping” that can extract two-factor authentication codes from Google Authenticator and other sensitive mobile applications in under 30 seconds. Pixnapping leverages fundamental features of Android’s graphics rendering system to create a side-channel attack that steals pixel data from victim applications. Unlike traditional browser-based pixel-stealing attacks […]
The post Pixnapping Attack Hijacks Google Authenticator 2FA Codes in Under 30 Seconds appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft has confirmed active exploitation of a critical zero-day vulnerability affecting the Windows Remote Access Connection Manager, designated as CVE-2025-59230. The security flaw, disclosed on October 14, 2025, allows attackers with limited system access to escalate their privileges to the highest level, gaining complete control over compromised systems. Zero-Day Vulnerability Enables System-Level Access The vulnerability […]
The post Hackers Exploit Windows Remote Access Connection Manager 0-Day in Ongoing Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Telegram has solidified its position as the primary coordination hub for modern hacktivist operations, according to comprehensive research analyzing over 11,000 posts from more than 120 politically motivated threat actor groups. Contrary to assumptions that such activities remain hidden in dark web forums, the research reveals that most hacktivist planning and mobilization occurs in plain […]
The post Telegram Becomes the Nerve Center for Modern Hacktivist Operations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
British organisations are facing an unprecedented cyber security crisis as the National Cyber Security Centre reveals a dramatic surge in attacks threatening the nation’s digital infrastructure. This alarming escalation translates to an average of four major cyber attacks targeting UK interests every single week. The severity of cyber threats facing Britain has intensified substantially, with […]
The post NCSC Issues Warning as UK Sees Four Cyber Attacks a Week appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The pro-Russian hacktivist collective NoName057(16) has emerged as a notable participant in a coordinated wave of cyberattacks targeting Israeli infrastructure during the October 7 anniversary period. The group claimed responsibility for multiple distributed denial-of-service (DDoS) attacks against government portals, financial institutions and online commerce platforms, marking a significant escalation in hacktivist operations aligned with pro-Palestinian […]
The post Pro-Russian Hacktivists Target Government, Finance and E-Commerce Sites appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft has confirmed active exploitation of a critical zero-day vulnerability in the Windows Remote Access Connection Manager (RasMan) service, allowing attackers to escalate privileges and potentially compromise entire systems.
Tracked as CVE-2025-59230, the flaw stems from improper access control, enabling low-privileged users to gain SYSTEM-level access.
Disclosed on October 14, 2025, the vulnerability affects multiple Windows versions and has already drawn attention from threat actors targeting enterprise environments.
The issue resides in RasMan, a core component handling remote access connections like VPNs and dial-up. An authorized local attacker can exploit weak permission checks to manipulate service configurations, bypassing standard privilege boundaries.
With a CVSS v3.1 base score of 7.8 (High severity), it requires only local access and low privileges, making it a prime target for post-compromise escalation in breaches.
Microsoft classifies it as “Exploitation Detected,” indicating real-world attacks, though specifics on affected victims remain undisclosed.
No public proof-of-concept (PoC) code has been released, but security researchers describe potential exploits involving registry manipulation or DLL injection into RasMan processes.
For instance, an attacker might leverage low-integrity processes to overwrite accessible files in the RasMan directory (e.g., C:\Windows\System32\ras), injecting malicious code that executes with elevated rights upon service restart.
This could chain with initial footholds from phishing or unpatched apps, amplifying damage in lateral movement scenarios.
Vulnerability Details
To aid rapid assessment, the following table summarizes key CVE-2025-59230 metrics:
Metric Value Description CVSS v3.1 Base Score 7.8 (High) Overall severity rating Attack Vector Local (AV:L) Requires physical or logged-in access Attack Complexity Low (AC:L) Straightforward exploitation Privileges Required Low (PR:L) Basic user account suffices User Interaction None (UI:N) No victim engagement needed Confidentiality/Integrity/Availability Impact High (C:H/I:H/A:H) Full system compromise possible Exploit Maturity Functional (E:F) Proof-of-exploits exist in wild Affected systems include Windows 10 (versions 1809 and later), Windows 11, and Windows Server 2019-2025. Microsoft urges immediate patching via the October 2025 Patch Tuesday updates, emphasizing that unpatched machines face a high risk from nation-state actors or ransomware groups.
Follow us on Google News, LinkedIn, and X for daily cybersecurity updates. Contact us to feature your stories.
The post Windows Remote Access Connection Manager 0-Day Vulnerability Actively Exploited in Attacks appeared first on Cyber Security News.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The new infantry squad vehicle can haul troops through pretty much any terrain in any conditions, but there’s a couple big things it can’t do: protect soldiers from an ambush or allow someone to provide cover in the event of one.
So the Army is evolving its tactics around the idea that a reconnaissance unit will scan the battlefield for threats, and if they find one, they’ll radio the ISV occupants to hop out and seek cover.
“As we get into a tactical zone, that's where you alter your movement techniques and you dismount,” Col. David Lamborn, who commands the 2nd Mobile Brigade Combat Team in the 25th Infantry Division, told Defense One on Tuesday at the AUSA annual meeting in Washington, D.C.
It helps that the ISV was designed with tree cover in mind. When the Army came under attack driving thin-skinned Humvees around the deserts of Iraq 20 years ago, there was often no warning and nowhere to hide. Troops began adding makeshift armor to the vehicles, and eventually the Defense Department created the mine-resistent ambush protected vehicle, or MRAP.
“We made a choice to slap on more and more, which further and further and further restricted ourselves, right? It made it slower. We became more targetable, right?” Lamborn said. “We could only be on these very specific roads, because we could not get off over here. The ISV is meant to get away from that.”
An ISV full of soldiers traversing the jungle in the Philippines, for example, should never come into contact.
“So that means that you need to use your reconnaissance assets to better understand where the enemy is, and to take the right tempo and pace depending on the expected contact,” Lamborn said Tuesday during a panel at AUSA.
And if a threat is detected, troops will jump out and fight on foot.
“So for the infantry, our protection predominantly comes from our field craft and our survivability,” said Maj. Gen. Jay Bartholomees, commander of 25th ID. “ For jungle fighters, we need to put ourselves into the jungle and put ourselves in places where we are not found as easily. That's what's going to be our best protection asset.”
A unit can also launch a recon drone to get a picture of the battlefield ahead, and the Army is specifically looking for some with long ranges.
Lamborn does want his troops to be able to kill drones that approach infantry squads, though.
“So the real protection problem that I see, for the mobile brigades, is the counter-UAS, because right now, most of the systems that exist, which some are fantastic, but they're very heavy, and they're really focused on fixed site security,” he said.
His soldiers need something lightweight that uses electronic warfare to jam enemy drones, rather than something that requires ammunition.
“We absolutely don't want to find ourselves in a situation where we're coming into contact and we're still in the ISV,” Lamborn said. “We just need to get away from that and use it just as a strict mobility platform.”
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
China is the “pacing threat,” Army Secretary Dan Driscoll said Tuesday, but homeland security and southern border operations are just as important as countering that threat.
"I think my understanding of the administration's priorities and the Secretary of War is China is the pacing threat,” Driscoll said on the sidelines of the annual Association of the U.S. Army’s conference in Washington, D.C. “We must, as a nation, be ready to provide security to Americans no matter where they are located in the world.”
But Driscoll stopped short of calling China the top priority, adding that “we are also, at the same time, in parallel, executing on providing security and maintaining what the president has done at the border.”
Strategic documents have detailed the shift in military focus from China to border enforcement, countering drug trafficking, and backing the Department of Homeland Security. The Army has invested significant manpower behind those missions. U.S. Northern Command has sent around 10,000 troops to the southern border, and the Trump administration has deployed thousands of National Guardsmen to American cities supporting ICE activities.
And, Driscoll said, he expects the southern border mission “to continue into the future for years to come.”
Other military officials have said ahead of the National Defense Strategy rollout that homeland defense is relevant to multiple theaters and missions. Air Force Secretary Troy Meink told reporters at the Air & Space Force Association’s conference last month that “homeland defense pretty much captures all threats.”
U.S. Indo-Pacific Command leader Adm. Samuel Paparo has reiterated the need to support the region amid strategy shifts, and said last month that “the homeland is in the Pacific.”
Driscoll’s comments on China followed a joint announcement between the Army and the Energy Secretary Chris Wright to build a microreactor at a stateside base by 2027. Those officials pointed to long diesel supply chains overseas, including the Pacific, as a threat to U.S. military operations.
“If you think of the Indo-Pacific, and the tyranny of distance between our homeland and that theater, it's 6,000 miles,” Driscoll said. “If it's going to be with contested logistics, you're not going to be able to ship our equipment and our energy sources on slow moving freight liners across the Pacific Ocean. We are going to have to be much more flexible as a nation, and we are focused on that. We are reorienting and continuing to strengthen the Army for that fight.”
It’s unclear what a strategic shift away from the Indo-Pacific would mean for troops stationed in the region. Lt. Gen. Hank Taylor, the commander of the 8th Army, told reporters at AUSA that the new strategic guidance has not reduced funding or training opportunities for soldiers in South Korea.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Nearly a half-century since the Army last operated a nuclear power plant, the service is aiming to break ground on a micro-reactor on a U.S. base by 2027.
The joint Janus Program seeks to bring new reactor designs to fruition in a bid to add available power at military installations and to enable them to continue operating even if the wider grid goes down. It was announced on Tuesday by Army Secretary Dan Driscoll and Energy Secretary Chris Wright at the Association of the U.S. Army’s conference in Washington, D.C.
There are currently no microreactors operating in the United States. But speaking to reporters on the sidelines, the secretaries and an Army official said they expect to see a small nuclear reactor go critical by July 2026 and construction to start at a stateside base the following year.
“In terms of trying to actually build real, power-producing reactors on Army bases, probably construction will not begin until 2027,” said Jeff Waksman, principal deputy assistant Army secretary for installations, energy, and environment.
The announcement follows a May executive order from the Trump administration to invest in microreactors and establish them on a military installation. That push comes as the U.S. grapples with uranium enrichment supply issues; most domestic reactors are fueled with imported elements. Wright admitted it was an problem, but highlighted the Energy Department’s efforts to increase enrichment.
“It's not there today, but it will be,” Wright said of the U.S. uranium enrichment supply. “That is one of the things that needs to rise up, but we know how to solve that problem.”
That timeline is ambitious but achievable, said Thomas Mancinelli, a former acting Navy undersecretary who now heads federal strategy for Antares Nuclear, which has an Energy Department contract to take a small reactor critical next year.
“We know what it takes to build these reactors. Now, it’s just a matter of getting a workforce for the industry, getting the fuel, getting the supply chain in place and trying to prove the technology and build it out at scale so that we can start selling it to the Department of Defense in 2028 and beyond,” Mancinelli said.
Driscoll said the sweeping nuclear project will “make the Army stronger and the country safer” by replacing old diesel fuel supply lines to bases with a more energy-efficient reactor that can run for years.
Army officials dismissed the concerns of groups like the Bulletin of Atomic Scientists who fear the microreactors “could become attractive targets for an adversary.”
“This is going to be in the 50 U.S. states. We are not deploying these to any sort of front,” Waksman said. “These are also small targets. There's very small amounts of fisable material in them. So these are very unattractive proliferation targets.”
The microreactors will be built through a milestone-based contracting model with the Defense Innovation Unit and will be commercially owned and operated, the Army said in a subsequent press release. In April, the DIU selected a group of companies eligible to build microreactors as the rise in AI capabilities fuels a need for more electrical power.
Army and Energy Department officials are taking inspiration from Project Pele, the Defense Department’s ongoing mobile reactor project, and will also base the contracting model off of NASA’s Commercial Orbital Transportation Services program.
The Army’s announcement follows a decision this year selecting Eielson Air Force Base, near Fairbanks, Alaska, as the preferred site for a nuclear microreactor under a Defense Department pilot program with plans to have it up and running by 2028.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶


