-
With artificial intelligence (AI) shrinking the window between vulnerability discovery and exploitation and lowering the barrier to entry for bad actors, new findings from Sysdig show that skilled human operators can move just as swiftly after gaining initial access. In one instance highlighted by the cloud security company, the threat actor pivoted from a vulnerable Marimo notebook to an SSH
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Introduction Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload? Will my organization fail the phishing simulation? Does this SIEM rule fire on this particular technique? And, in more mature organizations, this testing happens continuously rather than as a one-off exercise. But no matter how much you validate against these
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Two critical unauthenticated vulnerability chains in the widely used The Events Calendar WordPress plugin could allow attackers to execute code and fully compromise affected websites remotely. These flaws, identified by Wordfence Argus, impact plugin versions up to 6.17.4 and have been patched in version 6.17.4.1. The Events Calendar is active on over 600,000 WordPress websites, […]
The post WordPress Events Calendar Vulnerabilities Let Hackers Take Over 600,000 Websites appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A Chinese-speaking threat actor known as Red Heron has exploited a critical remote code execution (RCE) vulnerability in Gitea to steal private source code, harvest credentials, establish persistent access, and move laterally within victim infrastructures. Researchers from the Acronis Threat Research Unit (TRU) have linked this operation to a newly documented Linux implant called JITTERLY, […]
The post Red Heron Hackers Exploit Critical Gitea RCE to Steal Source Code and Deploy Linux Rootkit appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data. The first is an automated effort aimed at internet-exposed Vite development servers that’s designed to steal cloud credentials, configurations from Amazon Web Services (AWS) and Microsoft Azure instances, and infrastructure state files, per F5 Labs. The
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A stored cross-site scripting (XSS) vulnerability in Telegram Desktop could enable attackers to steal the contents of exported chat histories by embedding malicious code in an inline keyboard button, according to security researchers. This issue affects the HTML chat export feature in Telegram Desktop builds released before Beta version 6.9.4 and Stable version 7.0.1. Researchers […]
The post Telegram Desktop XSS Vulnerability Lets Attackers Steal Entire Chat Histories appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A threat actor exploited a critical pre-authentication remote code execution vulnerability in marimo to harvest AWS credentials, retrieve an SSH private key from AWS Secrets Manager, and authenticate to a bastion host in just eight seconds, according to the Sysdig Threat Research Team. This vulnerability, tracked as CVE-2026-39987, affects marimo versions up to 0.20.4 and […]
The post Marimo RCE Flaw Lets Hackers Steal AWS Credentials and Pivot to Bastion Host in 8 Seconds appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly disclosed hardware attack dubbed DDRop can undermine Intel Trust Domain Extensions (TDX) by manipulating DDR5 memory traffic, allowing an attacker with physical server access to force confidential virtual machines into debug mode and extract private memory in plaintext. Researchers from KU Leuven, ETH Zurich, Google, Durham University, and other institutions released proof-of-concept code, […]
The post DDRop Attack Forces Intel TDX Confidential VMs Into Debug Mode and Exposes Memory appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The military abandoned plans to use Army helicopters to evacuate wounded troops involved in the war with Iran, and instead resorted to slower ground-based evacuations, in part due to the threat of drone strikes, according to a Defense Department Office of the Inspector General report released Monday. The shift illustrates a problem medical officials had warned about for years.
At the start of the operation, the U.S. used Army helicopters in Kuwait and Iraq for medical evacuation, but then moved them due to concerns about Iranian drone and missile strikes.
“Most evacuations during [Operation Epic Fury] were ultimately conducted by ground,” according to the report. In addition to the drone threat, the United States had the additional hurdle of relying on host country hospitals for what’s called “advanced, hospital level care” for particularly severe injuries, since establishing such hospitals on U.S. bases would require a large and more targetable footprint.
The move follows warnings from medical officials that future conflicts would be more dangerous for U.S. troops, as adversaries develop more advanced weapons—particularly drones. A 2022 Army University Press article by Lt. Col. Matthew Marsh and Capt. Ryan Hampton eerily forecasts the situation described in the inspector general report: “Medical personnel will experience intermittent air and ground evacuation with medical logistics constraints,” it reads.
Just as new technology has allowed some adversaries to become more dangerous and inflict higher casualties, other pressures led to cutbacks in medical evacuation capability, particularly in the Middle East. A July 2025 Pulse of Army Medicine article by Sgt. Maj. Sandra Johnson describes how, across U.S. Central Command, “Due to competing requirements, many of these bases only have one medic on post and no medical provider. A medic may have to care for a patient for several hours until they arrive at a local national hospital.”
She noted specifically the problem of “no Medical Evacuation (MEDEVAC) by flight or ground capability, or only ground Casualty Evacuation (CASEVAC) options,” across CENTCOM.
An April U.S. Naval Institute report explains: “Drone warfare [in Ukraine] has disrupted casualty movement from the point of injury throughout the combat casualty continuum of care.”
The IG report acknowledges that CENTCOM officials worked to rapidly develop new plans and strategies when faced with Iranian drone capabilities, moving troops and materiel.. “During OEF, USCENTCOM shifted personnel, assets, and storage facilities as locations came under Iranian and proxy attacks,” it reads.
The report carries a strong recommendation: To find and fix “the gaps in [Department of Defense counter-drone] interoperability, and the corrective actions needed to standardize” those capabilities.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶


