• Plex has urged users to promptly update their Plex Media Server and Plex Desktop software following the release of fixes for several undisclosed security issues in older versions. The recommended versions are Plex Media Server 1.43.3 and Plex Desktop 1.115.0. The company advises that all server owners and desktop users upgrade to the latest release […]

    The post Plex Urges Users to Update Media Server as Multiple Security Flaws Are Discovered appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Threat actors have repurposed an AI prompt-injection technique known as ASCII smuggling to evade email security controls at massive scale, hiding invisible Unicode characters within financial phishing lures. Microsoft observed the activity reach more than 2.3 million messages per day, demonstrating how techniques first popularized in AI-security research can quickly migrate into conventional phishing operations. […]

    The post Hackers Abuse AI-Era ASCII Smuggling to Hide Phishing Content in Millions of Emails appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • LYNN, Mass.—Three decades ago, GE Aerospace tested a technology that could’ve made the F-16 more agile. It worked, but was never fielded. Instead, it sat in a box in a warehouse—until defense tech startup Shield AI called. 

    “They reached out to us and said…‘Do you still have that capability? And the truth is, we hadn't fielded it. After we did the demonstration, it basically went into storage,” said Steve “Doogie” Russell, VP and general manager of GE’s Edison Works. “And the solution that we've offered to Shield on that is an F110 engine with a nozzle in the back that we call the axisymmetric vectoring exhaust nozzle, or AVEN.”

    Not having to start from scratch on the technology was critical for saving time and speeding up flight testing for its collaborative combat aircraft, X-BAT, an autonomous fighter jet designed to take off and land vertically, Shiva Vallabhaneni, senior propulsion engineer for Shield AI, told Defense One. 

    “X-BAT always needed to have a thrust vector controlled capability to do vertical flight,” Vallabhaneni. “So we really went out and said…where can we get one? Is there technology that already exists?”

    The aircraft “needs to be able to move quickly…in any direction,” GE’s Russell told reporters during a visit to the company’s factory here in Lynn. 

    That comes with a special set of propulsion requirements, so GE paired its 30-year-old AVEN nozzle with its F110 engine found in the F-16 fighter jet for the X-BAT.  

    The aircraft needs a high-thrust propulsion system “because you've got to be able to have that aircraft take off vertically and then, when it comes back, land at high thrust mode. It also needs to have really good gas mileages. So [thrust-specific fuel consumption], once it's up and away, needs to be able to hit the range requirements that they're trying to get,” Russell said. 

    And, he said, when it lands, it needs a nozzle “on the back that can move around to balance the aircraft as it's coming in to maneuver into position to dock back up. That's a pretty significant propulsion challenge and pretty unique.” 

    In under a year, the companies dusted off the AVEN nozzle, refurbished the original hardware, completely rewrote the software code, and have been testing it with the engine.

    The hardware was in very good condition, and AVEN One, which is being used for the X-BAT prototype, has “close to 100 percent of the same hardware that was flown from the 90s,” Vallabhaneni said. “That was the biggest key unlock for getting us to an X-BAT prototype flight test this year—100 percent. In some ways, building that thrust vector control nozzle, verifying its technology, and doing it at the speed that we needed to is probably harder than getting an engine.” 

     The companies recently completed testing the engine integrated with the full AVEN nozzle at GE Aerospace’s test facility in Peebles, Ohio. 

    Now, the goal is to complete a tethered vertical flight test of the aircraft by the end of the year, to demonstrate that it can hover and remain stable. 

    Through data collected during testing, engineers can create models that will help develop vertical flight control laws, Vallabhaneni said.

    During the planned test, the prototype aircraft will hang from a 180-foot crane to minimize risk. The test will be successful if slack in the tether is created during the hover. 

    “Shield AI—much like SpaceX, Rocket Lab, all of these other new space companies—the mindset is: be hardware rich, take risks because the faster we get to test, the faster we can learn what the real problems are. And so the tether gives peace of mind that we're buying off risk, but we're not buying off risk irresponsibly,” Vallabhaneni said. 

    But the AVEN nozzle won’t just be in the prototype—Shield AI plans to make more and eventually tweak the technology along the way. Building additional AVEN nozzles that keep the legacy design will help increase testing effort. And any future changes will likely focus on performance, Vallabhaneni said.  

    “Lighter, faster, more performance, right? Those are the things that we're going to go and chase and achieve on the future version of AVEN. So the journey doesn't stop here. This is the starting point, and it's really great that GE gave us a pretty great starting point back in the '90s,” he said. 

    “AVEN sat on the shelf for 30 years. I was born in Cincinnati, so I drive by the hospital I was born in every time I'm at GE—and…AVEN was built before I was born. So for me, it's very important to recognize all of the people who went and did that and built that within a year…We are giving those people their flowers and being able to pay that forward.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Chinese-speaking threat operators have been observed using Claude, Qwen and DeepSeek-powered AI agents as operational components in a second intrusion campaign targeting government, political, education and industrial organizations across Asia. The campaign is distinct from an earlier operation reported in July that used Claude Code and DeepSeek against government and financial-sector targets. In this newer […]

    The post Chinese-Speaking Hackers Use Claude, Qwen and DeepSeek AI Agents to Attack Government Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • TP-Link has released security updates for two vulnerabilities found in its Archer AX55 v4 wireless router. These vulnerabilities could allow attackers on the local network to crash a key networking service, potentially execute code, or steal administrator credentials from captured login traffic. The vulnerabilities, identified as CVE-2026-18167 and CVE-2026-18330, impact the router’s EasyMesh component and […]

    The post TP-Link Archer AX55 Flaws Enable Remote Code Execution and Admin Password Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Threat actors are exploiting two critical security flaws in WordPress plugins Super Forms and Elementor Pro, according to findings from Wordfence. The vulnerabilities in question are – CVE-2026-14894 (CVSS score: 9.8) – A missing file type validation vulnerability in Super Forms – Drag & Drop Form Builder that allows unauthenticated attackers to upload files of any type, including

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A Microsoft 365 email security-control bypass that lets attackers submit unauthenticated messages posing as internal users by leaving one SMTP field blank. The technique targets Exchange Online’s RejectDirectSend setting and does not represent a vulnerability in Microsoft software or in ReliaQuest systems; instead, it exposes a limitation in how the control evaluates Direct Send traffic. […]

    The post Microsoft 365 Direct Send Bypass Lets Attackers Spoof Internal Users Without Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Plex is urging users to update their instances to the latest version following the release of an update that patches multiple security flaws. The fixes are available in Plex Media Server 1.43.3 and Plex Desktop 1.115.0. The streaming media service did not elaborate on what those issues are, but said CVE identifiers have been requested for them. “We recommend all server owners and Desktop users

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Google on Thursday released security updates to patch 12 vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2026-85046 (CVSS score: 8.8), has been described as a type confusion bug in V8, Chrome’s JavaScript and WebAssembly engine. “Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Google has released an urgent update for Chrome Stable to address CVE-2026-85046, a high-severity type confusion vulnerability in the V8 JavaScript and WebAssembly engine that is actively being exploited. This flaw can allow remote attackers to execute code within Chrome’s sandbox by convincing a victim to open a specially crafted HTML page. The security update […]

    The post Google Chrome V8 Flaw Actively Exploited in the Wild, Update Released appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶