Skip to content

ADMIN.FOUNDATION

  • CrowdStrike Falcon Zero-Day Lets Attackers Escalate Privileges on Windows Systems

    ·

    cyber security, Cyber Security News, Windows, Zero-Day, zeroday

    A recently released proof-of-concept, named FalconFlank, claims to reveal a local privilege escalation vulnerability in the CrowdStrike Falcon Sensor on Windows. CrowdStrike is actively investigating these claims and has advised customers to turn off the Microsoft Office File Suspicious Macro Removal policy while the assessment is ongoing. CrowdStrike Falcon Zero-Day The project was published on […]

    The post CrowdStrike Falcon Zero-Day Lets Attackers Escalate Privileges on Windows Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Contagious Interview Operators Move Beyond Git Hooks With Trojanized Mac Applications

    ·

    cyber security, Cyber Security News

    North Korea-linked Contagious Interview operators have expanded their developer-targeting malware delivery operation beyond booby-trapped Git hooks and coding repositories, using trojanized macOS applications distributed as disk images and installer packages. Jamf Threat Labs identified 14 malicious DMG and PKG samples impersonating legitimate Mac software, all of which ultimately deliver an OtterCookie-aligned JavaScript implant designed for […]

    The post Contagious Interview Operators Move Beyond Git Hooks With Trojanized Mac Applications appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests

    ·

    OpenAI on Thursday officially unveiled GPT‑6 Astra, which it described as the “world’s most intelligent and aligned model.” The development comes days after the artificial intelligence (AI) company said the model had reached the “Critical” cybersecurity capability threshold under its Preparedness Framework. “Astra is state-of-the-art on computer use, browsing, software engineering,

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers Compromise More Than 14,500 Dahua Security Cameras in Massive Campaign

    ·

    cyber security, Cyber Security News

    A large-scale campaign dubbed Operation CameraSwarm compromised at least 14,530 Dahua IP cameras and related surveillance devices in just 35 days. Exposing how unpatched flaws, weak credentials, and cloud-connected P2P features can turn video-security infrastructure into a remotely accessible attack surface. Threat intelligence firm Hunt.io reconstructed the operation after discovering an unsecured HTTP directory belonging […]

    The post Hackers Compromise More Than 14,500 Dahua Security Cameras in Massive Campaign appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • LLMjacking Attack Abuses Leaked AWS Credentials to Hijack Amazon Bedrock AI Models

    ·

    Amazon AWS, AWS, cyber security, Cyber Security News

    Threat actors are increasingly converting stolen cloud credentials into access to costly generative AI services, a technique known as LLMjacking. FortiGuard Labs reported an incident involving Amazon Bedrock in which a leaked, long-lived AWS IAM access key with AdministratorAccess permissions was used to create a new identity, subscribe to foundation models, and run inference at […]

    The post LLMjacking Attack Abuses Leaked AWS Credentials to Hijack Amazon Bedrock AI Models appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • OpenAI GPT-6 Astra Discovers Zero-Day Flaws and Builds Working Exploits in Cyber Tests

    ·

    ChatGPT, cyber security, Cyber Security News

    OpenAI has introduced GPT-6 Astra, a groundbreaking model that has reportedly achieved perfect results on ExploitBench and demonstrated improved controls during cybersecurity testing. This announcement positions Astra as a significant advancement in authorized security research, in which models must analyze unfamiliar software vulnerabilities, generate reliable proof-of-concept code, and operate within the parameters of a controlled […]

    The post OpenAI GPT-6 Astra Discovers Zero-Day Flaws and Builds Working Exploits in Cyber Tests appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • White House pressure for US firms to skip French space summit is ‘unfortunate,’ insiders say

    ·

    Business
    A White House official warned U.S. space companies last week that if they attend an upcoming international summit in France, it might appear they’re supporting policies that go against their own country’s interests. Space advocates say the move discourages needed cooperation.

    An industry insider told Defense One that Charles Powell, the assistant director for space and spectrum in the White House’s Office of Science and Technology policy, said in a call on Aug. 27 that space companies that attend next week’s International Space Summit in France “might be used as a prop to support policies counter to U.S. interests.” Politico, citing industry and Congressional sources, first reported the news on Thursday, and detailed that SpaceX, Stoke Space, K2 Space and Astra, which compete for civil and military space contracts, were among the companies on the call.

    “This is all very unfortunate because France is a country we should be doing more space cooperation with, not less,” the industry insider said. 

    Space policy experts said the White House warning doesn’t make much sense because the U.S. government is attending the summit, France is a longtime NATO ally, and it is also investing in growing its military space capabilities. More than 120 countries are scheduled to attend next week’s summit in France, according to a government website. 

    White House spokespeople did not confirm whether Powell gave the warning and did not respond when asked for the rationale behind the call with U.S. space companies.

    “The Trump administration continues to collaborate with allies and partners in space,” an Office of Science and Technology policy official told Defense One in a statement. “We look forward to productive conversations at the Space Summit on key priorities including science missions, exploration programs, and space security.” 

    SpaceX and Blue Origin are among the companies no longer attending the summit, French newspaper LeMonde reported. 

    "It's hard not to link it to the rumours of pressure," a ministry spokesperson told Agence France-Presse, LeMonde reported. "We obviously want to continue working with our US partners and allies, even though strategic about-turns and political pressures sometimes make the task needlessly complex," the spokesperson added.

    Last year, French President Emmanuel Macron announced a nearly $5 billion increase in military space spending. Victoria Samson, the Secure World Foundation’s chief director of space security and stability, told Defense One that U.S. companies want to get in on that investment.

    “I think it's a head-scratching decision, given that OSTP, State, Commerce, and NASA are all attending. Also given the huge recent investments by France and Germany in their military space capabilities, you would think U.S. companies would be falling over themselves to get in front of European decision makers,” Samson, who is also attending the summit, said. “This just reads like another short-sighted effort by the Trump administration to stir the pot with long-time European allies.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories

    ·

    The worst part is how normal these attacks look. A call from IT. A shared file. A trusted app. A simple request to click “Allow.” Why break in when someone might open the door? That idea runs through this edition. Attackers use real tools, fake login pages, old account links, and software guides that point to unsafe downloads. One wrong letter in a web address can be enough. There is also

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Fewer attacks, more force: Link11’s European Cyber Report finds new DDoS records for the first half of 2026

    ·

    Press Release

    Frankfurt am Main, Germany, September 3rd, 2026, CyberNewswire Super-botnets and hijacked cloud servers drive new bandwidth and packet-rate records as international law-enforcement pressure pushes attack counts down Link11 has released its European Cyber Report for the first half of 2026, providing an overview of DDoS attack activity targeting European companies. Although the number of DDoS […]

    The post Fewer attacks, more force: Link11’s European Cyber Report finds new DDoS records for the first half of 2026 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root

    ·

    Cisco has released patches to address a critical security flaw affecting 10 Silicon One-based Nexus 9000 switches that could allow an unauthenticated, remote attacker to execute code as root, alongside an IOS XR hardening release bundling 7 umbrella CVEs, 2 of which are rated 9.8, with no workaround for any IOS XR version. The Nexus vulnerability, tracked as CVE-2026-20212 (CVSS score: 9.8), is

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 143 144 145 146 147 … 1,230
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence