• The defense industry would likely struggle to rebuild the U.S. military’s crucial space capabilities during a war with China or Russia because it will have too few skilled engineers to do the work, according to a new report from RAND.

    Today, the country’s space-focused defense companies employ roughly 3 percent of its engineers, and competition for skilled personnel means many jobs go unfilled. If an adversary destroys space-based intelligence, targeting, and communications assets, that shortfall would likely keep the military from getting them back online quickly.

    “Modern warfare relies on space-based capabilities; therefore, a key question is how quickly then United States can replace those capabilities during a conflict,” the report said. “Although much attention has focused on making these systems more resilient, far less has examined how fast they can be rebuilt after an attack, especially within 12 to 24 months. China and Russia have shown they can threaten or destroy U.S. space assets, potentially weakening U.S. and allied military operations across many domains. In a prolonged conflict, the ability to restore these capabilities on a short timeline could be critical.”

    Various commissions have long warned that U.S. dependence on space could become a vulnerability. In recent years, concerns have arisen over Russian and Chinese nuclear anti-satellite weapons. Rebuilding devastated constellations could require more engineers than the country has available, RAND wrote.

     While recent Space Force and White House initiatives aim to turn the tide, it doesn't match the demand the administration is putting on the military space industry and, ultimately, more creative solutions are needed to grow that workforce, the report said.

    “Being able to reconstitute after a conflict is absolutely essential, and that's not just business as usual for people who are working in the space industry. That's a massive surge in production,” Alexandra Gerber, the report’s lead author, said in an interview. “Think like World War II, Rosie the Riveter, everybody's on the line, and this is not just you can teach somebody how to work in a factory after one day. The timelines for creating people to work in the space industry are much much longer than that. So, we need to be thinking about what the space workforce might need to look like to support reconstitution during a conflict, 10, 20, 30 years in advance. Not just six months.”

    Software development, data analytics, and artificial intelligence will be compete for future engineers, the report said. It can take at least 15 years to develop some of the more highly-skilled, space-focused experts.

    RAND researchers found “there are approximately 30,000 job openings per year for technicians and technologists, but only 11,000 individuals are credentialed annually. The space industrial base annual demand is approximately 5,000 of the annual openings (17 percent).” For the 244,000 assembly-related job fields hired for annually, there are only 13,000 people credentialed. 

    “The space industrial base constitutes about 11,000 (5 percent) of the annual openings for assemblers, and competition for the 13,000 credentialed workers will be fierce,” the report said. 

    Other major hurdles to growing the talent include security-clearance delays for six months or more, and a limited pool of qualified experts — foreign nationals hold 70 percent of electrical and computer engineering doctorates, making them unavailable from most national security-related work, the report said.

    Gerbet told Defense One the workforce isn’t needed just for a possible wartime surge. Last month, the White House released a new space transportation policy which aims to reach “more than 1,000 launches and reentries” by 2030. Building new launch infrastructure to meet that demand requires more skilled workers. 

    “We're currently at about 200 launches per year in the U.S. And they're talking about timesing that by five, but who are the workers who are going to build all of this infrastructure to support that?,” Gerber said. “Then what happens if there is a conflict on top of that. Then you're talking about a double surge.”

    Last week, President Donald Trump announced plans to create a U.S. Space Academy to “educate and train an entire generation of skilled service members, engineers, and civil operators.” 

    “Think about what the volume throughput of the space academy is likely to be. I mean, you're only talking about what, a couple hundred graduates a year,” Gerber said. “This is not sufficient, right? I mean, that's not really happening at a scale that would impact what we're talking about.”

    RAND researchers recommended that the Space Force and Pentagon focus new policy on growing workforce development by funding additional internships and vocational, bachelor's, and advanced degree levels scholarships for science, technology, engineering, and math students, investing in fellowships, and promoting space engineering careers. 

    Researchers said the Space Force should also “allow Reserve Officers’ Training Corps graduates and specialized program scholars to fulfill service obligations by working in qualifying” space defense firms.

    Additionally, researchers said the defense industry should also look to automation as a supplement to those workforce challenges.

    “Notably absent from these discussions were mentions of process automation, robotics, or artificial intelligence (AI)–enabled productivity tools as means to reduce the inherent labor intensity of space manufacturing, assembly, integration, and testing,” the report said. “Stakeholders appear to be addressing a structural productivity challenge primarily through volume-based hiring and training strategies and giving little weight to automation as a complementary surge enabler.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Defense Department is expected to release its anticipated cyber strategy early next week, according to three people familiar with a plan that officials argue will more tightly integrate digital operations into U.S. military campaigns.

    One predicted the strategy would be released Tuesday, though the other two said the date could change. All three spoke on the condition of anonymity to discuss the release.

    The strategy has been under development for months by the office of Katie Sutton, the assistant defense secretary for cyber policy and principal cyber adviser to the secretary. It will be the department’s first overarching cyber framework since 2023 and is expected to be accompanied by an action plan.

    Officials initially said it would be completed during the summer. Sutton told lawmakers in April that the strategy would seek to build “the most capable, lethal and agile cyber force in the world,” able to defend military networks, gain strategic advantage, and give the president more options to deter or defeat adversaries.

    The plan is expected to center on three priorities Sutton outlined to Congress: integrating cyber capabilities across every domain of warfare, gaining an advantage over adversaries, and reorganizing the military’s cyber forces to improve their skill and agility.

    A job posting on the website of defense and technology provider Parsons seeks support for the Pentagon’s cyber policy office and says the strategy’s action plan contains about nine strategic initiatives and 34 lines of effort. It’s not clear when the role was posted, and the specific initiatives’ contents are not disclosed in the description.

    The approach would aim to further move cyber operations into routine military planning, meaning tools that can disrupt an enemy’s communications or computer systems would be planned alongside airstrikes and other conventional operations. Officials have cited recent Trump-era operations in Venezuela and Iran as examples of this integration.

    The strategy will also translate the White House’s March cyber strategy into more specific military priorities and investments. That document pledged to deploy the government’s entire toolkit of offensive and defensive cyber capabilities, disrupt threats before they reach U.S. networks and impose greater consequences on foreign hackers.

    The posture is not entirely new. The Pentagon’s 2023 strategy embraced “defend forward,” an approach that calls for confronting malicious cyber threats closer to the source of their operations. The new strategy is expected to emphasize delivering cyber options to combatant commanders and integrating them with conventional military power.

    Artificial intelligence is also expected to feature prominently. Sutton said in June that the strategy would set a “clear and specific vision” for enabling AI across the cyber force, supported by coordination among Cyber Command, the Pentagon’s chief information office and its Chief Digital and Artificial Intelligence Office.

    The Pentagon and National Security Agency have been expanding access to commercial models that can find vulnerabilities and automate parts of cyber operations. NSA Deputy Director Tim Kosiba said last week that the agency wants access to “all the models” and is holding discussions with leading developers.

    The efforts, broadly, are closely tied to Cyber Command 2.0, the Pentagon’s overhaul of how it recruits, trains and employs cyber personnel. The initiative emphasizes greater specialization and purpose-built teams, along with a Cyber Innovation Warfare Center intended to bring commercial technology directly to operators for testing.

    The strategy arrives as officials continue grappling with myriad cyber threats to U.S. systems, including an apparently extensive Iran-linked campaign to access water systems and other critical infrastructure around the nation. The Defense Department has also begun an accelerated migration to quantum-resistant encryption, with a goal of protecting its highest-impact systems by 2030.

    The administration separately moved last month to let vetted U.S. companies conduct government-approved operations against foreign cybercriminal groups. The initiative also raises questions about how the departments of Justice, Homeland Security and Defense will divide responsibilities and avoid interfering with one another’s cyber operations.

    Contact Dave DiMolfetta on Signal: did.99

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Google on Wednesday announced Gemini 3.8 Flash Cyber, which it described as its most capable cybersecurity model, and has made it available to a set of trusted defenders via a new initiative called the Fairwind Program. “The Fairwind Program gives high-priority defenders (like governments, healthcare providers, and telecommunications services) early access to advanced models that help them

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Security teams rarely struggle because they lack data. More often, the challenge is deciding which signals actually deserve attention. Modern security environments generate information about suspicious IP addresses, malicious domains, malware samples, phishing infrastructure, ransomware activity, attacker behavior, and thousands of other indicators. Without context, that volume can quickly become another source of noise. Threat […]

    The post Threat Intelligence: Definition, Benefits, and Use Cases appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • An active malware campaign is using bogus software-download websites to impersonate trusted vendors and distribute malicious installers. “The campaign has targeted users looking to download popular software and has resulted in compromises across multiple organizations and industries, primarily affecting China-based operations of multinational organizations and Chinese-speaking users,” Microsoft

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository’s own Git configuration names a command that the agent runs on the developer’s machine, four of them still unpatched at publication. The command executes as the user, outside the agent’s sandbox and without an approval prompt, and exploitation requires the repository to arrive

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A Chinese-speaking cybercrime cluster known as Gambling Goblin has been observed installing malicious Apache modules on compromised web servers run by Brazilian government and educational institutions, and using them to divert visitors to attacker-controlled pages promoting online gambling and sports betting. Check Point Research said it has tracked the campaign since mid-2025. The modules

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Mozilla has introduced a built-in ad blocker for Firefox on iOS, providing iPhone users with a native option to block many third-party advertisements and advertising-related trackers before they load in the browser. Announced on September 1, 2026, this feature aims to reduce intrusive browsing elements such as pop-ups, overlays, and display advertisements that take up […]

    The post Firefox for iPhone Adds Built-In Ad Blocker to Block Third-Party Ads and Trackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A Russian national has been extradited to the United States to face charges over an alleged phishing operation that used 255 fake accounts on a freelance employment platform to distribute malicious Microsoft Excel files to roughly 80,000 users. Federal prosecutors allege that Searzhudin Tamirlanovich Aktulaev, 40, orchestrated the campaign between June 2016 and November 2017, […]

    The post 255 Fake Accounts Used to Send Malicious Excel Files to 80,000 Freelancers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Virtualizor said hackers used a Border Gateway Protocol (BGP) hijack to divert Softaculous traffic. The hackers then used the diverted update traffic to deliver a malicious Virtualizor package to some installations. A hosting-provider account separately said 5 of its 34 checked Virtualizor hypervisors sustained root-level compromise. The incident window ran from approximately August 28 at 20:57

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶