• A critical vulnerability in Gogs, the self-hosted Git service, could allow authenticated attackers to execute commands on the server by abusing path traversal during creation. Tracked as CVE-2026-52813, the flaw was reported by Aikido security researcher Jorian Woltjer and fixed in Gogs version 0.14.3. The issue stems from an API endpoint that accepted unsanitized organization […]

    The post Critical Gogs Flaw Enables Remote Code Execution Through Path Traversal appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A newly documented TerminalFix campaign is using fake Cloudflare CAPTCHA prompts to trick users into manually executing malicious PowerShell commands, ultimately turning compromised Windows devices into reverse-tunnel pivot points for attackers. Microsoft said the activity targets organizations through compromised websites that replace legitimate content with a convincing Cloudflare Turnstile-style “Verify you are human” overlay. Rather […]

    The post Hackers Use Fake Cloudflare CAPTCHA to Deploy TerminalFix Reverse Tunnel appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A Chinese-speaking threat actor tracked as TA4922 is deploying the PackClient remote access trojan via tax-themed phishing campaigns targeting organizations in mainland China and India. The activity, observed by Proofpoint in May and July 2026, demonstrates the group’s expanding initial-access capabilities and the increasing availability of sophisticated malware on Chinese-language Telegram marketplaces. PackClient is a […]

    The post Chinese Hackers Deploy PackClient RAT via Tax-Themed Phishing Attacks to Steal Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Berlin’s state government has confirmed that it is the target of an extortion attempt following the August compromise of the city’s state administrative network, and said it will not meet the extortionists’ demands. The same statement disclosed that forensic work had found further data outflows in the portfolio of the Senate Department for Mobility, Transport, Climate Protection and Environment

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August 20 and August 25, 2026. The vulnerability, designated GHSA-7g4w-cg88-2cq2, is rated Critical by Cosmos Labs and was published without a CVE identifier, a weakness classification, or a CVSS score. Affected versions are < 0.6.2 and >=

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • President Donald Trump’s mandate for a new “Space Academy” puts defense leaders under a NASA-led initiative that could mean military service requirements for the future school's graduates.

    Trump signed the executive order on Friday at NASA’s Johnson Space Center in Houston during a ceremony where he presented the Congressional Space Medal of Honor to the four crew members who are to take the Artemis II spacecraft around the Moon. It appoints a commission, including Defense Secretary Pete Hegseth and Air Force Secretary Troy Meink and chaired by NASA administrator Jared Isaacman, to “strengthen the nation’s space workforce” by planning for a new national academy. 

    “Given the rapid growth of the U.S. Space Force and commercial space industry, and the expansion of our ambitions to the Moon and far beyond the Moon, it’s clear we will need to educate and train an entire generation of skilled service members, engineers, and civil operators,” Trump said at the ceremony. 

    The idea of a Space Academy isn’t new, but one defense expert told Defense One it’s unclear how a new institution would further the administration’s military space-related ambitions. The Space Force does not lack for recruits, although its civilian workforce was cut during last year’s federal workforce purge. Currently, the Space Force commissions new officers through the Air Force Academy, ROTC, or Officer Training School. Friday’s executive order instructs the commission to consider imposing military-service requirements on academy graduates. 

    The order calls for an evaluation of “service obligations for graduates, including service in the armed forces” and explores “prerequisites for applicants, including citizenship status, security clearances, and government employment or military status.” 

    Air Force officials declined to comment and clarify details of the executive order. White House spokespeople did not immediately respond when asked for details and how a Space Academy would interact with the armed services and officer-commissioning pathways. The commission has 120 days to submit a report to Trump “proposing key details” to establish the Space Academy.

    A White House fact sheet said the Space Academy will “combine rigorous technical education with leadership development and public service, preparing graduates for careers supporting America’s military, civil, and broader space enterprise.”

    “In the years ahead, we will return NASA astronauts to the lunar surface, build the Moon Base, get underway on nuclear power, ignite the orbital economy and launch more missions of science and discovery,” NASA’s Isaacman said in a news release. “I have no doubt that so much of the future talent that will graduate and contribute to these exciting endeavors will be educated at the United States Space Academy.”

    The Heritage Foundation’s Project 2025, the conservative think tank’s playbook for the Trump administration, pitched the idea of creating a “Space Force Academy.” 

    “Explore creation of a Space Force Academy to attract top aero–astro students, engineers, and scientists and develop astronauts,” the playbook read. “The academy could be attached initially to a large existing research university like the California Institute of Technology or MIT, share faculty and funding, and eventually be built separately to be on par with the other service academies.”

    Todd Harrision, the American Enterprise Institute’s defense budget and space expert, called the executive order “out of left field” and fears it will further muddy civilian and military roles.

    “NASA, the Space Force, and the intel space agencies—they all have very well-defined lanes and responsibilities and areas of expertise,” Harrison said. “Intermingling them like this does not sound like a good idea.” 

    Harrison also questioned the idea of a government-run “Space Academy” when there’s world-class private and public universities that produce top-notch aerospace and engineering students. The Space Force recruits from such schools under its University Partnership Program. 

    Trump’s push to bolster space-related careers comes as the Space Force works to rebuild its civilian workforce after the administration’s hasty cuts last year.Officials have been aggressively trying to hire talent to manage a requested $71.3 billion service budget, which would be the largest year-on-year increase, by percentage, for any military service branch since 1952, according to a report from the Aerospace Corporation.

    The Space Force hasn’t struggled to hit its uniformed recruiting goals. Service leaders have pitched plans to double the number of its guardians. Harrison said it’s not clear how the Space Academy aligns with those realities.

    “It’s not consistent with the other workforce changes the administration has been making,” Harrison said. “It doesn’t appear there is a clear need for this. The other thing too is … they’re going to need authorization and funding from Congress to actually do this. So, what is their plan there?”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • When a Marine planner is trying to determine whether a deployed unit has everything it needs, they must query several separate databases while cross-referencing supply levels, maintenance records, and more to create a spreadsheet. Marine Corps Forces, Pacific, is hoping an AI-powered logistics platform can make that process much faster and easier.

    Defense tech company Tagup on Thursday announced a modification to its $2.1 million Small Business Innovation Research contract that will extend the use of its Manifest platform to certain theater sustainment cases in support of MARFORPAC. The platform is already being used by a handful of Marine units at the tactical and operational levels—and the company said its application in Marine medical logistics has resulted in a 25 percent reduction in purchasing costs and a 30 percent reduction in materiel handled, “with no compromise to readiness.”

    Jon Garrity, CEO and co-founder of Tagup, said Manifest pulls from a variety of data sources to help Marines decide “what materiel, what resources do you posture where and when, and ultimately tying it back to measures of output or outcomes.”

    On the supply side, it looks at the industrial base, he said. “We loaded over 4 million vendors in platform, we’ve got over 16 million parts represented. What are the lead times for each of those? How do we think about that? What are the locations of those vendors? What are the sources of supply?…and then the demand side is also, of course, critical.”

    Historically, Garrity said, “at a theater level, a lot of this analysis was done at a headquarters level, not driven from the micro data. Imagine, for ground vehicles, you have every single maintenance action that’s ever been taken….That’s not used, generally speaking, to build theater-level [courses of action], and so that’s now the opportunities. Hey, we have technology and capability, AI capabilities that allow us to take the micro data, every single service request, every bit of inventory on the demand side, and then connect it to the supply side. What do we have? Where is it? Where’s the industrial base to be able to connect the two?”

    Sustaining forces that are spread across the vast Indo-Pacific is a challenge, a MARFORPAC spokesperson told Defense One via email. “Marine units are highly dispersed, which intensifies standard logistics friction points.”

    To overcome that challenge, the command “is testing how a unified logistics decision-support tool might automate” the data aggregation that could otherwise take several days of work, “to see if the software can ingest those disparate data streams and generate comparative courses of action—quantifying the impacts on readiness, cost, and operational risk—in near real-time or a matter of hours.”

    Garrity said Manifest can also help Marines better use the materiel they send forward, “so as a result, you’re maintaining higher levels of readiness for the end items that that materiel supports, you’re… making better use of the space available on a [deployed ship], and you’re typing up less capital, less cash, in the materiel that’s not being used effectively.”

    The platform, which the company calls “an AI-powered multidimensional logistics decision engine” has a conversational AI interface called Argus that allows users to ask questions “and explore scenarios in plain language.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A payment portal is where the operational side of payments lives. It’s where finance teams check settlement status,…

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • HONOLULU—The better the U.S. gets at fighting in conventional ways, the more likely it is that adversaries will avoid a conventional conflict, the head of Special Operations Command Pacific said.

    But that doesn’t mean they will avoid a fight altogether, Army Brig. Gen. Michael Rose said at the Indo-Pacific Irregular Warfare Symposium here last week.

    “If an adversary believes that a direct military confrontation with the United States or our allies is likely to end badly for them, that doesn’t necessarily make competition disappear. It changes how the adversaries will compete with us. They look for seams. They operate below thresholds. They exploit ambiguity. They use proxies, information, economic coercion, cyber capabilities, maritime forces, and other asymmetric approaches to achieve objectives without presenting us with a conventional fight for which we are preparing. In other words, our conventional superiority can actually increase the incentive for our adversaries to employ irregular warfare,” he said.

    So, in a theater where the phrase “deterrence is our highest duty” is nearly as common as aloha shirts at military functions, how should the U.S. approach technology and competition?

    “We must be able to outfight and outthink our adversaries,” and taking an irregular warfare approach to autonomy can help, Rose said. 

    That means moving “beyond autonomous systems towards autonomous campaigning, moving beyond exquisite systems toward distributed networks, moving beyond U.S. capability toward allied and partner ecosystems, moving beyond conventional deterrence to deterrence through resilience and denial, and moving beyond asking how many autonomous systems will help us win a future war, and instead asking how they can help us shape today’s competition.”

    In the Indo-Pacific, he said, the “fundamental problem” is scale. The distances are too vast, the number of strategically important locations too numerous for persistent presence. But autonomy “potentially changes that equation.”

    But military leaders must not rush to buy cool new tech without first identifying the problem they want to solve, said Maj. Gen. Jeffrey Van Antwerp, who turned over command of SOCPAC to Rose earlier this month and now leads the Army’s 25th Infantry Division.

    “You can get caught up in trying to get the better technology, but you haven’t done the fundamental things to be able to leverage that technology well,” Van Antwerp said. “We don’t have the time just to experiment without established objectives.”

    Adm. Frank Bradley, who leads U.S. Special Operations Command, outlined the challenge at the start of the symposium: “We face an increasingly weaponized cyber domain, a virtual domain that is transpiring and transmuting across our societies, an increasingly challenged space-based surveillance environment, a contested electromagnetic spectrum, and a rapidly emerging agent-driven artificial intelligence challenge to our security of our digital ecosystems.”

    The next day, as the symposium came to a close, deputy INDOPACOM commander Marine Lt. Gen. George Rowell reiterated the trends Paparo believes are reshaping modern conflict. The megatrend that includes all three is “the absolute dominance of information in decision superiority,” he said.

    “Our forces must be organized to observe, orient, decide, act, and learn faster than the adversary. Whoever can do that, whoever can adopt that mindset, whoever can adopt those technologies and training fastest will certainly win the day.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company released a fresh emergency fix with additional hardening. “This vulnerability gives an unauthenticated attacker remote control over PaperCut’s trusted configuration, which could be used to execute arbitrary Java code inside the application’s

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶