• The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added six flaws to its Known Exploited Vulnerabilities (KEV) catalog, including a high-severity security vulnerability impacting Citrix NetScaler ADC and NetScaler Gateway, citing evidence of active exploitation. The vulnerabilities are listed below – CVE-2019-1068 – A remote code execution vulnerability in 

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Russian-linked cyber espionage operators are expanding account-compromise operations by combining OAuth abuse, device-code phishing, credential-harvesting infrastructure, and suspected Evilginx reverse-proxy setups. GTIG assesses with moderate confidence that UNC6293 is an initial-access subcluster of ICE RELIC, formerly tracked as APT29, Cozy Bear, and Midnight Blizzard. Rather than exploiting a software flaw, the operators abuse legitimate authentication […]

    The post Russian Cyber Espionage Infrastructure Uses Evilginx and OAuth Phishing to Steal Accounts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A newly documented Windows backdoor named SLEEPWALKER combines passive network monitoring, DLL side-loading, and encrypted bytecode to remain dormant until attackers deliver a precisely crafted trigger packet. The malware does not beacon to a conventional command-and-control server, making it particularly difficult to identify through outbound-traffic monitoring alone. The 59,904-byte unsigned file masquerades as Microsoft’s dpapi.dll […]

    The post SLEEPWALKER Backdoor Uses Magic Packet, DLL Side-Loading and In-Memory Shellcode Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • AnonyMousKIT, an AI-enabled Phishing-as-a-Service (PhaaS) platform built to turn stolen Apple devices into monetizable assets. The service automates the collection of an owner’s device passcode, Apple ID credentials and live two-factor authentication (2FA) codes information that can enable criminals to remove Activation Lock and resell a stolen device. Rather than relying on a single phishing […]

    The post AnonyMousKIT PhaaS Automates Apple ID, Device Passcode, and Live 2FA Harvesting Across Five Channels appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Ubiquiti has released security updates to address 22 vulnerabilities across its UniFi ecosystem. These updates include multiple critical flaws that could allow unauthenticated command injection, authentication bypass, and privilege escalation on exposed devices. Documented in Security Advisory Bulletin 067 and published on August 26, 2026, these vulnerabilities affect several components, including UniFi OS, UniFi Protect, […]

    The post Ubiquiti Fixes 22 UniFi Flaws Enabling Command Injection, Authentication Bypass and Privilege Escalation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Apache has released version 11.0.25 of Apache Tomcat to address ten security vulnerabilities, including multiple flaws that could lead to authentication bypasses, access-control evasion, and denial-of-service (DoS) conditions. The most serious issues affect Tomcat’s processing of security constraints, authentication mechanisms, HTTP/2 implementation, and behavior of the RewriteValve. All ten vulnerabilities impact releases of Apache Tomcat […]

    The post Apache Tomcat Flaws Let Attackers Bypass Authentication and Security Controls, Trigger DoS Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The U.S. Department of Justice (DoJ) on Wednesday announced the disruption of two hacking platforms named QScan and QTRouter operated by Chinese threat actors to target critical infrastructure and other sensitive networks in the country. The activity has been attributed to a Chinese state-sponsored group known as QTFY, employed by Nanjing Xinjiuwei Network Technology Company (南京鑫玖维网络科技有限公司).&

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The FBI seized three internet domains Wednesday that prosecutors say Chinese government-backed hackers used to target U.S. agencies, critical infrastructure and other networks.

    The Justice Department attributed the tools, known as QScan and QTRouter, to a hacking group called QTFY. Court records say the group operates through Nanjing Xinjiuwei Network Technology Company, a private Chinese firm that sold hacking services to China’s main civilian intelligence agency and its military.

    The group targeted networks belonging to NASA, the Federal Reserve, the National Institutes of Health, the U.S. Senate and the Energy, Justice and Health and Human Services departments, according to an FBI affidavit. Hospitals, telecommunications providers, power companies, banks and defense contractors were also targeted.

    The filing does not say that every attempted attack succeeded. A 2019 attempt against NASA, for example, failed because the agency had already fixed the security flaw the hackers tried to exploit.

    China’s embassy in Washington, D.C. did not immediately respond to a request for comment. Chinese officials have repeatedly denied Beijing sponsors hacking operations against the United States.

    QScan was used to look for weak spots while QTRouter helped the hackers hide. QScan searched the internet for vulnerable systems and tried to break into them. QTRouter sent the hackers’ traffic through hijacked routers and other internet-connected devices, commercial proxy services and rented servers. The setup was meant to make the activity appear to come from somewhere other than China.

    QScan carried code for more than 200 different attacks and could work on a massive scale. On one day in 2024, it processed more than 2 million scanning or exploitation tasks, according to the affidavit.

    Lumen Technologies, which tracked the same infrastructure for roughly a year, described the operator as an “infrastructure quartermaster” that provided other China-linked hackers with a ready-made service for finding targets and hiding their tracks. Lumen said networks first examined by QScan were later seen communicating through the group’s concealed network, suggesting some operations had moved from scouting targets toward attempts to break in. The system also mixed malicious traffic with that of ordinary internet users, making it harder to spot and block.

    “These tools were used by PRC cyber actors to hide the origin of their attacks,” FBI Director Kash Patel said Wednesday.

    Investigators said QTFY could take advantage of newly discovered security flaws quickly and at a large scale. In May 2024, the group allegedly exploited a flaw in Check Point security equipment shortly after it became public, stealing server settings and user account information from more than 300 U.S. organizations, according to court documents.

    Several months later, the hackers allegedly used a previously unknown flaw in an Ivanti product to access three national laboratories, NIH, another HHS agency and a U.S. security-device manufacturer.

    Investigators also tied the group’s infrastructure to attempted attacks against an Ohio medical center during the COVID-19 pandemic, financial organizations in Michigan and South Korea and an insurance organization in Missouri.

    The case highlights how Chinese intelligence and military agencies continue to heavily rely on private companies for cyber operations and services. 

    Wednesday’s announcement follows years of similar FBI operations against Chinese hacking infrastructure. The bureau last year removed PlugX surveillance malware from more than 4,200 U.S. computers infected by another state-backed hacking group.

    Federal authorities have also dismantled a network of compromised routers, cameras and other devices associated with Flax Typhoon and disrupted a separate network used by prominent Chinese hacking collective Volt Typhoon to hide attacks against U.S. critical infrastructure.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have discovered additional infrastructure and previously undocumented malware associated with Nimbus Manticore, an Iranian state-sponsored hacking group affiliated with the Islamic Revolutionary Guard Corps (IRGC). Group-IB, in a new analysis published today, described the cyber espionage actor as among the most active Iranian APT groups in 2026. Nimbus Manticore (aka

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Army officials have selected five firms to build nuclear microreactors at U.S. military bases as a bid to create energy independence, though the nation still relies heavily on imported enriched uranium for such projects. 

    The service and the Defense Innovation Unit unveiled the initiative, dubbed “Project Janus,” at last year’s Association of the U.S. Army Conference in Washington, D.C. Now, officials are awarding up to $2.2 billion to the pool of five companies through a milestone-based Other Transaction Authority contract with fixed-price milestones to build out their microreactor technology on Army bases. Those firms and bases, announced on Wednesday, are: 

    • Antares Nuclear, Inc. – Fort Bragg, North Carolina
    • BWXT Advanced Technologies, LLC – Fort Campbell, Kentucky
    • General Atomics Electromagnetic Systems – Fort Hood, Texas
    • Radiant Industries, Inc. – Fort Benning, Georgia
    • Westinghouse Government Services – Fort Drum, New York

    “We now know that our domestic electric grid is potentially at risk in a conflict. We also know that we will not necessarily be able to move fossil fuels easily wherever we need them to go,” said Jeff Waksman, the Army’s principal deputy assistant secretary for installations, energy and environment. “Right now, all critical infrastructure that the Army has is backed up by some form of liquid fossil fuel, primarily diesel. So that makes nuclear energy just a natural game changer for the Army.”

    Janus project officials said with additional private investment from the firms, they anticipate up to 20 microreactors across the bases. The service competition paves the way for a program of record to deliver a small nuclear powerplant to an Army installation by 2028. Currently, the U.S. doesn’t have operational nuclear microreactors, and the country only enriches a very small percentage of the world’s uranium supply. Energy Department and National Nuclear Security Administration efforts to grow the supply and produce high-assay low-enriched uranium, or HALEU, are still underway. However, service officials remain optimistic the supply chain problems will not set back their microreactor plans.

    “We expect sufficient prioritization to ensure that we have the uranium that we need for our fastest moving reactors,” Waksman said, acknowledging that the microreactor effort is “probably going to push beyond what our supplies are as a nation.”

    “This is really an all-of-government effort. We are tied in very closely with the folks at DOE and NNSA, trying to stand up new enrichment capability, and we will do what we can to deliver what we need through stockpile, and then to hopefully have fresh enrichment capable of delivering some of the HALEU for the later reactors in this program.”

    In November, the Army named nine bases as finalists for the microreactors, but  excluded Fort Wainwright, Alaska; Holston Army Ammunition Plant, Tennessee; Joint Base Lewis-McChord, Washington; and Redstone Arsenal, Alabama; from the final five. 

    Waksman said it was a “matching process” between the firms and the sites, and some contractors prefer to work in certain areas due to their relationships with utility companies near the bases they were paired up with. While one of the goals of the Janus Project is to cut down on energy supply chain issues for U.S. bases overseas, planners said they want to prove the technology can work stateside first.

    “The intent here is to choose the lowest hanging fruit, we want to choose sites that we think are going to be the cheapest and fastest to deploy and the easiest,” Waksman said. “This is already very difficult. There's a reason no one has actually built a fully operational commercial nuclear microreactor before, so we don't want to make this harder on ourselves by trying to deliver this to some island or some foreign country. We want to demonstrate that we can do this here in the 50 U.S. states, and then if this is a success, then we can talk about possibly deploying somewhere else in the future.”

    Project Janus is not the first military microreactor initiative. The Army is taking lessons from Project Pele, the Defense Department’s mobile reactor project, and based the contracting mechanism off of NASA’s Commercial Orbital Transportation Services program.

    The Army’s selection of firms also follows an Air Force initiative to build a nuclear microreactor at Eielson Air Force Base, near Fairbanks, Alaska. Waksman said the Army should have an announcement in the “not too distant future” about how the services are working together on those projects.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶