• BeyondTrust has revealed two high-severity vulnerabilities in its Endpoint Privilege Management (EPM) Windows Deployment product, which could lead to local privilege escalation and bypasses of anti-tamper protections on affected devices. These vulnerabilities are tracked as CVE-2026-40144 and CVE-2026-40145 and affect all versions of Endpoint Privilege Management for Windows before version 26.1.2. The company has released […]

    The post BeyondTrust Endpoint Privilege Management Flaws Enable Local Privilege Escalation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Oracle has released 943 security patches as part of its August 2026 Critical Security Patch Update (CSPU), addressing newly disclosed vulnerabilities across its enterprise software portfolio. This update affects Oracle products under both Premier Support and Extended Support. It includes fixes for flaws tracked by various CVE identifiers. Oracle Releases 943 Security Patches The vulnerabilities […]

    The post Oracle Releases 943 Security Patches to Fix Critical Vulnerabilities Across Enterprise Products appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A threat actor calling itself “Ransom Busters” is targeting ransomware victims with a deceptive recovery offer, claiming it can restore encrypted files and delete stolen data from ransomware infrastructure. GuidePoint Security’s Research and Intelligence Team (GRIT) assesses with moderate confidence that the purported recovery service is actually a ransomware affiliate attempting to divert extortion payments […]

    The post Ransom Busters Ransomware Affiliate Targets Victims With Fake Data Recovery Extortion appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • More than 30 domains tied to MacSync Stealer, exposing a rotating macOS-focused infrastructure that supports payload delivery, command-and-control, credential theft, staging, and chunked data exfiltration. The investigation shows why defenders should prioritize repeatable endpoint and network behavior over static domain-based detections. Observed executions originate from interactive zsh sessions and use curl to fetch payloads from […]

    The post Microsoft Links 30+ Domains to MacSync Stealer’s Credential-Theft and Data-Exfiltration Infrastructure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • D-Link has disclosed and patched 15 Common Vulnerabilities and Exposures (CVEs) affecting its DWR-M961 4G/LTE router, specifically hardware revision C1. This follows the discovery of multiple command injection and buffer overflow vulnerabilities in the device’s web management components. These vulnerabilities affect non-US DWR-M961 devices running firmware versions 1.1.2_C1_202602110044 and earlier revisions. D-Link DWR-M961 Router Flaw […]

    The post D-Link DWR-M961 Router Hit by 15 Command Injection and Buffer Overflow Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The RAVEN offensive framework can turn compromised Elasticsearch and Kibana environments into durable data-theft and persistence operations. RAVEN, short for Reconnaissance & Attack on Vulnerable Elasticsearch Nodes, is an open-source modular framework built to assess Elasticsearch and Kibana security posture across reconnaissance, exploitation, exfiltration, persistence, and cleanup workflows. Its latest walkthrough focuses on post-exploitation against […]

    The post RAVEN Tool Steals Entire Elasticsearch Databases and Rebuilds Deleted Backdoors appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The newest White House tech strategy pushes faster development of emerging technologies for the military, gives defense innovators more room to experiment, and will broaden the federal market for young defense tech startups. But it also doubles down on a particular approach to developing AI—one that favors a handful of well-connected U.S. tech companies at the expense of other innovative approaches. That could benefit China and slow the U.S. military from getting the tools commanders actually want. 

    Here’s a breakdown of the winners and losers.

    Winners: swarms, deployed AI, faster military technology

    The strategy puts a big emphasis on new, tech-driven approaches to warfare, particularly the use of drones and even drone swarms alongside manned and legacy assets. Specifically, it calls for “optimal combinations of lower-cost (and sometimes lower-tech or attritable) platforms that can be deployed in larger numbers and complement more limited numbers of sophisticated platforms.”

    Over the last decade, efforts to field autonomous aircraft alongside fighter jets or ships, for instance, have been uneven at best—even when the Pentagon changed its talking points on the necessity for large numbers of low-cost drones—constrained by programs' internal buying policies and previous commitments to other programs' investments. The Replicator program provides a vivid example, hailed as an essential pathfinder but receiving only $1 billion in funding.

    The new strategy sets specific “priority areas” for new military research and spending: undersea, space, and AI and autonomy. These priorities are the most relevant to “deterrence in the Indo-Pacific”—as in, preventing China from launching a major conflict. Within those priority areas, it lists “multi-agent systems and swarm intelligence” and various uses of autonomy, from robotics to command and control, as “critical.”

    The strategy also takes square aim at policies and practices that slow down military buying of new technologies. Building off other executive orders, it pushes Pentagon buyers to bypass traditional acquisitions in favor of a “mix” of contract types, such as performance-based contracts and other transaction authorities, or OTAs. It also resets the tone for military purchasing toward “faster non-traditional approaches that may involve higher risk but offer high potential reward,” something that commanders, younger defense tech leaders, and even lawmakers have long pushed for.

    Perhaps most importantly, it also takes steps to actually grow the market for younger defense tech players beyond just the military. It takes aim at foreign military sales rules and export controls that hobble the sale of much defense tech to allies. That will be especially important for newer defense companies trying to secure early-stage investment to survive. And it calls for other federal agencies to build “streamlined pathways” for smaller companies to at least get their foot in the door, even via partnerships that don’t offer young companies much more than access to federal infrastructure, such as “Cooperative Research and Development Agreements (CRADAs) and Agreements for Commercializing Technology (ACTs).”

    Losers: open weights, small AI

    While the strategy champions smaller, more innovative players in defense, it also weighs in on the debate about what the future of AI should look like and comes down on the side of Big Tech companies that are pushing a specific, energy-intensive, and deeply unpopular future of AI over emerging strategies favored increasingly by researchers. China will benefit from the oversight, Michael Schiffer, a partner at Scalare Advisors and former Deputy Assistant Secretary of Defense for East Asia, wrote on Tuesday for Just Security.

    In its section on critical technologies for support, the strategy lists “Foundation models, including large language, multimodal, and world systems.” The section also includes niche tech areas like brain-computer interfaces but omits entirely open-weight models and open-source software development.

    Here’s why that’s important:

    Foundation models, such as today’s large language models from companies like OpenAI and Anthropic, represent just one potential method for building AI tools—one that relies heavily on pushing as much data through as much computational infrastructure as possible to achieve something that looks like “reasoning,” but that’s really just plain old probability calculation.

    Anthropic co-founder Dario Amodei helped to transform that concept from a research effort into a massive endeavor to acquire computational resources and data as quickly as possible. Amodei explained it simply in a 2023 discussion with Dwarkesh Patel. “It turns out that raw scale—more compute and more data—drives capabilities far more powerfully than complex algorithmic inventions or hand-crafted architectural changes.”

    A small handful of frontier AI labs, and their big cloud computer backers, are in a literal race for company survival because there’s only so much power, so many chips to continue to pursue “raw scale.” If, as Amodei says, just having more “more compute” and “more data” means having the best performing models, then whoever has the most of those resources can push out any competitor. 

    It’s no wonder the AI race has become a concentration of wealth and power, in just a handful of labs with their large cloud compute backers. No wonder, also, that public perception of AI has plummeted: just 18 percent of Americans believe it will be a positive force for the United States, one new poll found. But the foundation model approach does have its fans: large-scale U.S. cloud providers who have invested billions in foundation model labs. 

    The very way the strategy frames the issue plays to the idea that AI has one future and that winning the AI race or achieving dominance means favoring a handful of players. But it’s also a theme that plays out in many of the White House’s policies and executive orders around AI.

    Meanwhile, alternative approaches to building AI are emerging. Rather than race to build more data centers and find more data to throw at the problem of AI, they use parameters that already exist that are freely available, called open weight models, as opposed to closed weights that are protected intellectual property. And they use those in conjunction with alternative architectures that make using those models more energy efficient. Many of these alternative approaches to building AI perform almost as well as what Anthropic and OpenAI are offering, and have the potential to do so at far lower energy costs. 

    Why it matters to the military

    The finite amount of compute power, data, and good will when it comes to AI could become a strategic problem for the U.S. military. If public sentiment undermines congressional and financial support for research and development in the field, officials fear, the country might lose its AI edge to China, which has openly declared its intention to pull ahead.

    In the meantime, frontier-AI models also create tactical and operational problems for the militaries that use them. Troops and military units in the field can’t count on the connectivity that tools based on large models need. And in a new report for the Carnegie Endowment for International Peace, Jake Steckler writes, “Ukraine’s computational architecture, consisting of Western cloud access, domestic data centers, and forward-deployed compute nodes, is already straining as it integrates more AI into targeting and coordination.”

    Open-weight models don’t appear in the new strategy, though it does list niche and far-fetched concepts like brain-computer interfaces as “critical.” That’s a huge oversight and a potential gift to China, argues Schiffer.

    “China’s advances in open-weight AI have exposed the limits of a U.S. strategy built too heavily on the idea of denying them access to American technology and American markets,” he said.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A critical vulnerability in the Apache HttpComponents Client can allow man-in-the-middle attackers to impersonate trusted servers when applications use the asynchronous version of HttpClient. This vulnerability is tracked as CVE-2026-71290 and arises from improper TLS hostname verification in Apache HttpComponents Client versions 5.4 through 5.6.3. Apache HttpComponents Client Flaw The issue specifically affects applications configured […]

    The post Critical Apache HttpComponents Client Flaw Lets Attackers Impersonate Servers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability affecting Broadcom VMware vCenter to its Known Exploited Vulnerabilities (KEV) Catalog. The vulnerability, tracked as CVE-2026-59310, is a path traversal flaw that enables arbitrary code execution in affected vCenter deployments. VMware vCenter Path Traversal Flaw CVE-2026-59310 impacts the VMware vCenter Syslog Server […]

    The post CISA Warns Hackers Are Actively Exploiting VMware vCenter Path Traversal Flaw appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A Google-sponsored search result for Claude installation instructions is being used to deliver a sophisticated macOS stealer and remote-access trojan (RAT) named MacSync. The campaign abuses a legitimate Claude shared-conversation page on the claude.ai domain, demonstrating how trusted AI-hosting infrastructure can be weaponized to bypass users’ normal phishing instincts. The intrusion investigated by Huntress began […]

    The post Fake Claude Install Guide Steals Mac Passwords and Turns Trusted Crypto Wallet Apps Into Phishing Traps appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶