• A China-linked threat group tracked as Jewelbug has turned public Google Docs into a resilient command-and-control delivery channel, embedding freshly obfuscated malware payloads in documents that victim implants retrieve and execute. The technique allows malicious traffic to resolve through Google-owned infrastructure, helping the operators blend into legitimate web activity and potentially evade reputation-based filtering. Jewelbug, […]

    The post Jewelbug Uses Public Google Docs as Malware Command-and-Control Delivery Channel appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Defense Advanced Research Projects Agency is exploring how to scale the reliable transmission of quantum data and pave the way for a viable quantum internet by giving networking networking company Qunnect an award to further deploy networks designed to handle qubit traffic. 

    Pursuant to the contract, Qunnect is granted new funding to further deploy its Carina quantum networking solution, the company announced on Thursday. 

    Qubits are naturally more fragile than classical bits, and transmitting them from one node to another has been a persistent problem in scaling a viable quantum network. Carina addresses several outstanding problems in safely transmitting quantum data by operating at room temperature, stabilizing environmental noise, maintaining entanglement during transmission and other engineering challenges. 

    Qunnect will specifically focus on refining Carina’s polarization compensation nodule, its internal system that helps reduce distortions in data transmission. 

    “Quantum networking has mostly stayed in the lab for decades because entanglement can be lost as a result of environmental factors like heat, wind and other everyday fiber movement,” Noel Goddard, CEO of Qunnect, told Nextgov/FCW. “Carina is the only commercial product built to cancel that noise out in real time, like noise-cancelling headphones for both buried and aerial fiber. This is one of the keys to Carina distributing entanglement over existing infrastructure instead of requiring purpose-built fiber or being limited to pristine lab environments.”

    DARPA declined to comment on the award. Qunnect declined to disclose the exact amount of funding in the contract. 

    “We made an early commitment to designing instruments that operate on the same infrastructure the world already uses,” Goddard said. “For the past five years, we focused on making quantum networking practical, and we’ve validated it through deployments in cities, and through partnerships with private industry and growing support from government agencies. We know that reliability is what will separate proof-of-concept demonstrations from useful networks that enable tomorrow’s applications.”

    Quantum networking has received more attention at the federal level recently as the quantum computing industry looks to reach new levels of maturity and successfully share data between fault-tolerant machines. In 2025, DARPA unveiled its QuANET initiative, which aims to marry components of classical and quantum systems together in a functioning hybrid network. 

    Goddard said that Qunnect’s award is a standalone Small Business Innovation Research award. 

    President Donald Trump released an executive order earlier this year focused on advancing quantum information sciences and technology research that specifically focuses on spurring the development of a distributed quantum computing network, tasking agencies including the Department of Energy, Department of Commerce, the National Science Foundation and NASAn to craft and submit five-year roadmaps documenting their efforts to expand quantum networking.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft has released security updates that address six vulnerabilities in Exchange Server. These vulnerabilities include flaws that could allow remote code execution (RCE), privilege escalation, denial-of-service (DoS), spoofing, and bypass of security features. The vulnerabilities were disclosed on August 11, 2026, with CVE-2026-62913 receiving an update the following day. Microsoft Exchange Server Vulnerabilities The most […]

    The post Microsoft Exchange Server Vulnerabilities Allow DoS, Privilege Escalation, and RCE appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • This week in cybersecurity from the editors at Cybercrime Magazine

    Sausalito, Calif. – Aug. 13, 2026

    – Watch the YouTube video

    Kai was founded on a simple and radical conviction: you cannot win a machine-speed war with human-speed defenses. Not with more tools. Not with more headcount. Not with AI bolted onto the same fragmented stack. The only real answer is to stop deploying tools and start deploying intelligence – an agentic layer that executes security work end-to-end, the way attackers already operate.

    The Wall Street Journal reports that Kai recently raised $125 million in a combined seed and Series A round led by Evolution Equity Partners.

    Galina Antova, Co-Founder and CEO at Kai, told Cybercrime Magazine that Fortune 500 companies have on average 80 to 120 security tools. “When attackers are coming and attacking organizations, they’re not stopping at the door to ask – excuse me, what Gartner category should I get through.”

    While 89 percent of security leaders say they’re prepared for AI-driven attacks, most organizations still rely on manual vulnerability management and human intervention, according to Kai’s 2026 State of Autonomous Defense Report.

    “The only chance that we have is machine-to-machine, AI agent to AI agent communication, and autonomously executing on that defense,” said Antova.

    Watch the Video



    Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

    • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
    • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
    • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
    • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
    • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
    • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
    • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
    • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
    • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

    Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

    The post Kai: The Agentic AI Platform Built To Fight AI-Enabled Attacks appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Dell has disclosed a significant security vulnerability in its Virtual Storage Integrator (VSI) for VMware vSphere Client. This vulnerability could allow unauthenticated remote attackers to execute arbitrary operating system commands with root privileges. Tracked as CVE-2026-67261, this flaw affects versions of Dell VSI for VMware vSphere Client before 10.11.1.0. Dell has addressed the issue in […]

    The post Critical Dell VMware vSphere Client Flaw Lets Remote Attackers Execute Commands as Root appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Trump administration has issued a presidential memorandum that establishes a federal program allowing vetted U.S. private-sector companies to conduct government-directed cyber surveillance and cyber operations against foreign cyber-enabled transnational criminal organizations (CE-TCOs). This initiative expands Executive Order 14390, issued on March 6, 2026, which directed federal agencies to combat cybercrime, fraud, and predatory schemes […]

    The post Trump Administration Authorizes Cyber Operations Against Foreign Criminal Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Palantir has secured another lucrative commitment from the Defense Department: a pledge to pay the company up to $243.9 million to use its software through March 31, 2027.

    In a memo viewed by Washington Technology, Deputy Defense Secretary Steve Feinberg has directed DOD departments to identify options for more spending on Palantir products from April 1, 2027, and Dec. 28, 2028.

    In the memo, Feinberg says Palantir's software is "providing valuable support to improve efficiencies with the defense industrial base"—for example, by flagging delays in munitions and delivery-vehicle production and maintenance.

    Feinberg made no mention of specific contracts or vehicles.

    The action follows a July award of a 10-year, $10 billion Army agreement that consolidated many of Palantir’s existing contracts into a single pact.

    The Feinberg memo appears to be part of a trend in federal contracting, where no-compete contracts are growing as a percentage of all awards. No-compete contracts accounted for 14.8% of all awards in the first half of 2026, up from 12.6% for the period in 2025.

    Federal News Radio reported that DOD said it has issued similar memos involving other companies.

    No-compete contracts are allowed by the Federal Acquisition Regulation if agencies properly document why a sole-source contract is the best use of federal funds. Reasons for a no-compete contract can include urgency, only one responsible source, critical follow-on work, and national security.

    Feinberg's memo mentions none of those reasons for directing the spending to Palantir.

    Palantir's portfolio of no-compete contracts includes an Agriculture Department award for the One Farmer, One File program. The department also used Palantir's software for its return-to-the-office initiative.

    According to GovTribe data, the company has received $3.2 billion in contract obligations since 2024, roughly half through no-compete contracts.

    Last week, Palantir reported second-quarter revenues of $1.9 billion, up 93 percent year-over-year. Federal contracts accounted for $809 million of that, up 90 percent from last year.

    Palantir is ranked No. 40 on the 2026 Washington Technology Top 100, rising 22 spots in a year.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The LiteLLM supply-chain compromise has shifted from a short-lived malicious package incident into a sprawling enterprise exposure event. Analysis of an alleged 153GB attacker archive has linked 118,829 CI runner dumps to 2,488 corporate domains, exposing the depth of secrets accessible inside modern build environments. The campaign, publicly attributed to TeamPCP, began upstream of LiteLLM. […]

    The post LiteLLM Hack Exposes Secrets From 2,488 Companies Across 118,829 CI Runner Dumps appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A previously unseen Android near field communication (NFC) relay malware family dubbed WindRelay is being deployed in conjunction with a known remote access trojan (RAT) called SpyNote as part of a contactless payment fraud scheme. The purpose-built malware, according to Group-IB, is designed to capture live card data via NFC and transmit it to fraudsters in real time. It was first detected in

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Companies are used to thinking about attackers as outsiders trying to break in. North Korean IT workers flip that model. They apply for jobs, pass interviews, receive legitimate credentials, and can end up inside the same systems companies spend millions trying to protect. That risk is no longer theoretical. The FBI is now investigating a North Korean remote IT worker who reportedly worked for

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶