ADMIN.FOUNDATION – Page 200 – cybersecurity / defense / intelligence

CISA Adds Actively Exploited Windows WinSock Vulnerability to KEV Catalog

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Microsoft Windows vulnerability to its Known Exploited Vulnerabilities catalog, warning that the flaw is actively being exploited in real-world attacks. The vulnerability, tracked as CVE-2026-68820, affects the Windows Ancillary Function Driver for WinSock and could allow an authorized local attacker to elevate their […]

The post CISA Adds Actively Exploited Windows WinSock Vulnerability to KEV Catalog appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Wireshark 4.6.8 Released to Patch 28 Security Vulnerabilities

·

CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities

Wireshark has released version 4.6.8, which addresses security vulnerabilities in 28 identified issues that could lead to crashes, abnormal exits, memory-safety problems, and denial-of-service conditions when the network protocol analyzer handles specially crafted traffic or capture files. This update is particularly important for security analysts, incident responders, network administrators, and researchers who frequently work with […]

The post Wireshark 4.6.8 Released to Patch 28 Security Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Armored Likho Turns Windows Microphones Into Automated Eavesdropping Devices

·

cyber security, Cyber Security News, Windows

Armored Likho, also tracked as Eagle Werewolf, has expanded its espionage capability with a Rust-based toolkit that can hijack Telegram sessions and transform compromised Windows endpoints into automated audio-surveillance devices. The newly documented May 2026 campaign primarily targets Russian private individuals, corporations, government bodies, IT organizations, and educational institutions through a fraudulent donation-service application. The […]

The post Armored Likho Turns Windows Microphones Into Automated Eavesdropping Devices appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Cloudflare Mitigates 23.2 Million DDoS Attacks as 1 Tbps Attacks Surge 519%

·

cyber security, Cyber Security News, DDOS, DDoS attack

Cloudflare has mitigated 23.2 million network-layer DDoS attacks and stopped 29.64 trillion HTTP DDoS requests during the first half of 2026. This underscores a significant increase in both the frequency and intensity of Internet-scale attacks. The company’s latest DDoS Threat Report, produced by its Cloudforce One threat intelligence team, combines data collected from January to […]

The post Cloudflare Mitigates 23.2 Million DDoS Attacks as 1 Tbps Attacks Surge 519% appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
6,330 Internet-Exposed ICS Devices Near U.S. Data Centers Put Cooling and Power Systems at Risk

·

cyber security, Cyber Security News

A newly published internet-exposure analysis has identified more than 6,300 high-confidence industrial control system and building automation devices accessible near 1,063 U.S. data centers. Exposing a largely overlooked attack surface around infrastructure responsible for cooling, power conditioning and environmental monitoring. The finding underscores a fundamental security gap: hardened server networks do not necessarily extend to […]

The post 6,330 Internet-Exposed ICS Devices Near U.S. Data Centers Put Cooling and Power Systems at Risk appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Critical Adobe Commerce Flaw Lets Unauthenticated Attackers Escalate Privileges

·

CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities, vulnerability

Adobe has released security updates for Adobe Commerce, Adobe Commerce B2B, and Magento Open Source to address multiple critical vulnerabilities. One of the most serious issues is a high-impact privilege-escalation flaw, tracked as CVE-2026-71362, which can be exploited without authentication. This vulnerability arises from incorrect authorization controls and has a CVSS base score of 9.1 […]

The post Critical Adobe Commerce Flaw Lets Unauthenticated Attackers Escalate Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
WhatsApp Introduces On-Device Scam Alert to Detect Fraud Messages

·

cyber security, Cyber Security News, WhatsApp

WhatsApp has initiated a limited beta rollout of a feature called Scam Alert, which utilises an on-device machine learning model to identify potentially scam messages from non-contacts while maintaining end-to-end encryption. Meta has provided a detailed technical overview to accompany this rollout and is expanding its Bug Bounty program to allow security researchers to test […]

The post WhatsApp Introduces On-Device Scam Alert to Detect Fraud Messages appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Adobe ColdFusion Critical Vulnerabilities Enable Arbitrary Code Execution

·

CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities, vulnerability

Adobe has released critical security updates for ColdFusion 2025 and ColdFusion 2023, addressing 17 vulnerabilities that could enable arbitrary code execution, privilege escalation, bypass of security features, denial-of-service attacks, and memory exposure. This update, tracked as APSB26-90 and published on August 11, 2026, has been rated Priority 1 by Adobe, indicating that organizations should prioritize […]

The post Adobe ColdFusion Critical Vulnerabilities Enable Arbitrary Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Akira Ransomware Reboots Windows Into Safe Mode to Disable EDR and Microsoft Defender

·

cyber security, Cyber Security News, Ransomware, Windows

An Akira ransomware affiliate has been observed rebooting a compromised Windows host into Safe Mode with Networking to disable endpoint protection an anti-EDR tactic linked to the operation. The intrusion failed to encrypt files after the stripped-down boot environment triggered virtual-memory errors, but the actor had already stolen credentials and data, preserving leverage for a […]

The post Akira Ransomware Reboots Windows Into Safe Mode to Disable EDR and Microsoft Defender appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Gunra Ransomware Uses Up to 100 ChaCha20 Threads to Rapidly Encrypt Linux Systems

·

cyber security, Cyber Security News, Linux, Ransomware

Gunra ransomware has added a Linux encryptor to its arsenal, giving affiliates control over how they lock enterprise data. The command-line payload can launch up to 100 encryption threads, a design that compresses the time defenders have to detect and interrupt an attack on Linux servers, virtual machines, NAS appliances, and storage. Its operators later […]

The post Gunra Ransomware Uses Up to 100 ChaCha20 Threads to Rapidly Encrypt Linux Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶