• ShinyHunters has claimed responsibility for the data breach at Ernst & Young (EY) and is threatening to publish allegedly stolen client tax information unless the professional services firm engages in negotiations before July 31, 2026. The extortion group posted about EY on its dark web leak site, describing the deadline as a “final warning” and […]

    The post ShinyHunters Claims EY Data Breach, Threatens to Leak Stolen Client Tax Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitrary code execution. “VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • DAYTON, Ohio—Air Force officials plan to resume B-52 radar development with another Stratofortress after a deadly crash killed the eight-person crew onboard one of the bombers last month during a test flight. 

    On June 15, a B-52 Stratofortress crashed in California during a test flight as part of the Air Force’s radar modernization program, which is aimed at keeping the service’s 75 Cold War-era bombers in the skies until at least the 2050s. The service had already planned to modify another aircraft with the updated Raytheon-built Active Electronically Scanned Array radar later this year, program officials told reporters on Monday during the Life Cycle Industry Days conference here. It’s not clear when officials will resume flight testing.

    “The original acquisition plan and execution strategy was always to have two test aircraft,” Col. Spencer Turner, the B-52 system program manager said, adding that the “modification effort on that second aircraft is ongoing” and that he expects the service to complete the installation of the full radar suite onto the aircraft “this year.”

    The deadly crash may add to persistent program delays. The Air Force planned to have two test aircraft for the radar modernization program, but only one had been completed. The June 15 crash paused test flights, and as the service waits for the next upgraded bomber, it’s not clear if another B-52 will be added to development efforts. Despite the incident, program officials claim they are still “on track” with the realigned budget and schedule, but they may need to be adjusted.

    “Obviously, the crash was not in our original schedule,” Turner said. “So we need to look at our schedule and adjust as necessary.”

    Boeing delivered the first test B-52 aircraft to Edwards Air Force Base in late 2025, according to a company press release.

    “The new radar will significantly increase B-52 mission effectiveness by improving situational awareness, speeding target prosecution and enhancing aircrew survivability in contested environments,” Troy Dawson, Boeing Bombers vice president, said in the December news release. “This phase of the program is dedicated to getting it right at the start so that we can execute the full radar modernization program.”

    Spokespeople for the Air Force and Boeing did not immediately respond when asked if there are still plans to have two dedicated test aircraft following the crash.

    The radar modernization plan has faced heavy criticism.

    Last year, the radar modernization program’s cost overruns triggered a Nunn-McCurdy Act breach. The Government Accountability Office warned that the production design for the radar modernization was “planned with very little development flight testing completed” and “beginning production with limited testing of a fully integrated system often results in costly and time-intensive rework if the program discovers issues later,” according to the watchdog’s annual weapons systems assessment released last month.

    The B-52 has led major bombing campaigns during the Iran war. With the modernized bombers, which will be designated the B-52J, the service plans to have the Air Force long-range fleet consist of the Stratofortresses and the next-generation B-21 Raiders. 

    Col. Timothy Spaulding, the portfolio acquisition executive for bombers, said it’s possible that the service could pull B-52s out of the boneyard at Davis-Monthan Air Force Base for future fights.

    “We can and have looked at bringing B-52 out of Arizona,” he said. “That's not necessarily an easy thing to do, and there's some limitation to how far you might go on that number.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Wondershare Media.io brings AI story writing, character creation, storyboards, and video generation into one workflow for faster, simpler content creation work.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The National Institute of Standards and Technology launched a new program on Monday granting researchers access to an isolated testbed environment to safely evaluate artificial intelligence models against various commands. 

    The AI Technology Evaluation, or AITE, is a voluntary testing vehicle focused on AI model safety analysis. It provides blind data for models to process when completing tasks to gain objective insights and conduct evaluations of model capabilities. Notably, the evaluation data is not intended to serve as training data for the models.

    Initially, AITE will focus on conducting image analysis tasks using large vision language models across three domains: quantum science, genomics and public safety. More tasks will be available in the future.

    AITE’s fundamental goal is to offer a universal rubric to effectively evaluate AI models' capabilities and determine the state of the art for model performance. 

    “The infrastructure provided by NIST will provide common data, metrics and scoring to help developers understand the performance of their models,” the press release said.

    Both data providers and model providers working with AITE will need to submit materials related to the testing. Data providers are asked to submit original datasets that are inaccessible publicly, along with a “meaningful” task suited for the data. 

    Model developers, likewise, will submit their AI models to be tested using the datasets. The first set of evaluations will start in August 2026. 

    The formation of AITE is the latest step in the Trump administration’s strategy to work with major AI developers in advancing model safety through voluntary model submissions.

    The Commerce Department announced a renegotiated deal in May between the agency and three companies—Google Deepmind, Microsoft and xAI—to evaluate their models through the Center for AI Standards and Innovation.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Certighost allowed a low-privilege domain user obtain a valid Domain Controller certificate through AD CS. Microsoft patched the issue in the July security updates.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A slew of major technology companies announced Monday that they have joined together to advocate for the continued development and availability of open-source artificial intelligence models.

    The Open Secure AI Alliance, spearheaded by NVIDIA, consists of 37 hardware and software companies supporting the continued need for and access to open source AI models. The alliance’s primary argument is that open source AI benefits cybersecurity, enables users to customize model controls and comes with no vulnerable single point of failure.

    “Just as open source created a shared foundation for software, the United States and its partners now face a choice in AI security: whether the defenses that protect our infrastructure will sit inside a few opaque systems or be built on open models, harnesses and tools that any defender can study, adapt and deploy,” according to a blog post announcing the alliance's creation. 

    Members of the Open Secure AI Alliance say open source is needed now more than ever. The post references last week’s incident—in which OpenAI’s advanced GPT-5.6 broke from its container environment during internal testing and hacked into Hugging Face’s data infrastructure—as evidence of a clear need for continued access to open source models for security support.

    The blog post noted that Hugging Face ran a popular open source model, GLM 5.2, on its networks to contain the breach.

    “That incident showed a practical truth: when defenders cannot inspect, adapt and run advanced AI on their own infrastructure, their ability to respond is constrained at exactly the moment speed matters most,” the post said. “Companies and countries need open frontier defensive tools and techniques so critical industries can build security systems across a multi-vendor ecosystem and avoid single points of failure.”

    Two major closed-source AI developers, OpenAI and Anthropic, were not among those listed as part of the alliance. While OpenAI does offer some open-source products, Anthropic does not. 

    Goals for alliance members include creating and maintaining an open defense stack for AI agents, with different companies offering their distinct open-source products. Coinciding with the blog post, NVIDIA unveiled its Labs Object-Oriented Agents, a repository of agents built on Python code.

    The future of the open-source model ecosystem in the U.S. has recently become a political lightning rod. White House Office of Science and Technology Policy Director Michael Kratsios on Wednesday accused Chinese AI model developer Moonshot AI of illicitly distilling Anthropic’s Fable model, a process in which an AI learns and copies the inner workings of a more mature and complex model.

    Other Trump administration leaders, including Treasury Secretary Scott Bessent, clarified that the administration supports an open-source model ecosystem, but that “open source is not open season on American IP.”

    The announcement of the alliance also included a call for policymakers to support a robust open-source environment. 

    “As policymakers and regulators grapple with AI safety, it will be crucial to recognize open models, harnesses and security tooling as defensive assets, not liabilities, in AI and cybersecurity policy,” the post said. “Blanket restrictions on open frontier AI systems would weaken defensive capacity and risk concentrating power, dependence and vulnerability in a few closed providers.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • NVIDIA and 36 other organizations have formed the Open Secure AI Alliance to develop and share open technologies, techniques, and tools for securing software and artificial intelligence (AI) agents. The 37-member group spans cloud, security, enterprise software, and AI companies, including Microsoft, Cisco, Cloudflare, CrowdStrike, Hugging Face, IBM, Palo Alto Networks, Red Hat, and the Linux

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Dysphoria, an Internet of Things (IoT) botnet line tracked by CNCERT and XLab, has adopted blockchain-based name services and infected-device relays after a March law-enforcement operation against JackSkid infrastructure. The researchers say the design makes the botnet harder to disrupt. CNCERT, China’s national computer emergency response team, and XLab, the threat-intelligence lab of Chinese

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Daylight Security adds Detection Program Visibility to unify detections, map coverage to MITRE ATT&CK, and help MDR customers spot gaps and improve results.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶