ADMIN.FOUNDATION – Page 25 – cybersecurity / defense / intelligence

Kimsuky Uses Quasar RAT to Deploy Funhouse Ransomware Through Multi-Stage Scripts

·

cyber security, Cyber Security News, Ransomware

A Kimsuky campaign that delivers Funhouse ransomware through a malicious Hangul document disguised as a resume. The operation combines embedded OLE objects, sequential scripts, a Python backdoor, and Quasar RAT, linking the September 2026 activity to earlier Endpoint ransomware deployments attributed to the group. The findings indicate continuity rather than an entirely new ransomware operation. […]

The post Kimsuky Uses Quasar RAT to Deploy Funhouse Ransomware Through Multi-Stage Scripts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
SonicWall Fixes 4 SMA 1000 Vulnerabilities, Including Critical CVSS 10.0 SSRF Flaw

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

SonicWall released security updates to address four vulnerabilities in its SMA 1000 series appliances, including a critical server-side request forgery (SSRF) flaw rated 10.0. These vulnerabilities could allow unauthorized operations, operating system command execution, malicious archive extraction, and stored cross-site scripting. Published on October 6, 2026, advisory SNWLID-2026-0017 covers CVE-2026-102255, CVE-2026-102256, CVE-2026-102257, and CVE-2026-102258. SonicWall […]

The post SonicWall Fixes 4 SMA 1000 Vulnerabilities, Including Critical CVSS 10.0 SSRF Flaw appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Critical MariaDB Vulnerabilities Could Enable Remote Code Execution and Privilege Escalation

·

CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities, vulnerability

MariaDB maintainers have disclosed ten vulnerabilities affecting database server components, Linux packaging, and Connector/C. Under specific conditions, these flaws could lead to remote code execution, privilege escalation, unauthorized table access, and credential theft. Although the headline uses “Critical,” the advisories classify six vulnerabilities as High and four as Moderate; none has a Critical rating. Critical […]

The post Critical MariaDB Vulnerabilities Could Enable Remote Code Execution and Privilege Escalation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Fake Web3 Accelerator Offers Claude and Gemini Credits to Spread Malware

·

cyber security, Cyber Security News, Malware

A sophisticated campaign in which threat actors posed as a Web3 venture-capital accelerator to target cryptocurrency start-ups, developers and founders with free Claude and Gemini credits, AI coding tools and smart-contract security audits. It claimed to support more than 200 portfolio projects and to have raised over $124 million, while promoting founder assessments, security audits, […]

The post Fake Web3 Accelerator Offers Claude and Gemini Credits to Spread Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
G2A.COM Reports 35% Growth in Security Software Orders, Outpacing VPN Growth

·

Press Release

Amsterdam, Netherlands, 13th October 2026, CyberNewswire

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers

·

Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw food away, several retail chains said. The attackers reached them through the controller that runs all of a store’s fridges and freezers, a device made by Danish company Danfoss that maintenance firms can manage remotely. Les Mousquetaires

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control

·

Two of 31 newly disclosed flaws in Progress Software’s MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says. Progress published all 31 on October 12 and scored five of them critical. Fixes have been available since September 10, in MarkLogic 11.3.7 and MarkLogic 12.1.0. Affected

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

·

GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. “GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
DDoS Attack Takes Ubuntu Websites and Security Services Offline for Over 4 Hours

·

cyber security, Cyber Security News, DDOS

Ubuntu and Canonical’s websites experienced a sustained DDoS attack, disrupting access to public websites and security information services for four hours and 12 minutes. The issue has since been resolved. Notably, Ubuntu repositories, installation images, and Personal Package Archives (PPAs) remained unaffected during the disruption, as OMG! reported. Ubuntu. Canonical warned that some online sites […]

The post DDoS Attack Takes Ubuntu Websites and Security Services Offline for Over 4 Hours appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New macOS Malware Clones Chrome Profiles and Browses With Victims’ Live Logins

·

cyber security, Cyber Security News, macOS, Malware

A newly reported macOS implant tracked as GhostProfile clones browser profiles and remotely operates concealed copies of Chrome or Firefox, allowing attackers to browse using victims’ authenticated sessions. The researchers described it as a hidden-VNC implant that does not mirror the victim’s screen. Instead of exposing the desktop, GhostProfile reportedly creates a disposable browser-profile clone […]

The post New macOS Malware Clones Chrome Profiles and Browses With Victims’ Live Logins appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶