Skip to content

ADMIN.FOUNDATION

  • NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

    ·

    Eight security flaws in NodeBB went public on Wednesday, along with the code to exploit them. Aikido Security rates all eight as high severity and says its AI pentest agents found them in a six-hour review of the forum software’s source code. Every version before 4.14.0 is affected. NodeBB has fixed them all, and administrators should be on 4.14.2. The simplest one takes a settings change. A

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Google Chrome 150 Update Fixes Four High-Severity Security Vulnerabilities

    ·

    Chrome, cyber security, Cyber Security News, Google, vulnerability

    Google Chrome version 150.0.7871.186 has addressed four high-severity vulnerabilities that affect core browser components, including Codecs, WebMCP, Blink, and Input. While Google has not reported any evidence indicating that these vulnerabilities are actively being exploited, the company has restricted access to technical bug reports and related information until a majority of Chrome users receive the […]

    The post Google Chrome 150 Update Fixes Four High-Severity Security Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The German navy can’t get enough P-8 patrol aircraft

    ·

    Business
    FARNBOROUGH, England—The German navy is buying eight submarine-hunting P-8A aircraft, but it would welcome more, said the nation’s head of naval air warfare. 

    “No, eight is not enough. Give me 10, and I will say I need more. And give me 12, I will say give me more,” Capt. Broder Nielsen, the commanding officer of Germany’s naval air command told reporters Wednesday at the Farnborough International Airshow. 

    NATO countries are working to bolster their anti-submarine capabilities to protect against Russian activity in the region, including attacks on undersea cables. Earlier this month, Denmark agreed to buy two Boeing P-8A Poseidon aircraft and the UK inked a sustainment deal for their aircraft.

    “The demand for this aircraft is so huge. And to cover these huge areas there, you have to build up a real significant fleet,” which is possible when all the P-8As that are operated across Europe and the North Atlantic are combined, Nielsen said. 

    It’s becoming increasingly important to “get a clear picture of what is going up in the High North…the threat is there.”

    Germany is drastically boosting its defense spending—which could soon make up a third of federal spending—to hit NATO’s 5 percent of gross domestic product target. The country recently canceled its much delayed, multibillion-dollar F126 frigate program, a platform designed for anti-submarine warfare, in favor of a smaller more commercially ready design. 

    The German navy is already planning to pair the P-8s with General Atomic’s MQ-9B SeaGuardian drones. But additional unmanned tech—like air-launched effects, which can launch drones from a missile-like tube—isn’t a primary consideration yet as it’s receiving the first few aircraft. 

    Nielsen said the need for kinetic effects take priority. 

    “We are in the very early stage of introducing our aircraft. So step by step, I would say. But what is even more important is our capability to launch kinetic effects,” he said. “It is of high importance that we will receive the torpedoes and also deep precision strike” capabilities. 

    Anti-ship weapons for the German P-8As are still being considered. 

    “The German navy lost the ability to fight against surface warships. That was 25 years ago when we lost our [Panavia] Tornadoes and gave it to the [German air force], unfortunately. And ever since, we do not have any missiles in stock anymore against surface ships. So we need long-range surface missiles, and the [Kongsberg] joint strike missile is a valid option.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Lampion Malware Targets Portuguese Users With Multistage Phishing and 750MB RAT Payload

    ·

    cyber security, Cyber Security News, Malware, Phishing

    A highly targeted Lampion malware campaign abusing localized phishing lures to compromise users in Portugal. The activity reflects a continued evolution of the Brazilian-origin banking trojan, first documented in 2019, which has consistently focused on Portuguese-speaking victims rather than domestic Brazilian targets. In the latest campaign, attackers leverage convincing financial-themed phishing emails masquerading as routine […]

    The post Lampion Malware Targets Portuguese Users With Multistage Phishing and 750MB RAT Payload appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

    ·

    Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0. All four chains require RESTORE. The Streams chains also need EVAL and XGROUP; the 8.8.0 chain needs EVAL and the bundled RedisBloom module. Redis says the underlying memory flaws may lead to remote code execution. Redis 6.2.23, 7.2.15, and 7.4.10

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

    ·

    The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign that involves the use of a malicious program that’s dressed up as a Notepad++ plugin to compromise Windows systems. The activity has been attributed by the agency to a threat cluster it tracks as UAC-0099, a Russia-aligned group that has previously observed weaponizing security flaws in WinRAR software to

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Claude Cowork Sandbox Escape Flaw Lets Attackers Access SSH Keys and Cloud Credentials

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    A newly revealed sandbox escape vulnerability affecting Anthropic’s Claude Cowork could allow untrusted content processed by the AI agent to access sensitive files on a macOS host. This includes SSH private keys, cloud credentials, and other data that are available to the logged-in user. Security researcher Oren Yomtov from Accomplish has named this attack path […]

    The post Claude Cowork Sandbox Escape Flaw Lets Attackers Access SSH Keys and Cloud Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Top 10 Best 24/7 Security Monitoring Companies in 2026

    ·

    Cyber Security News, Top 10

    A comprehensive and proactive security posture is non-negotiable for organizations in 2026. With a rapidly evolving threat landscape and a global shortage of cybersecurity talent, relying on an internal team alone to provide round-the-clock protection is often unfeasible. 24/7 security monitoring companies fill this critical gap by serving as an extension of an organization’s security […]

    The post Top 10 Best 24/7 Security Monitoring Companies in 2026 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Attackers Abuse Microsoft Teams to Impersonate IT Support and Steal Corporate Access

    ·

    cyber security, Cyber Security News, Microsoft

    Attackers are increasingly abusing Microsoft Teams to impersonate internal IT support and trick employees into handing over remote access and corporate credentials, even as traditional email phishing volumes tied to major platforms like Tycoon2FA decline. Microsoft’s recent email threat landscape data for Q2 2026 shows a sharp downstream impact from the March disruption of the […]

    The post Attackers Abuse Microsoft Teams to Impersonate IT Support and Steal Corporate Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Russian LAUNDRY BEAR Hackers Exploit Zimbra Zero-Day to Steal 90 Days of Emails

    ·

    cyber security, Cyber Security News, Malware, Zero-Day

    Russian state-supported threat actors, known as LAUNDRY BEAR, have exploited a zero-day vulnerability in the Zimbra Collaboration Suite to steal up to 909,090 days’ worth of emails from targeted organizations across Western countries. A joint cybersecurity advisory, AA26-204A, issued on July 23, 2026, warns that this espionage-focused group has targeted government, defense, energy, technology, education, […]

    The post Russian LAUNDRY BEAR Hackers Exploit Zimbra Zero-Day to Steal 90 Days of Emails appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 255 256 257 258 259 … 1,231
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence