• CERT-UA has issued a warning regarding the UAC-0099 threat cluster, which has revised its malware delivery method by exploiting the legitimate Notepad++ application to load a malicious DLL disguised as a plugin. This campaign, observed since mid-summer 2026, introduces two newly identified tools, LUNCHPOKE and BURNYBEAR, along with an updated MATCHBOIL.V2 loader. This activity highlights […]

    The post Hackers Weaponize Notepad++ Plugins to Silently Infect Windows Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A large-scale supply chain attack has flooded RubyGems with 136 trojanized packages that deploy an XMRig Monero miner and self-propagate via SSH, underscoring systemic weaknesses in language ecosystems beyond npm and PyPI. On July 22, 2026, researchers Moe Ghasemisharif, Ruian Duan, Zhanhao Chen, and Daiping Liu documented a coordinated cryptojacking campaign abusing RubyGems as the […]

    The post 136 Malicious RubyGems Packages Deploy XMRig Miner and Spread via SSH appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Next.js team has released security updates that address nine vulnerabilities affecting the App Router, Server Actions, rewrites, image optimization, caching, and middleware deployments. Organizations are urged to upgrade to Next.js versions 15.5.21 or 16.2.11 immediately, as these updates fix high- and moderate-severity flaws that could lead to server-side request forgery (SSRF), authentication bypass, denial […]

    The post Next.js Patches Nine Security Flaws Enabling SSRF, Middleware Bypass, DoS, and Internal Endpoint Disclosure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • In an era dominated by cyber threats, the importance of physical security penetration testing often gets overshadowed. However, a robust security posture requires a holistic approach that addresses vulnerabilities in both the digital and physical realms. A determined attacker can bypass sophisticated cyber defenses simply by walking through an unlocked door, exploiting weak physical controls, […]

    The post Top 10 Best Physical Security Penetration Testing Firms 2026 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A Russian state-supported espionage group spent months reading Western mailboxes through a then-unknown flaw in Zimbra’s webmail client. The payload goes after the last 90 days of email, the organization’s entire email directory, the password saved in the browser and the codes kept for two-factor recovery. Opening the message was enough to start it. The NSA, CISA and partner agencies published

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The agency that keeps lists of draft-eligible men is looking for software to help simulate the personnel needs it would work to fill if a draft were reinstated.

    While the U.S. military is all-volunteer, the independent Selective Service System still maintains a registration list of men aged 18 to 25 and a second special-skills database based on professional licensing lists of workers in certain health-care occupations. 

    By launching this request for quotes on Wednesday, SSS is looking to prepare for emergencies that require it to quickly evaluate staffing and resource requirements through the use of readiness simulation software.

    SSS also is tasked with comparing different mobilization and policy scenarios, assessing the operational impacts of surge conditions, identifying potential risks and bottlenecks, and support executive planning and reporting obligations.

    The RFQ lists these requirements for the software:

    • Model the full end-to-end mobilization pipeline
    • Support configurable scenarios
    • Provide decision-support analytics for leaders, planners and operators
    • Operates within an SSS-designated cloud environment
    • Use anonymized aggregate data
    • Support complete government ownership and sustainment

    SSS is embarking on this search for software ahead of Dec. 18, when the requirement for male U.S. residents aged 18 to 25 years old to register themselves in the system will be replaced with a requirement for SSS to automatically register them by relying on other federal databases.

    Quotes are due by 2 p.m. Eastern time on Aug. 14. The window for questions to SS closes at 2 p.m. Eastern time on Tuesday, July 28.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A pair of federal employee unions on Monday urged a federal judge to issue a preliminary injunction restoring their collective bargaining agreements with the Defense Department, arguing that Secretary Pete Hegseth failed to follow the Trump administration’s own process for implementing two executive orders banning organized labor at most federal agencies.

    Earlier this month, the American Federation of Government Employees and National Federation of Federal Employees sued the Pentagon over the April termination of their collective bargaining agreements, a move that the Defense Department said was aimed at complying with President Trump’s March 2025 executive order barring collective bargaining for two-thirds of the federal workforce on national security grounds.

    The lawsuit, which was filed in the U.S. District Court for Maryland, focuses not on the legality of Trump’s edict, but rather whether Hegseth fulfilled his obligation to conduct “reasoned decision-making” under the Administrative Procedure Act when he ordered CBAs be terminated with just 24 hours’ notice.

    “The Hegseth memorandum did not point to any facts showing that any of plaintiffs’ CBAs, much less all of them, were inconsistent with national security,” the unions wrote. “DOD agencies had voluntarily agreed to these CBAs. Nor did the Hegseth memorandum consider the obvious alternatives to immediate mass termination of all CBAs, such as refraining from terminating CBAs until litigation about [the executive order] runs its course, allowing CBAs to expire pursuant to their own terms, or identifying only those specific parts of CBAs that the secretary determined to be inconsistent with national security . . . The Hegseth memorandum was the opposite of the reasoned decision-making that the APA requires before final agency action.”

    The unions said that the Defense Department did not even follow a template for terminating union contracts issued by the Office of Personnel Management in February, seemingly designed to address the APA’s requirements for agencies to explain policy changes and consider the reliance interests of stakeholders. Instead, Hegseth wrote simply that the actions were “required” in order to comply with Trump’s order.

    “The OPM termination template reinforces that CBA terminations are discretionary and must comply with the APA’s requirements for reasoned decision-making,” the unions wrote. “The OPM template indicates that agencies should specify that, after the issuance of the EO, the agency ‘considered whether to terminate any CBA, in whole or part, as it pertains to those bargaining unit employees who fall within the EO’s scope.’”

    Since the contracts’ termination in April, management officials have told union members that their union “does not exist any longer,” and some employees have been required to sign documents attesting that they lack union representation. Employees in disciplinary proceedings are denied access to union representation, managers are unilaterally changing employees’ work schedules with little notice, and the labor groups’ membership is on the decline.

    “Plaintiffs face an existential threat because workers are afraid to engage in any union activity or are confused about their right to do so,” they wrote. “DOD is telling plaintiffs’ members and prospective members that they are ineligible to join unions and that their unions ‘do not exist.’ Plaintiffs cannot successfully retain or recruit members under such circumstances, and union membership is declining. These harms are irreparable.”

    Since its initial filing earlier this month, AFGE and NFFE’s case has been assigned to U.S. District Judge Stephanie Gallagher, a jurist who was nominated to the federal bench by both presidents Obama and Trump.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Learn how cryptocurrency works, from blockchains and wallets to private keys, custody, and secure transactions, with practical security tips. for confident use.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Learn how cryptocurrency works, from blockchains and wallets to private keys, custody, and secure transactions, with practical security tips. for confident use.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Dubai, UAE, 23rd July 2026, CyberNewswire

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶