• Passwork Europe, a Spain-based password manager used by European public sector bodies, universities, and private organizations, is facing scrutiny after an investigation led by OCCRP uncovered technical and historical connections to a Russian counterpart certified by Russian state agencies. The investigation found that Passwork Europe S.L. and Russia’s Passwork LLC share a common codebase origin, […]

    The post European Password Manager Passwork Shares Codebase and Updates With FSTEC-Certified Russian Firm appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Bit2Watt is a newly disclosed cyber‑physical attack class that weaponizes AI and GPU workloads in modern data centers to destabilize nearby power grids, turning compute infrastructure itself into a grid‑scale threat surface. Measurements on NVIDIA accelerators show sub‑millisecond power ramps where a single Volta V100 or RTX‑series GPU swings from low-load phases to near‑TDP draw, […]

    The post Bit2Watt Attack Turns AI Data Centers Into Cyber-Physical Threats to Local Power Grids appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Gig-economy platform Paidwork has been linked to a significant data breach that affects 23.3 million accounts. This breach, involving an approximately 11GB dataset, was publicly released in July 2026. The incident was added to the Have I Been Pwned (HIBP) breach database on July 19, with the compromise reportedly occurring in March 2026. Paidwork Data […]

    The post Paidwork Data Breach Exposes 23.3 Million Accounts, Banking Data and bcrypt Password Hashes appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • HOLLOWGRAPH, a Windows malware implant that transforms Microsoft 365 calendar events into a covert command-and-control channel. This malware, which is highly likely linked to the Cavern modular backdoor framework, utilizes the Microsoft Graph API to retrieve tasks from operators and to exfiltrate stolen data via a compromised Microsoft 365 mailbox. This technique enables malicious communications […]

    The post HOLLOWGRAPH Malware Turns Microsoft 365 Calendar Events Into Covert Command-and-Control Channels appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers are increasingly blending malicious traffic with legitimate services, and a newly uncovered campaign shows how far this tactic has evolved. The activity has been attributed to a threat actor with links to East Asia, with researchers uncovering a previously undocumented malware suite comprising TELESHIM, MIXEDKEY, and a final-stage implant dubbed BINDCLOAK. The campaign demonstrates […]

    The post Hackers Hide C2 Traffic Inside Telegram While Targeting Middle East Governments appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers are exploiting a high-severity vulnerability in Palo Alto Networks’ PAN-OS to gain initial access to corporate networks and deploy Qilin ransomware. Multiple intrusions investigated in June 2026 began with the exploitation of CVE-2026-0257, an authentication bypass flaw affecting GlobalProtect portal and gateway deployments. The attacks evolved from external VPN compromises to domain-wide encryption, with […]

    The post Hackers Exploit Palo Alto PAN-OS Flaw to Deploy Qilin Ransomware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • With demand for Patriot PAC-3 interceptors sharpened by Russian and Iranian ballistic missile attacks, Lockheed Martin unveiled plans to build a smaller and cheaper, if less capable, version of the exquisite interceptor.

    The Adapted Capability Effector, or ACE, missile would use the PAC-3's launcher and command and control software, but a less expensive rocket motor, radar, and electronic brain, according to a company announcement and remarks by Lockheed Martin Missiles and Fire Control president Tim Cahil at the Farnborough International Airshow.

    The ACE lacks some of the features to counter the most advanced missiles, said Cahil, but is intended to be useful against the type of lower-tech short-range ballistic missiles that Iran and Russia have used in recent destructive attacks.

    Said one missile defense analyst, “It is conceivable that if you affect the cost drivers, that you—that's probably how you get down to a lower cost. The cost drivers and the bottlenecks of the current PAC-3 missiles are things like the seeker.”

    Tom Karako, the director of the Missile Defense Project at CSIS, said, “The United States and its allies, the entire PAC-3 community needs as many PAC-3s as industry collectively can produce. But we're also going to need alternatives, and not everything needs the most exquisite capability. And so this is why the low-cost interceptor competition is important and urgent.”

    Cahill cautioned that the missile is not “designed to go after drones.” It is, however, designed to address a defensive gap that today’s wave of defense tech startups have been unable to fix: a less expensive way to shoot down, say, an Iskander-M traveling at 5,600 miles per hour.

    While Ukrainian and U.S. companies have developed counter-drone solutions, short-range missile defense is one of the few areas where Ukraine can’t replace a U.S. capability.

    That’s a deadly problem for Kyiv. Last July, the White House claimed that its aid to Ukraine had drawn the Pentagon’s stocks of Patriots. That turned out not to be true at the time, but became so after President Trump launched his war on Iran in February. An By April, CSIS wrote, the United States had used up about half of its supply.

    When Ukraine ran out of PAC-3 interceptors this month, Russia responded with increased short-range attacks.

    That supply-and-demand gap is prompting more defense companies to try to produce ballistic-missile interceptors. But so far, none has succeeded. The closest European alternative to the Patriot, the French-Italian SAMP/T, is not as effective, Ukrainian officials have said.

    Lockheed, meanwhile, is pitching the idea of ACE missiles to at least some of the 18 countries that already have compatible PAC-3 launchers.The company envisions “joint development and production with European partners,” according to their statement.

    Cahill said the new interceptor might enter production in 2028—or possibly even sooner, depending on how ready governments are to open their pocketbooks and work together.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • LONDON—The trio of Saab GlobalEye radar planes ordered by the Swedish Air Force are separate from—but a vital complement to—NATO’s own order of 10, the service’s top officer said Monday.

    Maj. Gen. Jonas Wikman, the head of the Swedish Air Force, told reporters in London that his country’s order of  the Swedish-built airborne early warning and control aircraft  is “on top” of the alliance deal announced at the NATO summit in Turkey earlier this month. 

    “My view is that NATO will have the fleet, like AWACS today,” Wikman said. “We will have our fleet, a national fleet, in cooperation with other nations, hopefully.”

    He added that he had started a “dialogue” with the alliance to develop operational concepts for the aircraft.

    Earlier this month, NATO announced plans to buy 10 GlobalEyes to replace its Boeing E-3 AWACS, snubbing the U.S. company’s pitch of its E-7 Wedgetail. In 2024, Sweden placed an order for its third GlobalEye. The country has donated two of its older fleet of Saab 340 radar planes to Ukraine as it awaits delivery of the new aircraft in 2027 or sooner.

    “We are supporting Ukraine with our previous fleet of airborne early warning and control aircraft, and we are now waiting to introduce our next generation of aircraft,” Wikman said. “The intention of introducing the GlobalEye, or the S106, is not to introduce another early warning and control aircraft for control of the air. It is to introduce airborne early warning and control aircraft for all domains.”

    Boeing executives, in a roundtable with reporters in London on Sunday, defended their E-7 Wedgetail after NATO’s announcement. 

    “We've got a number of platforms, airborne early warning and control platforms, in the Middle East. What capability was asked to come and help? It was the E-7 Wedgetail,” said Steve Parker, Boeing Defense, Space and Security president and CEO. “It's that way for a reason, because it is unmatched and it has a technology roadmap that's going to take it out 30,40 years and stay relevant. It's the world's leading capability right now.”

    Parker added that Boeing is “super proud” to support the NATO mission with the E-3.

    In May, Defense Secretary Pete Hegseth  reversed course and decided to support funding for the E-7, after it was initially zeroed out in the initial budget request. Last month, House appropriators, mostly, supported the White House’s $1.5-billion budget amendment to fund Wedgetail development.

    Debates over fielding the E-7 intensified after a U.S. Air Force E-3 Sentry was heavily damaged during the war in Iran. Last year, Hegseth rallied the Wedgetail and defended space-based capabilities for the mission instead. Now, Air Force officials are backing space programs, like the Airborne Moving-Target Indicator, and the next-generation radar plane.

    Wikman said the Swedish’s air and space force hasn’t discussed a similar arrangement. The military’s first space-based ISR asset, a Planet Labs satellite, was launched into orbit in May. He said the hope is to share that data with the new fleet of GlobalEyes.

    “So, in that sense, we are already there,” Wikman said. “I’m telling Saab ‘hey, you need to be able to import the space data.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • An AI-led cyberattack breached limited Hugging Face datasets and service credentials, while public models, Spaces and published packages showed no signs of tampering.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI) skills or Model Context Protocol (MCP) servers to deliver a malware family known as SmartLoader as part of an ongoing campaign codenamed FakeGit. “FakeGit uses copied projects, lookalike developer profiles, convincing READMEs, and malicious ZIP

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶