Skip to content

ADMIN.FOUNDATION

  • LegacyHive Windows Zero-Day Lets Attackers Hijack Administrator Registry Hives

    ·

    cyber security, Cyber Security News, Windows

    A newly disclosed Windows local privilege-escalation vulnerability, dubbed LegacyHive, could allow a standard user to load and modify the per-user registry classes hive of an administrator account. The proof-of-concept (PoC), published by researcher NightmareEclipse under the MSNightmare/LegacyHive GitHub repository, abuses Windows’ User Profile Service to mount a target user’s UsrClass.dat hive into a registry location […]

    The post LegacyHive Windows Zero-Day Lets Attackers Hijack Administrator Registry Hives appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers Breached an IIS Server and Deployed Ransomware Across the Network the Next Day

    ·

    cyber security, Cyber Security News, IIS, Ransomware

    Hackers leveraged a compromised Microsoft IIS server to gain initial access and deploy a previously unseen ransomware payload across an enterprise network within 24 hours, highlighting a highly coordinated and operationally mature intrusion chain observed in June 2026. The campaign reflects a fast-paced, hands-on-keyboard intrusion combined with automated lateral movement, signaling a threat actor capable […]

    The post Hackers Breached an IIS Server and Deployed Ransomware Across the Network the Next Day appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Sophos Fusion: A Complete AI-Native Cyber Defense System

    ·

    Blogs
    This week in cybersecurity from the editors at Cybercrime Magazine

    Sausalito, Calif. – Jul. 17, 2026

    – Read the full story from Sophos

    With around 359 million businesses in the world, fewer than 35,000 have a CISO or security leader in place, according to the 2026 CISO Report from Cybersecurity Ventures in partnership with Sophos. That ratio — one CISO for every 10,000 organizations — is at the heart of why the industry has failed to keep pace with the threat.

    The cybersecurity poverty line is what happens when organizations can’t convert their security technology into functional defense. It’s defined by strategic capability: the ability to set up controls correctly, monitor them continuously, measure whether they’re working, and improve over time.

    AI made that gap both more dangerous and, for the first time, genuinely closable. More dangerous because attackers adopted it instantly, an immediate, free upgrade. Closable because the same AI capabilities that accelerate attacks can also accelerate defense if it’s built as part of the architecture and not bolted on as a feature.

    Sophos Fusion, a complete AI-native cybersecurity defense system, was announced on Jul. 16. It’s the evolution of what in the industry we’ve called Platforms. It’s a single, open architecture where every control point — endpoint, firewall, email, cloud, network, identity, and security operations, and more — shares the same data, the same intelligence, and responds as one.

    Out with a stack, an outdated model where enterprises have as many as 45 point security products — and in with a platform, the next generation of security. That’s the promise of Sophos Fusion.

    Read the Full Story



    Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

    • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
    • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
    • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
    • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
    • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
    • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
    • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
    • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
    • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

    Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

    The post Sophos Fusion: A Complete AI-Native Cyber Defense System appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • AWS Billing Bug Displays Trillion-Dollar Cost Estimates to Cloud Customers

    ·

    AWS, cyber security, Cyber Security News

    Amazon Web Services (AWS) is currently investigating a significant billing issue affecting its Cost Explorer tool. This problem caused some cloud customers to see alarmingly inflated cost estimates, with figures reportedly reaching into the trillions of dollars. AWS Support acknowledged the issue on July 17, 2026, which has caused confusion and concern within the cloud […]

    The post AWS Billing Bug Displays Trillion-Dollar Cost Estimates to Cloud Customers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants

    ·

    The European Commission on Thursday ordered Google to give rival AI assistants the same reach into Android that Gemini already has: the camera, the microphone, whatever is on screen, a wake word that fires with the display off, and the ability to drive other apps in the background by imitating taps and typing. Google has to ship it in the next major release, Android 18, and by 1 August 2027 at

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace?

    ·

    Military forces are under increasing pressure to field autonomous capabilities faster than ever before. Across the U.S., UK, and NATO, new investment, evolving defense strategies, and accelerated acquisition pathways are transforming how capability is delivered, rewarding programs that can move from concept to operational deployment at commercial speed. Now the focus shifts to the trusted

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • New NadMesh Botnet Uses 20+ RCE Vectors to Hijack AI and MCP Infrastructure

    ·

    AI, Botnet, cyber security, Cyber Security News

    NadMesh is a new, industrial‑grade Go‑based botnet that weaponizes more than 20 RCE vectors to hijack AI and MCP infrastructure at scale, combining autonomous scanning, exploit delivery, and credential harvesting in a single closed‑loop platform. In early July 2026, researchers identified NadMesh as a high‑volume Go-written botnet that was aggressively deploying bot agents across internet‑facing […]

    The post New NadMesh Botnet Uses 20+ RCE Vectors to Hijack AI and MCP Infrastructure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man

    ·

    Armenia has held a Russian tourist named Aleksandr Ermakov in a detention center since June 28, on a U.S. extradition request for a REvil ransomware suspect named Aleksandr Ermakov. His wife, Maria Yurova, told REN TV that border officers pulled him out of the departure hall at Yerevan’s Zvartnots airport, held up a phone with a photo of him off his VKontakte page, and walked him into a side

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • TP-Link Kasa Camera Flaws Let Attackers Steal Admin Credentials and Geolocation Data

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    TP-Link has revealed several serious vulnerabilities affecting its Kasa EC70 and EC71 smart camera models, which could expose users to credential theft and geolocation data leakage. These vulnerabilities are CVE-2026-9770 and CVE-2026-13230 and specifically affect version 4 of both devices. Attackers with access to the same local network could exploit these flaws, raising concerns about […]

    The post TP-Link Kasa Camera Flaws Let Attackers Steal Admin Credentials and Geolocation Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • CISA Warns of Two Fortinet FortiSandbox Flaws Exploited to Execute Commands

    ·

    CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities in Fortinet FortiSandbox to its Known Exploited Vulnerabilities (KEV) catalog. These flaws are actively being exploited in the wild to execute unauthorized commands on affected systems. The vulnerabilities, tracked as CVE-2026-39808 and CVE-2026-25089, involve OS command injection weaknesses (CWE-78) and impact FortiSandbox […]

    The post CISA Warns of Two Fortinet FortiSandbox Flaws Exploited to Execute Commands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 274 275 276 277 278 … 1,232
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence