Skip to content

ADMIN.FOUNDATION

  • Dark Web Empire Market Co-Creator Raheim Hamilton Gets 40 Years in Prison

    ·

    Cyber Crime, cybersecurity, Dark Web, Drugs, Empire Market, Raheim Hamilton, Security, Thomas Pavey
    Raheim Hamilton, co-creator of the dark web marketplace Empire Market, was sentenced to 40 years for a platform…

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Army brings back ‘night court’ audit of programs, shifting more than $100M

    ·

    Policy
    The Army may have a new take on acquisition and modernization, but senior leaders have brought back an innovation from the first Trump administration: top-to-bottom reviews of program spending.

    “Night court,” as the Army calls it, started in 2018. Then-Army Secretary Mark Esper and Chief of Staff Gen. Mark Milley would meet up at the end of the day to hunt through reams of Army program documents for savings. Ultimately, tens of billions of dollars were reprogrammed to new priorities.

    Over the summer, service leaders relaunched the effort to evaluate the Army’s many programs.

    “Everything from basic research, all the way up—how is that lining into where we're actually taking the Army, from a modernization perspective?” Brent Ingraham, the Army’s civilian acquisition chief, told reporters Thursday of the new round of night courts.

    They started with science and technology programs earlier in the summer, Ingraham said, ensuring that the Army’s basic research was aligned with larger goals in the new Portfolio Acquisition Executive offices, which are now responsible for the entire lifecycle of an Army program.

    “We roughly found, I'll say, a little over $100 million of S&T funds that could better be realigned to match where the portfolios were headed,” he said.

    Next they reviewed foreign military sales contracts.

    “How can we improve on delivery of those capabilities?” Ingraham said. “And so it's really sort of looking at how we become better partners to our allies and partners on delivery of capabilities.”

    Sustainment is the most recent bucket added to the review, he said. PAEs are reviewing their programs to realign what it will cost to sustain current and planned programs, what can be cancelled, and where they might save money by bringing maintenance in-house.

    “The Army sort of fundamentally changed how we do budgeting, inside the department as well,” Ingraham said. “And so now the PAEs get to see the whole portfolio, not just traditional procurement and [research, development, testing and evaluation] dollars, but they see the [operations and maintenance] and the S&T dollars, so they can understand how it fits across the whole portfolio.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • WhatsApp-Delivered Malware Injects Into Windows Task Scheduler to Run as SYSTEM

    ·

    cyber security, Cyber Security News, Malware, WhatsApp

    A WhatsApp-delivered financial-document lure is being used to deploy a sophisticated Windows malware chain that injects code into the Task Scheduler service and executes subsequent payloads with LocalSystem privileges. The executable acts as an NRV2E-compressed wrapper that reconstructs its malicious loader entirely in memory, limiting obvious artifacts on disk and obscuring imports, strings, and control-flow […]

    The post WhatsApp-Delivered Malware Injects Into Windows Task Scheduler to Run as SYSTEM appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

    ·

    A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in remote code execution (RCE). The

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Android Firmware Malware Uses Ad Fraud and Proxy Botnets to Generate Revenue

    ·

    Android, Botnet, cyber security, Cyber Security News, Malware

    Midnight Mimosa, an Android malware campaign embedded in firmware that monetizes compromised smartphones through advertising fraud and residential proxy services. Disclosed on October 8, the operation affected thousands of devices across more than 150 countries over roughly two years, predominantly inexpensive phones built on MediaTek platforms. Unlike malware requiring a malicious download, Midnight Mimosa arrives […]

    The post Android Firmware Malware Uses Ad Fraud and Proxy Botnets to Generate Revenue appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • AnyDesk Vulnerability Allowing Remote Code Execution With Root Privileges

    ·

    CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities, vulnerability

    Security researcher has disclosed a heap buffer overflow vulnerability in AnyDesk Linux version 8.0.2, named AnyPwn. This vulnerability allows remote command execution before the user approves desktop control. Because the AnyDesk service typically runs with root privileges, successful exploitation lets attackers gain root access to the system. We identified the issue using V12, and AnyDesk […]

    The post AnyDesk Vulnerability Allowing Remote Code Execution With Root Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

    ·

    Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine. The activity, which brings together commodity offensive tools like Cobalt Strike with an AI orchestration layer powered by Anthropic’s Claude Code, has been attributed

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers Use AI-Generated Event Lures to Steal Google Accounts and Bypass MFA

    ·

    AI, cyber security, Cyber Security News

    An advanced persistent threat spear-phishing campaign targeting individuals affiliated with Taiwanese research organizations, combining likely AI-assisted event invitations with real-time Google authentication interception. Tracked as UAT-11985, the operation uses institutional impersonation, altered QR codes, and an adversary-in-the-middle phishing framework to steal credentials and authenticated sessions. Attackers repurposed legitimate public event information to make fraudulent invitations […]

    The post Hackers Use AI-Generated Event Lures to Steal Google Accounts and Bypass MFA appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Casbaneiro Banking Trojan Activates Only When Victims Visit Targeted Bank Websites

    ·

    cyber security, Cyber Security News

    A Casbaneiro banking trojan campaign in August 2026 that targeted Latin American users via phishing emails and malicious PDFs disguised as invoices and legal notices. Its defining feature is conditional command-and-control activation: the malware initiates banking-related C2 communication only when victims visit targeted financial websites, making infected systems appear inactive during automated analysis. That restriction […]

    The post Casbaneiro Banking Trojan Activates Only When Victims Visit Targeted Bank Websites appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft Teams Adds New Security Feature to Detect Malicious QR Codes in Messages

    ·

    cyber security, Cyber Security News, Microsoft

    Microsoft is enhancing Teams security with a new feature that detects malicious URLs hidden in QR codes and alerts recipients after they receive messages. This improvement extends the protections offered by Microsoft Defender for Office 365, combining message alerts with additional investigative information for security teams. Teams Detect Malicious QR Codes According to Message Center […]

    The post Microsoft Teams Adds New Security Feature to Detect Malicious QR Codes in Messages appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 26 27 28 29 30 … 1,217
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence