• A previously unreported data extortion operation dubbed “Helix” that targets enterprises using identity-focused entry techniques and automated SharePoint exfiltration. The group’s playbook combines voice phishing (vishing), device-code phishing to capture session tokens and bypass Conditional Access controls, rapid MFA registration for persistence, and scripted enumeration and bulk download of SharePoint content all staged from shared […]

    The post New Helix Extortion Group Targets Enterprises With MFA Abuse and SharePoint Exfiltration appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer’s computer. The assistant asks permission to edit one harmless-looking file, but the write lands on a sensitive one instead. The affected tools are Amazon Q Developer, Anthropic’s Claude Code, Augment, Cursor, Google Antigravity, and Windsurf.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Claude Desktop’s synced Personal Preferences feature can be exploited as a covert prompt-injection vector, transforming the AI assistant into a de facto command-and-control (C2) agent. This method allows for remote code execution on a compromised user workstation without the need for phishing emails or traditional malware delivery. In this attack chain, the initial access is […]

    The post Claude AI Prompt Injection Attack Turns Chatbot Into Stealthy C2 Agent to Achieve Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy business using an infrastructure comprising more than 230 lookalike domains. The activity dates back to at least August 2022, according to DNS threat intelligence firm Infoblox. Once such campaign, observed earlier this year, involved the

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • DuckDuckGo has quietly expanded its privacy-first browser capabilities by introducing a YouTube ad-blocking feature. This feature uses community-driven uBlock Origin filter lists to detect and remove video ads. From a security and privacy standpoint, this approach is significant because it relies on open-source filtering rules maintained by an active community, rather than proprietary, closed heuristics. […]

    The post DuckDuckGo Browser Blocks YouTube Ads Using uBlock Origin Filter Lists appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Rocket engine startup Venus Aerospace only has one major test flight under its belt, but the company just raised $91 million from investors ready to bet on future production demands.

    The Series B funding round was led by the venture capital firm Mercury Fund and with participation from other investors, including Lockheed Martin Ventures, which noted  the company’s rapid development of its rotating detonation rocket engine—which uses continuous supersonic detonation waves to generate thrust—calling it a welcomed addition to the defense ecosystem. 

    “Since our initial investment, Venus has progressed very quickly in its technology development. Our reinvestment in Venus recognizes Venus’ accomplishments to date and focus on speed to manufacture, cost management and reduction of supply chain constraints. Venus is working effectively to position its propulsion system for the production scale required by defense programs,” Chris Moran, vice president and general manager of Lockheed Martin Ventures, said in a statement.

    And setting up the building blocks for growth is the six-year-old startup’s chief focus.

    “We are really focused on growing the foundation that we have to be able to scale to meet the commercial and government demand that we're going to have for this system,” including hiring more talent and increasing manufacturing capacity, Tom Barron, chief operating officer for Venus Aerospace, told Defense One. That also means growing “the mundane but super important sort of business process and architecture required to meet high-consequence government contracts.” 

    Barron wouldn’t specify when its rotating detonation rocket engines might enter production, what the company’s manufacturing targets were, or how many people they plan to hire. Hinting at forthcoming announcements, he said the plan is to hire “technical and business talent” while “growing our in-house manufacturing capacity” and testing. 

    Last year, the Houston-based startup finished a flight test of its engine, which uses a continuous supersonic combustion process to burn fuel and is made up of 3D-printed components: “it's literally a rotating detonation wave inside the engine. The engine body itself is only three pieces,” Barron said.

    The engine promises to be more efficient and travel further, faster, than traditional rocket motors by 15 percent, the company said of the test flight results. It takes about two weeks to produce through machining and 3D printing. And key to future production, and development, is being able to test and integrate changes quickly.

    “We co-located our rocket-engine testing, our manufacturing, and our design engineering all in one place,” Barron said in an interview. “We test rocket engines 500 feet behind me, whereas if you go to basically any other major rocket engine designer, builder, they're doing it in the desert somewhere. And so you have this enormous lag driving eight hours into Mojave or into another remote area. So being able to test is a critical component of what we do.”

    The funding announcement comes as the White House pressures weapons makers to speed up production amid supply chain delays and skyrocketing demands for solid rocket motors needed to propel munitions and space architecture. 

    And as geopolitical tensions highlight near-term shortfalls, there’s a longer play Venus is hoping to make.  

    “Solid rocket motors are a 70-year-old technology,” Barron said. “We still need that technology to rebuild our capacity to produce those propulsion solutions. But we're at the margins of their performance.”

    “We deliver performance that doubles the range relative to solid rocket motors for several classes of munitions. And then in space, which is a massively growing market…that can either quadruple your payload or massively reduce the cost to launch. And so being able to deliver what our future capabilities, not just supply shortfalls of current capabilities, is what makes our engine different. It's a fundamentally new, novel, transformative technology.”

    Welcome

    You’ve reached the Defense Business Brief, where we dig into what the Pentagon buys, who they’re buying from, and why. Send along your tips, feedback, and song recommendations to lwilliams@defenseone.com. Check out the Defense Business Brief archive here, and tell your friends to subscribe!

    U.S.-NATO tensions remain, but there are still deals to be made. NATO leaders announced a flurry of new weapons deals Tuesday, estimated to be in the “tens of billions”—a demonstration of the increased defense spending President Donald Trump demanded last year. But while European countries have made strides to meet the 5 percent of GDP spending targets, there’s still work to be done, especially with the domestic industrial base, said NATO Secretary General Mark Rutte.

    • “By next year, the alliance will have the capacity to produce around four million artillery shells annually. Almost twice as many as last year. That’s scale. So yes, we have made real progress. We are moving in the right direction,” Rutte said Tuesday in his keynote address at the NATO Summit Defense Industry Forum in Ankara, Türkiye.
    • “The money is there and much more is coming. But this cash must be put to work,” he said, noting that Russia puts about half of its national budget into defense. 
    • Rutte ticked off figures: European allies and Canada increased defense spending by nearly 20 percent, or $139 billion more, from 2024 to 2025. That number is set to increase again for 2026 to more than $250 billion in additional spending year-over-year.
    • A new ‘front door’: NATO also released a consolidated demand signal, detailing the organization’s defense needs and opportunities for companies in a single portal.  
    • “To meet the challenge, we need a transatlantic defence industrial revolution. The hum of machinery must become a roar,” Rutte said. “At the same time, industry across all of the nations represented here must be ready to take more risk.”

    Making moves + other news

    • Anduril landed its first NATO contract—and it’s for the company’s AI platform, Lattice.
    • Fairbanks Morse Defense bought the Rolls-Royce Naval Handling facility in Ontario, which will become the company’s new Canadian headquarters.
    • Ships that were part of America’s birthday celebration in New York, called the International Naval Review 250, will depart Wednesday: USS Arlington (LPD 24); USS Nitze (DDG 94); USS Kearsarge (LHD 3); and USS Farragut (DDG 99), the Navy announced.
    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Compare iris recognition and fingerprint biometrics in 2026, from accuracy and speed to security, privacy, and where each technology works best.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • In the spring and summer of 2026, the story about Russia's war in Ukraine changed. The defenders are combining air and ground drones, autonomy, and swarming to re-capture territory with robots while risking fewer humans—increasing casualties for Russia while decreasing them for their own forces. Some four and a half years after confidently launching his invasion, Russian President Vladimir Putin has dwindling military options.

    In this short documentary, analysts, entrepreneurs, European experts, and NATO military officials describe how Ukraine defied expectations and changed the future direction of military technology—and of war itself.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • DuckDuckGo’s browser now blocks most YouTube ads by default on supported devices. Here’s how it works, which platforms support it, and its limits.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Pentagon CIO Kirsten Davies recently spoke with Nextgov/FCW about her efforts to update IT acquisition and move beyond policy to operational effectiveness, warfighter readiness, and more. This interview has been edited for length and clarity. 

    Nextgov/FCW: What are some of your office’s priorities under the current administration?

    Kirsten Davies: President Donald Trump and Secretary Pete Hegseth have given us a tremendous opportunity with a mandate for change. What you're seeing out of the Department of War now is enormous enthusiasm and momentum around that. 

    For example, the secretary has been very clear that we will take acquisition risk today in order to reduce operational risk tomorrow. Operational risk, in this case, means that at the core of everything we do is our work to enable and empower our warfighters. When I came into this role, I really wanted to bring the cause of the warfighter straight into the DNA of the Office of the CIO. 

    We're shifting gears tremendously away from being just a policy shop. Policy work is extraordinarily important, but operational effectiveness, warfighter readiness, and empowerment from a digital perspective are critical. Through the work of the Office of the CIO, what we're able to do is really shift gears and transform how we think about that. 

    It's not IT for the sake of that “T.” It's developing a technology footprint that enables and empowers our warfighters from the core all the way to the edge. 

    Nextgov/FCW: How are you changing your office to do that?

    Davies: We have four pillars for the transformation we are undertaking. The first is establishing an enduring digital foundation, so thinking of all the things we do when it comes to network transport and data centers. We are modernizing our data transport ability across this space and transforming the way we think about it from undersea to celestial, so satellites and everything in between. We obviously have a lot of work we're doing to build out the infrastructure for artificial intelligence and modernize the way in which we think about that. 

    Pillar two is the agile digital capabilities. I say agile very specifically because we are not going to do "fast waterfall." We are going to get after agile delivery and agile development, so truly get into industry best practices when it comes to the software development life cycle and when it comes to the totality of the agility we need to get digital capabilities to the warfighters faster, more securely and more resiliently.

    The third pillar is cybersecurity of the warfighting ecosystem. What you will be seeing out of my office is a much more holistic and transformative approach to cybersecurity, and that includes operational technology and the internet of things. When it comes to OT, we can’t treat it like IT, and we can’t neglect it as if it doesn't exist. So you're going to see a lot more focus on OT out of my shop as well. 

    And then pillar four is upskilling, cross-skilling, and partnering. We can talk about people all day long, and we can talk about the fact that everyone owns security. We need to embrace that as an ethos for us and work across our defense industrial base and across our allies and our partners internationally as well. And then also work with our interagency partners at the Cybersecurity and Infrastructure Security Agency, FBI and the National Security Agency.

    Nextgov/FCW: What are you doing about operational technology?

    Davies: Everything is connected, so the digitization of our industrial base is critical for us. The secretary has talked about reinvigorating our industrial base. From a cybersecurity perspective and from a technology perspective, all these devices are connected. There's more than automation involved. Now it's machine learning and also AI that are being more and more deliberately rolled out and leveraged in industry and in government. 

    When we talk about the OT aspect of these things, that's everything from building management systems to the critical infrastructure that supports our installations here in America and abroad. It is working with our defense industrial base partners.

    All of this is foundational operational technology. We must have appropriate availability, resiliency and security in order to ensure our warfighters have what they need when they need it. And this is underpinned by our technology footprint that goes from the core all the way to the edge.

    What we're working through now is setting up an OT council. The notion of this is to have industry expertise, department use cases and defense industrial base partners come to the table and say, “How do we get after this better?”

    Nextgov/FCW: How do you want to increase private-sector engagement and technology modernization?

    Davies: We are transforming from what has been a back-office IT function into a forward-leaning strategic department function that includes, by necessity, very strong collaboration across the building. 

    I’ve got great partnerships with Emil Michael, undersecretary of defense for research and engineering, where the Chief Digital and Artificial Intelligence Office is, and with Undersecretary of War for Acquisition and Sustainment Mike Duffey’s shop, where he is radically transforming the way in which we approach acquisition and procurement.

    You'll see there’s no daylight among us as a leadership team as we move forward with the secretary's vision to enable and empower our warfighters and to ensure the lethality, resilience and readiness of our warfighters from a very specific perspective.

    Acquisition at the department has historically been a very long process and was often focused on massive capital investments like ships. We have to shift gears when it comes to technology, when it comes to software, when it comes to cloud, when it comes to infrastructure buildout. Technology changes at a much more rapid cycle than planes and ships and all those things. 

    What we're working on inside the building and across the leadership is how do we drive not only a more agile approach to developing and delivering capabilities, but how do we drive a more agile approach to acquisition for things that can shift every six months? Infusing that kind of methodology into our thinking is what we're getting after.

    Nextgov/FCW: How are you trying to speed up acquisition and procurement?

    Davies: We're underway right now on a refinement of our risk-management framework. The RMF and the authority to operate are legal frameworks for the ways in which industry partners can work with us. Right now, if we are testing software in one part of the department, that approval, we’ll call it, doesn't necessarily transfer over to another part of the department. And that doesn't make common sense. 

    We’re not just going to digitize a piece of paper to a PDF; we are actually going to refine the totality of the process itself, including moving to more automation and moving to inheritance of one [Authorization to Operate] to another ATO. We want to actually overhaul the whole ATO process in and of itself. 

    I think that's a very specific example of how we are getting after what the secretary's vision is, which is to reduce barriers to entry. It's to reignite our defense industrial base and really reduce these compliancy and check-the-box exercises to get at meaningful outcomes.

    Nextgov/FCW: How is GenAI.mil helping?

    Davies: GenAI.mil is such a brilliant example of the first of many initiatives that are to come out of the department. The adoption and usage rates have been extraordinary. We have 1.3 million users right now, which is amazing. We have over 100,000 agents that have been built by users to support their tasks and their work cycles. In some cases, they have been able to take a two-week task and complete it in two hours.

    This is such a beneficial and helpful tool when it comes to day-to-day tasks that our employees and our warfighters can do much more rapidly now. What I love seeing about this is it saves our people for meaningful work. When we can leverage automation, machine learning, supervised machine learning and AI, that frees up time for people to apply their critical thinking, their analytical thinking, their skill sets, their experience and their expertise. From the warfighters to the civilians to the contractors, it frees them up to focus on work that really adds tremendous strategic value to the department, ultimately enabling our warfighters to have greater capabilities at their fingertips. 

    We recently announced partnerships with eight AI companies to deploy their tools on our classified networks. What you're seeing is this acquisition reform in motion. 

    The other thing you're seeing is the tremendous leadership from President Trump when he said he wants America to be tops in technology, in AI and in cybersecurity, and you are seeing that worked out at the Department of War. We are implementing that vision.

    Nextgov/FCW: How does all this fit into DOD’s modernization strategy?

    Davies: Traditional modernization can be like evolution. It can be an incremental change and take a really, really long time. True transformation goes at speed, and we are working at the speed of warfighters. We need data supremacy for decision dominance. 

    We have modernized the architecture to be deployed. We are getting after the defense business systems rationalization. In the midst of all that, in parallel, we’re seeing great advancements not only in the core enterprise technology aspects that I oversee, but also the edge use cases that are worked out by our service members and our joint forces and supported by our Office of Research and Engineering and the Defense Advanced Research Projects Agency.

    You're seeing that change at pace. And one of the things I’ve been really vocal about across the department and especially with our defense industrial base is that their innovation is our warfighter innovation. Their strength is our warfighter strength. Their security is our warfighter security. So we are really getting after these things in a partnership way that is with speed. It is with agility. When we find barriers, we are breaking them down. When we find unnecessary burdensome check-the-box exercises, we're tackling them at pace.

    Nextgov/FCW: How are you expanding the department’s IT and cyber workforce?

    Davies: We are working on an extended plan rollout to build on the great work this office has already done. The president and the secretary have given us a mandate to really get after skills-based training, which is what we’re pursuing. 

    Throughout my entire career, I have been trying to eliminate the requirement for degrees before people can get a job because if threat actors can be script kiddies and teenagers, then we need to be employing great skills where the skills are and figuring out how to incorporate them. You’re going to see a full life-cycle approach out of my office, which is also working with Katie Sutton, who is the assistant secretary of war for cyber policy. 

    We are working on a full life-cycle approach to skills-based hiring, cross-skilling and upskilling. We're looking at how we can develop a much more fulsome model for our warfighters who go into veteran status to ensure they are well trained to continue to support the national-security mission wherever they go next. You're going to see a lot more of that coming out of my office.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶