ADMIN.FOUNDATION

  • Google Dialogflow CX Flaw Lets Attackers Bypass VPC-SC and Steal Sensitive Chatbot Data

    ·

    , , ,

    A critical vulnerability in Google Cloud’s Dialogflow CX platform allowed attackers to bypass VPC Service Controls (VPC-SC) and silently exfiltrate sensitive chatbot data, raising significant concerns about the security of enterprise AI deployments. Discovered by Varonis Threat Labs and dubbed “Rogue Agent,” the flaw exposed a serious design gap in how Dialogflow CX executes custom […]

    The post Google Dialogflow CX Flaw Lets Attackers Bypass VPC-SC and Steal Sensitive Chatbot Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Accenture Data Breach Exposes 35GB Source Code and Azure DevOps Credentials

    ·

    , ,

    Accenture is currently investigating a potential data breach after a threat actor using the alias “888” claimed to be selling approximately 35GB of stolen data, including source code and sensitive credentials, on a cybercrime forum. This listing, posted on July 6, 2026, alleges that the breach resulted in the exfiltration of proprietary assets, including source […]

    The post Accenture Data Breach Exposes 35GB Source Code and Azure DevOps Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • GitLost Vulnerability Lets Attackers Trick GitHub AI Agent Into Leaking Private Repos

    ·

    , , ,

    A critical vulnerability known as “GitLost” has been discovered in GitHub’s newly introduced Agentic Workflows by Noma Labs. This flaw allows unauthenticated attackers to exfiltrate sensitive data from private repositories. It demonstrates how AI-driven automation within development pipelines can be manipulated to bypass conventional access controls and leak confidential information across repository boundaries. GitLost Vulnerability […]

    The post GitLost Vulnerability Lets Attackers Trick GitHub AI Agent Into Leaking Private Repos appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • NATO snubs Boeing, picks Saab to build alliance’s next radar plane

    ·

    NATO allies plan to buy 10 of Saab’s GlobalEye aircraft as the alliance’s next-generation radar plane, snubbing Boeing and its E-7 Wedgetail offering, officials announced on Tuesday.

    The alliance would replace its Boeing E-3 Airborne Warning and Control aircraft with the Swedish company’s offering, NATO Secretary General Mark Rutte said during the alliance’s Defence Industry Forum in Ankara, Turkey. 

    “For decades, NATO has relied on a fleet of E3 Airborne Warning and Control Systems, that have been our ‘eyes in the skies’. They have been deployed from Northern Norway to Southern Türkiye. They have served us well and continue to do so, but they are reaching the end of their lives,” Rutte said. “Today, several Allies are announcing the joint procurement of up to 10 SAAB GlobalEye aircraft to replace them.”

    Saab CEO Micael Johansson told reporters at the summit that he estimated the deal would be valued around $4.5 billion and that deliveries could begin in 2030, depending on when the deal is signed.

    Belgium, Canada, Denmark, Germany, Latvia, Lithuania, Luxembourg, the Netherlands, Norway, Romania, and Sweden are joining together to procure Saab’s aircraft, NATO said in a press release. 

    Their choice was influenced by the Pentagon’s decision—later reversed—to request no money for E-7s in the 2027 budget, one analyst said..

    “When the U.S. ‘27 budget came out, and there was no money for E-7, and NATO looked at that and said, ‘Well, if the U.S. isn't buying it, why should we?,’ and they made an announcement right then that because the administration was not behind E-7 they did not expect to be favoring

    it.” said J.J. Gertler, an aerospace analyst for the Teal Group. “That was both a matter of timing when the administration decided actually to buy E-7 later, but also something of an own goal.”

    That “leaning toward Saab” announcement was reported in April, just days after the Pentagon’s budget rollout showed no plans to fund the E-7 Wedgetail, by La Lettre, a French publication. 

    Boeing defended the E-7 aircraft in the wake of NATO’s formal announcement.

    “Boeing remains fully committed to supporting the mission needs of NATO allies and partners. With an active production line, the E-7A is the most capable and mature airborne battle management, command and control system fielded today,” a spokesperson said in an emailed statement. “The E-7 is a combat-proven platform already in the hands of NATO allies, delivering a family of systems approach, driven by unmatched interoperability with allied capabilities, and an industrial and sustainment framework ready to meet operational timelines.”

    Saab said in a press release that the company has “not signed a contract or received an order related to the announcement.” 

    The GlobalEye uses a collection of sensors mounted on a Bombardier Global 6500 aircraft to detect a wide-range of threats in contested combat zones, including drones, ballistic and hypersonic missiles, according to the company’s website.

    “We are confident that GlobalEye is the right choice for the Alliance, delivering proven capability, adaptability and long-term operational advantage. Today’s announcement clearly positions GlobalEye as the world-leading solution for advanced airborne early warning and control. We look forward to the next steps in the negotiations,” Johansson said in a statement.

    In May, Defense Secretary Pete Hegseth reversed course and said the initial decision to omit E-7 funding reflected an outdated “austerity” and “divest-to-invest mindset.”  

    Last month, House appropriators backed the White House’s $1.5-billion budget amendment to fund E-7 Wedgetail development and pushed back on an attempt to raid the Navy’s airborne early warning account in the process.

    NATO delivered its own Wedgetail whiplash last fall. In 2023, the alliance announced plans to buy six E-7s. Then, in July 2025, the Trump administration withdrew from the deal. Four months later, the Netherlands and other countries declared they would no longer seek to buy the aircraft, citing “strategic and financial” woes.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Why Unity Remains the Most Popular Engine for Mobile Games

    ·

    , , , ,
    Learn why Unity is still a trusted engine for mobile games, from faster prototyping and Android and iOS support to tools that help studios scale after releases.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • House committee wants details on DHS network hack

    ·

    House Homeland Security Committee staff are requesting a briefing from the Department of Homeland Security on the breach of the agency’s Homeland Security Information Network, according to a committee aide with knowledge of the matter.

    Staffers are hoping to be briefed on the intrusion—first reported by Nextgov/FCW last week—by Friday, said the aide, who spoke on the condition of anonymity because the matter is sensitive. 

    Hackers are believed to have penetrated HSIN sometime between late May and early June, though their affiliation and whether any contents were pilfered from the platform is unclear, a person familiar with the matter previously said. 

    Approved users lean on the network to securely access data, exchange requests with partner agencies, manage operations, coordinate safety and security for planned events, respond to incidents and share mission-critical information needed to protect their communities, according to its website. HSIN carries unclassified but sensitive information shared among federal, state, local, territorial, tribal, international and private-sector partners.

    The intrusion comes as the U.S. oversees security for World Cup games across the country, placing added scrutiny on the systems federal, state and local officials use to coordinate major events. A breach of the platform may raise concerns about whether hackers gained insight into security planning, interagency coordination or response procedures surrounding one of the most visible international events hosted predominately in the United States.

    Senate Intelligence Committee Vice Chairman Mark Warner, D-Va., said last week that the network is being used to support the World Cup and America250 events. He added that it played a key role for emergency responders during last year’s mid-air collision between an American Airlines flight and an Army Black Hawk helicopter outside Washington, D.C.

    “The information in HSIN, while not classified, is highly sensitive, and its exposure risks national security,” Warner said. “DHS and DOJ must thoroughly investigate who breached HSIN, what the attackers accessed, and ensure all DHS partners are provided with timely information and the tools necessary to mitigate any associated risks from the breach.”

    When asked by Nextgov/FCW about the committee briefing request, a department spokesperson sent the same statement it provided last week that confirmed the hack.

    The statement said staff “immediately took action to isolate the affected systems, mitigate the vulnerability, and launch a comprehensive forensic investigation,” and added that an investigation is ongoing and more details can’t be provided.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Trump wants to scrap a key framework for federal-employee discipline

    ·

    The Trump administration last week proposed new regulations that would nullify a decades-old legal framework agencies use to mete out and justify federal employee discipline in favor of what critics say will be a vaguer and less fair standard.

    In a proposed rule published in the Federal Register, the Office of Personnel Management and Merit Systems Protection Board jointly called for “retiring” the Douglas factors, a list of 12 criteria agencies are expected to employ when they consider disciplinary measures, developed in a 1981 MSPB case shortly after the implementation of the 1978 Civil Service Reform Act. They include, among other things, the severity of the offense, an employee’s past performance and conduct and their potential for rehabilitation.

    But OPM and MSPB argued that rubric had grown too restrictive, and that agencies had taken a “mechanical” approach to apply each factor to a given disciplinary case, disincentivizing managers from pursuing adverse actions against their employees.

    “In proposing this departure from the 12-factor Douglas test, MSPB acknowledges that Douglas has long been a cornerstone of federal employment law,” the agencies wrote. “However, over the ensuing decades, agencies and, occasionally, MSPB, have applied Douglas in a rigid, mechanistic way that the original decision never contemplated or prescribed. For the reasons set forth in this proposed rule, and in conjunction with OPM’s streamlining of performance management policy, the board proposes to correct this rigid application and reaffirm the board’s commitment to adjudicating disciplinary action appeals under a more flexible standard in conformance with its statutory authority.”

    Raymond Limon, who served as a Democratically appointed member of MSPB from 2021 until February 2025, said that while he agrees that the Douglas factors are designed to be “illustrative” rather than rigid, the administration’s description of how they are applied doesn’t jibe with his experience adjudicating employees’ appeals, particularly given agencies better than 80% success rate before the board.

    “It’s possible that some agencies on their own have created a more formalistic approach requiring supervisors to complete it like a checklist and address every issue,” he said. “But to me, if they’re doing that, that’s because they’ve developed a poor policy or don’t understand the law correctly . . . I feel like the proposed regulation assumes that Douglas is the disease, but it may simply be the stethoscope.”

    OPM and MSPB’s new standard—to simply consider the “totality of circumstances” when considering a disciplinary measure—is vaguer and ripe for abuse, said Michael Fallings, managing partner at Tully Rinckey PLLC, a firm specializing in federal employment law.

    “’Totality’ is just a vague way of saying that we’re going to consider factors, but what they’re trying to say is, ‘We don’t have to consider certain factors that may some times be in favor of the employee,’” Fallings said. “What we’ve seen [in my practice] over the past year are employees proposed for removal for one instance of misconduct and no prior discipline. We’ve seen some where the alleged event occurred years ago, with no prior discipline and good performance since then. It’s a way to say, ‘We’ll consider the circumstances, but we don’t have to.’”

    The regulations would require additional training for managers and supervisors on performance and misconduct issues, something long requested by good government groups. And it formally reintroduce a number of policies from Trump’s first term aimed at making it easier to fire poor performers, including reducing the length of performance improvement plans to 30 days, banning settlement agreements that remove documentation of poor performance or misconduct from an employee’s record, and barring the use of union official time to help an employee pursue adverse action appeals.

    The that the administration’s latest proposal was jointly offered by OPM and MSPB undermines a key tenet of the Civil Service Reform Act, Limon argued.

    “The MSPB was designed by Congress to be an oversight body over OPM and that also to be an independent institution,” he said. “That’s why the Civil Service Reform Act was created: to split up the Civil Service Commission. The policy wing became OPM, and MSPB would do the commission’s adjudication work. Good fences make good neighbors, but they’re collapsing that.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Hidden SecOps Bottleneck: Getting the Right Data In and the Right Actions Out

    ·

    Because scaling security isn’t just about better detection—it’s about removing the friction around it

    – Mayuresh Ektare, Senior Vice President, Product Management

    San Jose, Calif. – Jul. 7, 2026

    Every security team wants better outcomes.

    Faster detection. Faster triage. Faster investigation. Faster response.

    But many teams are slowed down by a less visible problem: operational friction.

    A customer has a data source that is not supported yet. A parser needs to be built. A log format is messy.
    A hunting playbook works in one environment but not another. A response action requires analysts to leave the case and jump into a separate console. A dashboard exists, but the right person cannot easily find it. A query needs to be rebuilt from filters an analyst already created.

    None of these issues sound dramatic by themselves.

    Together, they determine whether a SecOps environment can scale.

    For MSSPs, this friction directly affects onboarding speed, service margins, and customer time to value. For lean security teams, it creates blind spots and manual work they do not have the capacity to absorb.

    Stellar Cyber 6.5 focuses on this hidden layer of SecOps performance: making it easier to bring data in, normalize it, hunt across it, act on it, and manage operations at scale.

    The Scaling Problem Is Often a Data Onboarding Problem

    Security teams cannot detect threats across telemetry they cannot ingest.

    They cannot correlate what they cannot normalize. They cannot investigate what they cannot understand.

    That is why parser development is not a back-office technical detail. It is a security outcome issue.

    Every environment has unique telemetry. MSSPs see this every day. One customer uses a particular firewall. Another uses a regional VPN provider. Another has specialized infrastructure, legacy systems, DLP tools, file transfer platforms, remote access technologies, API security products, or custom applications.

    If onboarding that telemetry requires long vendor cycles or custom engineering every time, the security program slows down before it begins delivering value.

    Stellar Cyber 6.5 introduces Parser Studio in Early Access to help address this problem.
    Parser Studio gives customers and partners a self-service workspace for creating, managing, testing, and activating custom parsers. Teams can view built-in and custom parsers, clone supported modular parsers, test parser behavior before deployment, and activate parsers for production ingestion.

    For MSSPs, that can shorten customer onboarding cycles and reduce dependency on vendor-delivered parser work. For enterprise teams, it helps bring custom, specialized, or hard-to-normalize telemetry into the security workflow faster.

    Parser Control Is Visibility Control

    Parser coverage determines what security teams can see.

    If data cannot be parsed correctly, it may arrive without the right fields, context, entities, or normalization. That weakens detection, correlation, investigation, reporting, and response.

    Stellar Cyber 6.5 expands parser coverage across a wide range of technologies, including firewalls, VPNs, web gateways, endpoint tools, API security, DLP, file transfer, remote access, network infrastructure, email security, and cloud-related systems.

    This matters because modern attacks cross domains.
    A single incident may involve a VPN login, identity anomaly, endpoint activity, firewall event, SMB transfer, cloud configuration change, suspicious email, and data movement. If only some of that telemetry is normalized, the team sees only part of the story.

    Expanded parser coverage helps bring more of that evidence into one operating environment so teams can investigate the whole picture instead of fragments.

    For MSSPs, this means broader support for diverse customer environments. For lean teams, it means fewer blind spots and less manual work stitching together evidence.

    Integrations Are Not Checkboxes

    Hundreds of integrations. Thousands of integrations. A giant logo slide.

    But integrations are not valuable because they exist. They are valuable when they help teams get data in, understand what is happening, and take action faster.
    Stellar Cyber 6.5 adds new connectors for Microsoft Graph Message Trace, NordStellar, ManageEngine Endpoint Central, and Firewalla Managed Security Portal. These connectors help bring more relevant telemetry into the platform.

    The release also adds new response options through enhanced integrations with Netskope, Trend Micro Vision One, and Palo Alto Networks Cortex XDR. These actions allow analysts to block destinations, quarantine users, isolate endpoints, quarantine email messages, restore endpoint connections, and take other response steps directly from the investigation workflow.

    Response should not be disconnected from investigation.

    If an analyst has to leave the case, open another console, search for the same entity, verify the context again, and manually execute a response, time is lost and risk increases.

    Integrated response reduces tool switching and helps teams move from investigation to action with the evidence still in view.

    Automated Hunting Has to Be Reusable

    Threat hunting is powerful, but it can be hard to operationalize.

    A good hunting playbook created by one analyst should not remain trapped in one environment. MSSPs need to reuse and standardize hunting workflows across tenants. Enterprise teams need to move content between development, test, and production environments. Analysts need confidence that hunts will run reliably even in high-volume environments.

    Stellar Cyber 6.5 adds import and export for Automated Threat Hunting playbooks, making it easier to move playbooks between environments, standardize hunting workflows, and reuse content across customers or deployment stages.

    This helps turn hunting from a one-off analyst activity into a repeatable operating practice.

    The release also improves large-result-set handling and chained queries, which helps reliability in high-volume environments. Last-run details and indexing status provide better operational visibility, helping teams understand whether hunts ran successfully, whether data was ready, and whether results are trustworthy.

    A hunting program that cannot scale becomes a manual exercise.

    A hunting program that is portable, visible, and reliable becomes an operational capability.

    Better Workflow Turns Analysis Into Reusable Knowledge

    SecOps productivity is not only about detection engines and AI models. It is also about day-to-day usability.

    Can analysts find the dashboard they need? Can managers see what matters? Can administrators manage views based on permissions? Can an investigation filter become a reusable query?

    Stellar Cyber 6.5 introduces Dashboard Hub, a central landing page for dashboards and charts. Analysts, administrators, and managers can more easily browse, open, and manage dashboards based on their permissions.

    The release also allows analysts to build a query from active filters, turning investigation filters into reusable queries without rebuilding logic manually.
    That is useful because good analyst work should not disappear when an investigation ends.

    If an analyst narrows an investigation with a useful set of filters, that logic can become a reusable search or hunting query. Over time, this helps teams convert individual expertise into shared operational knowledge.
    Small workflow improvements compound.

    They reduce clicks. They reduce errors. They reduce rework. They help teams spend more time investigating threats and less time navigating tools.

    The Bottom Line

    The best security platforms do not just detect threats.

    They make it easier to bring in the right data, normalize it, investigate it, hunt across it, respond from it, and manage the entire operation at scale.

    Stellar Cyber 6.5 strengthens that operational foundation with Parser Studio, expanded parser coverage, new connectors, enhanced response actions, automated hunting improvements, Dashboard Hub, and reusable query workflows.

    For MSSPs and lean security teams, these enhancements improve the mechanics of security operations: faster onboarding, broader visibility, more reusable content, less manual work, better response speed, and more scalable service delivery.

    That is how operational control turns into better security outcomes.

    Mayuresh Ektare, Senior Vice President, Product Management

    About Stellar Cyber

    Stellar Cyber’s Open XDR Platform delivers comprehensive, unified security without complexity, empowering lean security teams of any skill level to secure their environments successfully. With Stellar Cyber, organizations reduce risk with early and precise identification and remediation of threats while slashing costs, retaining investments in existing tools, and improving analyst productivity, delivering an 8X improvement in MTTD and a 20X improvement in MTTR. The company is based in Silicon Valley. For more information, visit https://stellarcyber.ai.

    The post The Hidden SecOps Bottleneck: Getting the Right Data In and the Right Actions Out appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service

    ·

    A new Android malware operation called RedWing is being rented out on Telegram as a ready-made bank-fraud service. It lets even low-skill criminals take over a victim’s phone, steal their banking logins, and capture the one-time codes that protect their accounts. Zimperium’s zLabs, which found the operation, says it looks like a new variant of Oblivion, a $300-a-month rent-a-malware tool

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • 7 Arrested Over World’s Top Anime Piracy Site HiAnime

    ·

    , , , , , , , , ,
    Vietnamese police, aided by US Homeland Security and ACE, arrested seven people accused of running HiAnime, tied to $12.85M in ad revenue.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶