Skip to content

ADMIN.FOUNDATION

  • SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation

    ·

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-45659 (CVSS score: 8.8), is a case of remote code execution arising from the deserialization of untrusted data. The issue

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • LSHIY Password Spray Attack Hits Microsoft 365 Accounts With 81 Million Login Attempts

    ·

    cyber security, Cyber Security News, Microsoft, vulnerability

    A large-scale password spray campaign linked to the infrastructure provider LSHIY LLC has targeted Microsoft 365 environments, resulting in over 81 million login attempts. This campaign has led to at least 78 confirmed account compromises across 64 organizations between June 12 and June 26, 2026. According to researchers from Huntress, the activity primarily originates from […]

    The post LSHIY Password Spray Attack Hits Microsoft 365 Accounts With 81 Million Login Attempts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Browser-Only Ransomware Uses File System Access API to Encrypt Files Without Malware Installation

    ·

    cyber security, Cyber Security News, Malware, Ransomware

    A novel, practical ransomware technique that runs entirely inside the browser by abusing the File System Access API, demonstrating how AI can turn high-level malicious ideas into operational attack chains without any native payload. The proof-of-concept leverages a social engineering lure a fake AI image-enhancement/upscaler web app to convince users to grant folder-level access. Once […]

    The post Browser-Only Ransomware Uses File System Access API to Encrypt Files Without Malware Installation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Critical Cursor IDE Flaws Let Attackers Execute Code via Zero-Click Prompt Injection

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    Two significant remote code execution (RCE) vulnerabilities in the widely used Cursor ID expose developers to zero-click attacks driven by prompt injection. These vulnerabilities, tracked as CVE-2026-50548 and CVE-2026-50549, collectively known as “DuneSlide,” carry a CVSS score of 9.8. They demonstrate how development environments powered by large language models (LLMs) can unintentionally increase the attack […]

    The post Critical Cursor IDE Flaws Let Attackers Execute Code via Zero-Click Prompt Injection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • FortiBleed Campaign Linked to INC and Lynx Ransomware Operations

    ·

    cyber security, Cyber Security News, Ransomware

    A direct operational link between the large-scale FortiBleed credential-harvesting campaign and two active ransomware-as-a-service (RaaS) groups: INC Ransom and Lynx. This finding provides the first confirmed evidence that mass theft of FortiGate credentials is being integrated into ransomware deployment processes, significantly increasing the threat posed by exposed firewall infrastructure. FortiBleed Campaign Linked to INC and […]

    The post FortiBleed Campaign Linked to INC and Lynx Ransomware Operations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Scattered Spider Hacker Arrested in Finland and Extradited to U.S. Over Cyber Intrusion Charges

    ·

    cyber security, Cyber Security News

    U.S. authorities have announced federal charges against an alleged member of the notorious cybercriminal group Scattered Spider, following his arrest in Finland and extradition to the United States. The defendant, identified as 19-year-old Peter Stokes, a dual national of the U.S. and Estonia, is accused of participating in a widespread conspiracy involving cyber intrusions and […]

    The post Scattered Spider Hacker Arrested in Finland and Extradited to U.S. Over Cyber Intrusion Charges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Under new management: the Pentagon’s autonomous systems get new oversight

    ·

    Defense Systems
    All of the Pentagon’s drone and counterdrone efforts for air, land, and sea will now fall under a new organization and director who will report to the deputy defense secretary, according to a memo released Wednesday.

    “Unmanned and autonomous systems are a strategic priority” and “essential to maintaining decisive military advantage,” Defense Secretary Pete Hegseth wrote in a memo dated June 29 that was released Wednesday.

    The new czar, called the direct reporting portfolio manager for unmanned offensive and defensive systems, or DRPM-UxS, will oversee all the Pentagon’s unmanned and autonomous initiatives, including the Joint Interagency Task Force 401 and the Defense Autonomous Warfare Group, plus efforts under the Defense Innovation Unit, military departments, and components.

    Leaders of JIATF-401 and DAWG will be “dual-hatted as elements under the DRPM-UxS,” whose director will steer “all missions, functions, and associated programmatic funding lines currently assigned,” effective immediately, the memo states. 

    DIU will be the Pentagon’s primary liaison with commercial companies for all “unmanned and autonomous systems programs within the DRPM-UxS portfolio,” the memo states. The DRPM will also serve as the head of the sUAS Industrial Base Working Group.

    The move mimics one the Air Force made late last year when it collapsed several of its largest programs, from the B-21 to Sentinel and Minuteman III intercontinental ballistic missiles, under the direct reporting portfolio manager for critical major weapons systems role. 

    That change followed the Pentagon’s acquisitions overhaul and put Air Force Gen. Dale White in the Senate-confirmed seat. Air Force officials have said the new role has helped get programs back on track, such as the troubled Sentinel intercontinental ballistic missile program, which triggered a Nunn-McCurdy Act review in 2024 due to massive cost overruns. 

    It’s unclear whether the DRPM for unmanned systems will require Senate confirmation, or who will fill the position. 

    The new DRPM also comes as the Pentagon accelerates plans to use drones across the services to keep up with modern warfare uses, and as lawmakers propose an all-robotics combatant command. 

    The reorganization aims to streamline and speed up how the Pentagon and military services buy, develop, and field unmanned systems, the memo suggests. 

    For example, the DRPM would also be responsible for existing and future marketplaces where drones and counterdrone systems can be bought—similar to the ones operated by the Army and Navy. New marketplaces can only be created with DRPM-UxS approval, the memo states. 

    Some of the first tasks the DRPM for unmanned and related systems would take on: 

    • Hiring for management, legal counsel, IT, contracting, and other roles;
    • Creating an organization chart delineating responsibilities and authorities across the portfolio;
    • Outlining all military service and component programs that would fall under the new portfolio “to include cost, schedule, resourcing, personnel, industry performance, and operational impacts;” 
    • Developing an implementation plan; and 
    • Providing regular progress and program updates to the deputy defense secretary. 

    The memo also creates an executive board chaired by the Pentagon’s no. 2, along with the vice chairman of the Joint Chiefs, military department heads, and defense undersecretaries for acquisition and research and engineering as members. 

    Thomas Novelly contributed to this report.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Cost of Non-Compliance: Why AI Governance Is the New Enterprise Imperative

    ·

    AI, Artificial Intelligence, Business, Laws & Legalities, Shadow AI, Technology
    AI governance helps enterprises control tool use, reduce compliance risk, protect customer data, and avoid fines as teams adopt AI faster than policy.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters

    ·

    Argo CD, a widely used tool for deploying software to Kubernetes, has an unpatched flaw in its repo-server component that lets an unauthenticated attacker run code, provided they can reach the component’s internal network port. Synacktiv, which found the bug, says it can lead to a full cluster takeover. There is no fix and no CVE. The firm says it reported the flaw to Argo CD’s maintainers in

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • 19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges

    ·

    A teenager accused of belonging to the hacking group Scattered Spider has been extradited from Finland to face U.S. charges of conspiracy, computer intrusion, and fraud, the U.S. Department of Justice announced on July 1. Peter Stokes, 19, a dual U.S. and Estonian citizen, appeared in a Chicago federal court on June 30, where a judge ordered him held in custody. Finnish police

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 322 323 324 325 326 … 1,235
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence