• A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitrary commands as root on the appliance by sending a crafted request to its API. The flaw, tracked as CVE-2026-8037, carries a CVSS score of 9.8 according to ZDI. A patch is available. If you run LoadMaster with the API enabled, update now. Progress published its advisory on June

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Japan’s hotel sector is the latest target of a sophisticated phishing and remote-access trojan (RAT) campaign that leverages guest-complaint lures and an unusual resilience mechanism: a TON blockchain–based dead-drop resolver. Beginning in late May 2026, attackers sent highly targeted emails to Booking.com partner properties in Japan with subject lines such as “重要:ゲスト滞在レビュー依頼” (Important: Guest Stay […]

    The post Japan Hotel Industry Targeted With TONResolver RAT and Guest Complaint Phishing Emails appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Apple on Monday released security updates for iOS, macOS, and the Safari web browser to address over three dozen flaws, including four vulnerabilities in WebKit that were discovered using artificial intelligence (AI) tools like Anthropic Claude and OpenAI Codex Security. The WebKit vulnerabilities are listed below – CVE-2026-43707 – A memory corruption issue that could result in an

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Two concurrent espionage campaigns by Mustang Panda targeting Indian government and energy-sector organisations, deploying a novel malware suite that includes SHARDLOADER, MINIRECON and ZOHOMURK. The intrusions, observed in June 2026, focused on hydropower entities and government offices engaged in MOUs with Taiwanese institutions, using geopolitically themed lures and weaponised archives that sideload malicious DLLs via […]

    The post Mustang Panda Targets India’s Government and Energy Sectors With ZOHOMURK and MINIRECON appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A malicious Chromium extension that impersonated the Perplexity AI brand to intercept browser searches and capture keystrokes before delivering users to legitimate search results. The extension, listed as “Search for perplexity ai” (ID flkebkiofojicogddingbdmcmkpbplcd, version 2.2), used Manifest V3 capabilities, declarativeNetRequest (DNR) rules, and a typosquatted domain perplexity-ai[.]online to create a stealthy two‑hop interception pipeline […]

    The post Malicious Chromium Extension Spoofs Perplexity AI to Hijack Browser Searches appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A critical security flaw impacting Oracle E-Business Suite has come under active exploitation in the wild, according to Defused Cyber. The vulnerability, tracked as CVE-2026-46817 (CVSS score: 9.8), refers to an improper privilege management and authentication flaw in Oracle Payments that could be abused to take over susceptible instances. “Easily exploitable vulnerability allows

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A newly identified Windows backdoor, dubbed Mistic, that has been observed in intrusions since April 2026 and appears designed for stealthy, long-term access. The malware uses DLL sideloading, in-memory execution, and self-deletion to blend into enterprise environments and minimize forensic traces. Mistic is introduced via a DLL sideloading chain that abuses a legitimate executable named […]

    The post Mistic Malware Blends Into Microsoft Endpoint Components Using Malicious EndpointDlp.dll appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Marine Corps will pay Overland AI $19.7 million to produce more than a dozen autonomous ground vehicles by early 2027.

    The vehicles, due to be delivered in about nine months, will be part of the Marine Air Defense Integrated Systems program, which is part of the service’s counterdrone approach, and support resupply missions. 

    “Ground autonomy matters now more than ever. We're seeing the proliferation of uncrewed ground vehicles in conflicts like the one in Ukraine, and tech maturity is really there,” Byron Boots, Overland AI’s CEO told reporters. “We're registering extremely high demand from U.S. operational units who want to incorporate this technology into their concepts of operation.” 

    Overland recently demonstrated its autonomous offerings with the Marine Corps on a prototype for the Remotely Operated Ground Unit for Expeditionary Fires, or ROGUE Fires, program.  

    The robot vehicle is expected to integrate with existing Marine Corps platforms, such as the Joint Light Tactical Vehicle, or JLTV.

    “We're going to start by integrating the [autonomous ground] vehicle into the system, providing a resupply capability for the other vehicles…and we may build on it from there,” Boots said. 

    The platform could potentially be used for other purposes, such as intelligence and surveillance. 

    “We've used our autonomous ground vehicles for a wide variety of different mission sets, everything from resupply to ISR to breaching,” he said. “Our understanding is that they'll initially be used for resupply, but we believe that there'll be many different possible use cases and ways to integrate this vehicle into the program.”

    The company declined to specify the exact number of vehicles that would be produced or other contract details, including the type of vehicle, payload capacity, and other specifications. The contract was awarded through a rapid acquisition tool called an other transaction authority through the Accelerate the Procurement and Fielding of Innovative Technologies, or APFIT, program under the Pentagon’s research and engineering shop.   

    The vehicles are designed to be fully autonomous, which means they can “perceive the environment, represent it, plan through it, and control the vehicle. So you can tell it where to go, and it will make the decisions on board in order to get there,” Boots said. 

    A military operator can also take over the vehicle remotely. The system is designed with open architecture. 

    The announcement comes as military services look to incorporate autonomous systems across domains. Integrating autonomous vehicles could improve troop safety by putting robots in their place for routine and potentially hazardous missions. 

    “We look forward to incorporating the Overland AI capability into the Marine Corps’ Ground Based Air Defense portfolio,” Joe Klocek, the Marine Corps’ program manager for ground-based air defense, said in a news release announcing the contract. “Pairing the autonomous platforms with our Marine Air Defense Integrated System will greatly extend the operational reach and lethality of our air defense units.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Researchers spotted 212 new domains registered after Venezuela’s earthquake, warning donors of donation scam risks and urging them to verify relief sites first.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft has found a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people searched for. It routed every query and every character typed into the address bar through an attacker-controlled server before redirecting users to real results. Microsoft says Google removed it from the store after responsible disclosure. The extension was called “

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶