-
US and French authorities seized two domains and arrested a suspected administrator in a CSAM and non-consensual intimate image abuse case.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filtering, session management, and traffic controls into the infrastructure that delivers the phishing page itself. ANY.RUN has identified Wazza, a new phishkit targeting banking, manufacturing, and government organizations across the US, Europe
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cisco has disclosed three critical vulnerabilities in its Nexus 3000 and 9000 Series switches that could allow unauthenticated remote attackers to execute arbitrary code with root privileges. Successful exploitation could crash processes, trigger device reloads, and cause denial of service, disrupting network availability. Published on October 7, 2026, advisory cisco-sa-ngoam-rce-LWKQ4BU identifies three vulnerabilities: CVE-2026-76485, CVE-2026-76486, […]
The post Critical Cisco Nexus Switch Vulnerabilities Allow Unauthenticated Attackers to Execute Code as Root appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A financially motivated campaign that used agentic AI tools to breach South Korean financial organizations and exfiltrate data. Active from late September to early October 2026, the operation combined ARTEX, an open-source penetration testing platform developed in China, with multiple large language models. Researchers recovered exposed operational files that documented the attacker’s infrastructure, prompts, and […]
The post Financially Motivated Hacker Uses Agentic AI to Breach Multiple South Korean Finance Targets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A public proof-of-concept (PoC) exploit has been released for CVE-2026-59346, a critical integer overflow flaw in VMware Workstation and Fusion that could enable a privileged attacker inside a virtual machine to execute code on the underlying host. Broadcom has assigned this vulnerability a CVSS v3.1 score of 9.3 and has addressed it in VMware Workstation […]
The post PoC Exploit Released for Critical VMware Vulnerability Enabling Guest-to-Host Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys. “The extensions masquerade as wallet portals, desktop utilities, and browser tools, but their code intercepts recovery phrases and private keys during wallet import flows and attempts to send those secrets to
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers are targeting hotels with fabricated guest complaints and negative reviews to distribute EtherRAT and TONResolver, two malware families that abuse public blockchains to locate their command-and-control infrastructure. The activity appears to extend earlier Booking. com-themed phishing operations, although Cofense assesses that connection with moderate confidence. Similar email templates and accommodation-sector targeting link the campaigns. […]
The post Hackers Target Hotels With Fake Guest Complaints to Deploy Blockchain-Based RAT Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Splunk has addressed a critical vulnerability in Splunk Enterprise that allows unauthenticated attackers to execute operating system commands through the Patroni REST API on a search head cluster member. This issue, tracked as CVE-2026-76268, has a CVSS v3.1 score of 9.8 and was disclosed in advisory SVD-2026-1001 on October 7, 2026. Successful exploitation requires network […]
The post Critical Splunk Enterprise Vulnerability Lets Unauthenticated Attackers Execute OS Commands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Peraton wants to bring AI-fueled project management to the Pentagon and beyond—while also changing the perception that it’s just an IT company.
It’s true the company has “a rich history of doing IT services and IT modernization across
government customers,” Gabe Camarillo, the company’s new defense sector president, told Defense One.
But Peraton is also big on defense prototyping and engineering: “We do Tomahawk theater mission planning support for the Navy,” he said, plus “modeling and simulation for Aegis. Also, sonar analysis and acoustic analysis for the Navy at Carderock. And then we also provide engineering support to some Army programs, like, for example, those that do aircraft survivability equipment.”
And those are areas ripe for growth, he said.
“We're looking to expand that footprint across the department, particularly at a time where new capabilities allow you to reduce risk in modernization programs, identify technical risks on system designs…achieve test and evaluation much more quickly. And bring that experience to bear to our customers to help them modernize at the pace they want to,” Camarillo said.
The former Army undersecretary stepped into the role this summer and said his overall vision is for Peraton to become the “go-to provider to manage and modernize enterprise IT across the department” which includes using AI to manage networks effectively.
And part of the vision is to bring what Peraton’s been doing with the $1.5 billion contract to overhaul the Federal Aviation Administration’s aging air traffic control system to other government customers.
“One of the key aspects of that work that we're doing for the FAA is introducing AI-enabled program management, where it gives the leadership of the agency much better insight into how the program can be executed,” Camarillo said, adding that AI can spot cyber risks and map out an organization’s modernization plan.
“That kind of applied AI usage…[can] enable not just an end user to ask queries of an AI tool, but to really allow an enterprise to use the tool effectively for its own modernization. That’s where I think there's some secret sauce that Peraton has brought to the table, and we're looking to expand that across all of our customer sets, whether it's defense and non-defense.”
Welcome
You’ve reached the Defense Business Brief, where we dig into what the Pentagon buys, who they’re buying from, and why. Send along your tips, feedback, and song recommendations to lwilliams@defenseone.com. Check out the Defense Business Brief archive here, and tell your friends to subscribe!
On a waterfront near Baltimore during a shipbuilding announcement Tuesday, President Donald Trump brought up tariffs, which he now calls his “fourth” or “fifth favorite word.” The comments weren’t new, but they were a reminder of simmering concerns about how U.S. trade relations, particularly with close allies, could affect national security.
- “Our drug industry is coming back. Our car industry is coming back. They're leaving Canada. They're leaving Mexico. They're leaving Japan, Germany, South Korea. We're building car plants,” he said. “It's all because of my favorite word, my fourth favorite…tariff,” the president said. (Context: There are multiple reports that U.S. tariffs on imported goods, such as automobiles from Canada, create uncertainty and the U.S. trade deficit is worsening.)
- The president’s comments reminded me of exchanges last week during a Senate Armed Services Committee hearing on Golden Dome, in which lawmakers on both sides of the aisle raised concerns that the escalating U.S. trade war with Canada could spill into defense.
- “They're a good ally. They're a good neighbor. They are modernizing NORAD right now…It's my understanding, though, that an agreement hasn't been reached with Canada yet on Golden Dome,” Sen. Deb Fischer, R-Neb., who chairs the Senate Armed Services Subcommittee on Strategic Forces, said during the hearing last week. “I think as we progress along there, my hope would be that we can continue to have a good working relationship there to really protect both of our countries.”
- Sen. Tim Kaine, D-Va., agreed, saying tensions between the neighboring allies have necessitated multiple “peacekeeping visits to Ottawa” and that it’s “unrealistic to expect that you can treat an ally badly in one domain, on the economy, but expect…to work cooperatively in terms of our defense.”
- Some background: The senators’ concerns echo those circulating since last year when the White House issued hefty tariffs on Canada and threatened to make the sovereign nation the 51st state. Those qualms have resurfaced as U.S.-Canada trade talks faltered in August and as a new batch of tariffs—and retaliatory tariffs—took hold this week. On the defense side, Canada has been reviewing its decision to buy 16 F-35As for months. And even if the trade war is resolved, there’s concern about an overall cooling in U.S.-Canada relations.
Making moves + other news
- General Dynamics President Danny Deep will take over as the company’s next CEO in 2027. CEO Phebe Novakovic will become executive chairman of the company’s board of directors.
- Peraton hired two more former Army officials as vice presidents: Jennifer Swanson and Danielle Moyer.
- The Army inked a $9.5 million deal to expand use of Reveal Technology’s intelligence platform Farsight with the service’s Nett Warrior system.
- Ursa Major added ex-Pentagon official David Rader as its chief strategy officer.
- ACMI, which builds defense production hubs, added Limitless Aeronautics to its Indiana campus.
- Kaizen, the company that helped build the Pentagon’s counterdrone marketplace, landed a $49 million deal for unclassified work for the Army.
- Auterion debuted a universal UAS launcher.
- Tiberius Aerospace snagged a $500 million deal to build and distribute its Sceptre precision-guided missile as part of a U.S.-U.K. collaboration.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Threat actors are increasingly using blockchain networks as resilient command-and-control infrastructure to steal cloud credentials from developer endpoints and CI/CD environments. Recent campaigns involving the ChainDrop npm worm and the North Korea-linked PolinRider operation show how poisoned open-source packages can harvest short-lived cloud tokens, service-account credentials, deployment secrets, and source-code access tokens while resolving attacker […]
The post ChainDrop and PolinRider Use Blockchain C2 to Steal Cloud and CI/CD Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶


