-
Ukrainian national Oleksii Lytvynenko has pleaded guilty in the US to wire fraud conspiracy linked to Conti ransomware, which hit more than 1,000 victims and generated at least $150 million in ransom payments.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Splunk has released security updates to address a critical security flaw in Splunk Enterprise that could be exploited to conduct unauthenticated file operations and even remote code execution. The vulnerability, tracked as CVE-2026-20253, is rated 9.8 on the CVSS scoring system. “In Splunk Enterprise versions below 10.2.4 and 10.0.7, an unauthenticated user could create or truncate arbitrary
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly disclosed Agentjacking attack class can silently weaponize AI coding agents against the very developers who rely on them, requiring no phishing, no server compromise, and no user interaction beyond a developer’s normal workflow of asking their AI assistant to investigate errors. Tenet Security’s Threat Labs developed and validated the technique, demonstrating how a […]
The post New Agentjacking Attack Hijacks AI Coding Agents to Execute Malicious Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A critical pre-authentication remote code execution (RCE) vulnerability in Splunk Enterprise has been disclosed, carrying a near-perfect CVSS score of 9.8. Tracked as CVE-2026-20253, the flaw was published by Splunk on June 10, 2026, and affects the PostgreSQL Sidecar Service introduced in Splunk version 10. The root cause of CVE-2026-20253 lies in the PostgreSQL Sidecar Service’s HTTP API […]
The post Critical Splunk Enterprise Pre-Auth RCE Chain Exposes Databases appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Anthropic has disabled all access to its Fable 5 and Mythos 5 artificial intelligence models following a sudden export-control directive from the United States government. Issued at 5:21 PM ET on June 13, 2026, the directive cited pressing national security concerns and strictly prohibited any foreign national from accessing the models. This restriction extends beyond […]
The post Anthropic Blocks Fable 5 and Mythos 5 Following U.S. National Security Directive appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A massive, coordinated network of 152 malicious Google Chrome browser extensions has been dismantled after researchers caught the operation generating fake organic Google search traffic. Socket’s Threat Research Team discovered the operation spanning 38 separate Chrome Web Store publisher accounts and tracing back to three primary brand backends: tabplugins[.]com, yowgames[.]com, and chromewallpaper[.]com. Disguised as benign […]
The post Malicious 152 Chrome Extensions Caught Spoofing Google Organic Search Traffic appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A massive, coordinated network of 152 malicious Google Chrome browser extensions has been dismantled after researchers caught the operation generating fake organic Google search traffic. Socket’s Threat Research Team discovered the operation spanning 38 separate Chrome Web Store publisher accounts and tracing back to three primary brand backends: tabplugins[.]com, yowgames[.]com, and chromewallpaper[.]com. Disguised as benign […]
The post Malicious 152 Chrome Extensions Caught Spoofing Google Organic Search Traffic appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Anthropic said on Friday it will “abruptly disable” its most advanced artificial intelligence (AI) models, Claude Fable 5 and Mythos 5, for all users after the U.S. government ordered it to suspend access to the models for foreign nationals, whether inside or outside the U.S., citing national security concerns. The AI company said it received an order at 5:21 p.m. ET, instructing it to suspend
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A powerful surveillance program — Section 702 of the Foreign Intelligence Surveillance Act — is set to statutorily lapse Friday for the first time in its history, capping months of failed negotiations over privacy and who should lead the nation’s spy agencies.
What is Section 702?
Section 702 lets U.S. intelligence agencies gather communications of foreigners located abroad without a warrant. It’s made possible because much of the world’s digital traffic flows through U.S.-based companies and internet infrastructure.
The law, enacted in 2008, codified parts of the once-secret Stellarwind surveillance program created under the Bush administration after the Sept. 11, 2001, terrorist attacks. In 2013, former NSA contractor Edward Snowden disclosed documents detailing how the authority was used, fueling a global debate over privacy and mass surveillance.
The authority is widely viewed by intelligence officials as one of the government’s most vital national security tools, used for counterterrorism, cyber defense and tracking nuclear weapons threats, among other things. But it has also drawn scrutiny from privacy advocates and lawmakers in both parties because Americans’ communications can be incidentally collected under the program and later searched by agencies, including the FBI.
Privacy and civil liberties groups have long pushed for proposals requiring a warrant before intelligence analysts can query 702 data for information about U.S. persons. Such measures don’t break neatly along party lines. Republicans and Democrats have argued that Congress should not simply approve another extension, despite wishes to do so from the Trump administration.
In 2024, under then-President Joe Biden, lawmakers reauthorized the program for two years with a number of reforms, though those didn’t include a warrant requirement.
On the other side of the debate, national security officials and other lawmakers in both parties contend that adding a warrant measure would slow or weaken intelligence work at a time of heightened threats from China, Iran and others.
March: Key court approves 702 activities
The Foreign Intelligence Surveillance Court approved the government’s annual certifications for Section 702 a few months ago, allowing collection under the authority to continue into 2027 even if Congress failed to act before the statutory deadline. The certifications cover broad categories of national security risks. For instance, one may cover foreign hackers targeting U.S. critical infrastructure.
That court approval means a lapse in the statute doesn’t cause the intelligence community’s existing 702 collection to immediately cease. But the lack of a congressional renewal can create legal uncertainty for technology providers compelled to assist the government in collection.
Unlike more clandestine intelligence tools used by agencies like the NSA to collect data on foreign adversaries, Section 702 relies on a legal mechanism requiring U.S. companies such as AT&T and Microsoft to turn over communications like emails and text messages that are tied to qualifying targets.
April: Congress approves a 45-day extension
As an April 30 deadline to renew the authority approached, Congress still had not settled the debate and agreed to buy itself more time. Lawmakers passed a 45-day extension after senators secured a deal requiring the declassification of a secret Foreign Intelligence Surveillance Court opinion within 15 days that privacy groups argue would help better inform discussions on the future of the program.
The vote punted the authority’s expiration to June 12. The status of that declassification is still unclear.
Over the last few months, the FISA fight has been shaped by rising unease over privacy and government power, with Democrats and advocacy groups questioning how Americans’ communications are handled and processed once collected. Those concerns have been folded into broader debates over immigration enforcement, the intelligence community’s use of commercially available data and the potential for artificial intelligence tools to expand the government’s ability to analyze sensitive personal information.
June: Intelligence leadership fight further complicates renewal
The debate grew more complicated after President Donald Trump moved to install Bill Pulte, the Federal Housing Finance Agency director, as acting director of national intelligence.
The decision soon injected a fight over intelligence leadership into the 702 talks. Democrats and some Republicans raised concerns about placing Pulte — a Trump ally with limited intelligence experience who has used his post atop the Federal Housing Finance Agency to scrutinize the president’s political foes — in charge of the intelligence community while Congress was being asked to extend one of its most powerful surveillance authorities.
The backlash helped sink another short-term extension this week. On Thursday, Trump said he would nominate Jay Clayton, the U.S. attorney for the Southern District of New York and former Securities and Exchange Commission chairman, to serve as director of national intelligence on a permanent basis.
The move appeared aimed, at least in part, at easing concerns over Pulte, but it did not immediately solve the 702 problem. Clayton still needs Senate confirmation, and Pulte’s interim role still remains part of the dispute as the deadline approaches.
What happens when 702 sunsets?
A lapse would be historically significant because Section 702 has never before been allowed to statutorily expire. Because the FISA court approved the government’s certifications earlier this year, existing collection activity may continue for now.
A more immediate concern involves whether agencies can add new foreign targets under already-approved court certifications, and whether companies will keep up with regulations without congressional renewal. If a company stopped complying with a 702 directive, the government could ask the FISA court to force compliance. Typically, the court has up to 30 days to rule.
Civil liberties advocates contend that collection can meaningfully continue even after a statutory lapse because of the way annual certifications are approved, and that other authorities remain available to support national security operations.
With the the House of Representatives scheduled to recess until June 23, lawmakers would not be able to approve any extension for at least a week. It’s possible Trump may sign an executive order to extend the FISA deadline, though whether he has the authority to do so remains unclear.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a Rust binary built to harvest developer secrets. When it lands with root, it can also load an eBPF rootkit to hide itself. The AUR is Arch Linux’s community package collection, and it is separate
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶


