Skip to content

ADMIN.FOUNDATION

  • Critical Citrix NetScaler CVE-2026-88771 Exploited for Reverse Shells and Persistent Access

    ·

    cyber security, Cyber Security News

    Attackers are exploiting CVE-2026-88771, a critical pre-authentication command-injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway, to deploy reverse shells, create privileged accounts, and establish persistent access. LevelBlue’s Threat Hunt Operations & Research (THOR) team identified malicious authentication events across multiple customer environments, documenting activity extending beyond vulnerability testing into payload execution and configuration theft […]

    The post Critical Citrix NetScaler CVE-2026-88771 Exploited for Reverse Shells and Persistent Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers Abuse GitHub Actions to Steal SSH Keys, Cloud Credentials and Access Tokens

    ·

    cyber security, Cyber Security News, GitHub

    Hackers are abusing GitHub Actions to steal SSH keys, cloud credentials, and access tokens through malicious workflows disguised as security checks. The workflows targeted 2,577 secrets, but targeting did not always translate into theft. Researchers confirmed successful exfiltration of 26 secrets from 13 repositories, highlighting the distinction between malicious injections and executed payloads. Attackers inserted […]

    The post Hackers Abuse GitHub Actions to Steal SSH Keys, Cloud Credentials and Access Tokens appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

    ·

    The npm package known as “tensorlake,” a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious version 0.5.144 “contains obfuscated malware that harvests credentials, exfiltrates secrets, establishes persistence, and executes remotely supplied code,” Socket said

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • PoeLLM Malware Hijacks 3,400+ Servers for Crypto Mining and Botnet Expansion

    ·

    cyber security, Cyber Security News, Malware

    A cryptocurrency mining campaign dubbed PoeLLM has compromised more than 3,400 servers by targeting exposed AI infrastructure and other internet-facing applications. Active since April 2026, the operation combines vulnerability exploitation, cryptocurrency miners and an unusual command-and-control mechanism that derives server addresses from a poem hosted on GitHub. Victims predominantly run LiteLLM, Ollama, Gotenberg and Gitea, […]

    The post PoeLLM Malware Hijacks 3,400+ Servers for Crypto Mining and Botnet Expansion appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Malicious npm Packages Steal Browser Passwords, Discord Tokens and Crypto Wallets.

    ·

    cyber security, Cyber Security News

    MALFEX, a persistent npm supply-chain campaign distributing Windows malware through eight malicious packages. Linked to an apparent single operator active since August 2023, the campaign delivers Overlord RAT, the movinlike information stealer, and a separate downloader concealed inside an ASCII-art utility. The largest contributor, function-flag, accounted for 37,419 downloads and has contained malicious code since […]

    The post Malicious npm Packages Steal Browser Passwords, Discord Tokens and Crypto Wallets. appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Army activates sustainment brigade as part of Pacific restructuring

    ·

    Threats
    The Army shuttered one Okinawa-based support unit and reactivated a larger one, part of the broader effort to prepare for a potential conflict in the expansive theater.

    The closure of the 10th Support Group and the reestablishment of the 45th Sustainment Brigade will give the service a brigade-level headquarters that can better command and control sustainment capabilities in the region, said Col. Dennis Han, who leads the new unit. It will also mean a “small growth” in the number of soldiers at Torii Station, but no additional infrastructure at the base on Okinawa’s west coast.

    While the 10th Support Group was focused on providing logistics support within Japan, the change to 45th Sustainment Brigade broadens the aperture to the entire Pacific.

    The Army is “heavily investing in the emerging requirements here,” and this is part of the service’s response, Han said. “Over the next couple of years, we’re looking forward to building our staff, building our capacity to be prepared for whatever comes our way.”

    Maj. Gen. James Dooghan, commander of U.S. Army Japan, said in a release that the ceremony was "more than casing one set of colors and uncasing another. … It is about continuity and transformation, ensuring our Army is positioned to sustain the force wherever and whenever it is needed." 

    Sustainment is a perennial topic at regional conferences. At AUSA’s Land Forces Pacific in May, U.S. Indo-Pacific Command leader Adm. Samuel Paparo noted that the Army “delivers foundational sustainment capabilities to the entire joint force. And I’m fervent in my belief that nobody knows or senses or feels viscerally the scale of sustainment than our nation’s Army.”  

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

    ·

    Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for several Google domains, Google said on October 6. Google’s own systems were not breached, but any domain ending in .gh (Ghana), .sl (Sierra Leone) or .as (American Samoa) was put at risk. With such a certificate, an attacker could pose as the real site over an encrypted

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Dread Dark Web Forum Hijacked, Operators Claim Control of Domain Keys

    ·

    Cyber Attack, Cyber Crime, cybersecurity, Dark Net, Dark Web, Data Breach, Data Breaches, Dread, Hacking News, HugBunter, Privacy, Security, Tor
    Dread dark web forum appears hijacked after a pinned post claimed control of the project and domain keys, while denying plans to leak user data.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

    ·

    Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans (RAT) to compromised hosts. The campaign has been codenamed MALFEX by CloudSEK and Checkmarx. The activity is assessed to be the work of a lone threat actor who appears to have published 12 packages since August 2023, eight of which have

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • How DNS, Firewalls and Endpoint Tools Block Websites

    ·

    cybersecurity, DNS, Endpoint, Firewall, Security, Technology
    Website filtering can be enforced at four points in a request’s lifecycle. What each layer sees, what routes around it, and why network filters miss traffic.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 36 37 38 39 40 … 1,217
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence