• An emerging phishing vector that weaponizes short-form social videos on TikTok and Instagram Reels to distribute malware and funnel victims to malicious download sites. Attackers publish polished “how-to” tutorials and casual user-style clips promising free premium software Spotify Premium, CapCut Pro, etc. to entice clicks, comments, and ultimately execution of commands or downloads that deliver […]

    The post Hackers Use TikTok and Instagram Reels to Push Fake Software Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Fortinet has disclosed a critical vulnerability in its FortiSandbox product that could allow attackers to execute unauthorized commands without authentication, raising significant concerns for enterprises that rely on sandboxing for malware analysis. Tracked as CVE-2026-25089, the flaw is classified as an OS command injection vulnerability (CWE-78). It carries a CVSS v3 score of 9.1, indicating […]

    The post Fortinet FortiSandbox Vulnerability Lets Attackers Execute Unauthorized Commands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have flagged half a dozen vulnerabilities in protobuf.js, a JavaScript and TypeScript implementation of Protocol Buffers (Protobuf), that, if successfully exploited, could result in remote code execution (RCE) and denial-of-service (DoS) attacks. “In affected environments, a single malicious protobuf schema, descriptor, or crafted payload could be enough to trigger

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Google has released an urgent security update for its Chrome browser, addressing multiple vulnerabilities, including a zero-day flaw actively exploited in the wild. The update upgrades Chrome to version 149.0.7827.102/.103 on Windows and Mac, and to 149.0.7827.102 on Linux. The tech giant confirmed that the zero-day vulnerability, tracked as CVE-2026-11645, involves an out-of-bounds memory access […]

    The post Google Issues Urgent Chrome Security Update for Exploited Zero-Day Flaw appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Congress is unlikely to approve a third multi-hundred-billion-dollar budget maneuver to pad the Trump administration's defense spending, Senate Republicans said Tuesday.

    The occasion was a hearing of the Senate Appropriations Committee’s defense panel, where Air and Space Force leaders were testifying on the 2027 budget proposal. The committee chair, Sen. Susan Collins, R-Maine, noted that some of their services’ top initiatives, such as F-35 modernization, are not part of the Trump administration’s $1.15 trillion baseline budget request. 

    Instead, the White House is asking Congress to pass a $350 billion appropriation through reconciliation, a process for “mandatory” government spending that only requires a simple majority to pass. 

    “I would just suggest that it is taking a terrible risk and creates instability when you're counting on a third reconciliation bill for the bulk of the money rather than doing base funding through the defense appropriations bill,” Collins said. 

    Added Sen. Mitch McConnell, R-Ky, chair of the defense subcommittee: “I think it's safe to conclude there will not be another reconciliation bill. So, it's really not an option.” 

    Collins agreed. 

    More than $150 billion in defense spending was signed into law last July 4 under the first reconciliation package, known as Trump’s One Big Beautiful Bill Act. On Tuesday, House Republicans passed “Reconciliation 2.0”, which would provide $70 billion for the administration’s immigration-enforcement agencies, but does not include defense funding.

    But there are still top-priority efforts that the administration wants to fund through reconciliation including Golden Dome, shipbuilding, and munitions. 

    The House Armed Services Committee completed its markup of its version of the annual defense policy bill last week. That version didn’t adjust the baseline in a substantial way to cover those reconciliation priorities, but top staffers said they were confident the additional funding would be secured. 

    The White House budget office anticipates that baseline defense budgets will rise from $1.15 trillion to $1.36 trillion over the next decade. It has not published plans for additional reconciliation funding after 2027. 

    Sen. Tammy Baldwin, D-Wis., added that she was also “very concerned” that the Defense Department was relying on reconciliation for top priorities.

    When Sen. John Hoeven, R-N.D., asked whether a supplemental bill would be crucial if reconciliation isn’t passed, Air Force Secretary Meink responded that it’s “vital” that the services get their fully-funded budget request. He added the Pentagon and the White House’s Office of Management and Budget are working “on options.”

    Sen. John Kennedy, R-La., said, “The Democrats have no intention of helping us pass a budget,” meaning the government could face another shutdown that would force the military to operate under a continuing resolution. 

    Meink said that would harm the Air and Space Force.

    “That would have significant impacts on our readiness,” Meink said. “A lot of the investments we’ve just been talking about to meet the threats from the unmanned vehicles, as well as the increased readiness for weapons systems, to increase the F-35 readiness, as well as munitions procurement, all of that is substantially impacted.”

    Kennedy said the Air Force and Space Force should expect another continuing resolution.

    “Well, I think you should prepare for it,” the lawmaker said. “Again, I hope I'm wrong.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft today released software updates to plug nearly 200 security holes across its Windows operating systems and supported software, a record number of fixes for the company’s monthly Patch Tuesday cycle. Nearly three dozen of those bugs earned Microsoft’s most dire “critical” rating, and exploit code for at least three of the weaknesses is now publicly available.

    The software giant said in a blog post last month that both its engineers and the security community are increasing using artificial intelligence tools to find bugs, meaning this month’s heavy Patch Tuesday may start to become the norm, said Satnam Narang, senior staff research engineer at Tenable.

    “Some surveys put AI usage among security professionals generally at 90%, so it’s unsurprising that this volume of patches may be the norm,” Narang said. “Pandora’s proverbial box has been opened, and as more advanced AI models become available, we expect the norm to continue upward across the board, not just for Patch Tuesday.”

    June’s zero-day bugs include CVE-2026-49160, a denial of service vulnerability affecting a range of web servers, including Microsoft Internet Information Services (IIS). Microsoft says the flaw was reported by OpenAI’s Codex.

    Two of the zero-days addressed this month appear to stem from recent vulnerability disclosures by Nightmare Eclipse, the nickname chosen by a security researcher who has been dropping exploits for various Windows flaws. One of those, dubbed “GreenPlasma,” leverages an elevation of privilege weakness in the Windows Collaborative Translation Framework, the same framework patched today in CVE-2026-45586.

    Nightmare Eclipse also last month released “YellowKey,” an exploit for a Windows BitLocker vulnerability that allows an attacker with physical access to view encrypted data, and CVE-2026-50507 is a patch for an elevation of privilege bug in BitLocker.

    Microsoft received heavily blowback on social media last month after it said in a blog post that it was considering taking legal action against the security researcher. The company later clarified on Twitter/X that while it has no intention of pursuing legal actions against researchers, it would report them to authorities if they break the law. The advisories for CVE-2026-49160 and CVE-2026-50507 do not credit any researchers in the acknowledgement section, saying only that “Microsoft recognizes the efforts of those in the security community who help us protect customers through coordinated vulnerability disclosure.”

    Nightmare Eclipse claims to be a former employee of Microsoft, although Microsoft has not responded to questions about this claim. Rapid7 notes that a recent blog post by Nightmare Eclipse included an image of Albert Vesker, a character from the Resident Evil video game series who formerly worked as a researcher for a technology company before going rogue.

    Nightmare Eclipse has pledged to release even more zero-day exploits for Windows in what they called a “bone shattering” drop planned for July 14 (the same day as next month’s Patch Tuesday). Immediately following the release of Microsoft patches today, the researcher published an exploit for what they claimed was a zero-day bug in Windows Defender.

    While 200 vulnerabilities may be a record for Patch Tuesday, the actual number of security flaws Microsoft addressed this month is far higher, said Rapid7’s Adam Barnett.

    “So far this month, Microsoft has provided patches to address 360 browser vulnerabilities, which is an order of magnitude more than has been typical in any given month over the past few years,” Barnett wrote. “As usual, browser [flaws] are not included in the Patch Tuesday count above. Indeed, the vast, and presumably sustained, uptick in the number of browser vulnerabilities has led to Microsoft no longer enumerating Chromium CVEs in the Security Update Guide.”

    Microsoft also patched a zero-day vulnerability in Visual Studio Code that allows attackers to steal GitHub tokens with a single click. The company was forced to push a stopgap fix for the flaw on June 3, after a researcher published instructions showing how to exploit it. The researcher said they opted not to work with Microsoft because of a recent experience wherein Redmond silently patched a flaw they reported without offering credit or recognition.

    Microsoft battled its own internal zero-day emergencies last week, after at least 72 of the company’s public code repositories were infected with a variant of the Shai-Hulud worm. Researchers found that all of the affected packages were connected to Microsoft official Azure Durable Task SDK, which got hit by the same Shai-Hulud worm in May.

    Other major software makers are also shipping outsized update bundles this month. Adobe has released updates to fix a massive number of critical vulnerabilities across a range of products, including Adobe Experience Manager, Acrobat Reader and Cold Fusion. On June 3, Google resolved a whopping 429 vulnerabilities in its latest Chrome browser update (Chrome automatically downloads updates but installing them usually requires a complete restart of the browser).

    As ever, please consider backing up your data before applying operating system updates, and drop a note in the comments if you run into any problems with this month’s patches.

    Further reading:

    Microsoft’s Security Update Guide

    Action1’s Patch Tuesday breakdown

    SANS Internet Storm Center notes on Patch Tuesday

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The nation’s largest federal employee union last week urged House lawmakers to once again bar the Defense Department from implementing President Trump’s executive order stripping two-thirds of the federal workforce of its collective bargaining rights.

    In March 2025, Trump signed an executive order banning unions at most federal agencies, citing a seldom-used provision of the 1978 Civil Service Reform Act to exempt workforces from federal sector labor law under the auspices of national security. A second order, signed last August, added a half-dozen more agencies to the initial edict.

    The measure—and its implementation—have been tied up in a myriad of court cases ever since. While efforts lawsuits challenging the initiative governmentwide have been thus far unsuccessful in halting its rollout, some unions have preserved feds’ collective bargaining rights at particular agencies, including for Defense Department employees represented by the International Federation of Professional and Technical Engineers and the Federal Education Association.

    Not so for the American Federation of Government Employees, whose contracts Defense Secretary Pete Hegseth ordered terminated in April. In a letter to the top Democrat and Republican on the House Armed Services Committee last week, Daniel Horowitz, AFGE’s legislative director, urged the committee to once again approve a proposal nullifying Trump’s executive order as it pertains to Defense Department workers.

    Last year, the panel voted on a bipartisan basis to include the amendment, proposed by Rep. Donald Norcross, D-N.J., in the 2026 National Defense Authorization Act, and the bill ultimately passed the House with the measure in tact. It did not become law, as the Senate stripped the provision from its version of the bill.

    In the letter, Horowitz argued that Trump’s use of the Civil Service Reform Act’s so-called national security exemption greatly exceeded congressional intent.

    “The statutory exemption Congress wrote into Title 5 was deliberately narrow, reserved for agencies like the Central Intelligence Agency whose missions are uniquely incompatible with bargaining,” he wrote. “Applying it broadly across the entire Department of Defense departs significantly from that design and longstanding precedent. It is telling that President Trump never invoked [this exemption] during his first term.”

    Though Trump did not cite that authority in his first term, he sought to delegate it to then-Defense Secretary Mark Esper in 2020. Esper ultimately declined to use that power.

    Horowitz noted that a group of 16 House Republicans urged members of the bicameral conference committee to keep Norcross’ amendment in the NDAA last year, arguing that the edict “jeopardizes” rather than strengthens national security. And the Pentagon already has safeguards to ensure collective bargaining activity does not interfere with national security concerns.

    “Restoring collective bargaining is not about expanding rights or constraining management,” he wrote. “Existing agreements already contain robust management rights provisions, emergency authorities, and national security exemptions that allow commanders and program managers to act when mission requirements demand. What collective bargaining provides is a structured channel for identifying and resolving workforce problems before they become operational ones, including improving safety, retention, productivity and accountability.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A U.S. Navy drone boat rescued the crew of an Army helicopter downed near the Strait of Hormuz on Monday evening,an apparent first for the U.S. military. 

    The AH-64 Apache went down around 7:30 p.m. ET near the coast of Oman while “patrolling international waters,” U.S. Central Command officials said in a Tuesday news release. Roughly two hours later, a Corsair unmanned surface vessel operated by 5th Fleet’s drone-focused Task Force 59 arrived on the scene, said Capt. Tim Hawkins, a CENTCOM spokesperson. 

    The Corsair is a 24-foot robot boat made by Texas-based defense tech firm Saronic. Task Force 59 began operating the boats in March. 

    The boat picked up the crew members and transported them to another location on the water. They were then retrieved by a helicopter for further transport, and are currently in stable condition, Hawkins said. 

    The rescue effort included help from U.S. Naval Forces Central Command, the 82nd Airborne Division, and unnamed Air Force and Navy units, the press release said. 

    Task Force 59 has been the Navy’s half-decade-long effort to integrate AI and unmanned systems into Middle East waters. The unit is under the 5th Fleet’s vast area of responsibility, which includes the Suez Canal, the Strait of Bab al Mandeb, and the Strait of Hormuz—which remains mostly closed to commercial shipping as the U.S. war in Iran stretches into more than 100 days. 

    CENTCOM commander Adm. Brad Cooper, who oversees U.S. military operations in Iran, previously led 5th Fleet. 

    Task Force has adopted mostly a contractor-owned and -operated acquisition model to field a wide variety of drones used during exercises in the region.

    “Looking ahead, we will continue to apply lessons learned as we increase our operational capabilities through ‘manned-unmanned teaming’ concepts,” Cooper told Defense One in 2023.

    Apache woes

    It’s not immediately clear what led the Apache to be “lost at sea,” CENTCOM said in a news release. Citing U.S. officials, CNN reported that the helicopter was hit by an Iranian Shahed drone. 

    President Donald Trump said on social media that “the Iranians shot down one of our highly sophisticated Apache Helicopters” and added the U.S. must “respond to this attack.”

    Since March, there have been at least three stateside Apache mishaps and one sudden landing overseas. Last month, Defense One exclusively reported that the Army was investigating a transmission problem on some of its AH-64E model helicopters. 

    Crew members can “experience an internal failure resulting in loss of accessory gearbox drive, which can result in loss of tail rotor thrust, electrical power, and hydraulics,” an April internal memo reviewed by Defense One said. 

    Service officials declined to say how many helicopters were affected by the transmission problem.

    Hawkins told Defense One the cause of Tuesday’s Apache rescue is under investigation.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Cybersecurity and Infrastructure Security Agency plans to release a binding directive on Wednesday that tasks the federal government with rethinking how it manages risks to its networks and prioritizing cyber vulnerabilities that demand the most urgency, agency acting director Nick Andersen said.

    The goal is to push agencies to focus less on the sheer number of known cyber vulnerabilities and more on the risks those flaws pose if they’re exploited by hackers, said Andersen, who added that the cyber community needs to “be okay with saying there are some systems that are less important than others.”

    “If we try to say that everything is equally as important, then absolutely nothing’s going to be important,” he told an audience of industry professionals at a Tuesday event held by cybersecurity firm Axonius.

    “It’s going to be really hard for us, if one day we have to have those hard conversations with people about how we knew better and how we didn’t prioritize risk appropriately, how we didn’t make the hard choices,” he added.

    The remarks are an acknowledgment that agencies cannot protect every system equally through patch mandates, and must instead focus their often limited resources on the vulnerabilities and networks whose compromise could cause the greatest damage.

    Federal agencies are a constant target for hackers. For years, adversaries have compromised government systems for access to emails, employee records and other sensitive data.

    Government agencies also oversee industry sectors such as energy, healthcare, telecommunications and water, meaning their cyber staff must also weigh how disruptions could ripple across critical services.

    On the sidelines of the event, Andersen told reporters that artificial intelligence-backed cyber threats are one factor informing discussions around the directive, but he said CISA’s work on the AI ecosystem still predates the release of powerful systems such as Anthropic’s Mythos.

    The administration’s approach to AI has shifted in recent months as officials confront a new class of cyber-focused models that can rapidly identify vulnerabilities across computer networks, becoming a major driver of discussions over how advanced AI systems could reshape both defensive and offensive cyber operations.

    President Donald Trump recently signed an AI security executive order that encourages developers to submit powerful new models to a 30-day government review before public release. On Friday, he signed a memorandum aimed at speeding up government use of advanced AI across the military and intelligence community.

    “Is the [directive] a recognition that we’re in a different dynamic environment with a shorter timeline to weaponization and exploitation? Yeah, that’s certainly a part of it,” Andersen said. “But well before these last couple of months, this is a conversation that we were having about this ever-shrinking window we have for addressing vulnerabilities today.” 

    “It’s too exceedingly easy for malicious cyber actors to be able to exploit [vulnerabilities] as soon as they’re published and be able to take advantage of the fact that a lot of people are just not as well-resourced as we would like, and they’re not as able to quickly have a continuous patch cycle to be able to address some of these devices,” he added.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Network Log Analysis helps teams turn raw logs into useful alerts, timelines, audit records, and incident evidence instead of storing data without action.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶