• Security researchers have published a detailed, working exploit for a Linux kernel use-after-free that lets an unprivileged local user escalate to root and break out of a container. The flaw, CVE-2026-23111, sits in the kernel’s nf_tables packet-filtering code and was patched upstream on February 5, 2026. Exodus Intelligence released its full technical walkthrough on June 8, and it is not even

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Operation FlutterBridge uses fake Google ads and shell companies to deploy FlutterShell, a new macOS backdoor targeting unsuspecting users.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • President Donald Trump on Friday signed a national-security memo aimed at speeding up government use of advanced artificial intelligence across the military and intelligence community, while also trying to harden those systems against foreign theft and manipulation.

    The National Security Presidential Memorandum reflects a growing view inside the White House that U.S. security agencies are moving too slowly to adopt frontier AI tools, even as the evolving technology improves rapidly and rivals like China seek ways to craft their own versions.

    It calls for agencies such as the FBI, the Office of the Director of National Intelligence, and the Office of the National Cyber Director to build “deep, proactive” relationships with AI companies so that cutting-edge models can be made available to national security personnel faster. 

    It also instructs officials to identify areas where AI could improve government operations, including intelligence analysis and cyber threat detection. At the same time, the memo says the tools cannot be used for unlawful surveillance of Americans, language that reflects longstanding civil-liberties concerns about how agencies collect, analyze, and process data.

    The memo also focuses heavily on protecting U.S.-developed AI models from foreign adversaries. It directs senior officials, including Defense Secretary Pete Hegseth and NSA Director Gen. Joshua Rudd, to work with private-sector companies on security protocols meant to prevent advanced models from being stolen, copied or compromised.

    One area of concern is model distillation, a technique in which an AI system repeatedly queries another AI system in an attempt to mimic its performance and build out a separate model. The White House in April accused China of carrying out “industrial-scale” distillation attacks on U.S. AI systems.

    The memo also directs agencies to work with industry to secure the infrastructure that supports frontier AI, including the data centers that store the enormous amounts of computing power needed to run advanced models. Data centers have recently become more attractive targets during periods of geopolitical tension.

    Trump recently signed an AI security executive order that leans heavily on voluntary cooperation with industry. That order encourages developers to submit powerful new models to a 30-day government review before public release.

    More AI-related guidance is expected soon. Nick Andersen, CISA’s acting director, said last week that the cyber agency is preparing a binding operational directive focused on AI-enabled cyber threats.

    The administration’s approach to AI has shifted in recent months as officials confront a new class of cyber-focused models, including Anthropic’s Mythos, that can rapidly identify vulnerabilities across computer networks. The model has become a major driver of government discussions over how advanced AI systems could reshape both defensive and offensive cyber operations.

    Last week, Anthropic said it is expanding Project Glasswing — its controlled-access program for giving trusted organizations early access to Mythos — to about 150 additional entities. The new group spans more than 15 countries and includes organizations in water, healthcare, communications and other critical infrastructure sectors.

    OpenAI’s recent release of GPT-5.5-Cyber, which also demonstrated sophisticated cyber capabilities, has further heightened concerns in Washington over how quickly these systems are advancing and how they could reshape both cyber defensive and offensive operations.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Meta on Monday said it detected and blocked spear-phishing attempts linked to Israeli spyware vendor NSO Group. In addition, the tech giant said it’s filing a federal court contempt order against the company for violating a permanent injunction that barred it from targeting WhatsApp and its users. “They tried to trick people into clicking on malicious links to drive them to external websites

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers are cloning Ghidra, dnSpy, ILSpy and other free tool sites to spread Malware like RemusStealer, crypto clippers and loaders through fake downloads.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Check Point has warned of active exploitation of a critical vulnerability impacting Remote Access VPN and Mobile Access deployments that are configured to use the deprecated IKEv1 key exchange protocol. The vulnerability, tracked as CVE-2026-50751 (CVSS score: 9.3), is a case of a logic flow weakness in certificate validation that allows an unauthenticated remote attacker to bypass user

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity firm Resecurity reports Silent Ransom Group is using a fast flux botnet to hide data leak sites while targeting law firms with theft and vishing.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Monday again. The weekend was meant to be quiet. It wasn’t. Last week had poisoned packages, a broken AI helper, and a worm tearing through repos. The ugly part: basic tricks still worked. A chatbot got fooled. A bot token got leaked inside the malware. The same old mistakes showed up again. And while everyone chased the loud stuff, quieter attackers sat in inboxes for months, reading mail and

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A newly observed extortion brand called Pink (CL-CRI-1147) that is actively targeting enterprise users to harvest cloud storage credentials and bypass multi-factor authentication. The group’s leak site went live on May 31, 2026, and its operations combine social engineering with classic credential-phishing to quickly convert compromised accounts into extortion leverage. Pink’s attack chain begins with […]

    The post Pink Hacking Group Targets Enterprises to Steal Cloud Passwords appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Phishing has always been a numbers game. AI has turned it into a volume machine. Attackers can now create convincing emails, fake login pages, and tailored lures in minutes. Every polished message adds another case for Tier 1 to review, another link to inspect, and another alert that cannot be dismissed at a glance. As the queue grows, a credential theft attempt or malware delivery can easily

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶