ADMIN.FOUNDATION – Page 402 – cybersecurity / defense / intelligence

Axios NPM Packages Breached in Ongoing Supply Chain Attack

·

cyber security, Cyber Security News, vulnerability

A severe supply chain attack has compromised the widely used Axios HTTP client on the npm registry. Attackers injected a malicious dependency into specific Axios releases, exposing millions of developers to a multi-stage remote access trojan capable of executing arbitrary commands and stealing system data. The malicious Axios versions, 1.14.1 and 0.30.4, were published directly […]

The post Axios NPM Packages Breached in Ongoing Supply Chain Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
The CISO Gap: Why Every Business Needs Cybersecurity Leadership

·

Blogs
This week in cybersecurity from the editors at Cybercrime Magazine

Sausalito, Calif. – Mar. 31, 2026

– Read the full story in Forbes

One message has persisted over the past few years: cybersecurity is no longer an IT concern; it has become a fundamental business requirement, according to Chuck Brooks, who was named one of the top 5 tech people to follow on LinkedIn. Viability, survivability, and ultimately commercial success are dependent on securing the devices and network for any business in the evolving digital era.

Forbes reports that despite this reality, an excessive number of organizations, notably small and mid-sized businesses (SMBs), are lacking designated leadership in this crucial domain.

Cybersecurity Ventures and Sophos have released a sobering report, the 2026 CISO Report, that underscores this point.

The report states that it is anticipated that cybercrime will result in a global economic loss of $12.2 trillion USD annually by 2031, a significant increase from the $6 trillion in 2021 and the $10.5 trillion in 2025.

Read the Full Story

Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:
- SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
- NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
- HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
- VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
- M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
- BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
- PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
- PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
- RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.
Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

The post The CISO Gap: Why Every Business Needs Cybersecurity Leadership appeared first on Cybercrime Magazine.
¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Silver Fox Expands Asia Cyber Campaign with AtlasCross RAT and Fake Domains

·

Chinese-speaking users are the target of an active campaign that uses typosquatted domains impersonating trusted software brands to deliver a previously undocumented remote access trojan named AtlasCross RAT. “The operation covers VPN clients, encrypted messengers, video conferencing tools, cryptocurrency trackers, and e-commerce applications, with eleven confirmed delivery domains impersonating

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Critical F5 BIG-IP Flaw Upgraded to 9.8 RCE, Exploited in the Wild

·

BIG-IP APM, cybersecurity, DDOS, DoS, F5, Security, vulnerability

F5 BIG-IP APM flaw CVE-2025-53521 escalates to critical 9.8 RCE, actively exploited. Patch now, check IoCs, and secure vulnerable systems immediately.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
The AI Arms Race – Why Unified Exposure Management Is Becoming a Boardroom Priority

·

The cybersecurity landscape is accelerating at an unprecedented rate. What is emerging is not simply a rise in the number of vulnerabilities or tools, but a dramatic increase in speed. Speed of attack, speed of exploitation, and speed of change across modern environments. This is the defining challenge of the new era of digital warfare: the weaponization of Artificial Intelligence. Threat actors

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Dutch Finance Ministry Responds to Cyberattack by Taking Systems Offline

·

Cyber Attack, cyber security, Cyber Security News

The Dutch Ministry of Finance is actively managing a significant cybersecurity incident after discovering unauthorized access to its internal Information and Communication Technology (ICT) systems. The breach has prompted immediate defensive measures, including the deliberate shutdown of critical digital portals to prevent further lateral movement and potential data exfiltration. Cyberattack Timeline and Scope The cyberattack […]

The post Dutch Finance Ministry Responds to Cyberattack by Taking Systems Offline appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Telegram-Based ResokerRAT Adds Screenshot Capture and Persistence

·

cyber security, Cyber Security News, Telegram

Hackers are deploying a new Windows malware called ResokerRAT, a Telegram‑based Remote Access Trojan (RAT) that gives attackers stealthy remote control over infected systems. Instead of relying on a traditional command‑and‑control (C2) server, ResokerRAT abuses the Telegram Bot API to receive commands and exfiltrate data, blending in with legitimate encrypted traffic. When the user runs Resoker.exe, […]

The post Telegram-Based ResokerRAT Adds Screenshot Capture and Persistence appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
PNG Vulnerabilities Allow Attackers to Trigger Crashes and Leak Sensitive Data

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

Security researchers have disclosed two high-severity vulnerabilities in libpng, the widely deployed reference library used for processing Portable Network Graphics (PNG) image files. These critical flaws allow remote attackers to trigger process crashes, leak sensitive heap memory, and potentially achieve arbitrary code execution by tricking applications into processing specially crafted, standards-compliant PNG images. Both vulnerabilities require […]

The post PNG Vulnerabilities Allow Attackers to Trigger Crashes and Leak Sensitive Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
EvilTokens Launches New Phishing Service Targeting Microsoft Accounts

·

cyber security, Cyber Security News, Microsoft, Phishing

EvilTokens is a new Phishing-as-a-Service (PhaaS) platform that industrialises Microsoft account takeover by abusing the OAuth device code flow rather than traditional credential phishing. The service sells a turnkey Microsoft device code phishing kit that has been in active use since mid‑February 2026 and was quickly adopted by groups specialising in Adversary‑in‑the‑Middle phishing and Business […]

The post EvilTokens Launches New Phishing Service Targeting Microsoft Accounts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Google Introduces Advanced Ransomware Defense and Recovery Features in Drive

·

cyber security, Cyber Security News, Gmail, Google

Google has officially moved its advanced ransomware detection and file restoration features for Google Drive out of beta, making them generally available to organizations globally. Originally launched for beta testing in September 2025, these security enhancements are designed to minimize the destructive impact of malware attacks on both personal and corporate endpoints. The general availability […]

The post Google Introduces Advanced Ransomware Defense and Recovery Features in Drive appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

This week in cybersecurity from the editors at Cybercrime Magazine