• A single poisoned notification from WhatsApp, Slack, SMS, Signal, Instagram, or Messenger could have hijacked Google Gemini’s voice assistant on Android and made it open a victim’s connected windows, fake a message from their boss, push the phone into a Zoom call, or quietly poison its long-term memory. No malicious app on the phone is required. The assistant just had to treat a hostile

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The military could stand up a separate service branch to handle cyber operations by 2028— should Congress or the White House decide to do so this year, according to a new Center for Strategic and International Studies report released Wednesday. 

    “Regardless of institutional alignment, reaching initial operating capacity (IOC) would take between 12 and 18 months and proceed through several sequential phases: setting conditions; fielding the IOC; iterative growth over several years; and institutional refinement,” CSIS’s commission on Cyber Force Generation wrote. “Following a presidential decision or legislative action to establish a new Title 10 service, this force generation model would address longstanding structural challenges and build the Cyber Force the United States needs for this critical domain of warfare.”

    The branch could have about 30,000 people, including around 20,000 active-duty troops and warrant officers from across the services, up to 5,000 National Guard members, and up to 6,000 civilians and contractors, states the report, which was co-written with the Foundation for Defense of Democracies.

    The report arrives as lawmakers mull a proposal to order the creation of a cyber service, a topic that has been debated for the past decade. 

    Mark Montgomery, who leads FDD’s cyber center and previously led the Cyberspace Solarium Commission, said a new service is needed. 

    In “the last six to 12 years, I would say that the performance of the services has been an obstruction to success. And that's a tough thing to say because services don't want to be an obstruction…they want to do the right thing,” Montgomery told reporters. “But our ability to recruit, train, maintain, and retain a cyber force has struggled. Our recruiting has never focused on—none of the services' recruiting efforts focus on: ‘Can you code Python?’”

    A separate service would allow cyber operators to have their own budget—and their own culture, said Lauryn Williams, deputy director of CSIS’ Strategic Technologies Program. And there’s a “similar need for a lot of deliberation and discussion around what a cyber force culture and doctrine should look like, not least because it would be drawing personnel from every other military service, so would be a mishmash of cultures, maybe, to start.” 


    Welcome

    You’ve reached the Defense Business Brief, where we dig into what the Pentagon buys, who they’re buying from, and why. Send along your tips, feedback, and song recommendations to lwilliams@defenseone.com. Check out the Defense Business Brief archive here, and tell your friends to subscribe!


    Subbuilding game. GDIT’s Emerge event Tuesday came with a virtual training tool for new submarine shipbuilders. The technology imports all the design elements of the Columbia and Virginia class and renders them into a navigable learning experience. But the demo version used an older boat, the USS Holland, from the turn of the 20th century. Using an Xbox controller, new hires can tour the submarine class they’ll be working on, and point and click on a part to learn more about what it does and where it goes.

    • The Holland has about 20,000 parts, while the Columbia class has millions. The tool "goes down to each nut, bolts, screw, washer. We have all that detail, because we control the design database, we make the design. So with the modern era, we can take those same models that are made to build the boat, and then create tools to help the guys figure out what they're doing,” said Eric Banach, a software engineer for General Dynamics Electric Boat. 

    Buildsubmarines.com is pulling in thousands of new shipbuilders. The Navy’s slick ad campaign to attract shipyard workers is still going strong, said Josh Sturgill, the workforce development coordinator for the Submarine Industrial Base Program Office, at the GDIT event. He said the site gets about 75,000 application clicks a month and “somewhere between 5.7 and 6 percent of those that click ‘apply’ are going to continue on to a job interview and offer inside the submarine industrial base. That's what, statistically, [I've been] seeing over the last five years.” 

    • Background: The Navy-backed effort acts as a job portal across the shipbuilding industry and aims to attract new talent to an industry that has struggled in recent years with high turnover and green workers.  
    • But things have improved, according to General Dynamics HR executives, who point to new initiatives in housing, wellness, and childcare as part of a broader plan to keep more workers. 
    • “We broke ground this year on a housing project…housing in Maine is the single biggest barrier to growing this workforce in terms of attracting talent. So, we—General Dynamics and the Navy—we worked with a developer to put in 85 units of housing that are going to be focused on entry-level positions to have,” said Ray Steen, vice president of human resources at General Dynamics Bath Iron Works, noting that attrition was previously in the high 20 percent range is now around 5 percent. “That's a long play that didn't affect [attrition] three years ago, but it's going to help it going forward.”
    • Steen said this workforce-forward approach, which includes higher wages, is what helped the shipyard deliver USS Patrick Gallagher two months ahead of schedule. 

    MUSVs & more

    • The Marines want a new JLTV supplier. The Marine Corps released a request for information seeking a new supplier for the JLTV—which is more than a year behind schedule. The Army canceled its JLTV program last year but the Marines requested about $245 million to buy 341 units according to the 2027 budget proposal. Responses are due June 10. 
    • General Dynamics is spending $200 million to “unwind a partnership with Turkish defense contractor Repkon in a bid to finally start producing 155mm artillery shells at a Texas plant that’s been beset by delays,” Tony Capaccio writes for Bloomberg. Repkon acquired the Garland, Texas plant that manufactures metal parts for munitions from General Dynamics last year. The move also raised concerns about potential foreign influence in domestic defense supply chains. 
    • Seaborne showcase. The Navy picked seven vendors to demonstrate their medium unmanned surface vessels at sea from June through October. Successful demos will receive $15 million and would be eligible for a production contract. Selected contenders are Birdon, Galliano Marine Services, HII, Leidos, PacMar Technologies, Saronic Technologies, and Sea Machines.

    One last tech thing: Join us June 16 at our annual Tech Summit at the Pentagon City Ritz Carlton. Listen to key leaders discuss AI adoption, autonomous operations, the future of military technology—and, my personal favorite, the “backers of the battlefield.” See you there! 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • President Donald Trump’s decision to name William Pulte as acting director of national intelligence is threatening a fragile Senate deal to extend a contentious surveillance authority.

    On Tuesday, Senate Intelligence Committee Vice Chairman Mark Warner, D-Va., asked Senate Majority Leader John Thune, R-S.D., to press the White House to reverse the appointment of Pulte, who has no national-security background but does have a record of targeting Trump’s political adversaries. Warner said the appointment could sink a deal to extend Section 702 of the Foreign Intelligence Surveillance Act, according to a person familiar with the matter. 

    Punchbowl News first reported Warner’s request to Thune.

    Section 702, which allows the NSA and other spy agencies to collect communications of foreigners abroad without a warrant, has long been controversial because Americans’ communications are sometimes swept up in the process. Although the intelligence community insists that the program is key to national security, many lawmakers remain dubious. Efforts to reauthorize the program has produced only short-term renewals, the latest of which will expire on June 12.

    Warner has been one of the key Democratic negotiators in FISA talks, and was involved in a recent arrangement with Thune and Sen. Ron Wyden, D-Ore., that cleared the way for a 45-day short-term extension of the authority. That deal included a commitment to declassify a secret Foreign Intelligence Surveillance Court opinion, a key demand of civil-liberties advocates. 

    But the status of that declassification process is unclear. Last month, Wyden said the Trump administration was ignoring the request.

    GOP leaders are unlikely to pass an extension alone. Several Republican senators are expected to oppose any FISA deal, meaning Thune will need Democratic votes to move the bill through the Senate. The high chamber could hold an initial procedural vote on a Section 702 extension as soon as Thursday. 

    The emerging deal includes provisions meant to win over skeptical lawmakers, including a three-year ban on a central bank digital currency and language barring the FBI from using Section 702 information to prosecute U.S. persons. It stops short of including a full warrant requirement for queries of U.S. person data collected under the program, a measure long sought by the civil liberties community.

    Secretary of State Marco Rubio, who previously served as the top Republican on the Senate Intelligence Committee, told House lawmakers Wednesday that he had never heard Pulte’s name during his time on the panel. 

    Thune also appeared to acknowledge broader concern about the appointment, telling reporters Tuesday that “we don’t need a weaponized DNI.” If the White House tried to nominate Pulte permanently, Thune added, he would have “a lengthy road ahead of him” to win confirmation.

    Thune then referred questions about Pulte to Senate Intelligence Committee Chairman Tom Cotton, R-Ark., who told reporters he had “no observations on the matter.”

    Over the last several months, the FISA fight has intersected with broader anxieties about domestic surveillance, immigration enforcement and whether emerging artificial intelligence tools could give agencies more powerful ways to analyze large amounts of sensitive personal data.

    Section 702, enacted in 2008, codified parts of the once-secret Stellarwind surveillance program created under the Bush administration after the Sept. 11, 2001, attacks. In 2013, former NSA contractor Edward Snowden disclosed documents detailing how the authority was used, fueling a global debate over privacy and mass surveillance.

    The program is frequently used to track national-security threats, including hackers, terrorist groups and foreign intelligence operatives.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have flagged a new malspam campaign that makes use of Google’s DoubleClick domain as a way to evade detection and ultimately deliver a remote access trojan (RAT) named DesckVB RAT. “Before the victim ever reaches attacker-controlled infrastructure, the lure routes through DoubleClick, a legitimate Google-owned domain that many security tools are less likely to treat as

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A development flag left switched on in production builds of several Microsoft 365 Android apps disabled the check that limits account-token sharing to trusted Microsoft apps. Any other app on the same phone could ask for the signed-in user’s token and get it, then read email, open files, browse the calendar, and send messages as that user. No password, no login screen, no permission prompt.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Redis has patched a use-after-free in its blocking-client code that lets an authenticated user run arbitrary OS commands on the machine hosting the database. The flaw was found by an autonomous AI tool built to hunt bugs in large codebases. Tracked as CVE-2026-23479, the flaw was introduced in Redis 7.2.0 and remained in every stable branch until the May 5 fixes, unnoticed for over two years.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Proofpoint says TA4922, a suspected China aligned cybercrime group, is targeting UK and European organisations with tax, payroll and benefits themed malware campaigns.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A large-scale smishing and phishing campaign argeting mobile users worldwide by impersonating more than 260 brands across 72 countries, leveraging a sophisticated evasion technique built around fake Cloudflare “Error 524” pages. Active since the second half of 2025, the operation primarily focuses on Latin America but has expanded into Europe, APAC, and North America, highlighting […]

    The post Error 524 Decoy Campaign Uses Brand Impersonation to Phish Mobile Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have disclosed a one-click attack via Microsoft Visual Studio Code (VS Code) that makes it possible to steal a user’s GitHub token. “Just by clicking a link, it’s possible for an attacker to steal a GitHub token that can read and write to your repos, including private ones,” security researcher Ammar Askar said. GitHub supports a feature called GitHub.dev that runs as

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A newly analyzed leak tied to The Gentlemen ransomware group reveals how modern ransomware operations are evolving in structure and tooling while relying on the same proven intrusion techniques seen over the past four years. The leak also highlights operator continuity across major ransomware brands. A threat actor known as “Tinker” appears across Conti (2022), […]

    The post Gentlemen Ransomware Exploits Fortinet Flaws, AI, and Custom C2 Tools appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶