Skip to content

ADMIN.FOUNDATION

  • Android Zero-Day Vulnerability Actively Exploited in Device Takeover Attacks

    ·

    Android, CVE/vulnerability, cyber security, Cyber Security News, vulnerability, Zero-Day, zeroday

    Google has disclosed a critical Android zero-day vulnerability that is reportedly being actively exploited in targeted attacks, raising serious concerns about the risk of large-scale device compromise. The issue, tracked as CVE-2025-48595, was highlighted in the Android Security Bulletin for June 2026, released on June 1. Android Zero-Day Vulnerability According to Google, the vulnerability resides […]

    The post Android Zero-Day Vulnerability Actively Exploited in Device Takeover Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • 34 Malicious Packages Steal Cloud Keys, Wallets, and SSH Credentials

    ·

    cyber security, Cyber Security News

    Hackers are actively abusing open-source ecosystems to steal sensitive developer data through a large-scale supply chain attack dubbed “TrapDoor,”. The campaign spans npm, PyPI, and Crates.io, leveraging 34 malicious packages and 384 versions to target developers working in cryptocurrency, DeFi, AI, and cloud environments. The attackers weaponized legitimate package installation and build mechanisms to silently […]

    The post 34 Malicious Packages Steal Cloud Keys, Wallets, and SSH Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers Use Spearphishing to Deploy AZUREVEIL Adaptix C2 Agent

    ·

    cyber security, Cyber Security News

    Hackers are actively deploying a sophisticated malware framework dubbed AZUREVEIL, an Adaptix-based command-and-control (C2) agent, through a targeted spearphishing campaign aimed at government and enterprise sectors in the Czech Republic and Taiwan. The attack begins with a malicious ZIP archive delivered via spearphishing emails. The archive contains files disguised as official documents, including a shortcut file […]

    The post Hackers Use Spearphishing to Deploy AZUREVEIL Adaptix C2 Agent appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Critical StrongDM Flaw Exposes Users to Authentication Token Theft and Reuse

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    A critical security vulnerability tracked as CVE-2026-4387 has been disclosed in StrongDM, allowing attackers to steal and reuse authentication tokens to gain unauthorized access to infrastructure. The issue, discovered by SpecterOps researcher Hope Walker, affects StrongDM desktop and CLI environments before the patched versions and poses significant risks to enterprise environments that rely on centralized […]

    The post Critical StrongDM Flaw Exposes Users to Authentication Token Theft and Reuse appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • SolyxImmortal Malware Steals Passwords, Cookies, Files, and Keystrokes

    ·

    cyber security, Cyber Security News, Malware

    A newly analyzed Python-based information stealer named SolyxImmortal is actively targeting sensitive user data, including browser credentials, cookies, documents, screenshots, and keystrokes. The malware uses common Python libraries and multi-threading techniques to run multiple surveillance and data theft operations simultaneously, making it efficient and difficult to detect during execution. Security researchers, including Cyfirma, report that […]

    The post SolyxImmortal Malware Steals Passwords, Cookies, Files, and Keystrokes appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • PHANTOMPULSE RAT Uses UAC Bypass to Hijack Windows Systems

    ·

    cyber security, Cyber Security News, Windows

    New technical details about PHANTOMPULSE, a sophisticated remote access trojan (RAT) used in multi-stage intrusions targeting Windows environments. The malware represents the final payload in an attack chain previously linked to Obsidian plugin abuse and in-memory loaders, but this latest analysis focuses on its advanced post-exploitation capabilities. PHANTOMPULSE stands out for combining multiple stealth techniques, […]

    The post PHANTOMPULSE RAT Uses UAC Bypass to Hijack Windows Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • TP-Link Router Security Bug Enables Remote Command Execution Attacks

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    TP-Link has disclosed a high-severity security flaw in its Archer BE450 and Archer BE7200 Wi‑Fi routers that could allow remote command execution once an attacker gains admin access. The vulnerability, tracked as CVE-2026-5509, is rated 8.5 (High) under CVSS v4.0, highlighting the serious risk it poses to both home and small-office networks that rely on […]

    The post TP-Link Router Security Bug Enables Remote Command Execution Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Desert e-bike race ‘the perfect’ place to test military-vehicle AI

    ·

    Science & Tech
    One team in the upcoming Baja 1000 dirt-bike race will bring a special advantage: AI that prescribes when a rider should pit, long before the need becomes obvious.

    The thousand-mile trek through California and Mexico is “the perfect” environment to test GDIT’s logistics-and-maintenance AI before it heads off to rough and disconnected battlefields, a company representative said. 

    GDIT is teaming with AWS on Project Celerity, an AI-enabled platform for managing energy. The Army’s Advanced Research Lab has been heavily investing in how to deploy small, tactical “microgrids”—essentially energy generation and storage systems for environments where power and connectivity are absent. Those microgrids aren’t intended to simply provide power for soldiers on base but also power batteries for a growing fleet of eclectic and robotic vehicles and weapons. So predicting when and how drones or ground robots might require new batteries is a part of the challenge.

    Shannon Judd, the director of global defense partners at AWS, said in an email that the military applications for the project are many. These include helping “teams conducting patrols or surveillance in remote areas, special operations forces who need to make decisions quickly without guaranteed access to full communications, and disaster or humanitarian missions,” on top of managing power or other pieces of infrastructure.

    Brandon Bean, GDIT’s vice president for artificial intelligence and machine learning, said, “This is a proxy for contested logistics… The Baja Desert provides us with adverse terrain topography and weather; it also provides us a dynamic [operational tempo] so we can't pre-predict or plan anything.” GDIT did not say which team would be using its tools.

    It shows an evolution of GDIT’s Defense Operations Grid-Mesh Accelerator, or DOGMA, a tool that fuses sensor data and sends it back to an operator under difficult conditions, such as enemy jamming, broken communications links, etc.

    Since introducing DOGMA last August in the Pentagon’s T-REX drone warfare experiment, the company has developed three versions of it: one for fusing data, one for running autonomy, and one called WorldView, which Bean described as a “cognitive layer that provides a common operating picture.”

    The race team will  use electrically powered bikes, similar to the ones that special operations forces use in some missions. They’re quieter than motorbikes and their large batteries can also power sensors and communications gear.

    “All the telemetry that's coming from the rider and from the motorcycle” will go to AWS servers, Bean said. “Then we're going to provide predictive analytics on when and where the rider needs to pit and where we need to replace the batteries.”

    Other telemetry tools may eventually be added, like a rider-health tool designed for no-communication environments where standard fitness trackers don’t work. The company unveiled it along with DOGMA WorldView at the recent SOF Week event in Tampa, Florida.  

    “What we did was we built a round-loop workflow where we collected all this telemetry data off of these devices, [and] we're able to work and pull this data into our DOGMA WorldView and be able to do pattern of life on these individuals," Bean said. "So we could tell, based on the telemetry data on the phone, whether they've [encountered] elevated terrain or whether they stopped for periods of time. The next step of that is to actually tap into the microphone and the camera on the phone, so that we can identify if there's hostile control [of the] device.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Meta’s AI Bot Misused by Hackers to Take Over Instagram Accounts

    ·

    cyber security, Cyber Security News, Instagram

    Attackers have exploited a critical vulnerability in Meta’s AI-powered Instagram support chatbot to hijack user accounts without needing passwords, phishing, or malware. Instead of bypassing security through technical exploits, hackers simply manipulated the chatbot via natural-language requests. Meta’s AI Bot Misused by Hackers The flaw allowed attackers to bypass two-factor authentication (2FA) effectively. By interacting […]

    The post Meta’s AI Bot Misused by Hackers to Take Over Instagram Accounts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Nimbus Manticore APT Uses Fake Jobs to Deliver Custom Malware

    ·

    APT, cyber security, Cyber Security News, Malware

    A newly observed cyber campaign linked to the Iran-aligned threat group Nimbus Manticore (also tracked as UNC1549 and Smoke Sandstorm) is targeting aerospace and defense organizations using a deceptive recruitment workflow that delivers custom malware through a sophisticated sideloading chain. The operation highlights the group’s continued reliance on social engineering combined with stealthy execution techniques […]

    The post Nimbus Manticore APT Uses Fake Jobs to Deliver Custom Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 420 421 422 423 424 … 1,249
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence