Skip to content

ADMIN.FOUNDATION

  • Hackers Hide Malware in Nested macOS-Style Folders to Evade Scans

    ·

    cyber security, Cyber Security News, macOS, Malware

    Hackers are increasingly adopting stealthy delivery techniques, and a newly uncovered spear-phishing campaign shows how nested macOS-like folder structures can be abused to evade detection while deploying advanced malware. The phishing email carries a ZIP attachment named “常州大学2026年《国家学生体质健康标准》测试通知最终版.zip,” posing as an official university notice. The social engineering is unusually precise: failure in this fitness assessment […]

    The post Hackers Hide Malware in Nested macOS-Style Folders to Evade Scans appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • CISA Warns Trend Micro Apex One Vulnerability Is Being Exploited in Attacks

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    CISA has added a newly disclosed vulnerability in Trend Micro Apex One to its Known Exploited Vulnerabilities (KEV) catalog, warning that the flaw is actively being exploited in real-world attacks. The issue, tracked as CVE-2026-34926, affects on-premise deployments of Trend Micro Apex One and poses a significant risk to enterprise environments. Micro Apex One Vulnerability […]

    The post CISA Warns Trend Micro Apex One Vulnerability Is Being Exploited in Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Megalodon Malware Rapidly Infects Over 5,500 GitHub Repositories

    ·

    cyber security, Cyber Security News, Malware

    A newly identified malware campaign dubbed “Megalodon” has compromised more than 5,500 GitHub repositories, raising serious concerns about the security of open-source ecosystems. Security researchers from SafeDep report that the malware spreads through malicious code injections hidden inside seemingly legitimate projects, targeting developers who unknowingly download and execute infected files. Megalodon Malware Infects Github Repo […]

    The post Megalodon Malware Rapidly Infects Over 5,500 GitHub Repositories appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers Abuse Hugging Face to Deliver npm Malware

    ·

    cyber security, Cyber Security News, Malware

    A newly uncovered supply chain attack targeting the npm ecosystem has been linked to North Korean (DPRK)-aligned threat actors. The campaign centers around a malicious npm package named terminal-logger-utils, which embeds a sophisticated multi-stage malware capable of keylogging, data exfiltration, and remote system control. The package was distributed through three dependent libraries pretty-logger-utils, ts-logger-pack, and pinno-loggers which automatically […]

    The post Hackers Abuse Hugging Face to Deliver npm Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV

    ·

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Langflow and Trend Micro Apex One to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities in question are listed below – CVE-2025-34291 (CVSS score: 9.4) – An origin validation error vulnerability in Langflow that could

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access

    ·

    Cisco has rolled out updates for a maximum-severity security flaw impacting Secure Workload that could allow an unauthenticated, remote attacker to access sensitive data. Tracked as CVE-2026-20223 (CVSS score: 10.0), the vulnerability arises from insufficient validation and authentication when accessing REST API endpoints. “An attacker could exploit this vulnerability if they are able to send

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Mini Shai-Hulud Attack Prompts npm to Revoke 2FA-Bypass Tokens

    ·

    cyber security, Cyber Security News

    npm has forced a platform-wide reset of granular access tokens that bypass two-factor authentication (2FA) after a wave of supply chain attacks linked to the “Mini Shai-Hulud” campaign compromised hundreds of JavaScript packages. The emergency action, rolled out on May 19, invalidated all npm tokens with write permissions that allowed publishing without 2FA. The move […]

    The post Mini Shai-Hulud Attack Prompts npm to Revoke 2FA-Bypass Tokens appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Flipper Introduces Flipper One as a Modular Linux-Based Cyberdeck

    ·

    cyber security, Cyber Security News, Linux

    Flipper Devices has officially unveiled Flipper One, a modular, Linux-based cyberdeck designed to push the boundaries of open hardware and portable network analysis platforms. Unlike the popular Flipper Zero, the new device targets high-performance networking, software-defined radio (SDR), and embedded Linux development, positioning itself as a powerful toolkit for cybersecurity professionals, researchers, and hardware developers. Flipper […]

    The post Flipper Introduces Flipper One as a Modular Linux-Based Cyberdeck appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Authorities Take Down “First VPN” Service Used in Ransomware Attacks

    ·

    cyber security, Cyber Security News, Ransomware, VPN

    Authorities in Europe have dismantled a major criminal VPN service known as “First VPN,” which was widely used by ransomware operators and cybercriminal groups to conceal their activities. The coordinated operation, led by French and Dutch authorities with support from Eurojust and Europol, marks a significant disruption to cybercrime infrastructure across multiple countries. Criminal VPN […]

    The post Authorities Take Down “First VPN” Service Used in Ransomware Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • General Atomics resumes drone-wingman flights after mishap

    ·

    Defense Systems
    Nearly seven weeks after an autopilot problem crashed a General Atomics collaborative combat aircraft, the company announced Thursday that its drone wingmen are back in the skies.

    On April 6, a  YFQ-42A “Dark Merlin" crashed at the company airport in California, prompting a joint investigation by the company and the Air Force. General Atomics spokesperson C. Mark Brinkley said flight testing resumed on Wednesday. The company continued ground testing and other evaluations while flight testing was paused. A software problem identified during the investigation has been fixed.

    “A thorough safety review isolated the cause to an autopilot miscalculation for the weight and center of gravity of the aircraft, prompting a software remediation,” General Atomics said in a news release. “Following a stringent evaluation, technical authorities endorsed the software changes and YFQ-42A has returned to the air.”

    No one was injured in the April 6 crash, but the company said the aircraft was a “total loss”. 

    It was one of several production-representative CCAs being made for the Air Force’s drone wingman competition. General Atomics is going head-to-head against Anduril and Northrop Grumman for the service’s business. An Increment 1 production decision is expected before the end of September, and the Air Force is requesting nearly $1 billion to buy its first CCAs, 2027 budget documents released last month show.

    “It’s been said that you learn more from your setbacks than your successes,” General Atomics President David R. Alexander said in the news release. “We are applying what we’ve learned to our growing fleet of CCAs, as we continue building the most dependable and cost-efficient unmanned fighters in the world.”

    Air Force Col. Timothy Helfrich, portfolio acquisition executive for fighters and advanced aircraft, said the incident showed the service’s new willingness to accept risks.

    “The USAF and General Atomics response to the YFQ-42 mishap validates our approach to accept acquisition/test risk instead of operational risk allowing us to accelerate the program towards fielding,” he said in an emailed statement. “We pushed the envelope, identified a risk, learned from the data, and have cleared the YFQ-42A to return to flight.”

    Helfrich stressed that the crash didn’t pause progress on the CCA program. He said the service’s Experimental Operations Unit at Edwards Air Force Base in California flew several sorties with Anduril’s YFQ-44A Fury aircraft the same week General Atomics paused test flights.

    “Despite the pause on one platform, we executed this critical exercise that same week using the YFQ-44A to validate core operational and deployment concepts,” Helfrich said in the statement. “Because of this momentum and our resilient, multi-vendor approach, overall CCA progress never missed a beat as we drive toward delivering advanced capability to the fleet."

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 444 445 446 447 448 … 1,250
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence