ADMIN.FOUNDATION – Page 471 – cybersecurity / defense / intelligence

Researchers Build First Public Apple M5 macOS Kernel Exploit with Mythos Preview

·

Apple, cyber security, Cyber Security News, macOS, Malware

Security researchers have unveiled the first publicly known macOS kernel memory corruption exploit targeting Apple’s latest M5 silicon, marking a significant moment for both offensive security and Apple’s next-generation defenses. The exploit, developed in collaboration with Mythos Preview, reportedly bypasses Apple’s advanced Memory Integrity Enforcement (MIE), a hardware-backed mitigation designed to stop this class of […]

The post Researchers Build First Public Apple M5 macOS Kernel Exploit with Mythos Preview appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Malicious npm Packages Steal SSH Keys, Cloud Credentials, and Crypto Wallets

·

cyber security, Cyber Security News

A new supply chain attack campaign targeting developers has surfaced in the npm ecosystem, with four malicious packages discovered stealing sensitive data, including SSH keys, cloud credentials, and cryptocurrency wallets. The campaign, identified by OX Security within the past 24 hours, highlights the growing risk posed by typosquatting attacks and reused open-source malware. The malicious […]

The post Malicious npm Packages Steal SSH Keys, Cloud Credentials, and Crypto Wallets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems

·

Chaotic Eclipse, the security researcher behind the recently disclosed Windows flaws, YellowKey and GreenPlasma, has released a proof-of-concept (PoC) for a Windows privilege escalation zero-day flaw that grants attackers SYSTEM privileges on fully patched Windows systems. Codenamed MiniPlasma, the vulnerability impacts “cldflt.sys,” which refers to the Windows Cloud Files Mini Filter Driver,

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Claude Code Vulnerability Allows Attackers to Run Commands Through Crafted Deeplinks

·

AI, CVE/vulnerability, cyber security, Cyber Security News, vulnerability

A recently disclosed flaw in Claude Code allowed attackers to execute arbitrary system commands using a single crafted deeplink URL, turning a convenience feature into a remote code execution (RCE) vector. The issue, documented by security researcher Joernchen, has been fixed in Claude Code version 2.1.118, but demonstrates how subtle CLI parsing mistakes can have […]

The post Claude Code Vulnerability Allows Attackers to Run Commands Through Crafted Deeplinks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Closing the Gap: The Regulatory and Structural Maturation of Digital Assets

·

Binance, Blockchain, Crypto, cryptocurrency, Decentralization, Fintech, Technology

Digital assets are reshaping global finance as institutions adopt regulated crypto infrastructure, stablecoins, and tokenized assets.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE

·

A newly disclosed security flaw impacting NGINX Plus and NGINX Open has come under active exploitation in the wild, days after its public disclosure, according to VulnCheck. The vulnerability, tracked as CVE-2026-42945 (CVSS score: 9.2), is a heap buffer overflow in ngx_http_rewrite_module affecting NGINX versions 0.6.27 through 1.30.0. According to AI-native security company depthfirst, the

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Scammers Send Physical Phishing Letters to Steal Ledger Wallet Seed Phrases

·

Crypto, Cyber Attack, cybersecurity, France, Fraud, Italy, Ledger, Phishing, Phishing Scam, Privacy, QR, QR Code, SCAM, Scams and Fraud, Security

Scammers are mailing fake Ledger phishing letters to users in Italy with QR codes that trick crypto wallet users into revealing seed phrases.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Grafana Says It Rejected Ransom Demand After Source Code Theft

·

Cyber Attack, Cyber Crime, cybersecurity, Data Breaches, GitHub, Grafana, Ransom, Source Code, vulnerability

Grafana says hackers stole its source code after accessing a GitHub token, but no customer data or systems were affected.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempt

·

Grafana has disclosed that an “unauthorized party” obtained a token that granted them the ability to access the company’s GitHub environment and download its codebase. “Our investigation has determined that no customer data or personal information was accessed during this incident, and we have found no evidence of impact to customer systems or operations,” Grafana said in a series of

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Funnel Builder Flaw Under Active Exploitation Enables WooCommerce Checkout Skimming

·

A critical security vulnerability impacting the Funnel Builder plugin for WordPress has come under active exploitation in the wild to inject malicious JavaScript code into WooCommerce checkout pages with the goal of stealing payment data. Details of the activity were published by Sansec this week. The vulnerability currently does not have an official CVE identifier. It

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶