Skip to content

ADMIN.FOUNDATION

  • TeamPCP Hackers Exploit CI/CD Pipelines to Steal Cloud Credentials

    ·

    cyber security, Cyber Security News

    A financially motivated threat group known as TeamPCP is aggressively targeting modern software supply chains, abusing trusted CI/CD pipelines to steal sensitive developer and cloud credentials at scale. TeamPCP’s core strategy is simple but highly effective: compromise trusted build and release workflows instead of end-user systems. By injecting malicious code into CI/CD pipelines, attackers leverage […]

    The post TeamPCP Hackers Exploit CI/CD Pipelines to Steal Cloud Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Next.js Security Flaw Leaks Cloud Credentials, API Keys, and Admin Interfaces

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    Next.js, one of the most widely used React frameworks, has been hit by a high-severity vulnerability that could allow attackers to extract sensitive cloud credentials, API keys, and even access internal admin interfaces. The flaw, tracked as CVE-2026-44578, exposes a critical weakness in how certain server-side deployments handle WebSocket upgrade requests. Next.js Security Flaw The […]

    The post Next.js Security Flaw Leaks Cloud Credentials, API Keys, and Admin Interfaces appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email

    ·

    Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that it said has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-42897 (CVSS score: 8.1), has been described as a spoofing bug stemming from a cross-site scripting flaw. An anonymous researcher has been credited with discovering and reporting the issue. “

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft Exposes Kazuar Malware’s Modular P2P Botnet Architecture

    ·

    cyber security, Cyber Security News, Malware

    Microsoft has revealed new technical insights into Kazuar, a long-running malware linked to the Russian state-backed group Secret Blizzard, highlighting its evolution into a stealthy, modular peer-to-peer (P2P) botnet designed for persistent cyber espionage. Originally identified as a traditional backdoor, Kazuar has steadily transformed into a sophisticated ecosystem that prioritizes resilience, low visibility, and flexible […]

    The post Microsoft Exposes Kazuar Malware’s Modular P2P Botnet Architecture appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits

    ·

    The U.S.Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly disclosed vulnerability impacting Cisco Catalyst SD-WAN Controller to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to remediate the issue by May 17, 2026. The vulnerability is a critical authentication bypass tracked as CVE-2026-20182. It’s

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Palo Alto Firewalls Hit by Zero-Day Allowing Arbitrary Code Execution as Root

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability, Zero-Day

    A devastating zero-day vulnerability in Palo Alto Networks firewalls is under active exploitation by suspected state-sponsored hackers, allowing unauthenticated attackers to seize complete control of enterprise security infrastructure. The flaw, tracked as CVE-2026-0300 with a critical CVSS score of 9.3, targets the User-ID Authentication Portal service in PAN-OS software and has been weaponized since at […]

    The post Palo Alto Firewalls Hit by Zero-Day Allowing Arbitrary Code Execution as Root appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers Exploit Scheduled Tasks for Persistence in FrostyNeighbor Attacks

    ·

    cyber security, Cyber Security News

    Hackers linked to the long-running FrostyNeighbor cyber‑espionage group have intensified attacks against Ukrainian government organizations, deploying updated techniques that rely on scheduled tasks for stealthy persistence and server-side validation to evade detection. FrostyNeighbor also tracked as Ghostwriter, UNC1151, and TA445 has been active since at least 2016 and is widely believed to operate in alignment […]

    The post Hackers Exploit Scheduled Tasks for Persistence in FrostyNeighbor Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Dell SupportAssist Update Forces Windows Systems Into BSOD Loop

    ·

    cyber security, Cyber Security News, vulnerability, Windows

    A faulty update to Dell’s SupportAssist Remediation service is triggering widespread system crashes, forcing thousands of Dell and Alienware devices into continuous Blue Screen of Death (BSOD) loops. Affected systems repeatedly crash with the “CRITICAL_PROCESS_DIED” error, often every 30 minutes, severely disrupting productivity and system stability. Dell has acknowledged the issue and confirmed that its […]

    The post Dell SupportAssist Update Forces Windows Systems Into BSOD Loop appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Popular node-ipc npm Library Hit by Supply Chain Attack, Impacting 822K Weekly Downloads

    ·

    Cyber Attack, cyber security, Cyber Security News, vulnerability

    A widely used npm package with more than 822,000 weekly downloads has once again become the center of a serious supply chain attack, raising fresh concerns across the JavaScript ecosystem. Security researchers at Socket have uncovered multiple malicious versions of the popular node-ipc library containing stealthy credential-stealing malware and backdoor capabilities. The affected versions, node-ipc@9.1.6, […]

    The post Popular node-ipc npm Library Hit by Supply Chain Attack, Impacting 822K Weekly Downloads appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Golden Dome defenders push back on $1.2T cost estimate

    ·

    Threats
    Golden Dome’s defenders are downplaying a new $1.2 trillion estimate for Donald Trump’s ambitious missile-defense plan, though they declined to detail just how they disagree with the Congressional Budget Office’s report.

    Space Force Gen. Michael Guetlein, the program’s leader, said the CBO report released Wednesday relied on outdated cost estimates for existing technology and didn’t account for the missile shield’s undisclosed mix of technology and weapons.

    “They did not estimate the architecture that we're building. Why is that? Well, first of all, they didn't come and ask us what we're building,” Guetlein said Thursday morning during the Inside the Dome event in Washington, D.C. “More importantly, we have not been putting a lot of information out in the public [about] exactly what we're doing, because the intelligence threat is so high.”

    CBO officials declined to comment when asked whether they reached out to Guetlein, the Pentagon, or the Golden Dome office when working on the report.

    The report says its $1.2 trillion estimate is based on the Golden Dome vision laid out in a January 2025 executive order, which President Trump said would cost about $185 billion: “Because DoD has not provided details about its objective architecture for GDA, CBO used the language in the executive order as a guide to determine what components to include in its notional NMD [national missile defense] system.”

    Earlier CBO reports have indicated that the Defense Department, under the Trump administration, has not responded to researchers’ requests for information.

     A Golden Dome spokesperson told reporters after Guetlein’s public comments that the general is looking for ways to reduce costs by using artificial intelligence and existing technology.  she declined to provide details.

    “You can't just take what we've done in the past and multiply it forward, or you're going to get large numbers like CBO got,” Guetlein said during the event.

    During a subsequent panel, Rep. Jeff Crank, the head of the all-Republican Golden Dome Caucus, criticized the CBO’s estimates and claimed the nonpartisan research agency’s findings would be used by political enemies of the president. 

    “I think it's very unfortunate that it came out,” Crank, R-Colo., said. “Some of the folks that are opposed to Golden Dome for whatever reason, for whatever political reason, they can continue to bury their heads in the sand…and they will use the CBO support as a wedge, as a tool, to say, hey, look, we can't afford this. But I think, as a country, we've got to confront this.”

    When asked what the biggest threat to Golden Dome is, Rep. Mark Messmer, R-Ind., agreed it was politics, but said he was optimistic the program could get support across the aisle.

    “It's unfortunate that, I mean, because it's the president's idea, we have people that object and fight it just because of that,” Messmer said. “But we've got to be consistent, we've got to continue to make the real threat deterrence that our country faces.”

    CBO’s two-decade estimate is larger than the nearly $80 billion the administration plans to spend in the Golden Dome for America account over the next five years. But, so far, the missile defense program has been backed through heavily partisan reconciliation funding measures. 

    Golden Dome netted $24 billion in Congressionally-approved reconciliation funds in last year’s budget, and another $17 billion has been requested through the same method this year. 

    Guetlein acknowledged that it’s unclear what future funding and final size of the project will look like, but said components of the system will still be necessary for homeland security. 

    “No matter what we look like, no matter how we're organized, no matter how well we are or not funded, the threat is not going away,” he said. “So when you start talking about longevity, we're here to stay. You may call me something different next month, or you may rewicker some of the funding, but we're here to stay because we have to protect the homeland.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 478 479 480 481 482 … 1,264
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence