Skip to content

ADMIN.FOUNDATION

  • New Attribution Framework Links APT Campaigns Across Key Layers

    ·

    APT, cyber security, Cyber Security News

    A new attribution framework is reshaping how cybersecurity analysts connect advanced persistent threat (APT) activity, moving beyond static group labels toward a dynamic, multi-layered model that reflects how modern adversaries actually operate. These profiles are built from observed tactics, techniques, procedures (TTPs), malware, and infrastructure. But this approach is increasingly strained. Threat actors evolve constantly […]

    The post New Attribution Framework Links APT Campaigns Across Key Layers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Critical Android Zero-Click Vulnerability Enables Remote Shell Access

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability, Zero-Day

    Google has released the Android Security Bulletin for May 2026, addressing a highly critical vulnerability that allows attackers to execute code remotely without any user interaction. Published on May 4, 2026, the latest security update focuses heavily on a severe flaw located within the Android System component. Threat actors can exploit this vulnerability to gain […]

    The post Critical Android Zero-Click Vulnerability Enables Remote Shell Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API

    ·

    A critical security vulnerability in Weaver (Fanwei) E-cology, an enterprise office automation (OA) and collaboration platform, has come under active exploitation in the wild. The vulnerability (CVE-2026-22679, CVSS score: 9.8) relates to a case of unauthenticated remote code execution affecting Weaver E-cology 10.0 versions prior to 20260312. The issue resides in the “/papi/esearch/data/devops/

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries

    ·

    Microsoft has disclosed details of a large-scale credential theft campaign that has leveraged a combination of code of conduct-themed lures and legitimate email services to direct users to attacker-controlled domains and steal authentication tokens. The multi-stage campaign, observed between April 14 and 16, 2026, targeted more than 35,000 users across over 13,000 organizations in 26 countries,

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Fake “Notepad++ for Mac” Site May Pose Malware Risk for Mac Users

    ·

    cyber security, Cyber Security News, Malware

    A deceptive website is circulating online that claims to offer an official “Notepad++ for Mac” download, and it has already misled some users and even tech media outlets into believing that Notepad++ has finally launched a native macOS version. The site operates under the domain notepad-plus-plus-mac[.]org. It is branded to look like an official extension […]

    The post Fake “Notepad++ for Mac” Site May Pose Malware Risk for Mac Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft Edge Found Storing Saved Passwords in Cleartext Memory at Startup

    ·

    cyber security, Cyber Security News, Microsoft, PoC

    A new security finding reveals that Microsoft Edge loads every saved password into its process memory as cleartext the moment the browser launches. Even more surprising to security professionals is Microsoft’s official response to the disclosure, which states that this insecure behavior is entirely “by design.” How the Memory Flaw Works According to a recent […]

    The post Microsoft Edge Found Storing Saved Passwords in Cleartext Memory at Startup appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Apache HTTP Server Vulnerability Exposes Millions to Remote Code Execution Threats

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    The Apache Software Foundation has released an urgent security update for the Apache HTTP Server to patch a severe vulnerability. Tracked as CVE-2026-23918, this flaw could allow attackers to execute malicious code remotely on affected web servers, putting millions of websites at risk. Understanding the Vulnerability The newly discovered security flaw is classified as a […]

    The post Apache HTTP Server Vulnerability Exposes Millions to Remote Code Execution Threats appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • pnpm 11 Enables Default Release-Age Guard to Curb npm Supply Chain Attacks

    ·

    cyber security, Cyber Security News

    pnpm 11 has been released with a strong focus on reducing software supply chain risk, introducing security-first defaults that directly address modern package ecosystem threats. The most significant change in pnpm 11 is the introduction of a default Minimum Release Age of 24 hours (1440 minutes). This means newly published package versions are not eligible […]

    The post pnpm 11 Enables Default Release-Age Guard to Curb npm Supply Chain Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • DigiCert Hacked in Screensaver-Based Attack to Fraudulently Obtain EV Code Signing Certificates

    ·

    cyber security, Cyber Security News, Hacks

    DigiCert, a major Certificate Authority, recently suffered a significant security breach where hackers used a malicious screensaver file to steal 60 Extended Validation (EV) Code Signing certificates. These highly trusted certificates were subsequently used to sign the “Zhong Stealer” malware, allowing the malicious files to bypass security warnings by appearing as legitimate software. The incident […]

    The post DigiCert Hacked in Screensaver-Based Attack to Fraudulently Obtain EV Code Signing Certificates appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Pentagon seeks smarter, self-organizing drones as autonomous-warfare budget is poised to skyrocket

    ·

    Science & Tech
    Two requests to industry may help the Pentagon address one of the emerging challenges of warfare: enabling a relatively small number of human operators to direct a far larger number of robots.

    The Materials for Physical Compute in Untethered Robotics effort seeks to make autonomous systems more intelligent, while Decentralized Artificial Intelligence through Controlled Emergence aims to help robots form teams and carry out missions. These DARPA projects may feed ideas to the Defense Autonomous Working Group, the lead Pentagon office for drone warfare, whose budget would soar from $226 million this year to $54 billion under the new 2027 spending proposal. 

    Much of that huge sum will be wasted if the military spends it before establishing a clear understanding of how operators will buy, train on, use, and maintain autonomous weapons, according to a recent commentary piece by David Petraeus, the retired Army general and former CIA director, and scholar Isaac Flanagan. Writing for The Hill, they argue that the lack of such understanding constrained the use of drones during the past decade of U.S. wars in the Middle East.

    “Each Predator combat air patrol of continuous surveillance required nearly 150 personnel,” they write. “As demand for drone coverage surged, the limiting factor was not the number of aircraft but of the trained personnel and the organizational structure to enable them.” 

    Until the military fixes this, they write, any new drone is “not a weapons system at all—it is an asset on a spreadsheet.”

    The new DARPA efforts aim to help change that.

    Materials for Physical Compute in Untethered Robotics seeks to help robots think and reason without relying on connections to vulnerable data centers and without using valuable battery life to upload video and receive commands. Even the most advanced robotics “still require constant internal data processing, with either the end-users or data centers, creating delayed actions through latency and consuming power for data transmission,” the request for information says.

    The RFI also urges industry to move beyond the conception of autonomous systems as assemblages of wire, metal frames, and motors. This mindset has been “yielding a robot with small behavior diversity. Therefore, current robot capabilities are limited in ever-changing and contact-rich environments.” It seeks new concepts at the “material, component, and kernel level”—down to chemistry and physics—that can change the very nature of machine intelligence.

    DICE aims to enable machines to talk and collaborate with each other, to “dynamically form teams using peer-to-peer coordination to execute complex missions.”

    The two DARPA projects are hardly the Pentagon’s only efforts to answer fundamental questions about robots. A contest run by DIU, the Defense Department’s innovation arm, seeks ways to control drones with plain language commands, as one might direct a soldier or a large-language-model tool.

    The problem that Petraeus and Flanagan discuss is not as simple as it seems. Technology is moving faster than doctrine. So should doctrine come first? Or the other way around?

    U.S. Southern Command is moving to answer that sort of question. Last week, Gen. Frank Donovan announced the SOUTHCOM Autonomous Warfare Command to “maximize the efficient fielding of autonomous systems.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 510 511 512 513 514 … 1,267
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence