ADMIN.FOUNDATION – Page 516 – cybersecurity / defense / intelligence

MOVEit Authentication Bypass Vulnerability Sparks Security Concerns

·

CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities, vulnerability

Progress Software has issued a critical security alert for its MOVEit Automation software. Two severe vulnerabilities have been discovered that could allow attackers to bypass authentication and escalate their privileges. Because of the critical nature of these flaws, administrators are urged to apply the latest security patches immediately to prevent unauthorized access and data exposure. […]

The post MOVEit Authentication Bypass Vulnerability Sparks Security Concerns appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
FreeBSD Systems at Risk From DHCP Client RCE Vulnerability

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

The FreeBSD Project has issued a critical security advisory (FreeBSD-SA-26:12.dhclient) to address a severe Remote Code Execution (RCE) vulnerability in its default IPv4 DHCP client. Tracked as CVE-2026-42511, this flaw allows local network attackers to execute arbitrary code with root privileges. Discovered by Joshua Rogers of the AISLE Research Team, the vulnerability affects all supported […]

The post FreeBSD Systems at Risk From DHCP Client RCE Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Trellix Source Code Breach Exposes Repository to Unauthorized Access

·

cyber security, Cyber Security News, Data Breach

Leading cybersecurity firm Trellix has announced a security incident involving unauthorized access to a portion of its source code repository. The breach highlights a growing trend of threat actors targeting top-tier security vendors to uncover potential software vulnerabilities. The Breach and Immediate Response In a recent public statement, Trellix confirmed that a threat actor had […]

The post Trellix Source Code Breach Exposes Repository to Unauthorized Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
DigiCert Root Certificates Incorrectly Detected as Malware by Microsoft Defender

·

cyber security, Cyber Security News, Malware, Microsoft, vulnerability

On May 3, 2026, system administrators and everyday users worldwide experienced a sudden, massive spike in severe security alerts from Microsoft Defender. The native Windows security platform began aggressively flagging system files as “Trojan:Win32/Cerdigent.A!dha.” This unexpected detection caused widespread panic across IT departments, leading many professionals to believe a sophisticated threat actor had actively compromised […]

The post DigiCert Root Certificates Incorrectly Detected as Malware by Microsoft Defender appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Global Crackdown Arrests 276, Shuts 9 Crypto Scam Centers, Seizes $701M

·

A coordinated international operation involving U.S. and Chinese authorities has arrested at least 276 suspects and shut down nine scam centers used for cryptocurrency investment fraud schemes targeting Americans, resulting in millions of dollars in losses. The crackdown was led by the Dubai Police, under the United Arab Emirates (UAE) Ministry of Interior, in partnership with the U.S. Federal

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Paying Ransom Won’t Help as VECT 2.0 Ransomware Destroys Data Irreversibly

·

Check Point, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, RaaS, Ransomware, Security, VECT, Windows

VECT 2.0 ransomware contains fatal flaws that permanently destroy files, making recovery impossible and rendering ransom payments useless for victims worldwide.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV

·

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a recently disclosed security flaw impacting various Linux distributions to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The vulnerability, tracked as CVE-2026-31431 (CVSS score: 7.8), is a case of local privilege escalation (LPE) flaw that could allow an

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Google AppSheet Exploited in 30,000-User Facebook Phishing Operation

·

AccountDumpling, AppSheet, Cyber Attack, cybersecurity, FACEBOOK, Fraud, Google, Google Drive, Phishing, Phishing Scam, SCAM, Security

Scammers are abusing Google AppSheet and Google Drive to bypass security filters and steal thousands of Facebook Business accounts globally.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
2 US Cybersecurity Experts Jailed for Aiding ALPHV (BlackCat) Ransomware

·

ALPHV, BlackCat, Cyber Crime, Cyber-Attacks, cybersecurity, FBI, Kevin Martin, Ransomware, Ryan Goldberg, Security

Two US cybersecurity experts jailed for aiding BlackCat ransomware group, extorting victims worldwide and exploiting insider access for profit.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Trellix Confirms Source Code Breach With Unauthorized Repository Access

·

Cybersecurity company Trellix has announced that it suffered a breach that enabled unauthorized access to a “portion” of its source code. It said it “recently identified” the compromise of its source code repository and that it began working with “leading forensic experts” to resolve the matter immediately. It also said it has notified law enforcement of the matter. Trellix did not disclose the

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶