• Minecraft players are being lured with a fake hacking tool called “Slinky” that secretly installs a powerful infostealer dubbed LofyStealer (also tracked as GrabBot), linked to the Brazilian cybercrime group LofyGang. The malware uses a Node. js-based loader and an in-memory C++ payload to steal browser data and exfiltrate it to a command-and-control (C2) server […]

    The post LofyStealer Targets Minecraft Players via Node.js Loader and Browser Injection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding a newly discovered zero-day vulnerability affecting Microsoft Windows. On April 28, 2026, the agency officially added CVE-2026-32202 to its Known Exploited Vulnerabilities (KEV) catalog. This critical flaw involves a failure of a protection mechanism within the Microsoft Windows Shell, and active exploitation […]

    The post CISA Warns of Windows Shell Zero-Day Exploited in Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Vect 2.0 Ransomware‑as‑a‑Service (RaaS) operation is rapidly evolving into a multi‑platform threat that can encrypt Windows, Linux, and VMware ESXi environments across modern hybrid infrastructures. The group runs a classic affiliate model, renting out its ransomware and TOR‑based infrastructure to partners in exchange for a share of ransom payments. Its operators are strongly suspected to be […]

    The post Vect 2.0 RaaS Expands Attacks Across Windows, Linux, and ESXi appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Web hosting administrators must take immediate action, as cPanel has rolled out an emergency security update to address a critical vulnerability. Disclosed on April 28, 2026, this flaw impacts various authentication paths within the cPanel and WebHost Manager (WHM) ecosystem. Control panels like cPanel act as the central nervous system for web servers, handling everything […]

    The post cPanel Releases Emergency Patch for Critical Authentication Flaw appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft has officially confirmed a known issue affecting Remote Desktop Protocol (RDP) connections following the April 14, 2026, Patch Tuesday updates. Specifically impacting Windows 11 version 26H1 (KB5083768, OS Build 28000.1836), the update was intended to harden systems against malicious .rdp files. However, a newly introduced user interface bug is causing critical security warnings to render incorrectly, […]

    The post Microsoft Confirms Remote Desktop Warning Issue After April Update appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • In yet another instance of threat actors quickly jumping on the exploitation bandwagon, a newly disclosed critical security flaw in BerriAI’s LiteLLM Python package has come under active exploitation in the wild within 36 hours of the bug becoming public knowledge. The vulnerability, tracked as CVE-2026-42208 (CVSS score: 9.3), is an SQL injection that could be exploited to modify the underlying

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A sophisticated BlueNoroff campaign targeting cryptocurrency executives through fake Zoom meetings enhanced with AI-generated deepfakes and fileless PowerShell malware. The North Korean state-sponsored group successfully compromised a North American Web3 company in January 2026, maintaining persistent access for 66 days through entirely memory-resident attacks. The campaign begins with social engineering through Calendly invitations that contain […]

    The post BlueNoroff Deploys Fileless PowerShell in AI-Generated Zoom Lure Campaign appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Wiz Research has identified a critical remote code execution (RCE) vulnerability, tracked as CVE-2026-3854, deeply embedded within GitHub’s internal git infrastructure. This high-severity flaw enabled any authenticated user to execute arbitrary commands on backend servers using a single standard git push command. The vulnerability originates from an improper neutralization of special elements during repository push operations. GitHub’s […]

    The post GitHub.com and Enterprise Server Vulnerability Allows Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Acting Navy Secretary Hung Cao made his first public remarks Tuesday as the civilian head of the Navy since the Pentagon announced Wednesday that John Phelan would be leaving the role he’d held for just about 13 months.

    Cao, a retired Navy explosive ordnance disposal officer and two-time candidate for Virginia congressional seats, appeared at the Modern Day Marine conference in Washington, D.C., in a time slot that Phelan had agreed to fill before his ouster.

    “My life changed a little bit the last six days. We've all had a change of command, right? You know, some with the band, some without the band,” he said, alluding to Phelan’s swift firing, which he reportedly learned about when a Pentagon spokesman posted on X. “But again, as warriors, we're always prepared to make sure that we’re able to step up to the position ahead of us and teach the people below us to take over. Because in combat, you lose people, and the fight goes on.”

    Cao spoke directly to Marines in the audience. He talked about being under-equipped for the fight duringthe Global War on Terror, and calling on industry representatives in the audience to help prevent the Navy department from making similar  mistakes in the next conflict. 

    “So think about this, as we're developing equipment for our Marines out there, that what you're producing right now is going to save the lives of America's sons and daughters,” he said.

    He mentioned his own son, who is to be commissioned a Marine Corps second lieutenant in the coming weeks. 

    “That's why I do what I'm doing, because I'm not going to have my son go to war the way I did when we were invading Iraq,” he said. 

    In an unusual move for conference keynotes, Cao kept his prepared remarks brief, using the remainder of his time to answer screened questions from the audience. 

    Asked about shipbuilding, he appeared to be in sync with Phelan’s approach to fielding the Golden Fleet, centered around the nascent Trump-class battleship.

    “The Golden Fleet is not just about ships. It's the whole concept of reforming acquisitions, getting ships out there, from high to low, right?” he said. “You can't use a destroyer for everything.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • AI and autonomy are being integrated into special operations “at every level,” the leader of U.S. Special Operations Command told lawmakers on Tuesday—an indication that SOCOM, like smaller organizations everywhere, is well-poised to take advantage of disruptive technologies.

    They are “critical” to sensing the battlefield, continuously surveilling adversary forces and targets, and “the ability to project violence, should that be required,” Adm. Frank “Mitch” Bradley said at a Senate Armed Services Committee hearing. He added that they are also key to improving international partners, underscoring their particular value to special operations.

    Bradley’s testimony underscored a larger phenomenon playing out in boardrooms as well as on battlefields: small and nimble groups—whether non-state actors, software startups, or militaries like Ukraine’s—derive greater return on their AI investments than do more established or incumbent players. The boom in market valuation of small AI-focused defense startups like Anduril, Shield AI, or Swarmer versus slower growth of traditional players tells that story, as does Ukraine’s use of drones and autonomy to withstand Russia’s invasion.

    SOCOM is better positioned to adopt AI than, say, the U.S. Navy, which is also trying to fund and sustain multibillion-dollar aircraft carriers and other maintenance-thirsty warships. Even the Navy’s forays into autonomy tend to be on the larger side, like its plan to spend $6 billion to acquire 70 Medium Unmanned Surface Vessels. At a hearing last week during a hearing, Sen. Rick Scott, R-Fla., responded with clear disapproval at spending that amount of money to get 70 surface craft—good value compared to the cost of a destroyer but not compared to the Ukrainian robot boats that have corralled the Russian Navy.

    Meanwhile, SOCOM has launched a broad request to industry for new ideas for maritime autonomy, human performance, command-and-control technology, and “scalable effects”—as in technologies that can be increased in number or intensity, such as directed energy, electronic warfare, cyber-enabled effects, and precision engagement tools. The request bespeaks flexibility in a way that the Navy’s 70-MUSV order does not.

    AI enables asymmetric warfare—SOCOM’s specialty—more than traditional warfare, and the special operations command has fewer obstacles than the service branches to fast implementation. A case in point is Maven, an Air Force Special Operations Command tool for video and data analysis that has become a widely used program of record

    “From the battlefield to the back office,” SOCOM is ‘finding ways to be able to bring autonomy, attritable, mass autonomy, to bear is a very important part of how we on the edge can leverage our placement and access,” Bradley said.

    Partners

    But SOCOM also plays a key role in helping partner militaries develop new capabilities quickly. Bradley described how SOCOM is seeking to use AI and autonomy “not only to serve our own interests, but to be able to help our partners who generally don't have the same budgets we do, to be able to buy that kind of capacity to give them asymmetric advantages… I think that's critical, because it is not just about what we bring, but it's about enabling those partners.”

    Bradley, similar to other military leaders, pointed out the unique relationship that the U.S. military has forged with Ukraine. Special operations forces were critical to helping Ukraine stand up new concepts and tactics to thwart Russia’s advance in 2022. Today, that relationship provides key knowledge and training benefits back to U.S. Special Operations Forces. “Frankly, we learn from them,” he said.

    That partnership is especially critical in finding real-world and relevant data to inform SOCOM training, concepts, and buying, namely testing new gear  under spectrum-warfare conditions and real-world threats. Meaningfully testing new equipment for use against an actual modern adversary “requires more exquisite ranges that have the ability for us to be able to practice, train and rehearse in increasingly contested electromagnetic spectrum environments. Those are difficult to be able to produce inside the United States,” he said. “We have to be able to bring together our standard, exquisite weapons systems now with teamed and collaborative autonomy, and there are very few places inside the United States where that is an easy thing to do, in many places where it needs to be done, and we are working to do that.”

    Industry, however, has the most to gain from longstanding military-to-military partnerships with Ukraine and its innovative forces and companies. 

    “I will say that many of our business, our defense industrial base partners, are watching this as well,” he said. “And of course, the Ukrainians are driven by the existential need for that cycle of adaptation. As we watch that, I have great confidence that our industrial base here can do the same.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶