ADMIN.FOUNDATION – Page 526 – cybersecurity / defense / intelligence

Fancy Bear Exploits Microsoft Zero-Day to Deploy Backdoors and Email Stealers

·

cyber security, Cyber Security News, Microsoft, Zero-Day

Fancy Bear has launched a sophisticated campaign exploiting a critical zero-day vulnerability in Microsoft RTF files to target users across Central and Eastern Europe. The operation, dubbed “Operation Neusploit,” demonstrates the group’s continued evolution in tradecraft and its strategic focus on regions of geopolitical interest to Russia. The group embedded malicious code within specially crafted […]

The post Fancy Bear Exploits Microsoft Zero-Day to Deploy Backdoors and Email Stealers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Dutch Authorities Confirm Ivanti Zero-Day Exploit Exposed Employee Contact Data

·

The Netherlands’ Dutch Data Protection Authority (AP) and the Council for the Judiciary confirmed both agencies (Rvdr) have disclosed that their systems were impacted by cyber attacks that exploited the recently disclosed security flaws in Ivanti Endpoint Manager Mobile (EPMM), according to a notice sent to the country’s parliament on Friday. “On January 29, the National Cyber Security Center (

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
15,200 OpenClaw Control Panels Exposed Online with Full System Access

·

CVE/vulnerability, cyber security, Cyber Security News, Data Breach

A critical security oversight has left thousands of AI agents wide open to the public internet. 15,200 instances of the OpenClaw AI framework (formerly Clawdbot and Moltbot) are vulnerable to remote takeover. The STRIKE team used internet-wide reconnaissance, including favicon fingerprinting, to identify approximately 42,900 unique IP addresses hosting OpenClaw control panels across 82 countries. […]

The post 15,200 OpenClaw Control Panels Exposed Online with Full System Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
25 Million Users Affected as AI Chat Platform Leaks 300 Million Messages

·

AI, cyber security, Cyber Security News, Data Breach

“Chat & Ask AI,” a highly popular mobile application available on both Google Play and the Apple App Store, has suffered a significant data exposure. An independent security researcher discovered a vulnerability that left approximately 300 million private messages accessible to the public. This breach impacts more than 25 million users, raising serious concerns about […]

The post 25 Million Users Affected as AI Chat Platform Leaks 300 Million Messages appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
GuLoader Leverages Polymorphic Malware and Trusted Cloud Infrastructure to Evade Detection

·

cyber security, Cyber Security News, Malware

GuLoader, also known as CloudEye, is a sophisticated malware downloader that has been active since late 2019. Its primary function is to download and install secondary malware, such as Remote Access Trojans (RATs) and information stealers, onto compromised systems. One of GuLoader’s most effective evasion strategies is its use of legitimate cloud services. Instead of […]

The post GuLoader Leverages Polymorphic Malware and Trusted Cloud Infrastructure to Evade Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Bloody Wolf Cybercrime Group Uses NetSupport RAT to Breach Organizations

·

cyber security, Cyber Security News

The latest campaign, they have switched to misusing a legitimate remote administration tool called NetSupport RAT. A cybercriminal group known as “Stan Ghouls” (or Bloody Wolf) has launched a fresh wave of attacks targeting organizations across Central Asia and Russia. Active since at least 2023, this group focuses heavily on the manufacturing, finance, and IT […]

The post Bloody Wolf Cybercrime Group Uses NetSupport RAT to Breach Organizations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Chinese Hackers Target Singapore Telecoms in Edge Device Compromise Campaign

·

cyber security, Cyber Security News

A massive, eleven-month campaign to root out sophisticated attackers from the nation’s critical infrastructure. The Cyber Security Agency of Singapore (CSA) and the Infocomm Media Development Authority (IMDA) revealed details of “Operation CYBER GUARDIAN,” a multi-agency effort to defend the country’s four major telecommunications providers Singtel, StarHub, M1, and SIMBA from a persistent cyber espionage […]

The post Chinese Hackers Target Singapore Telecoms in Edge Device Compromise Campaign appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Microsoft Acknowledges Exchange Online Spam Filter Mistakenly Blocks Valid Email

·

cyber security, Cyber Security News, Microsoft, vulnerability

Microsoft is currently tackling a significant service degradation within Exchange Online that is disrupting business communications by incorrectly flagging legitimate emails as phishing attempts. The incident, tracked under the identifier EX1227432, began on February 5, 2026, and is causing valid messages to be trapped in quarantine rather than reaching their intended recipients. Spam Filter Mistakenly Blocks […]

The post Microsoft Acknowledges Exchange Online Spam Filter Mistakenly Blocks Valid Email appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Threat Actors Using Ivanti EPMM Flaws to Install Stealth Backdoors

·

CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities, vulnerability

A sophisticated new cyber campaign has been detected targeting Ivanti Endpoint Manager Mobile (EPMM) systems. Starting on February 4, 2026, threat actors began exploiting two critical vulnerabilities, CVE-2026-1281 and CVE-2026-1340, to plant dormant backdoors. Unlike typical attacks that immediately steal data or deploy ransomware, this campaign focuses on silence and persistence. Stealth Backdoors The attackers […]

The post Threat Actors Using Ivanti EPMM Flaws to Install Stealth Backdoors appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
DPRK IT Workers Use Stolen LinkedIn Identities to Secure Remote Employment

·

cyber security, Cyber Security News, LinkedIn

A new wave of identity fraud has hit the remote job market, with North Korean (DPRK) operatives adopting a sophisticated new tactic to bypass hiring screens. This development marks a significant shift in tradecraft. Previously, these operatives often relied on fabricated profiles with AI-generated headshots and fake resumes. However, hiring managers and security teams have […]

The post DPRK IT Workers Use Stolen LinkedIn Identities to Secure Remote Employment appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶