Skip to content

ADMIN.FOUNDATION

  • GitHub, GitLab Abused for Malware and Phishing Campaigns

    ·

    cyber security, Cyber Security News, GitHub, GitLab, Malware, Phishing

    Hackers are increasingly abusing trusted software development platforms GitHub and GitLab to host malware and credential phishing campaigns, making defensive detection significantly harder for enterprises. Because these Git-based platforms are deeply integrated into development and business workflows, organizations cannot simply block them at the network edge, giving threat actors a powerful, trusted delivery channel. GitHub […]

    The post GitHub, GitLab Abused for Malware and Phishing Campaigns appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • MuddyWater Uses Russian MaaS in New ChainShell Attack

    ·

    cyber security, Cyber Security News, Malware

    MuddyWater is now weaponizing a Russian malware-as-a-service (MaaS) platform to run a new operation dubbed “ChainShell”, blending Iranian state targeting with commercially developed cybercrime tooling. The assessment is based on a misconfigured command‑and‑control (C2) web server, 15 malware samples, and a previously undocumented JavaScript/Node.js payload named ChainShell. Investigators conclude that MuddyWater is running at least […]

    The post MuddyWater Uses Russian MaaS in New ChainShell Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Juniper Networks Default Credential Vulnerability Allows Unauthorized Full Access

    ·

    CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities, vulnerability

    Juniper Networks has issued a critical security alert regarding a severe vulnerability in its Support Insights (JSI) Virtual Lightweight Collector (vLWC). Tracked as CVE-2026-33784, this default credential flaw carries a near-maximum CVSS v3.1 severity score of 9.8. If left unresolved, the vulnerability allows remote, unauthenticated attackers to seize complete control over affected network devices. The […]

    The post Juniper Networks Default Credential Vulnerability Allows Unauthorized Full Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Backdoored Smart Slider 3 Pro Update Distributed via Compromised Nextend Servers

    ·

    Unknown threat actors have hijacked the update system for the Smart Slider 3 Pro plugin for WordPress and Joomla to push a poisoned version containing a backdoor. The incident impacts Smart Slider 3 Pro version 3.5.1.35 for WordPress, per WordPress security company Patchstack. Smart Slider 3 is a popular WordPress slider plugin with more than 800,000 active installations across its free and Pro 

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • ChatGPT, Claude, and Gemini Among 11 AI Models Vulnerable to One-Line Jailbreak

    ·

    AI, cyber security, Cyber Security News

    A newly discovered jailbreak technique named “sockpuppeting” successfully forces 11 leading artificial intelligence models, including ChatGPT, Claude, and Gemini, to bypass their safety guardrails. By exploiting a standard application programming interface (API) feature with a single line of code, attackers can trick these models into generating malicious outputs without requiring complex mathematical optimisation. When a […]

    The post ChatGPT, Claude, and Gemini Among 11 AI Models Vulnerable to One-Line Jailbreak appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • GlassWorm Trojan Hits VS Code, Cursor, Windsurf via OpenVSX Extension

    ·

    cyber security, Cyber Security News, Malware

    A newly discovered supply chain attack is spreading the GlassWorm malware across multiple developer environments by abusing the OpenVSX extension marketplace. GlassWorm is not new. Researchers have tracked the campaign since March 2025, when attackers hid malicious payloads inside npm packages using invisible Unicode characters. Since then, the operation has expanded across GitHub repositories, npm […]

    The post GlassWorm Trojan Hits VS Code, Cursor, Windsurf via OpenVSX Extension appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • DesckVB RAT Uses Fileless .NET Loader to Evade Detection

    ·

    cyber security, Cyber Security News

    DesckVB RAT is emerging as a highly active and stealthy malware threat in 2026, leveraging layered obfuscation and fileless execution techniques to bypass traditional security defenses. The attack chain begins with a malicious JavaScript file that hides its true intent through complex encoding and code replication. This script copies its own logic into PowerShell and […]

    The post DesckVB RAT Uses Fileless .NET Loader to Evade Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • AWS Fixes Severe RCE, Privilege Escalation Flaws in Research and Engineering Studio

    ·

    Amazon AWS, AWS, CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    AWS recently issued a critical security bulletin addressing severe vulnerabilities in its Research and Engineering Studio (RES). RES is an open-source web portal that allows administrators to create and manage secure cloud-based research environments. Security researchers identified three major flaws in the platform that could lead to remote code execution (RCE) and privilege escalation. If […]

    The post AWS Fixes Severe RCE, Privilege Escalation Flaws in Research and Engineering Studio appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • WhatsApp Adds Username Feature to Boost Privacy and Reduce Number Sharing

    ·

    cyber security, Cyber Security News, WhatsApp

    For years, WhatsApp required users to share their personal phone numbers to communicate. This is finally changing. To improve user privacy and mitigate risks like doxing or targeted spam, WhatsApp is rolling out a highly anticipated username feature. This update allows individuals to connect without exposing their phone numbers, offering a new layer of anonymity […]

    The post WhatsApp Adds Username Feature to Boost Privacy and Reduce Number Sharing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • CIA employees will get AI ‘coworkers’—and eventually run teams of AI agents, deputy says

    ·

    Science & Tech
    The Central Intelligence Agency aims to integrate artificial intelligence-powered “coworkers” into analysts’ workflows in coming years, a top official said Thursday. 

    CIA Deputy Director Michael Ellis said these AI coworkers would be housed in agency analytics platforms to help humans with basic tasks.

    “It won’t do the thinking for our analysts, but it will help draft key judgments, edit for clarity and compare drafts against tradecraft standards,” Ellis said in a speech at a Special Competitive Studies Project event on AI and the intelligence community. The AI tools would help triage and flag trends for human analysts to review.

    And within a decade, Ellis said, the CIA will treat AI tools as an “autonomous mission partner” and officers will manage teams of AI agents in a hybrid model to increase the speed and scale of intelligence work.

    Last year, the agency had more than 300 AI projects, and, for the first time in its history, used AI used to generate an intelligence report, he said.

    Ellis' remarks provide a rare public glimpse into how the spy agency is integrating frontier AI systems into its day-to-day operations, and the expectation that they will soon become part of  officers’ workflows.

    The CIA primarily executes and coordinates human intelligence-gathering overseas, often undercover. Officers recruit and manage foreign assets to clandestinely gather intelligence in areas such as economics, terrorism, and cyber threats.

    Much of that work involves the use of technology, though some argue that advanced AI tools may reinvigorate old-school tradecraft techniques.

    But there have been benefits to technological investments. The agency recently elevated its Center for Cyber Intelligence into an entire mission center, a move that’s “paying dividends already by allowing us to deploy new tools to the field and gain more access to priority targets,” Ellis said. 

    “The battle of cybersecurity will be a battle of artificial intelligence,” and whoever best harnesses AI models will wield “enormous power,” he said. “Having a new mission center centered around cyber intelligence will put us on the path to secure the upper hand.”

    The agency also recently announced a new acquisition framework to better integrate technology.

    Ellis said the CIA doubled its technology-related foreign intelligence reporting, to track how foreign adversaries like China are using advanced AI and other technologies. Those intelligence products focus on technology use abroad and can include findings on areas like semiconductors, cloud computing, infrastructure, cybersecurity or R&D.

    Ellis did not mention Anthropic’s Project Glasswing, a consortium announced earlier this week meant to help secure critical software against AI-driven attacks. The project was fueled by a powerful, non-public Anthropic frontier model the company says has already uncovered thousands of vulnerabilities but could be weaponized in the wrong hands.

    The intelligence community and its industry suppliers are already examining and discussing how such a model may impact the future of cyber missions, Nextgov/FCW reported Wednesday.

    Earlier this year, Anthropic declined to ease restrictions that kept its tools from being used for domestic surveillance or fully autonomous weapons. That led the Defense Secretary Pete Hegseth to designate the company's products as a “supply chain risk” designation and President Trump to order that all federal agencies phase out their uses of Anthropic tools. The company has legally challenged the move. 

    Ellis did not single out Anthropic, but he cautioned that the CIA “cannot allow the whims of a single company” to constrain its use of AI and said the agency is looking to diversify across multiple vendors to preserve operational freedom.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 574 575 576 577 578 … 1,272
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence