Skip to content

ADMIN.FOUNDATION

  • North Korea’s Modular Malware Strategy Hides Attribution, Defies Takedowns

    ·

    cyber security, Cyber Security News, Malware

    North Korea’s cyber program is shifting from monolithic “families” to a modular, portfolio-style malware ecosystem designed to survive exposure, frustrate attribution, and keep operations running under constant pressure. Years of sanctions, coordinated law-enforcement pressure, and rapid public disclosure of campaigns have forced Pyongyang to treat every tool as disposable. Once-static implants are now built with […]

    The post North Korea’s Modular Malware Strategy Hides Attribution, Defies Takedowns appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • North Korean Hackers Pose as Trading Firm to Steal $285M from Drift

    ·

    Blockchain, Crypto, Cyber-Attacks, Drift, Drift Protocol, Fraud, North Korea, SCAM, Scams and Fraud, Security, UNC4736
    North Korean hackers (UNC4736) posed as a trading firm for six months to infiltrate Drift Protocol, using social engineering tactics to steal $285M without suspicion.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Critical Claude Code Flaw Silently Bypasses User-Configured Security Rules

    ·

    AI, CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    Anthropic’s flagship AI coding agent, Claude Code, was recently discovered to contain a critical security flaw that silently bypasses developer-configured safety rules. The vulnerability allows attackers to execute blocked commands, such as data exfiltration scripts, by simply padding them with 50 or more harmless subcommands. Claude Code allows developers to configure “deny rules” to prevent […]

    The post Critical Claude Code Flaw Silently Bypasses User-Configured Security Rules appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Alleged REvil Leader ‘UNKN’ Identified by German Authorities in New Takedown Effort

    ·

    cyber security, Cyber Security News

    German authorities have officially put a face to one of the most notorious names in cybercrime. The German Federal Criminal Police (BKA) recently identified 31-year-old Russian national Daniil Maksimovich Shchukin as the man behind the hacker alias “UNKN.” According to the BKA, Shchukin led the infamous GandCrab and REvil ransomware operations. Working alongside 43-year-old Anatoly […]

    The post Alleged REvil Leader ‘UNKN’ Identified by German Authorities in New Takedown Effort appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Google’s Bug Bounty Program Hits Record $17 Million in 2025 Payouts

    ·

    Bug Bounty, cyber security, Cyber Security News, Google

    Google has announced a record-breaking year for its Vulnerability Reward Program (VRP). In 2025, the tech giant paid out more than $17 million to ethical hackers worldwide to help secure its platforms. This major milestone marks a massive 40% increase compared to 2024 and perfectly aligns with the program’s 15th anniversary. Over 700 security researchers […]

    The post Google’s Bug Bounty Program Hits Record $17 Million in 2025 Payouts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools

    ·

    Threat actors associated with Qilin and Warlock ransomware operations have been observed using the bring your own vulnerable driver (BYOVD) technique to silence security tools running on compromised hosts, according to findings from Cisco Talos and Trend Micro. Qilin attacks analyzed by Talos have been found to deploy a malicious DLL named “msimg32.dll,”

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Apache Traffic Server Flaw Allowed Attackers to Trigger Denial-of-Service Attacks

    ·

    cyber security, Cyber Security News, Dos Attack

    The Apache Software Foundation has released critical security updates to address two vulnerabilities in Apache Traffic Server (ATS). Disclosed on April 2, 2026, these flaws could allow remote threat actors to trigger denial-of-service (DoS) conditions or execute HTTP request smuggling attacks. The vulnerabilities stem from how the server processes HTTP requests that contain body data. […]

    The post Apache Traffic Server Flaw Allowed Attackers to Trigger Denial-of-Service Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Critical Dgraph Database Flaw Allowed Attackers to Bypass Authentication

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    A newly discovered critical vulnerability in the open-source Dgraph database system leaves servers exposed to complete system takeovers. Tracked as CVE-2026-34976 and carrying a maximum CVSS score of 10.0, this missing authorization flaw allows remote, unauthenticated attackers to overwrite databases, read sensitive server files, and launch Server-Side Request Forgery (SSRF) attacks. Currently, all Dgraph versions […]

    The post Critical Dgraph Database Flaw Allowed Attackers to Bypass Authentication appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers Breach ILSpy WordPress Domain to Deliver Malware

    ·

    cyber security, Cyber Security News, Wordpress

    The official WordPress website for ILSpy, a highly popular open-source tool used by software developers to examine .NET code, has been compromised. Hackers successfully breached the site to redirect visitors and deliver malware, turning a trusted developer resource into a dangerous trap. The Redirection Attack Cybersecurity research group vx-underground confirmed the breach after receiving video […]

    The post Hackers Breach ILSpy WordPress Domain to Deliver Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Poisoned Axios Package Spreads Cross-Platform Malware via Phantom Dependency

    ·

    cyber security, Cyber Security News, Malware

    Hackers hijacked the npm account of Axios’s lead maintainer. They used it to push two malicious releases that silently installed a cross‑platform remote access trojan (RAT) on macOS, Windows, and Linux systems. Axios is one of the JavaScript ecosystem’s most widely used HTTP clients, with over 100 million weekly downloads on npm, making it deeply […]

    The post Poisoned Axios Package Spreads Cross-Platform Malware via Phantom Dependency appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 587 588 589 590 591 … 1,272
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence