• A recent Remcos RAT campaign showcases how commodity malware has fully embraced fileless, multi‑stage execution to bypass traditional defenses and remain stealthy on compromised Windows systems. Instead of dropping a static executable to disk, the operators rely on JavaScript, PowerShell, and a managed .NET injector to execute Remcos entirely in memory, dramatically reducing forensic artifacts […]

    The post Fileless Remcos RAT Attack Uses JavaScript and PowerShell to Slip Past Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Artificial intelligence assistants have transformed daily business operations, helping teams manage overflowing inboxes and summarize complex communications. Microsoft Copilot integrates directly into these workflows, pulling context from various Microsoft 365 applications to streamline tasks. However, this convenience introduces a new security boundary: what happens when Copilot follows hidden instructions written by an attacker inside an […]

    The post Microsoft Copilot Email and Teams Summarization Flaw Opens Door to Phishing Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Veeam has released security updates to address multiple critical vulnerabilities in its Backup & Replication software that, if successfully exploited, could result in remote code execution. The vulnerabilities are as follows – CVE-2026-21666 (CVSS score: 9.9) – A vulnerability that allows an authenticated domain user to perform remote code execution on the Backup Server. CVE-2026-21667 (

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • U.S. and allied militaries have turned to fighter jets in their struggle to ward off Iran’s cheap, plentiful drones, but former pilots say the mission is expensive, dangerous, and, ultimately, unsustainable with current tactics.

    Open-source intelligence accounts and news outlets have posted videos of high-powered fighter jets downing Iran’s low-cost unmanned aircraft since the war began late last month. On Tuesday, Gen. Dan Caine, the chairman of the Joint Chiefs of Staff, confirmed that U.S. and allied forces had conducted “intercepts against one-way attack drones using fighters and attack helicopters,” and said it was one reason that Iran’s use of the drones had “decreased 83 percent since the beginning of the operation.”

    Last week, a Royal Air Force F-35 pilot shot down a drone that had evaded air defenses over Jordan. One former British military officer called it “using a sledgehammer to crack a nut.” 

    Former U.S. fighter pilots who spoke with Defense One agreed with the former UK officer’s assessment. Some of Iran’s drones, which cost in the low five figures, are being downed by missiles that cost twenty or forty times as much, launched from aircraft with relatively high operating costs. And the speed differential between jets and drones can pose problems in chaotic battlespaces.

    The U.S. is now seeking advice, guidance, and support from Ukraine’s military on how to counter enemy drones based on what it has learned during its four-year war with Russia. 

    U.S. Central Command did not respond to multiple requests for comment seeking additional details on how U.S. fighter jets have countered waves of Shahed-136 drones.

    John Waters, a former Air Force F-16 pilot, said enemy drones have rapidly “transformed the battle space” and said tackling swarms of unmanned systems presents multiple problems for fighter jets.

    “Technology will continue to improve on both sides, but mass is definitely an issue. Large drone swarms are challenging,” Waters said. “For fighters to be able to target and eliminate numerous threats at once obviously presents challenges when we're talking about congested airspace, multiple fighters, multiple threats, multiple friendlies, and having to manage [that] all at once.”

    Earlier this month, CENTCOM confirmed that three U.S. F-15E Strike Eagles were shot down in “an apparent friendly fire incident,” over Kuwait, adding it took place “during active combat—that included attacks from Iranian aircraft, ballistic missiles, and drones.”

    The death toll from unintercepted drones has been steep. Last week, six U.S. soldiers were killed in a makeshift facility in Port Shuaiba, Kuwait, after it was struck by an Iranian drone that evaded air defenses. 

    Caine said during a Pentagon press conference Tuesday that the U.S. has started to target Iran's drone manufacturers.

    “We've begun to target Iran's military and industrial complex, again focusing on centers of gravity to get upstream of the shooters out in the field in order to deny them the ability to continue to generate those one-way attack drones,” he said.

    Downing drones and curbing costs

    The first 100 hours of Operation Epic Fury cost roughly $3.7 billion, or $891.4 million per day, according to a recent Center for Strategic and International Security estimate. CSIS analysts reported that air-defense munitions costs for those initial operations could have ranged from $1.2 billion to $3.7 billion.

    Many U.S. and allied jets are armed with AIM-120s that cost around $1 million and AIM-9s of around $400,000 each. 

    Using expensive air- or ground-based interceptors to target the inexpensive Shahed drones is a victory for Iran, Forecast International, a sister publication of Defense One, said in a report last week.

    “Every $30,000 Shahed that forces the U.S. or a partner to fire a $4 million PAC-3 missile is a massive win for Iran—because of the relative cost, and because Iran has far more cheap drones than the U.S. and its partners have expensive interceptors,” the report said. 

    In recent years, to reduce the cost of expensive munitions used on one-way attack drones, the Air Force outfitted fourth-generation U.S. fighter jets such as the F-15E and F-16s with a more affordable missile. The Advanced Precision Kill Weapon System II, or APKWS, is a precision-guided rocket with a cost ranging anywhere from nearly $25,000 to $40,000, according to a 2025 report for the Center for a New American Security. 

    Adm. Brad Cooper, the CENTCOM commander, said during a press conference last week that the military has been embracing more cost-effective drone interceptors. 

    “I think you have seen over a period of time, us kind of get on the other side of this cost curve, on drones in general,” Cooper told reporters. “If I just walk back a couple of years, do you remember what you used to always hear? ‘We're shooting down a $50,000 drone with a $2 million missile.’ These days we're spending a lot of time shooting down hundred-thousand-dollar drones with $10,000-weapons.”

    Last May, CENTCOM posted a video it said showed the downing of a Houthi drone with an APKWS.

    CENTCOM did not respond to a Defense One query asking if the APKWS had seen widespread use during Operation Epic Fury. 

    Waters said fifth-generation fighter jets firing expensive munitions at Shahed drones seems impractical. 

    “I think it's fair to say that F-35s and F-22s are overkill when it comes to shooting down a drone that has an engine you might find in a lawn mower,” Waters said. “However, we've had to utilize our high-end fighters to counter these threats because they're new and emerging.”

    He views F-15 and F-16 fighters with upgraded radar systems and APKWS missiles as “key components” against the rising threat of drones on the battlefield. 

    “When we first saw fighters being utilized to take down drones, we saw them using AIM-120s and AIM-9s,” Waters said. “Now, with the introduction of the AGR-20 [APKWS], we're able to see the U.S. respond to these drones with a relatively low-cost weapon versus an advanced missile.”

    Historically, F-16 fighter jets have targeted surface-to-air missile sites through Suppression of Enemy Air Defense, or SEAD, missions, using the Air Force’s “Wild Weasel” squadrons. 

    But Dan Hampton, a former F-16 Wild Weasel pilot, told Defense One he wouldn’t be surprised to see those SEAD aviators take on Iranian drones if called upon. 

    “I'll tell you, from experience, the Wild Weasel stuff was just one mission that we did, and we would pivot three, four times each mission to different missions,” Hampton said. “We didn't shoot down drones then because there weren't any drones. But, we would go from hunting and killing SAMs to hunting tanks or blowing up bridges or whatever it was that was needed, as long as we had fuel and ammunition, we would adapt to it.”

    Dave Deptula, a former fighter pilot and the dean of the Mitchell Institute for Aerospace Power Studies, highlighted the strategic importance of taking out the drone launchers themselves, and said a multi-role F-16 would be up to that job.

    “The best way to conduct defense is through an offense,” Deptula said. “So, I'm going to go out and I'm going to try to blow up all of those Shahed launchers.”

    ‘Too little, too late’

    Ukraine has countered Shahed drones for more than four years in its ongoing war with Russia—without state-of-the-art fighters or expensive munitions. Now, despite past slights by President Donald Trump’s administration, the country is backing the U.S. in its fight against Iran’s unmanned systems.

    “We received a request from the United States for specific support in protection against ‘Shaheds’ in the Middle East region,” Ukrainian President Volodymyr Zelenskyy wrote on X. “I gave instructions to provide the necessary means and ensure the presence of Ukrainian specialists who can guarantee the required security.”

    Hampton told Defense One, that based on Ukraine’s war with Russia, it’s likely that Ukraine would advise the U.S. military to use “everything they can,” no matter the financial cost. 

    “The United States weapons technology is the best in the world. If you're having to use a $3 million missile to shoot down a $50,000 drone, yeah, it's not cost-effective, if that's solely your metric,” Hampton said. “But you also have to consider, where is this drone heading? Is it headed for the center of a power grid? Is it headed for a hospital or a school or something like that? In which case, who cares how much the weapons cost to bring it down?”

    Hampton said the Pentagon should also consider other solutions, such as using light attack aircraft armed with rockets and guns to counter drones.

    Ukraine has offered its knowledge and proven technology in the past. The country reportedly tried to sell the U.S. its counter-drone systems last year during a White House presentation, warning that Iran had been building on the design of its one-way attack drones. 

    In 2024, the Joint Chiefs of Staff Joint Lessons Learned Division, which studies warfare and shares its knowledge with the services, had no “working groups or individuals” who focused solely on Ukraine, Defense One previously reported.

    “I think it's too little, too late,” Hampton said. “Again, if there's one defining characteristic of the administration in Washington, it's arrogance. They're going to do it their way, no matter what, and they've only belatedly realized that maybe, in this case, they should have asked people that have apparently been doing this for years and years and years.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • European and US agencies dismantled the SocksEscort proxy network built on infected routers and used by cybercriminals in global fraud schemes.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have disclosed details of a new banking malware targeting Brazilian users that’s written in Rust, marking a significant departure from other known Delphi-based malware families associated with the Latin American cybercrime ecosystem. The malware, which is designed to infect Windows systems and was first discovered last month, has been codenamed VENON by Brazilian

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Scammers are hijacking popular security tools like Cloudflare to hide fake Microsoft 365 login pages. Learn how this new invisible phishing campaign bypasses antivirus software and how you can stay safe.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have disclosed details of a suspected artificial intelligence (AI)-generated malware codenamed Slopoly put to use by a financially motivated threat actor named Hive0163. “Although still relatively unspectacular, AI-generated malware such as Slopoly shows how easily threat actors can weaponize AI to develop new malware frameworks in a fraction of the time it used to take

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • US-Israeli war on Iran, day 13: The U.S. military spent more than $11 billion in just the first week of Trump’s war against Iran, Pentagon officials told lawmakers in a classified briefing Tuesday on Capitol Hill. The New York Times reported the fiscal tally, which “did not include many of the costs associated with the operation, such as the buildup of military hardware and personnel ahead of the first strikes,” on Wednesday. 

    Sen. Chris Murphy, D-Conn., attended the two-hour briefing behind closed doors Tuesday. “I obviously can't disclose classified info, but you deserve to know how incoherent and incomplete these war plans are,” he wrote on social media afterward. “Maybe the lead is that the war goals DO NOT involve destroying Iran's nuclear weapons program,” he said, which is in sharp contrast with Defense Secretary Pete Hegseth’s message earlier Tuesday that the U.S. is working to “permanently deny Iran nuclear weapons forever” with the ongoing war.

    The Pentagon’s goals for Iran include “destroying lots of missiles and boats and drone factories,” Murphy said, which echoes some input this week from Trump, Secretary of State Marco Rubio, and even Hegseth earlier Tuesday. “But the question that stumped them,” Murphy said of the classified briefing, is “what happens when you stop bombing and they restart production? They hinted at more bombing. Which is, of course, endless war.”

    And perhaps most vexing for the White House at the moment, “on the Strait of Hormuz, they had NO PLAN,” Murphy said. “I can't go into more detail about how Iran gums up the Strait, but suffice it [to] say, right now, [U.S. officials] don't know how to get it safely back open.”

    • Related: The U.S. military warned “civilians in Iran to immediately avoid all port facilities where Iranian naval forces are operating,” in a statement from Central Command officials Wednesday. “The Iranian regime is using civilian ports along the Strait of Hormuz to conduct military operations that threaten international shipping,” and “Civilian ports used for military purposes lose protected status and become legitimate military targets under international law,” CENTCOM said. 

    Murphy and more than 40 other senators are demanding detailed answers from the U.S. military about a strike on an elementary school that reportedly killed around 170 people, including children, on Feb. 28 in southern Iran. The lawmakers’ 22 questions were submitted to the Defense Department after numerous media outlets noticed what appeared to be a U.S.-made Tomahawk missile striking the area near the school during the time when the strike occurred. Those reports began emerging late last week and over the weekend, and continued early this week. 

    United Nations and human rights experts have requested an independent investigation into the strike, which they said may be a violation of the laws of war prohibiting attacks against civilians and civilian objects. Key detail: The apparent use of a Tomahawk, which only the U.S. military is known to use in this conflict, strongly suggested the Defense Department was responsible for the strike on the school. President Trump initially blamed the strike on Iran, but as more reporting surfaced this week, he said Wednesday he didn’t know about the incident. The 40-plus lawmakers—in an ensemble that does not include any Republicans—are seeking insight into the attack no later than next Wednesday. 

    Latest: U.S. military officials now allege “outdated targeting data” may have led to the strike on the school, the New York Times reported Wednesday, citing an ongoing internal investigation. The Washington Post corroborated that account later Wednesday. If true, that would seem to suggest the U.S. military may have been using satellite imagery from at least 2016, according to these BBC satellite comparisons, because Google Maps shows a playground and a wall in place around the school beginning around 2017. 

    By the way: Two satellite imaging firms are restricting or delaying access to imagery over the Middle East in order to protect NATO and “allied” partner forces, Planet Labs and Vantor said this week, Reuters reported Tuesday. 

    Last week, Planet Labs announced a four-day delay in accessing imagery; but that hold has now been expanded to two weeks. According to a company spokesman, “the change is not the result of a directive or requirement from any government. It is Planet’s decision,” the Washington Post reported Wednesday evening. Vantor released a similar statement, and said it “independently determines when and how these controls are implemented as part of our responsible business practices. These decisions are not mandated by any government, military organization, or third party.”

    Update: “At least 11 American military bases or installations have been damaged” by Iranian retaliatory strikes across the region, the Times reported Wednesday after reviewing satellite imagery. That includes Prince Sultan Air Base in Saudi Arabia; Ali Al Salem Air Base and Camp Buehring Base in Kuwait; and Al Udeid Air Base in Qatar. Air-defense sensors at an Air Force base in Jordan was also attacked early in the conflict. 

    Replenishing the Pentagon’s advanced munitions “will take years and billions” of dollars, Becca Wasser writes for Bloomberg. And that would seem to suggest “Iran is waging a cost-imposing battle on the US defense industrial base—and its working,” she says. 

    • Related reading: The NYT offers “a guide to the primary weapons being used in the current conflict.”

    USS Gerald R. Ford (CVN 78) update: The U.S. Navy’s newest aircraft carrier is racing through the region to help with the Iran war. Its crew experienced a slight hiccup on Thursday however, after a fire broke out “in the ship’s main laundry spaces,” injuring two people, officials said in a statement. “The cause of the fire was not combat-related and is contained,” and the aircraft carrier remains fully operational.”

    Toward an end to the fighting: “Iran's president has set conditions for an end to the war, including reparations and guarantees against future aggression,” Germany’s Deutsche Welle, or DW, reported Wednesday. 

    But Iran’s leader has vowed to continue fighting, and to keep the Hormuz Strait closed as long as possible, Reuters and the Wall Street Journal reports. Three merchant ships sustained minor damage after being attacked in or near the strait on Wednesday, British maritime authorities reported. 

    Two fuel tankers were hit by explosive Iranian boats on Thursday while in Iraqi waters. Iraqi officials said they’ve completely stopped oil exports for now. “We will deliver the most severe blows to the aggressor enemy by maintaining the strategy of keeping the Strait of Hormuz closed,” an Iranian naval commander vowed on social media Thursday. 

    Brent crude prices soared above $100 per barrel again on Thursday, and “The International Energy Agency's plan to release 400 million barrels of oil from its reserves, announced on Wednesday in the largest ​such move in its history, failed to soothe investors,” Reuters reports. 

    Low oil prices are bad for Russia’s economy, which means Moscow is doing pretty well during this Iran war since “Currently, Russia can balance its budget with a price of $59 a barrel,” the Wall Street Journal reported Tuesday. 

    Additional reading: 


    Welcome to this Thursday edition of The D Brief, a newsletter focused on developments affecting the future of U.S. national security, brought to you by Ben Watson with Bradley Peniston. It’s more important than ever to stay informed, so we’d like to take a moment to thank you for reading. Share your tips and feedback here. And if you’re not already subscribed, you can do that here. On this day in 1947, President Harry S Truman laid out what would become known as the Truman Doctrine: “It must be the policy of the United States to support free peoples who are resisting attempted subjugation by armed minorities or by outside pressures.”

    Around the Defense Department

    Some see effort to evade accountability in Hegseth’s “ruthless” review of JAG, civilian legal offices. “I'm directing the service secretaries, the Army, Navy, and Air Force through their general counsels and JAGs and the [staff judge advocate] to the commandant to execute a ruthless, no-excuses review,” Hegseth said in a video posted on Wednesday. “Scrub it clean, cut duplication and bureaucracy, clarify roles, and reporting. No more moral ambiguity.” But current and former members of the judge advocate general corps told Defense One’s Thomas Novelly that they fear the move is part of attempts to gut legal oversight of the administration’s actions. Read on, here.

     B-21 spotted in aerial-refueling test flights. After planespotters posted photos of the new bomber flying close to a tanker, an Air Force spokesperson confirmed to Defense One’s Thomas Novelly that the Raider was executing tests leading up to aerial refueling. A bit more, here.

    The Defense Department is seeking investment bankers to help invest $200 billion in defense deals, Semafor reports. The department is “specifically going after Goldman Sachs, Morgan Stanley, JPMorgan, and Bank of America as prime recruiting targets for the 30-person team, the headhunter brief outlines, explaining that ‘this is not a career move, but a two-to-three-year secondment program’” intended to help counter China. Read on, here.

    Update: “The U.S. has spent at least $3.4 trillion countering China militarily since 2012,” according to a recent report from Brown University’s Costs of War project. “This figure, an average of $260 billion a year, is more than total U.S. spending on 20 years of war in Afghanistan ($2.3 trillion),” Jennifer Kavanagh of Defense Priorities said. 

    Pentagon bans photographers after “unflattering” photos. “The Defense Department has barred press photographers from briefings on the ongoing U.S.-Israeli military conflict with Iran after they published photos of Defense Secretary Pete Hegseth that his staff deemed ‘unflattering,’”  the Washington Post reported Wednesday, citing “two people familiar with the decision who spoke on the condition of anonymity out of fear of retaliation.” In a statement, Pentagon press secretary Kingsley Wilson wrote: “In order to use space in the Pentagon Briefing Room effectively, we are allowing one representative per news outlet if uncredentialed, excluding pool.” More, here. 

    Etc.

    Ukraine is making China-free drones. “A year ago, most Ukrainian defense companies could not produce these [circuit] boards, which are key ingredients in small exploding drones. But this advance, among others, has helped the country reach a milestone: It can now make drones with no components imported from China,” the New York Times reported on Wednesday.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Bell Ambulance disclosed a data breach impacting 237,830 individuals after unauthorized access to its network exposed personal and medical data.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶