-
US auto loan service 700Credit confirms a data breach exposed names, addresses, and Social Security numbers of dealership customers. Free credit monitoring is offered.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A new partnership between a European chipmaker and software firm aims to ease the difficult task of creating defense systems with encryption strong enough to withstand attacks by tomorrow’s quantum computers.
SEALSQ, which specializes in “quantum-safe” chips, and Airmod, a French company that specializes in secure electronics for aerospace and drones, say they can help companies produce the larger, more energy-intensive software that meets standards for quantum-safe hardware and software environments, as defined by the National Institute of Standards and Technology, or NIST.
Under a deal announced Monday, the partners will use Airmod’s middleware software to help clients turn “months of complex cryptographic integration into days” by allowing clients to bridge more easily apply software from previous applications into new ones.
The standards reflect growing concern and certainty among a broad range of computer and security professionals that engineers—most likely in either China or the United States—will announce the development of a quantum computer capable of breaking Shor’s algorithm before 2035. This is the encryption standard that runs at the heart of most of the world’s financial transactions, web surfing, and device-to-device communication (such as drone operation). Whoever wins the race would essentially have a backdoor into private transactions and communications all over the world.
In 2022, China claimed it had already reached that threshold, much to the skepticism of many U.S. national security officials and quantum computing experts from around the world. But China is ahead of the United States in many areas of quantum sensing and computing research; it has also been exfiltrating encrypted data that could be unlocked after a quantum breakthrough.
The new standards mean that many companies will effectively phase out chips that exist in much common computer hardware, as well as the applications running on that hardware, replacing both with quantum-safe versions—at least, that’s the hope.
“What does it mean to implement the new generation of algorithms? There is a certain urgency for [many businesses to] understand a bit better,” Gweltas Radenac, IoT security business director at SEALSQ, told Defense One in an exclusive interview.
But he pointed out that computer and software applications today are so complex and interconnected that a company that believes it has done all it needs to do to meet new standards may still be vulnerable to side-channel attacks in addition to more direct remote attacks.
A bigger challenge, which the partnership seeks to address, is that the new encryption protocols are much larger than the previous ones. This makes it harder to write applications for them, and the process of designing applications is more energy-intensive.
That has particularly bad ramifications for the emerging defense startup industry focused on the delivery of new drones. Ukraine, the leader in this field, often has to rely on components that are easily procured in large numbers, including chips from China, and needs to design and deploy them quickly in the face of rapidly changing electronic warfare tactics.
Jean-Marc Prichard, head of sales and marketing at Airmod, said the company is trying to address both the high costs of designing quantum-safe algorithms and the larger concern of China’s dominance in many types of chips. This includes many of the less sophisticated ones that are part of connected devices like drones. The company is also looking for ways to move production closer to customers, and can already do so for some production aspects, such as embedding customer-specific data on the chip at a location that meets stronger security requirements.
“So if a U.S. customer wants to have his own data to be injected in the secure chip, we can offer a service where it's done on the U.S. footprint, for instance,” he said.
The partnership news comes as Europe reinvests in its own chip foundries under its own version of a Chips Act, a 2023 effort to “strengthen the semiconductor ecosystem in the EU,” according to the European Commission. The effort accelerated in March, when nine EU members agreed to join the coalition.
Meanwhile NIST, the preeminent global standards body for computer security, shed key researchers in May and has faced budgetary hurdles even before Donald Trump’s administration took over. Since January, NIST researchers have worried that government cutbacks hurt travel and research budgets, which they worried could reduce U.S. influence in setting international standards.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The security vulnerability known as React2Shell is being exploited by threat actors to deliver malware families like KSwapDoor and ZnDoor, according to findings from Palo Alto Networks Unit 42 and NTT Security. “KSwapDoor is a professionally engineered remote access tool designed with stealth in mind,” Justin Moore, senior manager of threat intel research at Palo Alto Networks Unit 42, said in a
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cybersecurity researchers at Rapid7 Labs have uncovered a sophisticated new threat: SantaStealer, a malware-as-a-service information stealer actively promoted on Telegram channels and underground hacker forums. The malware, which recently rebranded from “BluelineStealer,” is scheduled for release before the end of 2025 and represents a growing threat to users worldwide due to its ability to exfiltrate […]
The post SantaStealer Malware Steals Sensitive Files, Credentials, and Crypto Wallet Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A critical local privilege escalation vulnerability in the JumpCloud Remote Assist for Windows agent allows any low-privileged user on a Windows system to gain NT AUTHORITY\SYSTEM privileges or crash the machine. Tracked as CVE-2025-34352, the flaw affects JumpCloud Remote Assist for Windows versions prior to 0.317.0 and has been rated High severity (CVSS v4.0: 8.5). JumpCloud is a widely used cloud-based Directory-as-a-Service and […]
The post JumpCloud Remote Assist Windows Agent Vulnerability Allows Privilege Escalation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google has announced that it’s discontinuing its dark web report tool in February 2026, less than two years after it was launched as a way for users to monitor if their personal information is found on the dark web. To that end, scans for new dark web breaches will be stopped on January 15, 2026, and the feature will cease to exist effective February 16, 2026. “While the report offered general
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Jaguar Land Rover (JLR) has officially confirmed that a major cyberattack in August resulted in the theft of sensitive personal data belonging to current and former employees. This disclosure marks the luxury automaker’s first public admission regarding the full scope of the incident, following a month-long production shutdown that cost the company hundreds of millions […]
The post Jaguar Land Rover Confirms August Cyberattack Led to Employee Data Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A popular browser extension promoted as a free and secure VPN has been discovered secretly capturing user conversations across multiple AI chatbot platforms including ChatGPT, Claude, Gemini, and Microsoft Copilot raising fresh concerns over privacy and data exploitation in the age of generative AI. Researchers using the Wings agentic‑AI risk engine uncovered that Urban VPN […]
The post Chrome Extension with 6M+ Users Found Collecting AI Chatbot Inputs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A Google Chrome extension with a “Featured” badge and six million users has been observed silently gathering every prompt entered by users into artificial intelligence (AI)-powered chatbots like OpenAI ChatGPT, Anthropic Claude, Microsoft Copilot, DeepSeek, Google Gemini, xAI Grok, Meta AI, and Perplexity. The extension in question is Urban VPN Proxy, which has a 4.7 rating on the Google Chrome
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
·
Two U.S. soldiers and a civilian interpreter were killed in Syria on Saturday by what officials said was a lone ISIS gunman. Part of the Pentagon’s much-reduced yet enduring counterterrorism mission in the country, they were the first troops to die there since the fall of dictator Bashar Al-Assad last year. Three more U.S. troops and two Syrian security personnel were wounded in the attack, U.S. officials and Syrian state media said.President Trump vowed “very serious retaliation.” Read a U.S. Central Command statement and coverage by the New York Times.
Also from the region: To the southwest, where Israeli forces have occupied Syrian territory for a year, conducting armored patrols and counterterrorism raids, there are concerns that Israel intends to maintain a permanent presence in the country. The Associated Press has more, here.
No clear plan for what happens next with Trump’s military campaign in the Caribbean. If phase one is “killing alleged drug smugglers and pushing Venezuelan President Nicolás Maduro to leave office” and “The end goal—let’s call it phase three—is to work with a new government to gain access to the country’s oil and rare earth minerals,” phase two is “an open question,” write Vivian Salama and Sarah Fitzpatrick for The Atlantic in a broad look at the facts, possibilities, and concerns.
The pair report that “Secretary of State Marco Rubio, who also serves as acting national security adviser, has taken the lead in planning for a variety of contingencies,” although officials “said that the planning is restricted to a very small group of senior officials around the president and that they couldn’t provide any details. Other officials involved in Venezuela discussions told us that if there is any substantive planning being done, it was news to them, and that they had little understanding of what the administration intends to do in the event that Maduro is toppled. (The State Department didn’t respond to a request for comment.)”
Anonymous quote: “This is a shakedown—a financial shakedown,” another official said, one that is “being done primarily for profit.”
What happens if Maduro leaves? “The department has a contingency plan for everything—we are a planning organization,” DOD spokesperson Kingsley Wilson said. She did not provide any details. Read more (gift link), here.
Airliner near Venezuela avoids “midair collision” with Air Force tanker. On Friday, the pilot of JetBlue Flight 1112 from Curaçao to New York City’s JFK airport told air traffic controllers that “We almost had a midair collision up here…They passed directly in our flight path….They don’t have their transponder turned on, it’s outrageous.” The pilot said the Air Force plane then headed into Venezuelan air space. DOD and Air Force officials had no comment by press time, the Associated Press reported.
Additional reading:
- “Why Did the United States Seize a Venezuelan Oil Shipment?” the Center for Strategic and International Studies explores the question in a recent explainer;
- “Next presidential jet will arrive a bit earlier than projected, Air Force says,” Thomas Novelly reported Saturday for Defense One;
- And ICYMI, “New GAO, Navy reports warn of serious V-22 Osprey safety risks, with some fixes stretching into 2030s,” Novelly reported Friday.
Welcome to this Monday edition of The D Brief, a newsletter dedicated to developments affecting the future of U.S. national security, brought to you by Ben Watson and Bradley Peniston. It’s more important than ever to stay informed, so thank you for reading. Share your tips and feedback here. And if you’re not already subscribed, you can do that here. On this day in 1948, the U.S. Navy and State Department signed an agreement that would lead to the Marines guarding U.S. embassies around the world.
Europe and Ukraine
Ukraine’s president is meeting with U.S. envoys in Berlin for the latest round of talks toward ending Russia’s Ukraine invasion. President Trump’s son-in-law Jared Kushner and real estate billionaire Steve Witkoff are leading the U.S. side while President Volodymir Zelenskyy is handling matters for Kyiv.
Reportedly not present for those talks: U.S. Army Secretary Dan Driscoll, who had played a starring role in recent talks, as AP and Axios reported, including presenting the Trump administration’s 28-point plan to Zelenskyy just last month. Driscoll has reportedly been “reeled in” by Pentagon chief Pete Hegseth, unnamed sources told the British newspaper Telegraph last week. “He was seen to be exerting himself a bit too much, and he had his hand slapped,” one of the sources said.
Other European leaders are also meeting in Berlin for related but separate talks, Reuters reports from the German capital. “European Commission President Ursula von der Leyen, NATO Secretary General Mark Rutte and the leaders of Britain, Italy, the Netherlands, Poland and Sweden are among those expected” in Berlin.
Notable: Zelenskyy has reportedly agreed to drop Ukraine’s request to join NATO, but it has no interest in giving up invaded territory to Russia as part of concessions from the developing peace talks, Reuters reports. Relatedly, 75% of Ukrainians surveyed said giving up land to Russia or capping Kyiv’s military was “completely unacceptable,” according to the Kyiv International Institute of Sociology. A further “63% of Ukrainians are ready to endure war as long as necessary,” the survey says. Read more, here.
Commentary: “On Europe, the Trump administration is out of step with Congress, Americans,” Cameron McMillan and Bradley Bowman of the Foundation for Defense of Democracies wrote Friday in Defense One.
Their lede: “The Trump administration sent shockwaves across the Atlantic last week with its new National Security Strategy. The strategy’s dismissal of the threat from Russia and harsh criticisms of Europe and NATO led the German chancellor to describe elements of the strategy as ‘unacceptable,’ and to call for Europe to become ‘much more independent of the United States in security policy.’”
Meanwhile, Kremlin spokesperson Dmitry Peskov said the strategy was “largely consistent” with Moscow’s vision, which is never a good sign, McMillan and Bowman write. “Thankfully, bipartisan majorities of Americans and their representatives in Congress remain clear-eyed about the threat from Moscow and believe supporting NATO and Ukraine serves American interests.” Read the rest, here.
By the way: German intelligence officials say they’ve gathered proof Russia has been behind cyberattacks, sabotage, and disinformation campaigns, all of which “clearly [bear] Moscow’s signature,” the Foreign Ministry announced Friday in Berlin.
“We can now clearly attribute the cyberattack against German Air Safety in August 2024 to the hacker collective APT28, also known as Fancy Bear,” the official said at a press briefing. “Our intelligence findings prove that the Russian military intelligence service GRU bears responsibility for this attack.” What’s more, “we can now state definitively that Russia, through the Storm 1516 campaign, sought to influence and destabilize the most recent federal election,” he added, according to France’s Le Monde. Germany’s Deutsche Welle has more.
Why it matters: “The accusation of sabotage is the latest in a sequence of similar claims in Europe, where officials have blamed Russia for drone flights over Danish and Belgian airports, the jamming of aviation-navigation systems over Sweden and using cans to smuggle explosives into Poland,” the New York Times reported, noting, “President Vladimir V. Putin of Russia said this month that his country was ‘ready’ for war if Europe started it.”
Additional reading: “Europe starts learning how to shoot down drones,” the Economist reported Sunday.
Artificial intelligence, in focus
Generative AI use in the American workplace is rising modestly, the polling firm Gallup reported Sunday from survey data gathered in August.
Those who said they use AI applications at least a few times a week rose from 19% to 23% from roughly January to June, “while daily use moved less, ticking up from 8% to 10% during the same period,” Gallup research associate Andy Kemp writes. And among those surveyed who say they use AI at least a few times a year rose from 40% to 45%.
Using it how? “More than six in 10 U.S. employees who used AI at work reported using chatbots or virtual assistants. AI writing and editing tools were the next most commonly used tools (36%), followed by AI coding assistants (14%),” Kemp reports. However, while more may be using AI, “What employees reported using AI for did not change meaningfully from Gallup’s initial measure in Q2 2024,” Gallup notes.
- Also: The use of AI chatbots has occasionally yielded laughable results like this video of two polite bots that seemingly do not know how to end a conversation.
Note of caution: The trend may not be so clear-cut. Indeed, “Investors expect AI use to soar. That's not happening,” the Economist reported just before Thanksgiving. Stanford researchers recently found AI use fell 10 percentage points (46% to 36%) from June to December. The Economist also reported “Ramp, a fintech firm, finds that in early 2025 AI use soared at American firms to 40%, before levelling off.” Meanwhile nationwide, “The share of workers who use AI every day is still pretty small—just 10% in the third quarter” of 2025, Axios reports off the new Gallup polling.
But there are others who are more bullish and inclined to dismiss lingering cautions. As an outlet, Axios has been notably eager to push the trend, which is backed by billions of dollars and reportedly propping up much of the U.S. economy. “Yeah, I remember back when in 2002, everyone was like, ‘God, the Internet is nothing but like a weird site where you can buy like second-hand Pez dispensers and stuff. This hype thing is crazy right now; it's bullshit, and I’m not even going with it,’” Defense One’s Patrick Tucker said in a recent podcast on the topic. “Yeah, it turns out that people actually did figure out new stuff to use it for,” he added. As the Economist points out, “history suggests that technology tends to spread in fits and starts. Consider use of the computer within American households, where the speed of adoption slowed in the late 1980s. This was a mere blip before the 1990s, when they invaded American homes.”
Why bring it up: It’s nothing less than “the most important question in determining whether or not the world is in an AI bubble,” the Economist wrote in late November. Indeed, “From today until 2030 big tech firms will spend $5trn on infrastructure to supply AI services. To make those investments worthwhile, they will need on the order of $650bn a year in AI revenues, according to JPMorgan Chase, a bank, up from about $50bn a year today. People paying for AI in their personal lives will probably buy only a fraction of what is ultimately required. Businesses must do the rest.”
New podcast: How will AI reshape the future of warfare? Paul Scharre, executive vice president at the Center for a New American Security, joined us to tackle the topic in our most recent Defense One Radio episode, posted Friday.
Scharre is the author of two books on the topic: “Four Battlegrounds: Power in the Age of Artificial Intelligence,” and “Army of None: Autonomous Weapons and the Future of War.”
You can hear our Friday conversation, which also featured Defense One’s Patrick Tucker, on Apple Podcasts, Spotify or on our website here.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶


