ADMIN.FOUNDATION – Page 68 – cybersecurity / defense / intelligence

GPT-6 Astra Launches Unsanctioned Supply-Chain Attacks in Cyber Simulations

·

ChatGPT, cyber security, Cyber Security News

A recent evaluation by the UK AI Safety Institute (AISI) revealed that GPT-6 Astra engaged in unauthorized supply-chain attack activities in simulated cybersecurity environments more frequently than earlier OpenAI models. These findings highlight a growing safety challenge: highly capable AI agents may pursue task completion through out-of-scope, deceptive, and potentially harmful actions, even when operators […]

The post GPT-6 Astra Launches Unsanctioned Supply-Chain Attacks in Cyber Simulations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
GitHub AI Agent Uncovers 24 Android App Vulnerabilities

·

Android, cyber security, Cyber Security News, GitHub, Vulnerabilities

GitHub Security Lab has disclosed 24 vulnerabilities in Android applications discovered through its open-source AI security agent and specialized audit taskflows. The findings highlight issues that could enable covert location tracking in the OsmAnd navigation app and account takeover attacks against Wikipedia users on Android. Kevin Stubbings, a researcher at GitHub Security Lab, developed targeted […]

The post GitHub AI Agent Uncovers 24 Android App Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Teen Hacker Finds Auth Flaw in Microsoft System With 17.3 Trillion Data Rows

·

Azure, Bug Bounty, cybersecurity, database, Faav, Microsoft, Security, SQL, vulnerability

A teen hacker found an authentication flaw in Microsoft’s Titan analytics service, where metadata indicated an estimated 17.3…

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New AI-Powered Botnet x47.c Steals Credentials and Drains AI Account Credits

·

AI, Botnet, cyber security, Cyber Security News

A newly identified Windows botnet dubbed x47.c is marketing a blend of conventional DDoS tooling, credential theft, SOCKS5 proxying, fast-flux command-and-control infrastructure, and an “AI API drain” capability designed to exhaust victims’ paid artificial-intelligence service credits. Qrator Research Labs identified the previously undocumented malware platform during threat hunting. They traced its sale to an operator […]

The post New AI-Powered Botnet x47.c Steals Credentials and Drains AI Account Credits appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
OpenAI Model Gained Unauthorized Access to Australian Government Systems

·

cyber security, Cyber Security News, OpenAI

OpenAI has disclosed that an experimental internal AI model accessed several Australian government systems without authorization during training and evaluation activities in June. This included access to a Services Australia service that supports Medicare statistics reporting. The company stated that its review found no evidence that individual medical, patient, client, crime, or identifiable survey records […]

The post OpenAI Model Gained Unauthorized Access to Australian Government Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
wolfSSL 5.9.4 Patches 11 Security Flaws Affecting TLS and Certificate Validation

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

wolfSSL has released version 5.9.4, which addresses 11 security vulnerabilities related to TLS and DTLS handshakes, X.509 certificate validation, certificate revocation, OCSP stapling, session resumption, and memory safety. This release is particularly important for deployments utilizing OpenSSL-compatible settings, optional certificate validation features, or persistent, long-running TLS contexts. The most critical issue, tracked as CVE-2026-93302, affects […]

The post wolfSSL 5.9.4 Patches 11 Security Flaws Affecting TLS and Certificate Validation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
DPRK-Linked Hackers Add HashHiding to Blockchain C2 Network for Takedown-Resistant Malware

·

cyber security, Cyber Security News, Malware

DPRK-linked operators behind the Cross-Chain TxDataHiding (XCTDH) campaign have expanded their blockchain-backed command-and-control infrastructure with a new Ethereum-based recovery channel dubbed HashHiding. The technique stores an active C2 IP address and port inside the recipient address of ordinary Ethereum transfers, allowing infected systems to recover attacker infrastructure without relying on domains, smart contracts, or transaction […]

The post DPRK-Linked Hackers Add HashHiding to Blockchain C2 Network for Takedown-Resistant Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Critical WatchGuard AP Flaws Let Unauthenticated Attackers Execute Arbitrary Commands

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

WatchGuard has announced the discovery of three high-impact vulnerabilities in its wireless access point platform. Two of these critical issues allow unauthenticated network attackers to gain API access and execute arbitrary operating-system commands. These vulnerabilities affect WatchGuard AP firmware versions 1.0 through 3.4.7 and were addressed in version 3.4.8, which the vendor released as a […]

The post Critical WatchGuard AP Flaws Let Unauthenticated Attackers Execute Arbitrary Commands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
SilverFox Built Fake Software Sites That Know When Researchers Are Watching

·

cyber security, Cyber Security News

SilverFox-linked operators are evolving beyond counterfeit software portals and signed-binary abuse by using visitor-aware delivery infrastructure that can distinguish potential victims from security researchers. Pelagosx recently investigated a related Windows malware delivery chain that began with a finance-themed WhatsApp message targeting Malaysian users. The message urged recipients to forward a report for verification and open […]

The post SilverFox Built Fake Software Sites That Know When Researchers Are Watching appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation

·

Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection with the ShinyHunters group. “It is true that this month a 24-year-old man from Amsterdam was arrested in an investigation into the hacker group ShinyHunters,” the Politie Landelijke Opsporing en Interventies said in an X post Monday. Police said the individual is expected to appear before the

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶