-
Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers’ M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
An Android remote-access Trojan, YuanKong, whose weakly protected dropper reveals more than its hidden payload: it exposes the operator account identifiers embedded in each build. Analysis of 110 droppers uncovered 57 distinct child payloads, 42 operator accounts and 44 rotating build brands, all tied together by a shared signing certificate and command-and-control (C2) infrastructure. Its […]
The post Android Malware Exposes Its Own Operators While Hijacking Phones and Stealing Sensitive Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers used AI-assisted scripts to compromise government Linux servers, harvest administrator credentials, and establish persistent backdoors during a campaign observed between October 2025 and April 2026. The cluster remains unattributed. Under Unit 42’s attribution framework, “UNK” indicates that researchers have not determined whether the activity is state-sponsored or financially motivated. Its intelligence-gathering behavior does not […]
The post AI-Assisted Hackers Compromise Government Linux Servers to Deploy Backdoors and Steal Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The Marine Corps is preparing for a future battlefield on which the injuries are the same but the ability to quickly fly troops to a trauma hospital is very limited. To close that gap, the service is fielding new tech like mobile blood banks and ultrasounds, with a self-contained power source to keep them running.
The Expeditionary Medical Refrigeration Unit and Mobile and the MEQU mobile blood warmer were deployed to U.S. Central Command this year, where a unit set up a continuous mobile blood bank and sent their notes back to the Marine Corps on how to make it better, officials told reporters Friday during a media round table.
“We were told that the EMRU was instrumental to their ability to maintain a revolving blood bank to ensure that they had what they needed to be ready to care for injured service members,” said Navy Cmdr. Kyleigh Hupfl, clinic for Expeditionary Medical Systems.
The concept of the “golden hour,” the critical time period after a casualty that made all the difference in getting a wounded service member from the battlefield to hospital triage during the Global War on Terror, will be much more complicated in a near-peer fight.
While ground fighters could sometimes shoot down a medevac helicopter in Iraq or Afghanistan, an enemy with more sophisticated surveillance and missile technology will mean commanders have to wait to call in evacuations and work to stabilize casualties on site for much longer than in more recent conflicts.
“We're leaving the golden hour behind, and we're moving toward those longer patient-care hold times,” said Col. Paul Gillikin, program manager for Combat Support systems. “Again, fully recognizing the future fight against a peer competitor, over those great distances in the Pacific—we know that we're not going to have the developed [forward operating bases], the full mobility, the Iron Mountain.”
The No. 1 cause of battlefield death is severe bleeding, so being able to not only slow bleeding but give transfusions on site will be crucial.
“We need to be able to bring cold-chain distribution forward without relying on heavy generators, and we need to be able to do that in a sustainable way. We need to be able to warm that blood so that we don't get that patient in a worse-off situation,” Hupfl said. “We need to be able to see, after that, whether they have continued bleeding, so that the commander can make a risk decision on putting an evacuation asset at risk to get that patient out.”
That’s where the battery-powered EMRU and the associated blood warmer come in, as a mobile system that keeps blood products refrigerated, then heats them to body temp for quick transfusions. The Corps is also fielding the KOSMOS point-of-care ultrasound to assess internal bleeding, and the Marine Corps Squad Power Manager medical kit variant to keep them all running.
“We expect in the Marine Corps to be in distributed environments, where the evacuation will be delayed or contested,” said Brig. Gen. Tamara Campbell, deputy commander of Portfolio Acquisition Executive Marine Corps. “And so the equipment that we're looking at is to take that into account, regardless of the time it takes to apply that care. We need to do that at any time so that any of our soldiers, sailors, Marines—anybody that's within our operating environment needs that level of care.”
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
You likely have a picture of the future of drone-assisted warfare: a soldier in a trench or a bunker, eyes enveloped in a virtual reality headset, hands clasping a controller, attention on targets below the drone he steers. But the reality of robot-assisted soldiering has already moved elsewhere, according to the military leaders who are training elite forces for future conflict.
On Oct. 2, 10 warrant officers became the Army’s first robotics technicians under the new 390A military occupational specialty. On Tuesday, Maj. Gen. Jason Slider, who commands the U.S. Army John F. Kennedy Special Warfare Center and School at Fort Bragg, described how their jobs will go far beyond remotely piloting or maintaining a drone or ground robot.
“It's important that it's not a pilot. We're not building a pilot. What we're building is a soldier that can adapt a piece of robotic kit to the mission, to the enemy, to the terrain,” Slider said at a Defense One event on the sidelines of the AUSA annual conference.
He described this as one of the most important lessons to emerge from Ukraine in terms of designing doctrine and training for the age of battlefield autonomy.
“We looked at the Nagorno-Karabakh, at Ukraine, and we're studying the ongoing conflicts in the Middle East,” he said. Militaries that “solely focus on pilots quickly lose the advantage to an adversary or an enemy force that can adapt that piece of tech to the mission.”
Adaptation was key to Azerbaijan's 2020 victory over Armenia in Nagorno-Karabakh. A 2021 report from the Center for Army Lessons Learned describes an Azerbaijani tactic in which “remotely piloted Soviet-era AN-2 biplanes flew at low altitudes as decoys to force the Armenians to respond against the perceived threat,” a use of robotics to surprise and confuse the enemy, not just drop bombs on them.
The United States used a similar tactic in the Middle East at the outset of Operation Epic Fury earlier this year, swarming Iranian forces with cheap drones modeled after the Shahed drones that Iran was using against U.S. forces. Both cases show the importance of deploying robotics, autonomy, and semiautonomy in ways the enemy had not yet predicted.
Chief Warrant Officer 5 Michael Updike, one of the architects of the 390A program, said at the Defense One event that the robotics technician military specialty will include aspects of intelligence analysis, command and control, communications, software development under extremely difficult and disconnected conditions, and even acquisition.
“What it encompasses is different pillars of not only software engineering and mechanical engineering but your data science, understanding research and development,” Updike said. “They have to do all that innovation in the field without…large-language models that are connected to the internet.”
The job will also entail rapidly inventing new capabilities on the ground, much as Ukrainian forces have done, and working with contractors who can do so as well.
During the first phase of the 19-week 390A training course, a group of students improved hardware and software to allow drones under electromagnetic attack to communicate with one another in a mesh network.
“They took a high-definition, $1,000 camera, put it on this quadcopter. They were being jammed in frequencies but they were using a mesh network. So, even though one node was taken out, they had multiple nodes where they could still have communications with the quadcopter or the unmanned drone to be able to still accomplish that mission,” Updike said.
To teach the skills of constant adaptation, Slider said, much of the course is designed to “drive failure” and force reconsideration. That’s something that the course architects themselves had to do when f, the students began, in Slider’s words, “outpacing the curriculum” four weeks in. They were too good at drone warfare, which meant that the course wasn’t hard enough. So Slider worked with academics, sources, and international partners to make the course more difficult, adding additional weeks of training.
“The problems that they were able to solve during the culminating exercise were much closer to the need that the operational force was communicating to us,” the general said.
The 390A program won’t be limited to Fort Bragg. This week, acting Army Secretary Adam Telle said, “Traditionally, historically, those types of [military occupational specialty] might live at — with the special forces and never be proliferated throughout the Army.”
Telle said that his office was working with the office responsible for special operations and low-intensity conflict to expand the specialty but did not provide further details.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD’s KARL kernel-address randomization and its SMAP and SMEP hardware protections. Security firm Calif, which found and reported the flaws, published a detailed writeup and full proof-of-concept code after OpenBSD shipped
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Noma Labs found a high-severity Claude Code Desktop flaw that let malicious HTML files steal local credentials and…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor’s own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run a backdoor. Google Threat Intelligence Group, Mandiant, and ManageEngine’s Threat Analysis
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversary-in-the-middle (AitM) phishing framework designed to harvest their Google account credentials and multi-factor authentication (MFA) codes. The activity is being tracked by
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Today’s headlines are full of killer robots and doomsayers, but the most urgent risk in military AI is more mundane: the people shaping it share neither a common lexicon nor common data.
The problem is not a lack of discussion. The authors have taken part in many global deliberations, both as conveners and as private-sector representatives, and we can report: If the world is to forge responsible governance of AI in the military domain, it will need shared definitions and a way to fuse relevant developments and decisions into something approximating “ground truth.”
The players in AI-military integration come from every realm: governments, militaries, the private sector, academia, the legal system, civil society, human rights, technology, journalism, and more. In multilateral negotiations and colloquial parlance, they speak varied languages—literally and topically. They are guided by varied incentives: some are eagerly pursuing AI-military integration, while others are trying to regulate it. A word like “autonomy” means something different to a general, an engineer, a lawyer, and a human rights advocate, not to mention the nuances born of the 200 or so countries they call home.
The staggering breadth of these players, combined with the wide range of AI applications, means that data about their actions is scattered. It can be found in government contract announcements, legislation, news coverage, court documents, patent applications, and beyond, in nearly every global language. This has made it impossible to track and compare developments within and across countries.
Without common language and common data, humanitarian organizations often talk past supply-chain experts. Tech executives fail to communicate effectively with academic researchers. Efforts to develop responsible AI-military integration cannot move ahead.
This is not a new concern. In 2024, the Responsible AI in the Military Domain Summit, or REAIM—the preeminent forum for global discussions of the topic—urged stakeholders to begin “fostering a common understanding of…capabilities and limitations [of AI-military integration], and a shared understanding of the possible applications…and their potential impacts, including both benefits and risks.” The same year, the United Nations Institute for Disarmament Research Roundtable for AI, Security, and Ethics identified six priority areas for governance, including: “Building a shared and solid knowledge base on AI in the military domain, developed through cross-regional, inter-disciplinary and multi-stakeholder input.” And last year’s report by the Global Commission REAIM urged states to “maintain international repositories of best practices, including AI concepts and definitions, AI capabilities in specific contexts of application…and military AI policies” to support national and international regulatory efforts.
One effort to bridge the data gap is the AI-Military Integration Database, operated by AIMID, a private company whose CEO is one of the authors. The database does a daily scan for news and information about AI-military integration in more than 20 languages—news reports, company announcements, academic articles, legislation, contracts, think tank reports, and more. The result is an ever-growing knowledge graph: a structured, footnoted map of actors, technologies, events and the relationships between them. This makes it possible to see which countries are doing what, with what technologies, from what companies, and for what use cases. In short, AIMID aims to deliver a single, verifiable picture of global AI-military integration, a data-driven “ground truth.”
Among other benefits, the database aims to help allies and partners pool knowledge about testing, evaluation, verification, and validation—supporting innovation and interoperability while avoiding the costly duplication of technical efforts. It might also help reduce tension between global rivals by providing empirical reference points, reducing dangerous interstate misperceptions, and ensuring that states’ security policies are anchored in evidence rather than ambiguity. For anyone concerned with responsible AI-military development—governments, businesses, NGOs, academics, or average citizens—AIMID serves as a unique resource,
But more than merely recognizing that data fragmentation is hindering responsible military-AI progress, defense leaders around the world should next fund and adopt the tools necessary to fully understand the data and intelligence-gathering side of this new ecosystem. Indeed, while organizations like AIMID cannot fully solve the fundamental problem of data fragmentation, they represent some of the best resources available.
This commentary is published in coordination with the 2026 Global Security Forum, of which Defense One is a media partner.
Dr. Jason Warner is the CEO of the AI-Military Integration Database (AIMID). He holds a Ph.D. from Harvard University.
Sofia Romansky is a Strategic Analyst at The Hague Centre for Strategic Studies (HCSS) and Subject Matter Expert for the NATO Defence Education Enhancement Program (DEEP). She previously served as the Project Coordinator of the Global Commission on Responsible Artificial Intelligence in the Military Domain (GC REAIM).
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
