• A previously undocumented Windows remote access trojan capable of turning an infected victim’s display into a live stream for its operators. Dubbed BotHelper RAT after the Bot.Helper namespace found in its .NET assembly, the malware uses encrypted delivery, process masquerading, AMSI tampering and scheduled-task persistence to remain operational while giving attackers continuous visual access to […]

    The post Researchers Found a Windows RAT That Turns Victims’ Screens Into Live Streams appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Pentagon has confirmed a major data breach involving the Defense Manpower Data Center (DMDC) information system, exposing sensitive personal information linked to more than three million individuals. The breach affects 2.76 million living people and approximately 294,000 deceased individuals. The scale of this exposure has intensified scrutiny on the DMDC, one of the Department […]

    The post Pentagon Data Breach Exposes Sensitive Data of Over 3 Million People appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • OpenAI on Monday shelved plans to release GPT-6.1 Astra, a next-generation artificial intelligence (AI) model that was planned for an October launch, after it failed internal safety and alignment audits. The development was first reported by The Wall Street Journal. The move “marks a rare case of a major AI developer ditching a new release because of safety concerns,” the news publication said.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A cluster of 31 Russian-language Chrome extensions, marketed as “VPN for X” tools, has been discovered using a shared codebase to redirect browser traffic through remotely controlled proxy infrastructure. This ongoing campaign, revealed on September 19, 2026, has affected about 356,000 users, effectively turning their installed browsers into nodes in a residential proxy network. Researchers […]

    The post Malicious VPN Extensions Turn Browser Users Into Residential Proxy Servers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • OpenAI said it has made the decision to pause training of its most powerful models after one of its agents during reinforcement learning (RL) training contacted an external chatbot by exploiting a loophole in its internet-access restrictions. “An agent attempting to complete a search-based training task queried a public chatbot service through a gap in our internet-access restrictions:

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Defense Secretary Pete Hegseth directed U.S. Cyber Command and military intelligence agencies to prioritize countering foreign threats to the upcoming elections, ordering intelligence collection and coordination with the Department of Homeland Security.

    The Sept. 22 memorandum was released publicly Monday and instructs the defense intelligence enterprise to gather and analyze information on foreign election threats. It separately directs Cyber Command to use its existing authorities and capabilities to counter potential cyberattacks by foreign actors targeting the elections.

    “I am therefore directing the entire [Defense Intelligence Enterprise] to mobilize every authorized asset, capability, and partnership under your command to defend our election infrastructure from foreign malign influence,” Hegseth wrote.

    The memo is addressed to the leaders of Cyber Command, the National Security Agency, the Defense Intelligence Agency and the National Geospatial-Intelligence Agency. It calls protecting elections a “no-fail mission,” but does not identify particular adversaries or operations, specify additional staffing or funding, or set implementation deadlines.

    The directive notably comes amid a broader retreat from dedicated federal efforts to track foreign influence and disinformation. The second Trump administration has dismantled the FBI’s Foreign Influence Task Force, reorganized the intelligence community’s coordination of that work and reduced election security support at the Cybersecurity and Infrastructure Security Agency. 

    At the Office of the Director of National Intelligence, an overhaul shifted many responsibilities of the Foreign Malign Influence Center to other offices. ODNI has subsequently assigned two officials to coordinate election threat intelligence. 

    Foreign election threats can range from attacks on voting-related computer systems to campaigns intended to manipulate public opinion. 

    The NSA collects foreign signals intelligence, including intercepted communications, to understand adversaries’ plans and capabilities, while also helping protect sensitive U.S. systems. Cyber Command conducts military cyber operations, including missions to disrupt foreign hackers and the infrastructure they use. 

    The organizations have previously combined those capabilities through a joint Election Security Group. In a description of its work during the 2022 midterms, NSA explained that intelligence about an attack originating abroad could be shared with domestic agencies to help them defend against it, while Cyber Command could use offensive operations to disrupt the foreign attacker. 

    Hegseth’s memo does not specify whether the same organizational model will be used this year. It directs intelligence work to comply with applicable laws and policies and tells Cyber Command to operate under its existing authorities. 

    The directive also emphasizes cooperation with DHS as that agency’s civilian cyberdefense agency outlines how it will assist election officials following staffing and program reductions.

    Two days after Hegseth signed the memo, CISA—housed within DHS—released an election security plan identifying its 10 regional directors as election security advisers and describing a free threat-sharing platform connecting election officials, state intelligence hubs and federal partners. That plan followed warnings from state officials that earlier cuts had weakened their access to federal security expertise. 

    The 2026 elections come as rapid advances in AI allow foreign influence operators to automate more of their work. Such capabilities could let adversaries run larger campaigns with fewer people, adding to the challenge of identifying coordinated manipulation ahead of the midterms.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • ShinyHunters tells Hackread it never planned to publish or sell stolen FBI data and says its ultimatum was part of a marketing campaign to counter FBI claims.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • As the Pentagon overhauls its acquisition system, it should take lessons from recent and ongoing wars, a new report argues.

    From Israel, the U.S. should learn that “operational feedback should be treated as a strategic resource.” writes Barak Seener, an associate research fellow at the Henry Jackson Society, in a report released Monday. And from Ukraine, the U.S. can learn “the strategic value of competition, decentralization, and commercial innovation.”

    Additionally, Seener writes, “software-defined warfare requires software-defined acquisition.” In the future, acquisition models should “treat software as a continuously developing capability, rather than a completed product.” 

    These changes and more are necessary, he writes, because: “Future military advantage will belong to organizations that can learn, adapt, and integrate faster than their adversaries.” 

    Acknowledging the reforms the Pentagon began in 2025, Seener writes that the main challenge facing the American defense acquisition process “is not simply one of speed. It is the ability to align authority, responsibility, and operational outcomes within a single decision-making structure.” 

    Introducing portfolio acquisition executives is a good step, he writes, but “the effectiveness of the reform will ultimately depend upon the degree to which portfolio managers are able to exercise genuine authority over requirements, resources, capability trade-offs and program termination.”

    In an interview, Seener pointed to the ways militiaries are using adaptation to outflank exquisite weaponry.

    “We used to think that you needed very expensive platforms that took a decade to create, like the F-35, to create strategic impact on the battlefield,” he said. “But look what Ukraine is doing in Russia. Look what the Houthis are doing, just by deploying mass.”

    “Technology is evolving much faster than traditional defense acquisition timelines,” he said, “so expensive platforms that take years to develop can leave capabilities outdated by a rapidly changing battlefield landscape before they are fielded.”

    Instead of developing bespoke technologies from scratch, “the Pentagon can increase its flexibility by tapping into technologies already developed by the commercial sector—particularly AI, software, cloud computing, autonomy, sensors, and data analytics,” he said.

    The need for further reform is clear, Seener said, when you look at how existing systems “have failed to make a strategic impact in Iran.

    “You know, in the first couple of days, America and Israel together were able to decapitate the regime, eliminate their command and control, with this rapid tempo, this high velocity of strikes against a huge number of targets, which was unprecedented. And yet it made no strategic impact. Everybody was dazzled; they were awe-inspired at the impact it made…but look, the regime remains intact. Their missile capability remains intact. So this operational wowing effect that it has is not the same as having the strategic impact.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked as CVE-2026-86950, refers to an out-of-bounds write impacting the CoreGraphics component that could lead to arbitrary code execution when processing a maliciously crafted file. The iPhone maker said the

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached, Microsoft said in a technical analysis. The malware has been seen in a small number of targeted intrusions at telecommunications organizations, universities, medical nonprofits, intergovernmental organizations, and government contractors. Its use goes back to at least

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶