• OysterLoader, also tracked as Broomstick and CleanUp, is a multi‑stage loader malware written in C++ and actively leveraged in campaigns linked to the Rhysida ransomware group. First highlighted in mid‑2024 during malvertising and SEO‑poisoning campaigns abusing trojanized installers for popular IT tools such as PuTTY, WinSCP, and Google Authenticator, OysterLoader masquerades as legitimate software download […]

    The post OysterLoader Evasion Tactics Exposed: Advanced Obfuscation and Rhysida Ransomware Ties Uncovered appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical SQL injection vulnerability in Microsoft Configuration Manager to its Known Exploited Vulnerabilities (KEV) catalogue. The threat actors are actively exploiting the flaw in the wild. The addition signals immediate risk to organisations using the enterprise management platform. SQL Injection Enables Command Execution Tracked as […]

    The post CISA Issues Urgent Warning on Microsoft Configuration Manager SQL Injection Vulnerability Under Active Exploitation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The 2025 spam and phishing landscape shows a sharp rise in AI-generated lures and QR code–based “quishing,” alongside complex malware campaigns abusing cracked games and software to deliver information stealers at scale. These trends highlight how social engineering and multi‑stage loaders now work together to bypass traditional security controls and monetize stolen data. Threat actors […]

    The post AI-Driven Phishing and QR Code Quishing Surge in 2025 Spam and Phishing Report appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A security vulnerability has been discovered in next-mdx-remote, a popular TypeScript library used for rendering MDX content in React applications. The flaw, tracked as CVE-2026-0969 and identified by researchers at Sejong University, enables attackers to execute arbitrary code on servers when untrusted MDX content is processed. The vulnerability affects the serialize function in next-mdx-remote versions […]

    The post next-mdx-remote Vulnerability Allows Arbitrary Code Execution in React SSR appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A new wave of ClickFix attacks is targeting Windows users with fake Cloudflare-style CAPTCHA verification pages that trick victims into executing malicious PowerShell commands. This campaign delivers a multi-stage, fileless infection chain that ends with StealC, a powerful information stealer capable of harvesting credentials, cryptocurrency wallets, gaming accounts, emails, and detailed system fingerprints. The operation […]

    The post New ClickFix Attack Wave Targets Windows Systems to Deploy StealC Stealer appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Over 1,800 Windows IIS servers worldwide have been compromised in a large-scale search engine optimization (SEO) poisoning campaign driven by the BADIIS malware, a malicious IIS module used to hijack legitimate web traffic. The operation, tracked by Elastic Security Labs as REF4033, is attributed to a Chinese-speaking cybercrime group that monetizes these compromised servers by […]

    The post BADIIS Malware Targets Over 1,800 Windows Servers in Massive SEO Poisoning Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Zimbra has officially released a critical security update, version 10.1.16, addressing multiple high-severity vulnerabilities that could compromise email infrastructure and user data. The company has classified this patch with a “High” security severity rating, urging administrators to prioritize the upgrade to mitigate risks associated with web-based attacks. The update primarily focuses on closing gaps related […]

    The post Zimbra Issues Security Update to Address XSS, XXE, and LDAP Injection Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • BeyondTrust has urgently released security updates to address a critical remote code execution (RCE) vulnerability affecting its widely used Remote Support (RS) and Privileged Remote Access (PRA) products. Designated as CVE-2026-1731, this severe flaw carries a near-maximum CVSS v4 score of 9.9. The vulnerability creates a dangerous opening for unauthenticated remote attackers to execute arbitrary […]

    The post BeyondTrust RCE Vulnerability Under Active Exploitation – Urgent Patch Released appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Air Force is using a framework to test autonomy on its drone wingman prototypes, showing that multiple companies can supply hardware and software for its future collaborative combat aircraft.

    Using the government-owned Autonomy Government Reference Architecture, or A-GRA, the service has integrated RTX Collins software with General Atomics YFQ-42 aircraft and Shield AI’s technology on Anduril's YFQ-44 CCA, according to a Thursday news release.

    “By proving the architecture functions effectively across different airframes and mission autonomy from different vendors, the Air Force is demonstrating that mission software can be decoupled from specific vehicle hardware, breaking down barriers for technology integration and fostering a more competitive and innovative ecosystem,” the service said in the news release. 

    Col. Timothy Helfrich, the Air Force’s portfolio acquisition executive for fighters and advanced aircraft, said breaking the hardware and software out of a single company’s hands aligns with the Defense Department’s latest National Defense Strategy—which calls for “clearing away outdated policies, practices, regulations, and other obstacles” that hinder rapid weapons production. 

    “Verifying A-GRA across multiple partners is critical to our acquisition strategy,” Helfrich said in the news release. “It proves that we are not locked into a single solution or a single vendor. We are instead building a competitive ecosystem where the best algorithms can be deployed rapidly to the warfighter on any A-GRA compliant platform, regardless of the vendor providing the algorithm.”

    The framework has been around since at least 2024. “A-GRA avoids vendor lock, enables rapid iteration, is extensible to other platforms, and underpins interoperability,” a briefing slide said.

    The Air Force issued contracts to Anduril and General Atomics in 2024 for the first increment of the service’s CCA competition. In December, the service announced that Northrop’s Project Talon CCA, designated YFQ-48A, could also compete in Increment 1 and the next round of contracts. 

    Anduril and General Atomics both notched their first semi-autonomous CCA flights last year, while Northrop plans to fly its drone wingman in 2026.

    General Atomics quickly boasted on Thursday that it had logged another semi-autonomous flight on its YFQ-42 drone wingman with RTX Collins’ autonomy software onboard. A photo accompanying a news release showed three General Atomics CCAs on a runway. In November, the company had released photos showcasing just two of its prototypes.

    “We are excited to collaborate with Collins to deliver enhanced autonomous mission solutions,” David R. Alexander, president of GA-ASI, said in the news release. “The integration of Sidekick with our YFQ-42A demonstrates our commitment to innovation and operational excellence in unmanned aircraft technology.”

    Anduril and Shield AI have not had a joint CCA flight together yet. But Jason Levin, Anduril’s senior vice president of engineering, said in an emailed statement that the company will hit that milestone “very soon.”

    “Integrating mission autonomy into the CCA program represents a meaningful step towards fielding a real operational capability by the end of the decade,” Levin said in the statement. 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • SAN DIEGO, California—Deliver what we ask for on time. That’s the terse message two maritime service chiefs are sending to industry.  

    “What I need is: when I have a contract with you, you deliver it on time. That's really what I need. I don't know how to sugarcoat that. It's impossible to sugarcoat that. I need my stuff on time,” Adm. Daryl Caudle, chief of naval operations, told attendees Wednesday at the annual WEST Conference. “We just have to be very transparent about that. So I'd rather, you know, go into that contracting strategy and negotiation with that in mind, and be very honest about that.”

    Marine Corps Commandant Gen. Eric Smith agreed: “If it's going to be delayed, well, that's a you problem. That's not a me problem, because I paid for something and I expect to get it.”

    Smith, who shared the stage with Caudle, said the goal is to buy what Marines need at the “best cost.” 

    “I know what I need. I'm a recovering requirements officer. I need a missile that shoots [200] miles. If you have something that you can give me for the same cost and on the same performance, same schedule, but it goes 250 miles, then that's great. I'll take it,” Smith said, as an example. 

    The service chiefs acknowledged how erratic government funding and single-year appropriations affect private industry.

    “We do owe industry a time horizon [where] they can stabilize their workforce,” Caudle said. 

    “I don't know why I don’t have a five-year horizon with the shipyards that do my surface ship maintenance,” which could give companies the time to plan ahead. 

    Smith pushed the need for multi-year funding, suggesting the services and industry sync messaging to Capitol Hill to advocate for it.

    Congress “can appropriate multi-year funding” but doesn’t like to, Smith said. The result is single-year funding that could mean “$100 million this year and it's nothing the next year. And you can't, you can't operate that way. So I think we have to collaborate…on our messaging to the Hill that, ‘Hey, we need multi-year funding.”

    ‘Everything costs what it costs’

    Keeping costs down without sacrificing quality or on-time delivery is a longstanding conundrum for military procurement. But while there’s general reticence towards higher costs, especially for large platforms like ships, it’s a reality the Navy must accept, Smith said. 

    “I don't want to pay, you know, $4 billion for a ship. Neither does my shipmate [Adm.] Daryl Caudle, but that's what it costs to have pipefitters, steamfitters, welders, electricians build the ship,” and have a livable wage, Smith said. “Everything costs what it costs.”

    Smith’s comments come as shipbuilders look to boost wages—with some reports of success—as a way to attract and keep the workers essential to meeting maritime national security needs. 

    But simply increasing wages may not be enough, argued Ronald O'Rourke, a recently retired naval analyst and researcher for the Congressional Research Service. Those wages need to be at a level that distinguishes shipbuilding not only from competing sectors in a given region, but from other manufacturing jobs. 

    “It's widely recognized that to attack this issue, wages and benefits need to be increased to help re-establish a larger wage differential between shipbuilding jobs and service sector jobs. Less widely recognized is that wages and benefits also need to be increased to help establish more of a wage differential between shipbuilding jobs and other manufacturing jobs. The government reported last year that there were about 400,000 manufacturing jobs that were unfilled,” O’Rourke said during a separate shipbuilding panel Wednesday.

    Those same skilled workers may also be lured by the boom in AI data centers nationwide. 

    In a report to the White House in October, OpenAI claimed data centers and energy infrastructure would need about 20 percent of the nation’s existing skills trade workforce over the next five years. 

    “So people interested in going into manufacturing and construction work have a choice of jobs—and a lot of those jobs are done in settings that are more comfortable than shipbuilding,” O’Rourke said.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶