• Apple’s accessibility framework has been found vulnerable to a critical Transparency, Consent, and Control (TCC) bypass that exposes sensitive user data and enables arbitrary AppleScript execution. Researchers have disclosed CVE-2025-43530, a vulnerability in the ScreenReader.The framework’s MIG service permits attackers to execute unauthorized AppleScript commands and send AppleEvents to protected processes without user consent. The […]

    The post macOS Flaw Allows TCC Bypass, Exposing Sensitive User Information appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A critical supply chain vulnerability has been discovered affecting millions of developers using popular AI-powered IDEs, including Cursor, Windsurf, and Google Antigravity. Security researchers revealed that these coding environments were actively recommending non-existent extensions, allowing potential attackers to upload malware that users would unthinkingly install. The issue stems from how these tools were built. Cursor, […]

    The post Cursor, Windsurf & Google Antigravity IDEs Linked to Malicious Extension Exposure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Securonix threat researchers have uncovered a stealthy malware campaign, tracked as PHALT#BLYX, targeting the hospitality sector with a sophisticated “ClickFix” social engineering tactic. This ongoing campaign specifically targets European organizations during the busy holiday season, utilizing fake Booking.com reservation cancellations to deploy a Russian-linked DCRat payload. The infection chain begins with a targeted phishing email […]

    The post New ClickFix Attack Uses Fake BSOD to Trick Users into Running Malicious Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Menlo Park, India, 6th January 2026, CyberNewsWire

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A new critical security vulnerability has been disclosed in n8n, an open-source workflow automation platform, that could enable an authenticated attacker to execute arbitrary system commands on the underlying host. The vulnerability, tracked as CVE-2025-68668, is rated 9.9 on the CVSS scoring system. It has been described as a case of a protection mechanism failure. It affects n8n versions from

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Users of the “@adonisjs/bodyparser” npm package are being advised to update to the latest version following the disclosure of a critical security vulnerability that, if successfully exploited, could allow a remote attacker to write arbitrary files on the server. Tracked as CVE-2026-21440 (CVSS score: 9.2), the flaw has been described as a path traversal issue affecting the AdonisJS multipart

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Defense Department will attempt to downgrade Arizona Democratic Sen. Mark Kelly’s retirement rank and pay, seeking to punish him for making a video along with other Democrats in Congress, who told members of the military they didn’t need to follow illegal orders. 

    Defense Secretary Pete Hegseth originally threatened to recall Kelly from military retirement and court-martial him for his participation in the video, but announced Monday that the department would instead try to downgrade his rank of captain as well as his retirement pay. 

    “Captain Kelly has been provided notice of the basis for this action and has thirty days to submit a response,” Hegseth wrote in a social media post. “The retirement grade determination process directed by Secretary Hegseth will be completed within forty five days.”

    Hegseth added that Kelly’s “status as a sitting United States Senator does not exempt him from accountability, and further violations could result in further action.”

    Kelly wrote in a social media post that he planned to challenge Hegseth’s attempt to alter his retirement rank and pay, arguing it’s an attempt to punish him for challenging the Trump administration. 

    “My rank and retirement are things that I earned through my service and sacrifice for this country. I got shot at. I missed holidays and birthdays. I commanded a space shuttle mission while my wife Gabby recovered from a gunshot wound to the head– all while proudly wearing the American flag on my shoulder,” Kelly wrote. “Generations of servicemembers have made these same patriotic sacrifices for this country, earning the respect, appreciation, and rank they deserve.”

    Kelly added that Hegseth’s goal with the process is to “send the message to every single retired servicemember that if they say something he or Donald Trump doesn’t like, they will come after them the same way. It’s outrageous and it is wrong. There is nothing more un-American than that.”

    Constitutional protection

    Members of Congress are generally protected under the speech and debate clause of the U.S. Constitution, which states that unless a lawmaker is involved in treason, felony and breach of the peace, they are “privileged from Arrest during their Attendance at the Session of their respective Houses, and in going to and returning from the same; and for any Speech or Debate in either House, they shall not be questioned in any other Place.”

    The Defense Department letter of censure to Kelly alleged that his participation in the video undermined the military chain of command, counseled disobedience, created confusion about duty, brought discredit upon the Armed Forces and included conduct unbecoming of an officer. 

    Hegseth wrote in that letter that if Kelly continues “to engage in conduct prejudicial to good order and discipline, you may subject yourself to criminal prosecution or further administrative action.”

    Allegations of misconduct

    The Department of Defense posted in late November that officials were looking into “serious allegations of misconduct” against Kelly for appearing in the video. 

    It didn’t detail how Kelly might have violated the Uniform Code of Military Justice but stated that “a thorough review of these allegations has been initiated to determine further actions, which may include recall to active duty for court-martial proceedings or administrative measures.” 

    Hegseth referred the issue to Navy Secretary John Phelan for any “review, consideration, and disposition” he deemed appropriate. Hegseth then asked for a briefing on the outcome of the review “by no later than December 10.”

    Kelly said during a press conference in early December the military’s investigation and a separate one by the FBI were designed to intimidate the six lawmakers in the video from speaking out against Trump. 

    The lawmakers in the video, who have backgrounds in the military or intelligence agencies, told members of those communities they “can” and “must refuse illegal orders.”

    “No one has to carry out orders that violate the law or our Constitution. We know this is hard and that it’s a difficult time to be a public servant,” they said. “But whether you’re serving in the CIA, in the Army, or Navy, or the Air Force, your vigilance is critical.”

    The other Democrats in the video — Michigan Sen. Elissa Slotkin, Colorado Rep. Jason Crow, Pennsylvania Reps. Chris Deluzio and Chrissy Houlahan, and New Hampshire Rep. Maggie Goodlander — are not subject to the military justice system. 

    Trump railed against the video a couple of days after it posted, saying the statements represented “SEDITIOUS BEHAVIOR, punishable by DEATH!”

    This story was originally published by Stateline.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Security experts at Zenity Labs warn that Anthropic’s new agentic browser extension, Claude in Chrome, could bypass traditional web security, exposing private data and login tokens to potential hijackers.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Russia-aligned threat actor known as UAC-0184 has been observed targeting Ukrainian military and government entities by leveraging the Viber messaging platform to deliver malicious ZIP archives. “This organization has continued to conduct high-intensity intelligence gathering activities against Ukrainian military and government departments in 2025,” the 360 Threat Intelligence Center said in

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • An image circulated over media the weekend of Jan. 3 and 4 was meant to convey dominance: Venezuela’s president, Nicolás Maduro, blindfolded and handcuffed aboard a U.S. naval vessel. Shortly after the operation that seized Maduro and his wife, Cilia Flores, President Donald Trump announced that the United States would now “run” Venezuela until a “safe, proper and judicious transition” could be arranged.

    The Trump administration’s move is not an aberration; it reflects a broader trend in U.S. foreign policy I described here some six years ago as “America the Bully.” 

    Washington increasingly relies on coercion – military, economic and political – not only to deter adversaries but to compel compliance from weaker nations. This may deliver short-term obedience, but it is counterproductive as a strategy for building durable power, which depends on legitimacy and capacity. When coercion is applied to governance, it can harden resistance, narrow diplomatic options and transform local political failures into contests of national pride.

    There is no dispute that Maduro’s dictatorship led to Venezuela’s catastrophic collapse. Under his rule, Venezuela’s economy imploded, democratic institutions were hollowed out, criminal networks fused with the state, and millions fled the country – many for the United States. 

    But removing a leader – even a brutal and incompetent one – is not the same as advancing a legitimate political order. 

    By declaring its intent to govern Venezuela, the United States is creating a governance trap of its own making – one in which external force is mistakenly treated as a substitute for domestic legitimacy.

    I write as a scholar of international security, civil wars, and U.S. foreign policy, and as author of Dying by the Sword, which examines why states repeatedly reach for military solutions, and why such interventions rarely produce durable peace. 

    The core finding of that research is straightforward: Force can topple rulers, but it cannot generate political authority. 

    When violence and what I have described elsewhere as “kinetic diplomacy” become a substitute for full-spectrum action – which includes diplomacy, economics and what the late political scientist Joseph Nye called “soft power” – it tends to deepen instability rather than resolve it.

    The Venezuela episode reflects this broader shift in how the United States uses its power. My co-author Sidita Kushi and I document this by analyzing detailed data from the new Military Intervention Project. We show that since the end of the Cold War, the United States has sharply increased the frequency of military interventions while systematically underinvesting in diplomacy and other tools of statecraft.

    One striking feature of the trends we uncover is that if Americans tended to justify excessive military intervention during the Cold War between 1945–1989 due to the perception that the Soviet Union was an existential threat, what we would expect is far fewer military interventions following the Soviet Union’s 1991 collapse. That has not happened.

    Even more striking, the mission profile has changed. Interventions that once aimed at short-term stabilization now routinely expand into prolonged governance and security management, as they did in both Iraq after 2003 and Afghanistan after 2001.

    This pattern is reinforced by institutional imbalance. In 2026, for every dollar the United States invests in the diplomatic “scalpel” of the State Department to prevent conflict, it allocates $28 to the military “hammer” of the Department of Defense, effectively ensuring that force becomes a first rather than last resort. 

    “Kinetic diplomacy” – in the Venezuela case, regime change by force – becomes the default not because it is more effective, but because it is the only tool of statecraft immediately available. On Jan. 4, Trump told The Atlantic magazine that if Delcy Rodríguez, the acting leader of Venezuela, “doesn’t do what’s right, she is going to pay a very big price, probably bigger than Maduro.”

    The consequences of this imbalance are visible across the past quarter-century.

    In Afghanistan, the U.S.-led attempt to engineer authority built on external force alone proved brittle by its very nature. The U.S. had invaded Afghanistan in 2001 to topple the Taliban regime, deemed responsible for the 9/11 terrorist attacks. But the subsequent two decades of foreign-backed state-building collapsed almost instantly once U.S. forces withdrew in 2021. No amount of reconstruction spending could compensate for the absence of a political order rooted in domestic consent. 

    Following the invasion by the U.S. and surrender of Iraq’s armed forces in 2003, both the U.S. Department of State and the Department of Defense proposed plans for Iraq’s transition to a stable democratic nation. President George W. Bush gave the nod to the Defense Department’s plan.

    That plan, unlike the State Department’s, ignored key cultural, social and historical conditions. Instead, it proposed an approach that assumed a credible threat to use coercion, supplemented by private contractors, would prove sufficient to lead to a rapid and effective transition to a democratic Iraq. The United States became responsible not only for security, but also for electricity, water, jobs and political reconciliation – tasks no foreign power can perform without becoming, as the United States did, an object of resistance.

    Libya demonstrated a different failure mode. There, intervention by a U.S.-backed NATO force in 2011 and removal of dictator Moammar Gadhafi and his regime were not followed by governance at all. The result was civil war, fragmentation, militia rule and a prolonged struggle over sovereignty and economic development that continues today. 

    The common thread across all three cases is hubris: the belief that American management – either limited or oppressive – could replace political legitimacy.

    Venezuela’s infrastructure is already in ruins. If the United States assumes responsibility for governance, it will be blamed for every blackout, every food shortage and every bureaucratic failure. The liberator will quickly become the occupier.

    Taking on governance in Venezuela would also carry broader strategic costs, even if those costs are not the primary reason the strategy would fail. 

    A military attack followed by foreign administration is a combination that undermines the principles of sovereignty and nonintervention that underpin the international order the United States claims to support. It complicates alliance diplomacy by forcing partners to reconcile U.S. actions with the very rules they are trying to defend elsewhere.

    The United States has historically been strongest when it anchored an open sphere built on collaboration with allies, shared rules and voluntary alignment. Launching a military operation and then assuming responsibility for governance shifts Washington toward a closed, coercive model of power – one that relies on force to establish authority and is prohibitively costly to sustain over time.

    These signals are read not only in Berlin, London and Paris. They are watched closely in Taipei, Tokyo and Seoul — and just as carefully in Beijing and Moscow. 

    When the United States attacks a sovereign state and then claims the right to administer it, it weakens its ability to contest rival arguments that force alone, rather than legitimacy, determines political authority. 

    Beijing needs only to point to U.S. behavior to argue that great powers rule as they please where they can – an argument that can justify the takeover of Taiwan. Moscow, likewise, can cite such precedent to justify the use of force in its near abroad and not just in Ukraine.

    This matters in practice, not theory. The more the United States normalizes unilateral governance, the easier it becomes for rivals to dismiss American appeals to sovereignty as selective and self-serving, and the more difficult it becomes for allies to justify their ties to the U.S. 

    That erosion of credibility does not produce dramatic rupture, but it steadily narrows the space for cooperation over time and the advancement of U.S. interests and capabilities.

    Force is fast. Legitimacy is slow. But legitimacy is the only currency that buys durable peace and stability – both of which remain enduring U.S. interests.

    If Washington governs by force in Venezuela, it will repeat the failures of Afghanistan, Iraq and Libya: Power can topple regimes, but it cannot create political authority. Outside rule invites resistance, not stability.

    This article is republished from The Conversation under a Creative Commons license. Read the original article.

    The Conversation

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶