• A newly disclosed Windows attack technique, dubbed “Download More RAM,” can undermine Virtualization-Based Security (VBS), bypass Hypervisor-Protected Code Integrity (HVCI), and disable endpoint protections including Microsoft Defender and third-party EDR products. The attack was presented at USENIX Security 2026 and is tracked by Microsoft as CVE-2026-23670. Unlike a conventional Windows kernel exploit, Download More RAM […]

    The post Download More RAM Attack Bypasses Windows VBS, HVCI and Disables Microsoft Defender appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyber Security Centre (NCSC) has warned. The vulnerability in question is CVE-2026-65400 (CVSS score: 9.8), a critical authentication issue impacting the Screen Sharing component that could allow an attacker already on the network to

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft is reshaping its consumer and productivity AI strategy with a major update to its Copilot application, merging personal chat histories and generated content while discontinuing several prominent capabilities. The changes affect consumer users of Copilot and coincide with the broader transition of the Microsoft 365 (Office) app into the Microsoft 365 Copilot app. The […]

    The post Microsoft Copilot App Overhaul Merges Personal Chats and Ends Podcasts, Deep Research appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A Texas-based aviation company beat out Bell and Lockheed Martin to lead the transformation of Army helicopter training, the service announced on Thursday.

    The Army awarded M1 Support Services its Flight School Next contract, a firm-fixed-price, indefinite-delivery/indefinite-quantity worth up to $10 billion for up to 26 years. It’s the culmination of a months-long competition aimed at converting the service’s Initial Entry Rotary Wing school at Fort Rucker, Alabama, to a contractor-owned and -operated model. Officials expect the change to reduce costs by taking helicopters, instructors, and maintenance out of the service’s hands and pushing pilots to focus on aviation fundamentals.

    "This is a major step forward in modernizing how we train our aviation force," Brent G. Ingraham, the Army’s assistant secretary of acquisition, logistics and technology, said in a news release. "Flight School Next delivers the next generation of training capabilities our aviators need to succeed in increasingly complex operational environments."

    M1 bid as leader of a team that includes Robinson Helicopter Company, Quantum Helicopters, General Dynamics Information Technology, and the University of North Dakota Aerospace Foundation. It was one of three major finalists, including Lockheed and Bell, that emerged after the December call for solutions. 

    Last year, Congress raised concerns and blocked funding for the flight school effort in theNational Defense Authorization Act, pending the results of a trial program. It’s not immediately clear when the Army met the congressional requirements before it awarded the contract.

    “We are honored to be entrusted with this vital mission,” said George Krivo, M1 chairman and CEO, in a press release. “M1 will deliver a fully integrated, innovation rich training solution designed to develop more proficient Army Aviators on time and on budget.”

    Defense One reported in April that Lockheed had been dropped from the competition. Bell said in an emailed statement on Friday that they were disappointed in the Army’s selection.

    “Bell was notified by the U.S. Army that our turnkey solution was not selected for the Flight School Next program,” a company spokesperson wrote. “While Bell is disappointed by this outcome, we are thankful for the opportunity to participate and our commitment to supporting warfighters has not changed.”

    Under M1’s offering, new Army pilots will learn to fly on Robinson Helicopter’s R66 helicopter, which was offered to meet the service’s requirement for an aircraft with a single turbine engine and a rotor that spins counterclockwise. 

    The Army’s current aircraft, Airbus’ twin-engine UH-72 Lakota, has been criticized by military leaders as being too expensive and restrictive for teaching aviation basics.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Threat actors are acquiring expired domains to inherit website traffic and reputation to redirect victims to scams and malware on a large scale. DNS threat intelligence firm Infoblox has given the name dropcatch domains to those that get a second chance, where an expired domain becomes available for registration and is then snapped up by another party. During the first half of 2026, 50,400

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • IAM compliance is the practice of demonstrating that identity and access controls are not only documented but actually enforced across users, applications, infrastructure, and non-human identities. This guide explains what IAM compliance requires, which regulations matter, and how organizations move from periodic access reviews toward continuous, evidence-backed verification that auditors can

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Selidan, USA, August 14th, 2026, CyberNewswire New report examines suspicious Reddit activity, coordinated YouTube content and BBB Scam Tracker entries influencing how the vehicle history platform appears across Google and AI systems VINclarity has published a new investigation into what researchers describe as a coordinated online reputation attack targeting the vehicle history platform across Reddit, […]

    The post VINclarity Publishes Investigation Into Alleged Scam and Fraud Reputation Attack Across Search and AI appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The threat actor known as HoneyMyte (aka Mustang Panda) has been observed deploying an updated version of the CoolClient backdoor with a signed Windows kernel-mode rootkit that can hide and protect malicious processes, files, registry objects, and command-and-control (C2) network information. Russian cybersecurity vendor Kaspersky said it identified victims in Myanmar, Mongolia, Pakistan,

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • This week in cybersecurity from the editors at Cybercrime Magazine

    Sausalito, Calif. – Aug. 14, 2026

    Watch the YouTube video

    “One thing is really clear in all the CISO conversations I’ve had – is that everybody is worried about the number of CVEs (common vulnerabilities and exposures) that are being published,” Seemant Sehgal, founder and CEO at BreachLock told Cybercrime Magazine during Black Hat USA 2026 in Las Vegas last week.

    “However people are very much cautious in terms of how they’re going to patch all of that,” adds Sehgal. “It’s not really possible to patch at the scale at which we are discovering the vulnerabilities.”

    The National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) tracks hundreds-of-thousands of known vulnerabilities, each representing a potential attack path into enterprise environments, according to a BreachLock blog post.

    Sehgal explained how to patch the ones that really matter, and he gave Cybercrime Magazine a high-level overview of BreachLock’s agentic AI-powered penetration testing platform, which is trained on 40,000+ real-world pentests.

    Watch the Video



    Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

    • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
    • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
    • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
    • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
    • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
    • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
    • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
    • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
    • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

    Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

    The post BreachLock: CISO Conversations Revealed At Black Hat USA 2026 appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Four incidents involving OpenAI, Anthropic, Meta and the UK AI Security Institute (AISI) describe AI agents reaching systems belonging to other organizations without their consent. The defining capability is now persistence: models can repeatedly test paths, regenerate disposable tooling, restore communications, and shift techniques until a viable intrusion chain emerges. Although each incident involved different […]

    The post Agentic AI Models Rebuild Malware and Sustain Real-World Cyber Intrusions, SentinelOne Warns appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶