• A server linked to a malware campaign attributed to a Midnight Blizzard-associated cluster was still delivering malicious files on October 5, 2026. The server returned HTTP 200 responses for multiple payload paths, including one used by simple Windows Internet Shortcut files to launch a PowerShell stager. The finding shows that public disclosure and low reputation […]

    The post Midnight Blizzard-Linked Malware Server Still Delivering Payloads 8 Weeks After Disclosure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers’ M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • An Android remote-access Trojan, YuanKong, whose weakly protected dropper reveals more than its hidden payload: it exposes the operator account identifiers embedded in each build. Analysis of 110 droppers uncovered 57 distinct child payloads, 42 operator accounts and 44 rotating build brands, all tied together by a shared signing certificate and command-and-control (C2) infrastructure. Its […]

    The post Android Malware Exposes Its Own Operators While Hijacking Phones and Stealing Sensitive Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers used AI-assisted scripts to compromise government Linux servers, harvest administrator credentials, and establish persistent backdoors during a campaign observed between October 2025 and April 2026. The cluster remains unattributed. Under Unit 42’s attribution framework, “UNK” indicates that researchers have not determined whether the activity is state-sponsored or financially motivated. Its intelligence-gathering behavior does not […]

    The post AI-Assisted Hackers Compromise Government Linux Servers to Deploy Backdoors and Steal Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Marine Corps is preparing for a future battlefield on which the injuries are the same but the ability to quickly fly troops to a trauma hospital is very limited. To close that gap, the service is fielding new tech like mobile blood banks and ultrasounds, with a self-contained power source to keep them running.

    The Expeditionary Medical Refrigeration Unit and Mobile and the MEQU mobile blood warmer were deployed to U.S. Central Command this year, where a unit set up a continuous mobile blood bank and sent their notes back to the Marine Corps on how to make it better, officials told reporters Friday during a media round table.

    “We were told that the EMRU was instrumental to their ability to maintain a revolving blood bank to ensure that they had what they needed to be ready to care for injured service members,” said Navy Cmdr. Kyleigh Hupfl, clinic for Expeditionary Medical Systems.

    The concept of the “golden hour,” the critical time period after a casualty that made all the difference in getting a wounded service member from the battlefield to hospital triage during the Global War on Terror, will be much more complicated in a near-peer fight. 

    While ground fighters could sometimes shoot down a medevac helicopter in Iraq or Afghanistan, an enemy with more sophisticated surveillance and missile technology will mean commanders have to wait to call in evacuations and work to stabilize casualties on site for much longer than in more recent conflicts.

    “We're leaving the golden hour behind, and we're moving toward those longer patient-care hold times,” said Col. Paul Gillikin, program manager for Combat Support systems. “Again, fully recognizing the future fight against a peer competitor, over those great distances in the Pacific—we know that we're not going to have the developed [forward operating bases], the full mobility, the Iron Mountain.”

    The No. 1 cause of battlefield death is severe bleeding, so being able to not only slow bleeding but give transfusions on site will be crucial.

    “We need to be able to bring cold-chain distribution forward without relying on heavy generators, and we need to be able to do that in a sustainable way. We need to be able to warm that blood so that we don't get that patient in a worse-off situation,” Hupfl said. “We need to be able to see, after that, whether they have continued bleeding, so that the commander can make a risk decision on putting an evacuation asset at risk to get that patient out.”

    That’s where the battery-powered EMRU and the associated blood warmer come in, as a mobile system that keeps blood products refrigerated, then heats them to body temp for quick transfusions. The Corps is also fielding the KOSMOS point-of-care ultrasound to assess internal bleeding, and the Marine Corps Squad Power Manager medical kit variant  to keep them all running.

    “We expect in the Marine Corps to be in distributed environments, where the evacuation will be delayed or contested,” said Brig. Gen. Tamara Campbell, deputy commander of Portfolio Acquisition Executive Marine Corps. “And so the equipment that we're looking at is to take that into account, regardless of the time it takes to apply that care. We need to do that at any time so that any of our soldiers, sailors, Marines—anybody that's within our operating environment needs that level of care.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • You likely have a picture of the future of drone-assisted warfare: a soldier in a trench or a bunker, eyes enveloped in a virtual reality headset, hands clasping a controller, attention on targets below the drone he steers. But the reality of robot-assisted soldiering has already moved elsewhere, according to the military leaders who are training elite forces for future conflict.

    On Oct. 2, 10 warrant officers became the Army’s first robotics technicians under the new 390A military occupational specialty. On Tuesday, Maj. Gen. Jason Slider, who commands the U.S. Army John F. Kennedy Special Warfare Center and School at Fort Bragg, described how their jobs will go far beyond remotely piloting or maintaining a drone or ground robot.

    “It's important that it's not a pilot. We're not building a pilot. What we're building is a soldier that can adapt a piece of robotic kit to the mission, to the enemy, to the terrain,” Slider said at a Defense One event on the sidelines of the AUSA annual conference. 

    He described this as one of the most important lessons to emerge from Ukraine in terms of designing doctrine and training for the age of battlefield autonomy.

    “We looked at the Nagorno-Karabakh, at Ukraine, and we're studying the ongoing conflicts in the Middle East,” he said. Militaries that “solely focus on pilots quickly lose the advantage to an adversary or an enemy force that can adapt that piece of tech to the mission.”

    Adaptation was key to Azerbaijan's 2020 victory over Armenia in Nagorno-Karabakh. A 2021 report from the Center for Army Lessons Learned describes an Azerbaijani tactic in which “remotely piloted Soviet-era AN-2 biplanes flew at low altitudes as decoys to force the Armenians to respond against the perceived threat,” a use of robotics to surprise and confuse the enemy, not just drop bombs on them.

    The United States used a similar tactic in the Middle East at the outset of Operation Epic Fury earlier this year, swarming Iranian forces with cheap drones modeled after the Shahed drones that Iran was using against U.S. forces. Both cases show the importance of deploying robotics, autonomy, and semiautonomy in ways the enemy had not yet predicted.

    Chief Warrant Officer 5 Michael Updike, one of the architects of the 390A program,  said at the Defense One event that the robotics technician military specialty will include aspects of intelligence analysis, command and control, communications, software development under extremely difficult and disconnected conditions, and even acquisition. 

    “What it encompasses is different pillars of not only software engineering and mechanical engineering but your data science, understanding research and development,” Updike said. “They have to do all that innovation in the field without…large-language models that are connected to the internet.”

    The job will also entail rapidly inventing new capabilities on the ground, much as Ukrainian forces have done, and working with contractors who can do so as well.

    During the first phase of the 19-week 390A training course, a group of students improved hardware and software to allow drones under electromagnetic attack to communicate with one another in a mesh network. 

    “They took a high-definition, $1,000 camera, put it on this quadcopter. They were being jammed in frequencies but they were using a mesh network. So, even though one node was taken out, they had multiple nodes where they could still have communications with the quadcopter or the unmanned drone to be able to still accomplish that mission,” Updike said.

    To teach the skills of constant adaptation, Slider said,  much of the course is designed to “drive failure” and force reconsideration. That’s something that the course architects themselves had to do when f, the students began, in Slider’s words, “outpacing the curriculum” four weeks in. They were too good at drone warfare, which meant that the course wasn’t hard enough. So Slider worked with academics, sources, and international partners to make the course more difficult, adding additional weeks of training. 

    “The problems that they were able to solve during the culminating exercise were much closer to the need that the operational force was communicating to us,” the general said.

    The 390A program won’t be limited to Fort Bragg. This week, acting Army Secretary Adam Telle said, “Traditionally, historically, those types of [military occupational specialty] might live at — with the special forces and never be proliferated throughout the Army.” 

    Telle said that his office was working with the office responsible for special operations and low-intensity conflict to expand the specialty but did not provide further details.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD’s KARL kernel-address randomization and its SMAP and SMEP hardware protections. Security firm Calif, which found and reported the flaws, published a detailed writeup and full proof-of-concept code after OpenBSD shipped

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Noma Labs found a high-severity Claude Code Desktop flaw that let malicious HTML files steal local credentials and…

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor’s own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run a backdoor. Google Threat Intelligence Group, Mandiant, and ManageEngine’s Threat Analysis

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversary-in-the-middle (AitM) phishing framework designed to harvest their Google account credentials and multi-factor authentication (MFA) codes. The activity is being tracked by

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶