• OPNsense has released an update focused on eliminating security vulnerabilities and improving firewall performance.

    The latest version includes third-party security updates, firewall improvements, and fixes that make the system more reliable for network administrators and security professionals.

    The development team has made eliminating unsafe shell usage a primary focus. This is important because shell execution has historically been the source of multiple security problems in the project.

    These changes strengthen the firewall’s overall security posture. By removing unsafe shell commands from the backend, OPNsense reduces the risk of attackers exploiting these vulnerabilities.

    Addressing Security Concerns Through Code Improvements

    A security researcher at Pellera Technologies, working with the Trend Zero Day Initiative, reported an issue that helped guide these improvements.

    The update also includes securing execution commands in recovery scripts and implementing safer file handling through the file_safe() function across various system components.

    Based on user feedback from the previous 25.7.6 release, the team has significantly improved the firewall live log feature.

    These improvements include faster data rendering, optimized view buffering, and fixed data ordering issues.

    The system now prevents unnecessary repeated host lookups, speeding up the display of logged network traffic for administrators monitoring it in real time.

    Additional performance enhancements include improved grid responsiveness in the user interface and better keyboard shortcuts for advanced settings and help sections.

    The OPNsense team continues prioritizing security and stability for network protection. The release includes updated versions of essential security tools.

    Suricata has been upgraded to version 8.0.2 for improved intrusion detection capabilities, while Unbound reaches version 1.24.1 for enhanced DNS security.

    PHP, SQLite, and StrongSwan have also received security updates to maintain system integrity.

    The team is working on several exciting features coming to version 25.7.x, including a neighbor watch daemon for network monitoring, a new NDP proxy plugin for IPv6 networks, and a community-created theme option.

    A hotfix release was also issued to address a high-availability synchronization issue in specific edge cases, ensuring smoother deployments for users running multiple firewalls in failover configurations.

    Follow us on Google News, LinkedIn, and X for daily cybersecurity updates. Contact us to feature your stories.

    The post FreeBSD-based OPNsense Firewall Released for Security Issues and Improvements appeared first on Cyber Security News.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Chinese cyber-espionage groups have once again demonstrated their determination and technical prowess in targeting U.S. organizations with ties to international policy-making, highlighting the persistent and evolving threat posed by state-linked cyber actors. Evidence indicates that the attackers sought to establish a stealthy, persistent presence within their target’s network. The initial breach was preceded by a […]

    The post Influence of Chinese Hacker Organizations on U.S. Foreign Policy appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers at Hybrid Analysis have uncovered a sophisticated two-stage malware campaign targeting cryptocurrency wallet users and browser data. The newly identified malware duo, dubbed LeakyInjector and LeakyStealer, represents a significant threat to digital asset security through its advanced evasion techniques and comprehensive data theft capabilities. Advanced Injection Techniques Evade Detection LeakyInjector serves as the […]

    The post Attackers Deploy LeakyInjector and LeakyStealer to Hijack Crypto Wallets and Browser Info appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have flagged a malicious Visual Studio Code (VS Code) extension with basic ransomware capabilities that appears to be created with the help of artificial intelligence – in other words, vibe-coded. Secure Annex researcher John Tuckner, who flagged the extension “susvsex,” said it does not attempt to hide its malicious functionality. The extension was uploaded on

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • In July 2025, Doctor Web’s anti-virus laboratory received a critical alert from a government-owned organization within the Russian Federation. The institution suspected a network compromise after discovering spam emails originating from one of their corporate email addresses. What began as a routine investigation quickly escalated into the discovery of a sophisticated targeted attack orchestrated by […]

    The post Cavalry Werewolf Launches Cyberattack on Government Agencies to Deploy Network Backdoor appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Russia-aligned threat actor Sandworm has intensified its destructive cyber operations against Ukrainian organizations, deploying data wiper malware to cripple critical infrastructure and weaken the nation’s economy. Unlike other Russia-aligned advanced persistent threat groups that primarily engage in cyberespionage activities, Sandworm’s operations are characterized by their explicitly destructive intent. According to the latest ESET APT Activity […]

    The post Sandworm Hackers Target Ukrainian Organizations With Data-Wiping Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A recently disclosed vulnerability in the Amazon WorkSpaces client for Linux exposes a critical security flaw that could allow attackers to gain unauthorized access to user environments due to improper handling of authentication tokens. The issue, tracked as CVE-2025-12779, has prompted urgent action from Amazon Web Services (AWS) and serves as an essential reminder for […]

    The post Amazon WorkSpaces for Linux Vulnerability Exposes Valid Auth Tokens to Attackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Security researchers have uncovered severe remote code execution vulnerabilities in three official Claude Desktop extensions developed and published by Anthropic. The Chrome, iMessage, and Apple Notes connectors, which collectively boast over 350,000 downloads and occupy prominent positions in Claude Desktop’s extension marketplace, all contained the same critical security flaw: unsanitized command injection. The vulnerabilities, confirmed […]

    The post Claude Desktop Hit by Critical RCE Flaws Allowing Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Today, guardians go to space only in popular misconception, but tomorrow? There might be solid tactical reasons to put Space Force personnel in orbit, argues a new report from the Mitchell Institute for Aerospace Studies. 

    “The adaptability and flexibility of human decision-making, as well as their ability to conduct a variety of mission operations, could present fundamental challenges to an adversary’s decision calculations,” the report said. 

    Thursday’s report, titled “A Broader Look at Dynamic Space Operations: Creating Multi-Dimensional Dilemmas for Adversaries,” says the Space Force must make all of its systems, not just its satellites, more maneuverable, flexible, and survivable amid China’s rapid push to improve technology for tracking and targeting U.S. military forces. 

    Charles Galbreath, the former Space Force officer and current senior fellow at the Mitchell Institute who wrote the report said putting guardians physically in space may also give the military an advantage. 

    “It is important to remember the fact that the most flexible system ever launched into space by the United States is the human being,” the report said. “Just as human astronauts were essential to the repair of and upgrades to the Hubble Space Telescope and the rescue of several other satellites, guardians in space may be essential for future Space Force missions.”

    The report’s emphasis on making Space Force architecture more dynamic—defined as a strategy of upgrading assets for increased versatility, adaptability, and maneuverability—comes as reports of counter-space weapons increase, from jamming GPS in warzones near Russia to enhanced satellite maneuvering displays by China, according to analysts.

    Repairing and refueling future satellites is a major part of making U.S. assets survivable against adversaries, but the service also needs to update command and control systems on the ground and use Space Force assets like the highly-secretive X-37B spyplane for operational mission instead of experimental ones, according to the report. The report also says putting humans aboard crucial space assets raises the stakes if an enemy decides to strike.

    “There is, of course, another facet of humans in space, which is the potential to raise the threshold of acceptability for hostile actions that may be lethal to humans,” the report said. “Harming an uncrewed satellite is one thing; harming a space station with military crew on it is a completely different risk calculus for an adversary to consider.”

    John Shaw, the former deputy leader of U.S. Space Command, said during a virtual Mitchell Institute event Thursday that he’s been skeptical about putting guardians in space, especially as autonomous abilities become more prevalent. But the retired Space Force officer also noted it’s “inevitable,” and pointed to strategic circumstances where it could make sense.

    “It's probably when we're projecting power across great distances, and it's probably so they can be closer to an intense command and control capability where you need humans in the decision making,” Shaw said.

    While the service has not sent any of its guardians into space for military operations, it has loaned some of its service members to NASA for space exploration. Mike Hopkins became the first guardian in space when he transferred to the service branch from the Air Force aboard the International Space Station in 2020. Space Force Brig. Gen. Nick Hague served as the NASA SpaceX Crew-9 commander and returned from outer space earlier this year after a 171-day mission.

    “I think that the Space Force needs to be thinking about that inevitability and what steps it will take to get there. We can't wake up one day and say, ‘My gosh, we need guardians in space,’” Galbreath said during the event. “We needed to make that decision 10 years ago, because it's going to take that long to develop the pipeline and the training and the capabilities in order to enable that.”

    Chief of Space Operations Gen. Chance Saltzman announced in September at the Air & Space Force Association’s conference that the service is working on a planning document predicting future enemy trends through 2040 that will help officials better acquire key technologies and prioritize missions. Among the items on the service’s wishlist is creating a “live aggressor squadron” that would allow guardians to practice fighting off attacks on satellites. 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • NVIDIA has patched a critical vulnerability in its App for Windows that could allow local attackers to execute arbitrary code and escalate privileges on affected systems.

    Tracked as CVE-2025-23358, the flaw exists in the installer component. It poses a significant security risk to Windows users running the application.

    The vulnerability stems from a search path element issue within the NVIDIA App installer, classified under CWE-427.

    An attacker with local access and low privileges can exploit this flaw by manipulating the search path to inject malicious code.

    Vulnerability Details and Technical Impact

    The vulnerability requires user interaction to trigger, but successful exploitation grants complete code execution and allows privilege escalation across the entire system.

    CVE-2025-23358 with a CVSS v3.1 base score of 8.2, the vulnerability carries a High severity rating.

    The attack vector is purely local, meaning an attacker must have physical or logical access to the target machine.

    However, the low attack complexity, combined with the ability to escalate privileges, makes this flaw particularly dangerous in multi-user environments and corporate settings.

    NVIDIA App for Windows versions before 11.0.5.260 are vulnerable to this attack. Users running any version before this patch release remain exposed to potential exploitation.

    The company recommends that all affected users immediately download and install version 11.0.5.260 or later from the official NVIDIA App website to mitigate the risk.

    CVE IDAffected ProductSeverityCVSS Score
    CVE-2025-23358NVIDIA App for Windows (all versions prior to 11.0.5.260)High8.2

    This vulnerability underscores the importance of keeping third-party software up to date, even for supplementary applications like NVIDIA’s utility software.

    Attackers frequently target installer components because they often run with elevated privileges during installation.

    To protect your system, download the latest NVIDIA App version from the official NVIDIA App site. The patch directly addresses the search path handling issue and eliminates the code execution vector.

    Organizations managing multiple NVIDIA-equipped workstations should prioritize deploying this update across their infrastructure.

    Security teams should verify their software inventory to identify systems running older NVIDIA App versions and coordinate rapid patching efforts.

    Follow us on Google News, LinkedIn, and X for daily cybersecurity updates. Contact us to feature your stories.

    The post NVIDIA NVApp for Windows Vulnerability Let Attackers Execute Malicious Code appeared first on Cyber Security News.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶