ADMIN.FOUNDATION – Page 93 – cybersecurity / defense / intelligence

The Cyber Guild’s Uniting Women In Cyber Conference, Oct. 8, 2026

·

Blogs
This week in cybersecurity from the editors at Cybercrime Magazine

Sausalito, Calif. – Sep. 21, 2026

– Listen to the Podcast Episode

In a recent Cybercrime Magazine Podcast episode, advisory board member Hillary Coover, MBA and event program lead Lara Meadows, CISSP, CISM, volunteers at The Cyber Guild, join host Heather Engel to discuss the organization’s story, including their mission to build an inclusive cyber workforce, the RISE Mentorship Program, and upcoming Uniting Women In Cyber Conference (UWIC), which takes place on Oct. 8 in Tysons, Va.

Coover is Senior Technical Business Development Manager, National Security, at AWS (Amazon Web Services), and Meadows is Global Vice President, Sales Engineering, at Dataminr.

The Cyber Guild Foundation, established in 2021 as a not-for-profit 501(c)(3), positions mission-driven people at the center of a resilient cybersecurity ecosystem. The organization is a vibrant and growing community of cybersecurity leaders, professionals, allies, and partners advancing an inclusive workforce, accelerating innovation, and shaping a safer, more secure future for all.

At UWIC 2026, the theme is Creative Cyber: Amplified Intelligence, reflects the energy and evolution of cybersecurity today; Human ingenuity and AI come together to outpace emerging threats and build a more creative, resilient future.

Listen to the Podcast Episode

Cybercrime Magazine · Uniting Women In Cyber. Upcoming Conference & More. Hillary Coover & Lara Meadows, The Cyber Guild.

Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:
- SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
- NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
- HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
- VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
- M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
- BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
- PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
- PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
- RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.
Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

The post The Cyber Guild’s Uniting Women In Cyber Conference, Oct. 8, 2026 appeared first on Cybercrime Magazine.
¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
China-Linked FamousSparrow Deploys SparroWocky Backdoor in Latin America

·

backdoor, China, Cyber Attack, Cyber-Attacks, cybersecurity, FamousSparrow, Latin America, Malware, Security, SparroWocky

FamousSparrow is targeting Latin American governments with SparroWocky, a new C++ backdoor that exfiltrates files, takes screenshots and evades security tools.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
PAYLOAD Ransomware Abuses Active Directory Group Policy to Disrupt Entire Windows Domain

·

cyber security, Cyber Security News, Ransomware, vulnerability, Windows

A ransomware incident in which attackers used Active Directory Group Policy to disrupt operations without deploying a Windows encryptor or leaving malware running on endpoints. In April 2026, the attackers accessed a FortiGate SSL VPN using compromised domain credentials, then gained domain-admin-equivalent rights. PAYLOAD Ransomware On April 13, Kaspersky’s Global Emergency Response Team (GERT) created […]

The post PAYLOAD Ransomware Abuses Active Directory Group Policy to Disrupt Entire Windows Domain appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New Rapuncel Infostealer Abuses Microsoft-Signed Driver to Disable 145 Security Tools

·

cyber security, Cyber Security News, Windows

A newly identified information-stealing campaign, tracked as Rapuncel, is exploiting a Microsoft-attested kernel driver to terminate up to 145 antivirus (AV) and endpoint detection and response (EDR) processes. This allows attackers to steal browser credentials, cryptocurrency wallet data, chat tokens, and Windows credentials. Researchers from the LastPass Threat Intelligence, Mitigation, and Escalation team, in collaboration […]

The post New Rapuncel Infostealer Abuses Microsoft-Signed Driver to Disable 145 Security Tools appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
ClickFix Attacks Spread ChainScript RAT via Fake Spotify and Teams Installers

·

ChainScript, ClickFix, cybersecurity, Malware, RAT, Security, Smart Contract, Windows

Blackpoint Cyber found ChainScript, a Node.js RAT spread through fake Spotify, Zoom and Teams installers that uses Polygon smart contracts to locate its C2 server.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
BigDiskBuster Windows Defender DoS Vulnerability Blocks Platform and Signature Updates

·

CVE/vulnerability, cyber security, Cyber Security News, Dos Attack, vulnerability

A recently published proof-of-concept project named BigDiskBuster claims to prevent Microsoft Defender from completing its platform and security intelligence signature updates. This could create a potential denial-of-service condition, leaving Windows endpoints operating with outdated anti-malware protection. The project, published on GitHub by the user “MSNightmare,” is described as a “Windows Defender Update Denial of Service […]

The post BigDiskBuster Windows Defender DoS Vulnerability Blocks Platform and Signature Updates appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
North Korea’s Hangro VPN Certificate Exposes Internal Network and Russia-Linked Infrastructure

·

cyber security, Cyber Security News

North Korea’s Hangro VPN and mail platform has deployed a new certificate hierarchy that exposes an apparent cross-border management environment spanning systems in Pyongyang and Russia’s Far East. The certificate’s Subject Alternative Name field lists the platform’s publicly exposed servers alongside a carrier-grade NAT address, offering an unusual glimpse into how the service may be […]

The post North Korea’s Hangro VPN Certificate Exposes Internal Network and Russia-Linked Infrastructure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Hackers Abuse Microsoft Teams to Pose as IT Support and Steal Employee Passwords

·

cyber security, Cyber Security News, Microsoft

Threat actors are increasingly abusing Microsoft Teams’ external chat capabilities to impersonate corporate IT help desks. They trick employees into installing malware, granting remote access, and stealing Windows credentials. These attacks exploit a simple vulnerability: employees tend to distrust suspicious emails but often do not apply the same caution to collaboration platforms like Teams. Attackers […]

The post Hackers Abuse Microsoft Teams to Pose as IT Support and Steal Employee Passwords appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New Cache Key Injection Attack Lets Hackers Bypass Access Controls and Poison Nginx Caches

·

cyber security, Cyber Security News

Security researchers have unveiled a cache poisoning technique called cache key injection that lets attackers bypass access controls, expose cached sensitive pages, trigger denial-of-service conditions, and potentially execute stored cross-site scripting (XSS) attacks against vulnerable Nginx deployments. Research by YesWeHack researcher Alex Brumen highlights flaws that occur when web caches create cache keys by directly […]

The post New Cache Key Injection Attack Lets Hackers Bypass Access Controls and Poison Nginx Caches appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Hackers Weaponize Terraform Lock Files to Infect DevOps Engineers With macOS Backdoors

·

cyber security, Cyber Security News, macOS

North Korea-linked threat actor TraderTraitor has expanded its developer-focused intrusion activity beyond cryptocurrency targets, using weaponized Terraform lock files in fake job-interview repositories to infect DevOps engineers with macOS backdoors. SentinelOne identified an Indian IT services provider compromised with the same FLATROOF and ROOFDECK implants previously linked to the April 2026 KelpDAO-LayerZero attack. The campaign […]

The post Hackers Weaponize Terraform Lock Files to Infect DevOps Engineers With macOS Backdoors appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

This week in cybersecurity from the editors at Cybercrime Magazine