-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google’s Brotli decoder library to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below – CVE-2026-111497 (CVSS score: 9.2) – An unchecked return value vulnerability in
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The Cybersecurity and Infrastructure Security Agency (CISA) offers two free assessment tools, ScubaGear and ScubaGoggles, to help organizations identify insecure configurations in Microsoft 365 and Google Workspace. Developed under the Secure Cloud Business Applications (SCuBA) project, these tools compare cloud tenant settings against established security baselines and generate reports that highlight configuration gaps. CISA established […]
The post CISA Offers Free Security Tools to Protect Microsoft 365 and Google Workspace From Cyber Threats appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Advertising infrastructure is increasingly being repurposed as a surveillance channel that can profile internet users and track their movements across sensitive locations, according to research from TrendAI. Investigators identified an operation, referred to as SHADOW-EARTH-79, that made unusual ad purchases and used a reconstructed software interface, suggesting its primary purpose is intelligence gathering rather than […]
The post Hackers Abuse Online Ads to Track Starlink Users and Spy on Individuals Across 49 Countries appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Research has identified 42 weaponized GitHub repositories belonging to 11 legitimate owners in the testmetest npm campaign, exposing an operation that combines credential theft, development-tool execution hooks, and malicious package publishing. The findings establish that the campaign extended beyond attacker-controlled test packages into established developers’ repositories. Researchers Guy Korolevski and Yair Benamou uncovered oversized payload […]
The post Malicious npm Campaign Hijacks 42 GitHub Repositories to Steal Credentials and Spread Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers are exploiting growing interest in AI tools to spread Yoba malware through fraudulent GitHub projects that claim to offer non-existent desktop applications named GPT-5.6 Sol, GPT-6 Astra, and Claude Opus. According to Check Point Research, these repositories and GitHub Pages attracted users through apparent SEO poisoning, with download buttons that delivered malicious ZIP files. […]
The post Hackers Use Signed ChatGPT and Claude Binaries to Deploy Yoba Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cisco Talos identified roughly 1,400 scam emails delivered through legitimate Staples and Dell order notification systems, exposing how attackers can insert fraudulent support instructions into authenticated transactional messages. The findings fit a wider pattern: Talos observed abuse across more than 25 legitimate platforms over the past year, including collaboration, productivity, payments, file sharing, surveys, and […]
The post Cisco Talos Uncovers 1,400 Scam Emails Sent Through Staples and Dell Order Notification Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A few years ago, a port call in the Middle East might mean bottomless-mojito brunches in Bahrain, hitting the indoor ski slopes in a Dubai megamall, or a desert safari in Qatar. But since Operation Epic Fury began eight months ago, U.S. warships in the theater have basically had just one option: Diego Garcia, some 2,500 miles away.
It’s not great for morale, but the consequences go beyond disgruntled sailors who tire of fishing off the British island in the Indian Ocean. The remote coral atoll lacks the pierside infrastructure that many Gulf, Mediterranean, and Pacific ports can offer. As the Navy stretches its fleet with longer deployments and fewer port calls, warships are losing the ability to do crucial mid-cruise maintenance.
“When a ship is deployed overseas for longer than the nominal seven-month deployment period, that increases the amount of time for equipment on the ship to break, get worn down, or worn out. As a result, when the ship finally does make it back to the United States, it might need more maintenance and repair work than it would have needed if the deployment had not exceeded seven months,” said Ron O’Rourke, who retired this year after more than 40 years as a naval analyst for the Congressional Research Service.
“That can increase the time and cost to do the maintenance and repair work, and an increased time needed to do the work could prevent other ships from entering maintenance and overhaul as scheduled. This can lead to a cascading effect in delaying maintenance on other ships.”
A Navy officer with expertise in maritime security agreed, noting that “even deployed ships need time alongside”—that is, moored directly to a pier or tender vessel for what’s called voyage repair availability—“to fix broken things, remediate rust, paint, etc. If these ships are kept out for 10 to 12 months, they’ll be missing other scheduled maintenance events and be much more broken than they should be when they get home.”
The Navy itself nodded to the problem in a recent press release about the aircraft carrier Abraham Lincoln, which is changing homeports to receive overdue depot-level maintenance after a nearly 11-month deployment.
“Regularly scheduled depot-level maintenance maximizes the lifespan of our Navy vessels and keeps our fleets lethal, modern, and ready to defend the nation.”
The Lincoln’s 321-day deployment—and the carrier Gerald R. Ford’s 326-day deployment before it—set records for consecutive days at sea and length of deployment, respectively. But a few Arleigh Burke-class guided missile destroyers are on track to far surpass those numbers. And Navy officials recently told families in Yokosuka, Japan, that for the foreseeable future they should expect all ships to deploy for 10 to 12 months.
A Navy spokesperson said they would “not discuss specific readiness rates, operational requirements, force-allocation deliberations, or future force movements. However, we remain committed to regular maintenance to maximize the lifespan of our Navy vessels and keep our fleets lethal and ready to defend our nation.”
‘It’s empty’
Instead of the luxury hotels and hundreds of restaurants sailors can visit in ports like Dubai and Bahrain, Diego Garcia has a military supply base and a small town with a handful of restaurants. And since virtually every ship deployed in the region is using the island for port calls and resupply, store shelves don’t always stay stocked.
The guided-missile destroyer John Finn, which left Japan in January, pulled into Diego Garcia after months at sea.
“Everybody’s going to the ship store and it’s empty,” a sailor’s spouse told Defense One. “You can find ice cream, but you’re not going to find your necessities that you need to function.”
The ship had pulled in because it was “empty,” the spouse said, after having spent all of its weapons in the campaign against Iran. “So they had to spend that week resupplying.”
The spouse of a sailor on the Mustin, another guided-missile destroyer, said her husband was able to get socks but not shoe polish at the exchange on base during the only port call the ship has made since leaving Japan in April.
“He got off like, preparing to be able to get the stuff that he needed right now, and he goes, ‘They don’t have shit,’” she said. “They didn’t have anything.”
For the Mustin crew, the port call seemed like a welcome respite from their months at sea, until they were told just before getting off the ship that they would not return in August as originally planned, but stay deployed until April 2027, the spouse told Defense One.
“The sad part is, they were actually in good spirits,” she said. “And then I know things went really rowdy in Diego Garcia because they were given the bad news literally the day before they pulled in. … There was one of the nights in Diego Garcia that two sailors ended up in the ER with alcohol poisoning. And so then they lost their last night of liberty because of it.”
O’Rourke said the British island “can provide an opportunity to be on land for a while, and to engage in certain R&R activities. But the options for doing R&R things at Diego Garcia are a lot more limited than they are at other ports, such as Singapore or somewhere in the Mediterranean.”
Ralph Cossa, chairman of the Pacific Forum, was less diplomatic.
“Please shoot me if that’s the only R&R I’m going to get in 10 months,” he said.
Mail delays
Sailors have asked their families and friends to send them supplies, but mail is taking three to six months to reach the destroyers, the spouses said.
The Mustin spouse sent her husband six boxes at the end of June; he received one in September and the rest in October. The John Finn spouse said it took four months for a few packages to reach her sailor, and some that “took even longer than six months to get out there.”
“I think I’ve sent my husband the same thing three different times now, and I’m like, well, hopefully one of these gets to you in the next two or three months, and whenever the other ones show up, you’re just gonna have an abundance. Share it with somebody else.”
Both spouses expressed concern about the sailors’ ability to vote in the upcoming elections, given the mail delays. The John Finn spouse said her husband, who has done multiple deployments in the past, said, “There has been no conversation about voting because we don’t have time for it. We don’t have time to even have conversations because we are busy doing all of this other crap that nobody wants to be doing to begin with.”
By contrast, sailors aboard the George Washington aircraft carrier generally “can expect to receive mail shipped from the states within weeks,” Lt. Cmdr. Bobby Dixon, a ship spokesperson, told Defense One. “However, this can take longer when deployed overseas. We work with our U.S. military logistics teammates to minimize mail delays and we are committed to ensuring all service members can exercise their right to vote.”
Maintenance
Navy ships, like any other vehicles, require a certain amount of maintenance to continue working. There are three levels of repairs: basic, intermediate, and depot-level maintenance.
Deployed ships are under stress from the salt water and sea air, and more things are likely to wear down or break when they’re being used frequently for long periods of time. And the forward-deployed destroyers based in Yokosuka—including the John Finn and the Mustin—are usually in a cycle in which they spend just a few months at sea before heading back home for a few months of maintenance.
Now those two destroyers are slated to be at sea for a year or more, which will mean they will miss the beginning of their planned five-month shipyard maintenance periods. And the Mustin spouse said there were already some maintenance problems on that ship when it shifted homeports from San Diego, Calif., to Yokosuka, just before it left for deployment.
“Their maintenance log was 100 percent not empty,” and there were a lot of things “that they should have been turned around for,” she said. The ship was told to head to Japan anyway.
And though the sailors were told their lone port call was planned so they could perform maintenance, “they never got anything fixed when they went to Diego Garcia. … They didn’t actually go up pierside.”
O’Rourke said there are consequences for delays to the intermediate and depot levels of maintenance.
“If you have a period where the total fraction of the Navy being on deployment overseas is elevated above what the notional model calls for, there will be a period downstream where you have to pay the piper, where the fraction of the Navy that will be available for deployment will be less than what the notional model called for because you're making up for that earlier period,” he said.
It’s not a new problem.
“Years ago, the Navy got itself into a hole on conventional surface ship maintenance due in part to what turned out to be underestimates in planning, scheduling, and funding that work. Since then, the Navy has been working for years to dig itself out of that conventional surface ship maintenance hole. Perturbations in ship maintenance and repair schedules caused by ships being used for extended deployments can add to the Navy’s challenge of digging itself out of that hole,” O’Rourke said.
So the service needs to give its ships the maintenance they need. But that’s unlikely to happen while the Navy is keeping so many ships in theater, a second Navy expert said.
“The end result is that deferred maintenance becomes more and more problematic, causing knock-on effects like parts and equipment wearing out or breaking before they should. In the end, these ships will reach their end of service life well before their scheduled date.”
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
European leaders meet next month to discuss ways to help Ukraine fill a projected €70 billion budget deficit. But their capacity for direct aid is constrained by efforts to rearm their own militaries amid a challenging economic environment, while Belgium continues to oppose the conversion of frozen Russian assets into a loan.
Western financial aid—€170 billion ($189.5 billion) since 2022—has been key to helping Kyiv stay financially afloat since Russia's wider invasion, according to the Kiel Institute. But the U.S. has drastically cut aid under the second Trump administration, leaving the European Union, Canada, Japan, Norway, and the United Kingdom to shoulder most of the burden.
Earlier this year, the EU approved a plan to lend Ukraine €90 billion to Ukraine through 2027, two-thirds of which will go to buy weapons and the rest to budgetary support. Around €14 billion has been disbursed to date, and by year's end that figure should grow to €45 billion.
But Russian attacks on critical infrastructure and other stresses mean that Kyiv is still looking at a budget deficit of around €70 billion for 2027.
European governments are spending more on their own defenses. In 2021, the defense budgets of NATO's European members averaged around 1.6 percent of GDP, below NATO’s then-target of 2 percent. The alliance has since boosted its goal to 2.5 percent of GDP, and at last year's summit, committed to raising ‘core’ defense expenditure to 3.5 percent over the next decade.
At the same time, they are facing rising debt and slowing economies. Eurozone countries have an average debt-to-GDP ratio of nearly 89 percent, and nearly 83 percent in EU nations generally. Buffeted by the trade wars and energy shocks of the Trump administration, eurozone economies will grow only 1.1 percent in 2026, according to a recent projection by the International Monetary Fund. Some northern EU members are in much better fiscal shape than their southern and western counterparts.
The budget picture is getting cloudier. Annual inflation in the eurozone rose to 3.8 percent in September, according to Eurostat, well above the European Central Bank (ECB) target of 2 percent. The ECB raised interest rates at its June and September meetings, and is expected to deliver another hike at one of the year's two remaining meetings. Rising prices may force the ECB to continue tightening policy, raising debt-service payments from government budgets.
Supporting Ukraine remains broadly popular in the EU, but the challenging economic environment makes it a tough sell for governments to increase aid to Ukraine along with their own defense spending. European governments are already facing domestic criticism over rearmament. Italy, for example, was approved for an allocation of up to €14.9 billion from the E.U.’s Security Action for Europe (SAFE) loan facility, meant to aid rearmament. Yet Rome requested only about €8 billion from SAFE, as Prime Minister Giorgia Meloni’s government sparred with critics within her own coalition and in the opposition on financing more defense spending with debt.
Frozen Russian assets
EU countries are thus once again looking at alternative methods of backstopping Ukraine’s budget. One of the most obvious options is the conversion of frozen Russian financial assets into a loan to Kyiv.
After Russia's February 2022 invasion, the G7 froze Russian government securities held abroad. As much as $300 billion was impounded as a result and remains in limbo to this day, including about €210 billion held in the European financial system.
While the principal has remained untouched, the EU has begun to use the interest income on those securities to help Ukraine, on the grounds that Russia, as aggressor, should pay for the damage caused to Ukraine. That has generated about €8 billion, of which €3.8 billion has been delivered to Ukraine, and €4.2 billion has been reserved to repay E.U. or G7 loans to Ukraine.
In September, Germany and other E.U. members revived the topic of converting the Russian assets into a loan for Kyiv, POLITICO reported. Berlin views the step as a ‘win-win’ for the E.U., enabling the bloc to help Kyiv address its financial needs, while replacing some of the funds that would be reserved for Ukraine in the E.U.’s upcoming multi-year budget.
But the politics around seizing the Russian assets have barely budged.
Belgium is the custodian of much of those Russian funds, which are housed in the Brussels-based Euroclear. The Belgian government blocked a 2025 proposal to seize the funds, fearing that it alone would bear the legal and financial risk of seizing the funds. Earlier this year, the Bank of Russia sued Euroclear in a Russian court for the funds, arguing that they were illegally seized. The court backed the Russian central bank’s challenge in a ruling two months later, though it lacks jurisdiction to enforce the judgment.
Concern over the legal risks means Brussels will likely stymie the proposal again.
“I am certain that the European Commission will not make proposals to meet Ukraine’s financing needs through a new operation linked to Russian assets,” Belgian Prime Minister Bart de Wever told reporters on Oct. 21. “I am certain of that, because that is what was said.”
As European leaders prepare for a November meeting to iron out next year's assistance to Ukraine, the EU is already pushing other partners to increase their contributions to Kyiv.
The situation is becoming more urgent. Ukraine has largely exhausted its stockpile of interceptors, leaving its cities and energy grid vulnerable to Russian attack. The Ukrainian military intelligence agency HUR recently estimated that Russia can produce 10,000 long-range strike drones and decoys each month. Mounting damage increases Ukraine’s financial needs, as the country scrambles to keep the lights on.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
New York, NY, 27th October 2026, CyberNewswire
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A year ago, after months of fighting spurred by a century-old border dispute, Thailand and Cambodia struck a peace deal in Malaysia, with help from a small U.S. Army unit that had long been training both Thai and Malaysian troops.
The peace talks were led by the Association of Southeast Asian Nations and the Malaysian Land Forces, which sought the advice of the 5th Security Force Assistance Brigade, the unit’s commander told Defense One.
“They asked our advisors, who were in the space of the land force headquarters, ‘Hey, what should we be thinking about? How can we effectively do this?,” said Col. Daniel Hodermarsky. “And we were reporting back to [U.S. Army Pacific] and leveraging experts from the higher headquarters to provide that advice to more rapidly enable them to to take the lead.”
At the same time, 5th SFAB had a team on the ground in Thailand.
“We didn't have anyone near the front or in the conflict, but we were able to say, "Hey, here's what we're seeing with the country team in Thailand,” Hodermarsky said.
But 5th SFAB—the Army’s only remaining train-advise-assist unit—didn’t just happen to be in the right place at the right time. The specialized unit, made up of experienced conventional troops who have already led a squad or platoon, and so on, has been regularly deploying to INDOPACOM to work with partner militaries since 2020.
“So we're able to give a bit more granular, real-time reporting back to the theater, and we're tied in directly with each country team, security cooperation office and defense attaché wherever we have adviser teams,” Hodermarsky said. “So we can get those liaise cells, those assessment cells, and say, ‘Hey, here's what we're granularly seeing, hearing. Here's what the partner is asking, or here's what they're talking about.”
The Army developed the SFAB concept in 2017, when training and advising the Afghan army had no end in sight and the service was anticipating expanding that mission beyond U.S. Central Command. The idea was that rather than rotating conventional infantry and other units as advisers, the service would cultivate specialized units for the mission. The 1st SFAB deployed in Afghanistan in 2018.
By May 2020, six SFABs had been established, each aligned to a different part of the world. They were staffed by volunteers coming off operational assignments, now experienced and theoretically qualified to train a partner unit.
Last year, Defense Secretary Pete Hegseth ordered most of the SFABs to be dissolved. The units assigned to European and Africa Commands have been shuttered, and their CENTCOM and National Guard counterparts will be gone by year’s end. 1st SFAB was reorganized as Army Security Cooperation Group-South in January.
That leaves only Hodermarsky’s 5th, doing its part to keep the United States in the good graces of INDOPACOM countries that might otherwise align themselves with China’s growing military power.
Some have argued that the moves are shortsighted.
“If the U.S. military continues marginalizing the advising mission or ignoring it altogether, then it means going back to the failed train-and-pray model,” argued a 2025 piece published by West Point’s Modern War Institute. “Fully staffed SFABs are not a luxury; they’re a necessity. Without them, the United States risks being flat-footed in the next war.”
ASCG-S and 5th SFAB’s continued existence are an acknowledgement that the train-advise-assist mission is still important for the DOD’s top two priority regions.
5th’s farflung efforts
In INDOPACOM, 5th SFAB has been shaping militaries from Mongolia to the Philippines, embedding in their professional military academies as well as advising their senior leadership.
“We were in the Philippine Army headquarters and their [Training and Doctrine Command] equivalent for years, as they transitioned from a counterinsurgency focus across the Philippines, to a national-defense focus for their land forces” Hodermarsky said.
His unit’s relationships have also laid the groundwork for major exercises the Army now does in INDOPACOM, including Balikatan and Cobra Gold.
“A persistent advisor team can stay in between the planning conferences and come up with the training plan, if we identify the partner unit that's going to exercise with the 25th Infantry Division or the the 7th Infantry Division,” Hodermarsky said. “And say, what are the training objectives for that Royal Thai Army unit or Philippine Army unit or Malaysian Land Force element? And then help them through that training progression.”
He said some division leaders call the SFAB the WD-40 of U.S. Army Pacific, because their teams ease friction between partner nations and conventional units visiting for exercises.
“We see sort of a reverse slope of advisor presence, as we hopefully work our way out of jobs in certain countries, so that you go from a partner force requesting more hands-on training and capability development through security force assistance, to where they're now really exercising as a flank unit or an integrated part of a U.S. division or brigade that is more capable, more trusted to be on our flank, or integrated into one of our major formations,” Hodermarsky said.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶


