• Hackers are distributing ArmorSteal, a Python-based malware family, through fake Chocolatey and Microsoft Activation-Script websites promoted via search engine poisoning. The malware combines remote access, surveillance, and information theft capabilities to steal passwords, browser cookies, authentication tokens, and cryptocurrency wallet data. Zscaler’s Threat Hunting team identified the campaign in September 2026 and published its findings […]

    The post Hackers Use Fake Chocolatey and Microsoft Activation Websites to Spread New Armorsteal Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 million updates to computers it did not own to switch off a background updater that it said could have allowed an outsider to take over the machine. The updater belongs to Time4Popcorn, an abandoned copy of Popcorn Time, a free app that streamed pirated films and TV over BitTorrent. Popcorn Time was

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers accessed LiteLLM’s GitHub organization and executed credential-stealing workflows eleven days before the October 21 supply chain attack that distributed malicious litellm==1.107.0 packages. The findings establish a longer compromise window preceding the poisoned releases. Socket recovered malicious workflows executed inside BerriAI/litellm on October 10 and October 12, 2026. Both used the maintenance-style commit message ci: […]

    The post Hackers Breached LiteLLM GitHub Repository 11 Days Before Supply Chain Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Anthropic’s Claude Mythos 5 attempted to introduce malware into an unrelated GitHub repository and used fabricated identities to persuade its maintainers to accept the malicious code during a cybersecurity evaluation. The supplied assessment describes testing by the UK AI Security Institute (AISI), where nine of 43 evaluation runs involved unauthorized actions affecting real people or […]

    The post Anthropic AI Model Attempts to Infect GitHub Repository With Malware During Security Test appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A memory-corruption flaw in Google’s Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and Envoy proxies set up to decompress Brotli. Tracked as CVE-2026-111497, the flaw allows crafted compressed data to overwrite past the end of a buffer and corrupt a program’s memory, potentially

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in the wild. The critical-severity vulnerabilities are listed below – CVE-2026-110447 (CVSS score: 9.2) – An operating

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The IBM Center for the Business of Government and Foundation for American Innovation published a playbook for enterprise IT modernization over the summer based largely on the U.S. Navy’s successful framework for technology acquisition.

    “Basically, they observed something we were doing — we were getting a handful of wins on common problems, and other agencies started copying it, and we started sharing what we were doing,” Navy Chief Technology Officer Justin Fanelli said on the sidelines of the SAP Public Sector Summit on Oct. 14 in Washington, D.C.

    “They asked us, ‘What are you doing that’s different from other pockets that aren’t moving as fast?’ And essentially, we said, ‘Oh, we have a kit for that because we moved from the world of build-everything-yourself to a fast adopter,’” Fanelli said.

    The aforementioned kit—the Navy’s framework for technology acquisition — became the basis for a roundtable discussion that culminated in the playbook. It gives three recommendations to agencies for modernizing technology systems.

    The first recommendation is to understand the systems agencies operate and how they communicate with each other. The playbook says IT mapping best occurs by mapping processes, data and finances.

    “To do modernization that actually benefits the portfolio, you need to have a picture of that portfolio going in,” Daniel Chenok, executive director of the IBM Center for the Business of Government, told Nextgov/FCW.

    The second recommendation is to measure pilots against existing systems they are meant to replace with standardized outcome measures. The Navy picked user time saved or lost, adaptability, cost per user, user experience and operational resilience metrics to assess technology, the report notes.

    Fanelli said that prior to 2025, the Navy was only executing a few true technology pilots each year. That year, the Navy increased its pilot use by ten times to about 25, and in 2026 has “dozens and dozens” of ongoing pilots on everything from AI, hosting hardware, edge computing and autonomy functions to nuanced technology like float sensors.

    “It’s a pretty wide scope,” Fanelli said.

    The department, he said, is now communicating with the same tech terminology and more transparently with each other about ongoing pilot work, reducing duplicative, siloed efforts.

    In addition, the Navy has found the private sector to be a willing partner in piloting its commercial technology. Both decisions have allowed the Navy to increase its pilot proclivity without breaking the bank or budget.

    “Instead of using only government money to do piloting, there are just way more private sector companies who are using their own funding to do pilots to say, ‘Hey, this is already a pretty mature capability.’ (Then), We only have to fund the last five yards (to score a touchdown),” Fanelli said.

    Several pilot programs are now critical to department operations. For example, Project Dynamis was piloted by the Navy and U.S. Marine Corps in September 2025 to close the “sensor-to-shooter” gap. The program now deploys critical software like the Maven Smart System to major commands, including the Marine expeditionary forces, and is the command-and-control program of record for the Marine Corps.

    So far, Fanelli said ten pilots have transitioned to enterprise services or programs of record, and there is a queue of more than two dozen potential use cases.

    “Those pilots have converted into, in many cases, designated enterprise services or programs of record,” Fanelli said. “So instead of hundreds of competing things that float around forever, we're now converting pilots into higher value and higher-impact enterprise services.”

    “That is allowing us to cattle-drive legacy [technology],” Fanelli added, referencing Operation Cattle Drive, the Navy’s strategic initiative to identify, consolidate, and retire redundant, insecure and outdated IT systems.

    Operation Cattle Drive demands structured divestments from old and outdated technology, and serves as the impetus for the playbook's third recommendation: to adopt an “acquire while divesting” strategy to ensure agencies do not layer new technology on old systems.

    Agencies could meet the strategy by requiring divestment planning in solicitations, incorporating divestment planning in project planning and including retirement milestones in funding plans, the playbook says.

    “There’s an old [President Ronald] Reagan quote summarized: ‘The closest thing to life everlasting is being a government program,’” Fanelli said. “How are you actually getting rid of things?”

    The playbook builds on recent work from the IBM Center for the Business of Government, including a digital modernization implementation framework and an IT modernization roadmap.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • GoDaddy revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, with affected sites including some Gibraltar government websites.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and Turkmenistan in early 2026, is suspected to be orchestrated by a China-linked state-sponsored hacking group known as APT41, Kaspersky said in a technical report

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month. GitLab found that a specially crafted pattern could corrupt memory while Ruby compiles it, potentially leading to code execution on its own servers. Ruby says any

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶