Skip to content

ADMIN.FOUNDATION

  • Hackers Exploit Next.js React2Shell Vulnerability, Breach 766 Hosts in 24 Hours

    ·

    cyber security, Cyber Security News, vulnerability

    Hackers are abusing a critical React2Shell vulnerability in Next.js applications to run an automated credential‑theft operation that has already compromised at least 766 servers in under 24 hours. The threat activity is tracked as “UAT‑10608”. It relies on a custom framework dubbed NEXUS Listener to systematically harvest and organize stolen secrets at scale. Cisco Talos describes UAT‑10608 […]

    The post Hackers Exploit Next.js React2Shell Vulnerability, Breach 766 Hosts in 24 Hours appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Tor-Backed ClickFix Campaign Drops Node.js RAT on Windows

    ·

    cyber security, Cyber Security News, Windows

    Hackers are using a deceptive technique known as “ClickFix” to deliver a sophisticated Node. js-based remote access Trojan (RAT) targeting Windows users. ClickFix, which gained popularity in early 2025, tricks users into interacting with fake CAPTCHA or verification prompts. In this latest campaign, attackers lure victims into executing malicious commands that silently install malware disguised […]

    The post Tor-Backed ClickFix Campaign Drops Node.js RAT on Windows appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Critical Android Flaw Allows Zero-Interaction Denial-of-Service Attacks

    ·

    Android, CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    Google has rolled out its April 2026 Android Security Bulletin, addressing multiple vulnerabilities across the mobile operating system. The most alarming discovery this month is a critical security flaw in the Android Framework that allows attackers to trigger a local denial-of-service (DoS) state. Notably, the exploit requires absolutely no user interaction and operates without needing […]

    The post Critical Android Flaw Allows Zero-Interaction Denial-of-Service Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Attackers Exploit Flowise Injection Vulnerability as 15,000+ Instances Remain Exposed

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    A critical security flaw in Flowise, a popular open-source AI development platform, is currently being exploited in the wild. Tracked as CVE-2025-59528, this code injection vulnerability carries a maximum CVSS score of 10.0. It allows remote attackers to execute malicious code and take complete control of affected servers. Security researchers warn that up to 15,000 […]

    The post Attackers Exploit Flowise Injection Vulnerability as 15,000+ Instances Remain Exposed appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • As aircraft losses mount, Pentagon wants a software fix to see through the fog of war

    ·

    Science & Tech
    The U.S. planes that have gone down in the Middle East since the launch of Operation Epic Fury all lacked the same thing: a common operating picture that includes relevant intelligence and data. The Defense Innovation Unit announced Monday it’s looking for a fix. 

    The request: an open-architecture software suite to fuse real-time data into a credible picture of moving objects, threats, and conditions. The idea is to give pilots a broader understanding of reality in a way that is unremarkable to American motorists with easy access to data about ever-changing conditions but aspirational for air crews flying planes outfitted with antique computer hardware.

    U.S. Air Force officials have warned of a lack of a common operating picture among airframes, particularly transport planes like C-130s, for years. But the loss of seven aircraft in just over a month, due mostly to communication errors and friendly fire, has exposed a big gap in how U.S. planes communicate with one another and with ground forces.

    At the outset of the war on Iran, the U.S. lost three F-15E Strike Eagles due to Kuwaiti friendly fire. In March, they lost a KC-130 refueling tanker when it was involved in a mid-air mishap with a second tanker, due in part to a transponder failure but, again, pointing to a gap in the planes’ ability to fuse data to identify one another.

    During the rescue effort that followed an Iranian shootdown of an F-15E Strike Eagle and an A-10 Thunderbolt on April 3, the U.S. destroyed two MC-130J transport planes when the planes were unable to take off from their makeshift runway, U.S. President Donald Trump said in a press conference on Monday.

    “It was sandy, wet sand, so we thought there may a problem taking off because of the weight of the plane… And then we also had all the men jumping back onto the planes, and they got pretty well bogged down.”

    It’s the sort of problem that access to real-time data on terrain, weather, and other factors could have solved. But most older transport planes lack up-to-date maps or terrain data, forcing crews to “rely heavily on pre-mission planning products, voice updates, and aging platform-specific displays,” according to DIU’s ask.

    Because computer hardware varies widely throughout the U.S. aircraft fleet, the Air Force and aircrews frequently use workarounds such as software-defined radios or off-the-shelf communications equipment to get the data they need. But there is no common standard, which makes it difficult for aircrews to know what data they need.

    “This problem is especially relevant for large, high-value airlift and tanker aircraft that utilize avionics and mission systems that are optimized for more permissive operations,” according to the announcement for DIU’s “Open Mission Engine” program. The new effort seeks software that can combine all the relevant friend, foe, intelligence, and logistics data into one place in real time, not afterward.

    While the solicitation doesn’t mention Operation Epic Fury by name, the rising number of U.S. military aircraft mishaps shows how urgently the U.S. military needs a way to better let planes communicate with each other.

    Among the features that DIU wants the new software “engine” to have is a “moving map” application that “uses relevant operational data into a single aircrew display, including blue-force awareness, threat and airspace overlays, mission updates, and route decision support.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips

    ·

    New academic research has identified multiple RowHammer attacks against high-performance graphics processing units (GPUs) that could be exploited to escalate privileges and, in some cases, even take full control of a host. The efforts have been codenamed GPUBreach, GDDRHammer, and GeForge. GPUBreach goes a step further than GPUHammer, demonstrating for the first time that

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Fake Installers Spread RATs, Monero Miners in Ongoing Malware Campaign

    ·

    cyber security, Cyber Security News, Malware

    Fake software installers are being used in a long-running malware operation to drop remote access trojans (RATs), Monero cryptominers, and a new .NET implant across multiple campaigns dating back to late 2023. REF1695 relies on ISO-based fake installers that mimic legitimate software setup packages but never deliver real applications. Instead, users are guided via a […]

    The post Fake Installers Spread RATs, Monero Miners in Ongoing Malware Campaign appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Threat Actors Exploit LogMeIn Resolve, ScreenConnect in Phishing Campaigns

    ·

    cyber security, Cyber Security News, Phishing

    Threat actors are abusing legitimate remote monitoring and management (RMM) tools LogMeIn Resolve and ScreenConnect in a multi‑stage phishing campaign that blends social engineering, living‑off‑the‑land techniques, and stealthy information‑stealing malware. Sophos’ Managed Detection and Response (MDR) teams first saw this activity in April 2025, with most malicious activity clustered in October–November 2025. More than 80 […]

    The post Threat Actors Exploit LogMeIn Resolve, ScreenConnect in Phishing Campaigns appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Iran-Linked Hackers Hit M365 Tenants in Middle East Password Spray Campaign

    ·

    cyber security, Cyber Security News, Microsoft

    Iran-linked threat actors have launched a coordinated password-spraying campaign targeting Microsoft 365 environments across the Middle East, according to new findings. The activity, observed throughout March 2026, unfolded in three distinct waves on March 3, March 13, and March 23. The campaign primarily targeted organizations in Israel and the United Arab Emirates, impacting more than […]

    The post Iran-Linked Hackers Hit M365 Tenants in Middle East Password Spray Campaign appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware

    ·

    A China-based threat actor known for deploying Medusa ransomware has been linked to the weaponization of a combination of zero-day and N-day vulnerabilities to orchestrate “high-velocity” attacks and break into susceptible internet-facing systems. “The threat actor’s high operational tempo and proficiency in identifying exposed perimeter assets have proven successful, with recent

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 361 362 363 364 365 … 1,050
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence