ADMIN.FOUNDATION – Page 376 – cybersecurity / defense / intelligence

FBI Warns Chinese Mobile Apps Could Expose User Data to Cyberattacks

·

Cyber Attack, cyber security, Cyber Security News

The Federal Bureau of Investigation (FBI) has issued a public warning about potential data security risks associated with foreign-developed mobile applications, particularly those developed by companies based in China. While the advisory focuses on apps widely used in the United States, the risks highlighted are global and relevant to users worldwide. Apps operating within China’s […]

The post FBI Warns Chinese Mobile Apps Could Expose User Data to Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New ZAP PTK Add-On Converts Browser Security Findings Into Native ZAP Alerts

·

Browser, cyber security, Cyber Security News, OWASP – Top 10

The OWASP Zed Attack Proxy (ZAP) just received a massive upgrade for testing modern web applications. The release of the ZAP PTK Add-on 0.3.0, working alongside OWASP PenTest Kit (PTK) 9.8.0, now converts browser-based security findings directly into native ZAP alerts. Traditionally, ZAP excels at analyzing server-side behavior, HTTP headers, and proxy-layer traffic. However, modern […]

The post New ZAP PTK Add-On Converts Browser Security Findings Into Native ZAP Alerts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Apple Expands iOS 18.7.7 Update to More Devices to Block DarkSword Exploit

·

Apple on Wednesday expanded the availability of iOS 18.7.7 and iPadOS 18.7.7 to a broader range of devices to protect users from the risk posed by a recently disclosed exploit kit known as DarkSword. “We enabled the availability of iOS 18.7.7 for more devices on April 1, 2026, so users with Automatic Updates turned on can automatically receive important security

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Cisco Smart Software Manager Flaw Allowed Arbitrary Command Execution

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

Cisco has released a high-priority security advisory regarding a critical vulnerability in its Smart Software Manager On-Prem (SSM On-Prem) platform. The flaw, tracked as CVE-2026-20160, carries a near-maximum CVSS severity score of 9.8 out of 10. If exploited, it enables an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating […]

The post Cisco Smart Software Manager Flaw Allowed Arbitrary Command Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Critical PX4 Autopilot Vulnerability Let Attackers Gain Control of Drones

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert regarding a severe vulnerability in the PX4 Autopilot system. This critical flaw could allow malicious actors to completely take over unmanned aerial vehicles (UAVs) and drones used across vital infrastructure sectors. Tracked as CVE-2026-1579, the security flaw carries a near-maximum Common Vulnerability Scoring […]

The post Critical PX4 Autopilot Vulnerability Let Attackers Gain Control of Drones appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
TA416 Broadens Europe Spy Campaign With Web Bugs and Malware

·

cyber security, Cyber Security News, Malware

China-aligned threat actor TA416 has resumed large-scale espionage against European governments. It is now expanding to Middle Eastern diplomatic targets, combining web bug reconnaissance with constantly evolving malware delivery chains that culminate in a customized PlugX backdoor. From mid-2025, TA416 restarted regular targeting of European government and diplomatic entities after a two‑year lull, with a […]

The post TA416 Broadens Europe Spy Campaign With Web Bugs and Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
WhatsApp Attack Chain Delivers VBS, Cloud Payloads, MSI Backdoor

·

cyber security, Cyber Security News, WhatsApp

A new malware campaign that abuses WhatsApp messages to deliver malicious Visual Basic Script (VBS) files to Windows users, enabling persistent remote access through unsigned MSI installers. The campaign starts with WhatsApp messages carrying VBS attachments that appear benign but execute as scripts when opened on Windows. Once launched, the initial script creates hidden folders […]

The post WhatsApp Attack Chain Delivers VBS, Cloud Payloads, MSI Backdoor appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Cisco Warns of Critical IMC Vulnerability Enabling Authentication Bypass

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

Cisco has published an urgent security advisory for CVE-2026-20093, a critical 9.8-severity authentication bypass vulnerability affecting its Integrated Management Controller (IMC) software. This high-risk flaw enables unauthenticated remote attackers to overwrite administrative passwords and gain full control over vulnerable Cisco servers and preconfigured network appliances. Critical Authentication Bypass Cisco has issued an urgent security alert […]

The post Cisco Warns of Critical IMC Vulnerability Enabling Authentication Bypass appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Remcos RAT Attack Uses Obfuscated Scripts, Trusted Windows Tools

·

cyber security, Cyber Security News, Windows

Remcos RAT operators are abusing obfuscated scripts and trusted Windows binaries to deliver a stealthy, largely fileless infection chain that runs almost entirely in memory and evades traditional defenses. The attack starts with a phishing email carrying a ZIP archive named “MV MERKET COOPER SPECIFICATION.zip,” designed to resemble a legitimate business specification document and lure […]

The post Remcos RAT Attack Uses Obfuscated Scripts, Trusted Windows Tools appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Symantec DLP Agent Flaw Exposed Systems to Privilege Escalation Attacks

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

A high-severity vulnerability in the Symantec Data Loss Prevention (DLP) Agent for Windows could allow low-privileged attackers to take complete control of affected machines. Tracked as CVE-2026-3991, this Local Privilege Escalation (LPE) flaw carries a CVSS score of 7.8. It exposes systems to deep compromise by letting attackers elevate their basic system access to full […]

The post Symantec DLP Agent Flaw Exposed Systems to Privilege Escalation Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶