• A maximum-severity vulnerability in Oracle WebLogic Server is facing rapid exploitation in the wild. Tracked as CVE-2026-21962, this unauthenticated Remote Code Execution (RCE) flaw carries a maximum CVSS score of 10.0. According to a recent honeypot study, attackers began weaponizing the flaw on January 22, 2026, the exact day public exploit code was released on […]

    The post Hackers Actively Exploit Critical WebLogic RCE Vulnerabilities in Ongoing Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • XLoader’s developers have released new versions that significantly harden the malware’s code and hide its command‑and‑control (C2) traffic behind layers of encryption and decoy servers, making analysis and detection more difficult for defenders. This article summarizes the latest obfuscation changes introduced in version 8.1 and explains how the current C2 protocol works. Formbook first appeared […]

    The post XLoader malware Sharpens Obfuscation, Masks C2 Traffic via Decoy Servers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A critical U.S. Air Force radar plane damaged by an Iranian attack this past weekend is a significant loss and harms the military’s battlespace awareness for missions in the Middle East and beyond, defense experts say. 

    An E-3 Sentry, an Airborne Early Earning and Control System aircraft or AWACS, was damaged during a March 27 attack on Prince Sultan Air Base, Saudi Arabia, a U.S. official confirmed to Defense One. Photos circulated on social media purporting to be of the aircraft showed a smoldering E-3 split in half on a runway. A U.S. Central Command spokesperson declined to comment on the attack targeting the radar plane.

    “Targeting those airfields and getting a lucky hit or two is not beyond reason, but if you take a look at the pictures available online of that particular AWACS aircraft, it's obvious that was specifically targeted,” said Mark Gunzinger, the Mitchell Institute’s director of future concepts and capability assessments.

    The E-3 was one of numerous U.S. military assets targeted at the air base, and marks one of the more expensive aircraft losses since the start of the Trump administration’s war with Iran that began Feb. 28. Each one costs more than $500 million when adjusted for inflation. The aircraft tracks a wide range of airborne threats and can transmit them to other aircraft for a complete picture of friendly and enemy aircraft and missiles in chaotic battle zones. Following the attack, there are now 15 E-3 Sentry aircraft with only 11 of them likely serviceable, one open-source intelligence and aviation tracking account said.

    Defense experts said Iran’s continued hits on support aircraft such as radar planes and refuelers is clearly deliberate, and harms the Air Force’s ability to keep key combat aircraft in the fight.

    “It is absolutely critical to the conduct of modern air warfare, to deconflict operations from multiple airfields and multiple services, as well as to assure that we have safety of flight over airspace, both hostile and friendly,” Gunzinger said. “So the loss of one aircraft is not good news.”

    While being critical to providing command and control support in the ongoing war in Iran, the E-3 aircraft is also widely used for domestic missions to track missile threats. The loss of one harms all of those operations, a former military official said. 

    “These things are needed for other mission sets beyond this too. They're needed for homeland defense. They're needed for missions in the Pacific,” the official said. “Globally, you're at a deficit. You're already in a deficit day to day, and now you're in even more of a deficit.”

    “It puts a lot of pressure on other aspects of other missions that are of equal importance,” the former official added. 

    The attack on the Saudi Arabian base injured 12 service members and also damaged two KC-135 refueling aircraft, the New York Times reported. One of those refueling aircraft crashed earlier this month, killing six airmen and prompting calls from Air Force officials to upgrade communications networks aboard the aging refuelers.

    “Our low-density, high-demand combat aircraft, the battle management, command-and-control ISR and air-refueling aircraft are increasingly critical to our ability to project airpower over long ranges,” Gunzinger said. “It’s not surprising that Iran has targeted them.”

    The E-3 Sentry entered service in the mid-1970s. The E-7 Wedgetail was pitched as a replacement for the radar plane, but it faced scrutiny and criticism from the Air Force and Defense Secretary Pete Hegseth last year. Earlier this month, the Pentagon announced a $2.4 billion award for Boeing to develop E-7 prototypes.

    “This is a core Air Force mission set that's just, once again, atrophied, and put in a position where you’ve got a critical thing you need in a very concentrated, old aircraft,” the former military official said. “[It’s] kind of the price you pay for under-investing.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Robot shipbuilder Saronic raised nearly $2 billion to expand production and develop new vessels as the Navy seeks refined options for medium unmanned surface vessels. 

    “We're going to continue to scale and build out our shipyard in Franklin, Louisiana, and then we're going to invest heavily into Port Alpha, which is going to reshape the entire shipbuilding industry,” said Saronic CEO Dino Mavrookas, referring to a manufacturing plant it is building at an undisclosed site.

    The $1.75 billion Series D funding round, led by Kleiner Perkins, brings the Austin-based defense tech startup to a $9.25 billion valuation. The round also included several new-to-Saronic investors, such as Advent International and Bessemer Venture Partners, and existing investors.

    Saronic plans to use the money to expand its Franklin shipyard, where it’s building a 180-foot autonomous vessel named Marauder, and to build Port Alpha.

    The massive defense tech investment comes as drone boats have proven their usefulness in global conflicts, including Russia’s war on Ukraine and the joint U.S.-Israel war with Iran, and as the U.S. Navy makes strides to integrate autonomous surface vessels into the fleet.

    Autonomous surface vessels are a booming market with a lot of players. The Navy recently changed its strategy for assessing and buying medium unmanned surface vessels, pivoting to a marketplace focused on existing mature technology that they can choose from at a later date. 

    That marketplace format will be designed as a “regular and recurring competitive environment for robotic and autonomous technologies,” a Navy official told Defense One. 

    This move puts more emphasis on companies’ ability to build and deliver robot boats quickly to meet demand. And the Navy’s medium unmanned surface vessel marketplace gives “vendors a chance to propose combinations of attributes that they can deliver” that “align with the Navy’s operational problems,” Bryan Clark, who leads the Hudson Institute’s Center for Defense Concepts and Technology, told Defense One.

    Speaking to reporters ahead of Tuesday’s announcement, Mavrookas said the company is “going to invest in Port Alpha. We look forward to sharing the news and the details of that when that becomes available, but that's going to be 10 [times] the capacity of our Franklin location.”

    That mega-facility, which is still in the planning stages, is also expected to support building larger autonomous vessels for commercial and defense use. 

    Saronic is in the process of adding about 300,000 square feet to its Franklin shipyard, to increase production to 20 vessels a year. That expansion is expected to finish this year, a Saronic spokesperson told Defense One

    “Today, we’re focused on completing our Phase 1 expansion in Franklin, which is our existing $300 [million] investment into the shipyard. Demand continues to ramp from multiple customers for our MUSV fleet, and we will focus on meeting that need through continued investment and strategic expansion,” the company said.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Google on Monday said it’s officially rolling out Android developer verification to all developers to combat the problem of bad actors distributing harmful apps while “hiding behind anonymity.” The development comes ahead of a planned verification mandate that goes into effect in Brazil, Indonesia, Singapore, and Thailand this September, before it expands globally next year. As part of this

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Iran launched fewer missiles and drones in the past day than in any previous 24-hour period since the U. S. and Israel started their war,Defense Secretary Pete Hegseth said Tuesday during a press briefing at the Pentagon. But the secretary declined to quantify progress toward the administration’s objectives or answer whether thousands of soldiers and Marine positioned in the Middle East are a precursor to a ground invasion.

    Hegseth fell back on a common refrain of his public remarks since the U.S. began striking targets in Iran a month ago: that he isn’t willing to share how far the U.S. is willing to go to press Iran into a peace deal.

    “We have our own goals and guidance, and…military objectives that we're moving toward, and things that we look at,” the secretary said. “And as [the president has] articulated, you know, he said, four to six weeks, six to eight weeks, three—it could be any any particular number, but we would never reveal precisely what it is, because our goal is to finish those objectives, and we're well on our way.”

    Asked what other purpose there could be for staging 82nd Airborne Division soldiers and an amphibious ready group with embarked Marines in the Middle East other than a ground incursion, Hegseth refused to answer.

    “Military 101: don't tell your enemy what you're willing to do or not do, and don't tell your enemy when you're willing to stop, especially an enemy that likes to hide in bunkers and try to hoard their missiles and…wait you out,” he said. “So that's not a question I'm going to answer.”

    He gave a similar answer when asked what his message is to Trump supporters who are concerned about a ground operation.

    “I don't understand why the base…wouldn't have faith in his ability to execute on this. Look at his track record of pursuing ‘peace through strength, America First outcomes’,” Hegseth said. “What he's simply saying, and it's exactly true—and I've said from this podium, too—we're not going to foreclose any option. You can't fight and win a war if you tell your adversary what you are willing to do or what you are not willing to do, to include boots on the ground.” 

    Air Force Gen. Dan Caine, chairman of the Joint Chiefs of Staff, hinted that their presence could be a form of intimidation.

    “Iran should note that they’re out there and they are a pressure point,” Caine said.

    In Hegseth’s opening remarks, he recounted a brief trip to the U.S. Central Command area of operations over the weekend, where he met with troops supporting Operation Epic Fury. He contended that the troops wanted to continue the war. 

    He said none of them asked for better equipment, better living conditions or to go home, but for “even more bombs, bigger bombs, more targets,” he said.

    “These troops, they want to finish this fight for their kids and their grandkids,” he said. “This is about history. This is about legacy.”

    The Trump administration’s most pressing goal has been reopening the Strait of Hormuz to commercial traffic, with the president posting on social media in recent days that he would order strikes on Iran’s Kharg Island power plants if they didn’t stop shooting at ships. 

    “But if Iran is wise, they will cut a deal,” Hegseth said.  “President Trump doesn't bluff and he does not back down”—a notion belied by his record

    Though Trump said March 11 that there was “practically nothing left” to target in Iran, Caine said in his operational update that the U.S. had begun its first overland B-52 bombing strikes, while continuing to strike Iran’s defense industrial base.

    “This includes factories, warehouses, nuclear weapons research and development labs, and the associated infrastructure required for Iran to reconstitute its combat capability,” he said.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A high-severity security flaw in the TrueConf client video conferencing software has been exploited in the wild as a zero-day as part of a campaign targeting government entities in Southeast Asia dubbed TrueChaos. The vulnerability in question is CVE-2026-3502 (CVSS score: 7.8), a lack of integrity check when fetching application update code, allowing an attacker to distribute a tampered update,

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Axios npm Package compromised in a supply chain attack, exposing developers to malware, data theft, and full system takeover risks worldwide.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Donald Trump’s former special envoy to Russia and Ukraine, retired Lt. Gen. Keith Kellogg, will join the advisory board of Powerus, a Florida-based startup seeking to build relationships with and acquire technology from Ukrainian drone makers to sell to the U.S. military, the company said in a statement Tuesday. The news signals warming commercial and financial activity between U.S. investors and Ukrainian defense technology entrepreneurs, even as U.S.-led diplomatic talks on ending Russia’s war appear stalled.

    Kellogg commanded the Army’s 82nd Airborne Division and served as director of command, control, communications and computers (J6) for the Joint Chiefs of Staff. He was a national security advisor to then-Vice President Mike Pence during Trump’s first term. 

    The selection of Kellogg as special envoy to Russia and Ukraine in November 2024 won praise from Ukrainians, and seasoned diplomats. His military experience and the consistency of his hawkish views toward Russian President Vladimir Putin contrast with other current and former members of Trump’s cabinet. The Kremlin, naturally, was less enthusiastic about his selection and complained about Kellogg’s presence at peace talks. He stepped down last December, replaced by Steve Witkoff, a real-estate developer with controversial business ties to Russia and who also serves as the U.S. envoy to the Middle East.

    The rise of Powerus is an indicator of the growing American interest in Ukrainian defense tech. Based in West Palm Beach, Trump’s sons are among the investors. Fired former Joints Chief Chairman C.Q. Brown also joined the company’s advisory board this month. The company plans to go public this summer after an already-announced merger with Aureus Greenway Holdings.

    There is a disconnect between current White House rhetoric on Ukraine and the actions of those connected to U.S. leadership. On one side is the dismissive White-House line on Ukraine. On the other are military operators, experienced policy professionals, and, increasingly, the global early-stage investor class urging deeper partnership with a proven ally who is defining the future of defense technology.

    Ukraine’s new diplomatic strategy is commercial 

    As peace talks continue, Ukraine is pursuing a new strategy to build diplomatic relations: commercial links, and co-business development, a group of Ukrainian government and military officials said last week in Washington, D.C.“The political environment is what it is, and so moving from inadequate integration to leading with defense tech integration on a business level with business partners and allies,” one Ukrainian official said during a discussion with a handful of analysts and journalists at the German Marshall Fund.

    Signs suggest Ukraine’s strategy is working; the number of U.S. firms that focus on Ukrainian defense technology is growing, as is the number of venture capital outfits, such as Ondas Capital. Eric Brock, Ondas CEO, told Defense One in January that for Ukrainian startups, partnerships with U.S. firms make sense. But such pairings offer important positioning for U.S. investors in terms of accessing future defense markets.  

    “We’re better able to see where the winners are and layer them into an operating model … We can meet the demand, because [the market for Ukrainian drone and counter-drone tech is] going to be exploding. It's going to be this market exploding on infrastructure for drone and counter-drone technologies.”

    Ukraine this week finalized deals with various Middle Eastern governments for technology sharing. The countries are in urgent need of air defenses against the Russia-launched, Iranian-designed drones that Ukraine has been contending with since 2023. 

    In March, Ukrainian drone company Swarmer announced an initial public offering on the Nasdaq and saw shares jump in value by a factor of eight. 

    “Ukraine taught us how big of an advantage drones have been to equalize its defense against what should have been a lopsided victory for the Russians. Small, cheap, mass-produced machines now obliterate state-of-the-art tanks and missile systems worth tens of millions, and intercept waves of kamikaze drones at scale,” Kellogg said in a statement. “Powerus is bringing that equalizing power and the same capabilities to the U.S.” 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have disclosed a security “blind spot” in Google Cloud’s Vertex AI platform that could allow artificial intelligence (AI) agents to be weaponized by an attacker to gain unauthorized access to sensitive data and compromise an organization’s cloud environment. According to Palo Alto Networks Unit 42, the issue relates to how the Vertex AI permission model can be misused

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶