ADMIN.FOUNDATION – Page 387 – cybersecurity / defense / intelligence

ClickFix Evades PowerShell Detection via Rundll32 and WebDAV

·

cyber security, Cyber Security News, PowerShell

A new variant of the ClickFix attack technique that shifts execution away from commonly monitored tools like PowerShell and mshta, instead abusing native Windows components such as rundll32.exe and WebDAV. This evolution allows attackers to bypass traditional script-based detection mechanisms, increasing the likelihood of a successful, stealthy compromise. The attack begins similarly to earlier ClickFix […]

The post ClickFix Evades PowerShell Detection via Rundll32 and WebDAV appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
WordPress Plugin Flaw Exposes Sensitive Data Across 800,000+ Sites

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability, Wordpress

A severe security flaw has been disclosed in Smart Slider 3, a highly popular WordPress plugin currently active on more than 800,000 websites. Discovered by security researcher Dmitrii Ignatyev, this vulnerability enables authenticated attackers to read arbitrary files directly from the hosting server. If exploited, the flaw exposes critical backend infrastructure to unauthorized users. Vulnerability […]

The post WordPress Plugin Flaw Exposes Sensitive Data Across 800,000+ Sites appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
TA446 Uses DarkSword Exploit Kit to Target iPhone Users

·

cyber security, Cyber Security News, iphone

TA446, a Russia-linked espionage group, has started using the DarkSword exploit kit to compromise iOS devices in a new phishing wave that abuses Atlantic Council‑themed lures. The campaign underscores how quickly leaked iOS exploit chains can be weaponized against high‑value policy and government targets. Unlike earlier TA446 operations that relied on password‑protected ZIP attachments delivering […]

The post TA446 Uses DarkSword Exploit Kit to Target iPhone Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
The State of Secrets Sprawl 2026: 9 Takeaways for CISOs

·

Secrets sprawl isn’t slowing down: in 2025, it accelerated faster than most security teams anticipated. GitGuardian’s State of Secrets Sprawl 2026 report analyzed billions of commits across public GitHub and uncovered 29 million new hardcoded secrets in 2025 alone, a 34% increase year over year and the largest single-year jump ever recorded. This year’s findings reveal three core trends: AI has

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New Homoglyph Tricks Let Cybercriminals Mimic Trusted Domains

·

cyber security, Cyber Security News

New homoglyph attack techniques are turning tiny visual differences in text into a reliable way to spoof trusted domains, steal credentials, and bypass weak Unicode handling in security stacks. By abusing Internationalized Domain Names (IDNs), Punycode, and Unicode “confusables,” attackers can register domains that look legitimate in the browser bar while resolving to attacker‑controlled infrastructure. […]

The post New Homoglyph Tricks Let Cybercriminals Mimic Trusted Domains appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
TeamPCP Uses Fake Ringtone File in Tainted Telnyx SDK to Steal Credentials

·

Cyber Attack, Cyber-Attacks, cybersecurity, Malware, Security, Supply Chain, TeamPCP, Telnyx, Trivy

Telnyx issues an urgent alert after hackers TeamPCP uploaded malicious versions (4.87.1 & 4.87.2) of its Python SDK to steal cloud and crypto credentials.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Telnyx Python SDK Backdoored on PyPI to Steal Cloud Credentials

·

cyber security, Cyber Security News, Python

The popular Telnyx Python SDK on PyPI to deploy a multi‑stage credential‑stealing operation that targets cloud infrastructure, Kubernetes clusters, and developer environments at scale. On March 27, 2026, TeamPCP uploaded two malicious Telnyx SDK releases, versions 4.87.1 and 4.87.2, directly to PyPI at around 03:51 UTC, bypassing the normal GitHub‑backed release flow used by the […]

The post Telnyx Python SDK Backdoored on PyPI to Steal Cloud Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Russian CTRL Toolkit Delivered via Malicious LNK Files Hijacks RDP via FRP Tunnels

·

Cybersecurity researchers have discovered a remote access toolkit of Russian-origin that’s distributed via malicious Windows shortcut (LNK) files that are disguised as private key folders. The CTRL toolkit, according to Censys, is custom-built using .NET and includes various executables” to facilitate credential phishing, keylogging, Remote Desktop Protocol (RDP) hijacking, and reverse tunneling

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Critical Fortinet FortiClient EMS Vulnerability Actively Exploited in Attacks

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

Threat intelligence researchers have detected active exploitation of a critical vulnerability in Fortinet’s FortiClient Enterprise Management Server (EMS). The security flaw, identified as CVE-2026-21643, allows malicious actors to execute unauthorized database commands. While attacks have been occurring in the wild for several days, official government tracking lists have yet to classify the flaw as actively […]

The post Critical Fortinet FortiClient EMS Vulnerability Actively Exploited in Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Stored XSS Vulnerability in Jira Work Management Could Enable Full Organization Takeover

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability, xss

Security researchers recently uncovered a critical stored Cross-Site Scripting (XSS) vulnerability within Atlassian’s Jira Work Management platform. This flaw allows an attacker with limited administrative permissions to execute a full organization takeover. Jira Work Management is heavily relied upon by corporate teams to track projects, manage approvals, and organize daily tasks. However, a failure to […]

The post Stored XSS Vulnerability in Jira Work Management Could Enable Full Organization Takeover appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶