• The Everest ransomware group has reportedly stolen around 590GB of data linked to PwC, one of the Big Four professional services firms. The claim concerns internal human resources and learning systems, but it remains unverified, as no independent reports have confirmed it. A post shared by Crypto India states that the alleged theft includes 108,426 […]

    The post PwC Allegedly Hit by Everest Ransomware Group, 590GB of Data Stolen appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • In October, several unpatched Linux vulnerabilities were disclosed on public mailing lists, revealing technical details before fixes were widely available. These disclosures included two critical flaws in KSMBD that could let remote attackers execute code, along with reports of privilege escalation and information disclosure. Trend Micro’s Zero Day Initiative (ZDI) submitted the reports, prompting Linux […]

    The post Critical Unpatched Linux Kernel Vulnerabilities Accidentally Disclosed, Including Two Remote Code Execution Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A threat actor using the handle BUGSTER configured DeepSeek V4 as the reasoning engine for an AI-assisted cybercrime operation that targeted organizations in India, including universities. Unit 42, Palo Alto Networks’ threat-intelligence team, says the actor used AI-generated reconnaissance and scripts to brute-force a university website and successfully stole a database containing more than 5,200 […]

    The post Hacker Turned DeepSeek Into an AI Cybercrime Assistant to Attack Universities and Steal Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • When the U.S. Navy destroyer John Finn left home in January, sailors expected to be home in March. Now, after extensions on top of extensions, their families have been told to expect them next March—after a 14-month deployment.

    The Mustin, another Arleigh Burke-class destroyer, switched homeports this year, leaving San Diego in February and arriving in Yokosuka, Japan, in March. As the sailors stepped off the ship, they were told they needed to be ready to deploy “tomorrow.”

    The Mustin actually left Japan in April for a deployment that was supposed to end in August. Now its crew has been told they will return in April 2027, the spouse of one of the sailors told Defense One.

    These marathon deployments—a month or more longer than the carrier Abraham Lincoln’s record-breaking 322 days—may be the new normal for U.S. warships. Last week, a Navy official told families at Yokosuka that all ship deployments and patrols, stateside and overseas, will be 10 to 12 months long for the foreseeable future.

    Asked about that statement, a Navy spokesperson told Defense One, “It is U.S. Navy policy not to discuss future operations or movements due to operations security.” 

    But last month, Chief of Naval Operations Adm. Daryl Caudle said that sailors and their families should expect “longer deployments” until “I can grow the Navy we need.” The service’s battle force currently consists of about 290 warships, down from 295 two years ago but up from about 275 a decade ago.

    In recent decades, the Navy has generally kept deployments to six or seven months, although that is not a set-in-stone policy, said Katherine Kuzminski, vice president of studies at the Center for a New American Security. But, she said, “that commitment is being violated now.”

    “Certainly, depending on operational needs and demands, I think service members and their families are fully on board with providing—with the requirements that are put on them in ongoing operations,” Kuzminski said. “A potential way that the Navy can mitigate this is actually to just commit to the longer term upfront and be clear with service members and their families.” 

    After initial reports of the Lincoln’s woes emerged, some veterans of other services and other conflicts were quick to post online about their own longer deployments. But the issue, Kuzminski said, is not so much the length of the deployment, but the “dissonance between what was said at the beginning and what is happening in actuality.”

    That dissonance is particularly pronounced for the John Finn, one of several “forward deployed” guided-missile destroyers based at Yokosuka. While other Navy ships tend to deploy for about six months and then return home for a year, forward-deployed ships typically leave for two or three months at a time, then return to port for two to three months of maintenance before heading back out to sea. Those deployments are designed to keep the ships ready for combat in the region, deter aggression from China, and “maintain a free and open Indo-Pacific.” 

    Last year, the John Finn left home in June for a “normal” deployment in the region and returned in early November. But much of the following two months were spent in hasty preparations to return to sea.

    “We really only saw him a collective 20 days,” the spouse of a sailor on the ship told Defense One.

    In early January, the ship left again, for what was expected to be a deployment of perhaps 45 to 60 days. It headed to the Indian Ocean and was involved in the boarding of a Venezuelan oil tanker before being directed to the Arabian Sea, shortly before Operation Epic Fury began.  

    The ship was part of the initial attack on Iran, the spouse said, and they’re “still there.” 

    Earlier this month, the sailors were told they would likely not be home until March 2027.

    “There’s cars that were left on base that have been stickered to be towed and then to be junked. So there’s sailors that are going to come back and have no cars,” the spouse said. “They left in the winter months, and there’s some sailors that live off base and are single sailors and will have abandoned their entire house, their apartment, for over a year. And when they left in the winter months, when they left everything on heat mode, and then the summer came.” Sailors know “that they’re going to come home and all their stuff will be trashed.”

    For families, it’s more than a year without a parent—without any of the planning for a long deployment.

    “It’s been absolutely gut-wrenching to my kids,” the spouse said, and there is “next to no mental health support” available on base. The deployment length is “absolutely unheard-of for a destroyer,” she said.

    The Finn’s story is extreme—but not unique among Yokosuka-based destroyers. 

    Photos posted on the Pentagon’s DVIDS media site show the Rafael Peralta in the Philippine Sea in November, in the South China Sea in December, and back in the Philippine Sea on Jan. 8. Then, instead of returning home, it headed for the Middle East in April, where it remains today. Families have been told not to expect the ship home until April 2027.

    The Higgins, which lost power and propulsion for a few hours in the Indo-Pacific in April, continued its deployment after repairs and is currently operating in the Indian Ocean. The Milius left Japan in February and has been in the Middle East since March.

    The Mustin left its old homeport of San Diego in February and arrived in Japan in March. Sailors are usually given 30 days to help their families move and settle in for a homeport shift, particularly when the move is to a foreign country, and the majority of the families had waited until the ship arrived to make the move. But “the moment they pulled in, my husband stepped off the ship, and he goes, ‘We have to be prepared to leave tomorrow,” a Mustin spouse told Defense One.

    The ship did stay in its new port for a few weeks because of a sonar problem that required an expert to fly in to fix it, but sailors did not get time off during that time frame because they needed to be ready at a moment’s notice, the spouse said. They left in April with the expectation that they would return in August and then go out again over the holidays before monthslong scheduled maintenance beginning in February.

    But when August came, the ship’s commander told the sailors they would be out for “about another month,” the spouse said. A few weeks ago, they were told they wouldn’t be home until April 2027.

    The situation is all the more frustrating for sailors and families because the ship has spent virtually the entire deployment in the Indian Ocean as “backup.”

    “They’re not in the blockade, they’re like the next in line, just out there waiting,” she said.

    The distinction means that the Mustin sailors don’t get combat pay or benefits.

    “I know they feel forgotten about,” she said.

    The John Finn spouse said it has been frustrating for families and sailors to read all the media coverage of the Lincoln’s long deployment, while knowing that other ships supporting her were “left behind.”

    “I can do a long deployment,” she said. “The problem with this is that there is no answer as to when this will be over. … Why are we not rotating ships? And then why are we there? Why are you sending home stateside ships before your forward deployed ships?”

    In response to questions about why the ships have not been replaced, a Navy spokesperson said, “The Department takes a thoughtful and deliberate approach to global force management, continually balancing immediate operational requirements against risks across theaters.” 

    If longer deployments increasingly become the norm, Kuzminski said, it’s important that the Navy be upfront with sailors and their families about what to expect. 

    But the situation highlights another problem: The Navy doesn’t have a confirmed civilian secretary, “a person who is fundamentally the accountability to Congress on how things are working,” she said.

    Without a Navy secretary, she said, it’s hard to answer the big questions: “Is this the new normal? How are you handling that? How are we preparing sailors for that? How are we preparing their families for that? How are we preparing our ships for that?”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Military buyers want to move quickly, which can mean companies need to add new tech to vehicles after they’re built. Now, Oshkosh Defense is building a dedicated center to test those modifications. 

    “We call it the Vehicle Integration Center. It allows us to prove out and test conformance in the real world. So that's work that we'll be doing in ‘27,” Logan Jones, Oshkosh Defense’s chief growth officer, told Defense One. 

    “The question of ‘does it work?’ is still left way too late in the process,” Jones said. “We want to shorten that from like a year and a half to weeks.”

    While the focus is on their own offerings, Jones said the integration center could help other combat vehicle makers test their products.

    “The primes are going to be interested,” he said. “The signal in the market that we've seen is we would be taking risk out of their program—and that's what they want. They want speed, and they want low risk, so they can predict when it'll be available.”

    The aim, at least in part, is to make the process easier on engineers. For example: Let's say you're an engineer doing the counter-UAS solution. You said ‘I'm going to bolt it on.’ You need to know where the mounting locations are,” Jones said, noting that information is usually in an interface control document, or ICD. “We don't make that easy today…But in the future, it should be a turnkey system” where the ICDs are easy to access. 

    Oshkosh is cleaning up ICDs and aims to start work at the center early next year.

    Welcome

    You’ve reached the Defense Business Brief, where we dig into what the Pentagon buys, who they’re buying from, and why. Send along your tips, feedback, and song recommendations to lwilliams@defenseone.com. Check out the Defense Business Brief archive here, and tell your friends to subscribe!

    How the Dutch are rethinking weapons buying. The U.S. isn’t the only nation with procurement woes. The Netherlands has spent recent years trying to revamp its acquisition system, and there’s a push to incentivize manufacturers to stay ready, Derk Boswijk, the minister for arms procurement and personnel, told reporters. 

    • “We can buy 1 million drones, but I know one thing for sure: that weeks from now they are outdated. So we have to come up with a new model, and we are already working on it,” Boswijk said. 
    • That model would have the government pay commercial companies to be on-call, in a way, to produce certain military products during a conflict. 
    • For example, the government could pay an automaker to make drones. “In the meantime, you do the research, you build prototypes,” and order supplies, he said. But when a conflict “breaks loose, they put everything aside and…produce the drones instead of the automobiles.”
    • Boswijk spoke with a sense of urgency to try something different: “The most dangerous thing we can do is play [it] safe …I have to take [risks] because otherwise, when I want to have 100 percent certainty, then I know for sure…it will be too late.”
    • A bit more: Two U.S. companies inked deals during last week’s annual Netherlands-U.S. defense industry event: Bell Textron and Lockheed Martin.
    • Bell had two memorandums of understanding: one with PhotonFirst to explore the use of fiber optic sensing to monitor aircrafts’ structural health and another with the Netherlands Industries for Defense & Securities. 
    • The latter agreement is “really to facilitate relationships on how they can help us and find other partners in the Netherlands,” Robbie Yarbrough, director of international industrial cooperation at Bell Textron, told Defense One. “And next month, we'll be signing a few more MOUs, and we're really looking for research and technology.”
    • Lockheed Martin Skunk Works signed an agreement with the Royal Netherlands Aerospace Center in support of the Dutch air force. The deal expands an existing agreement and broadens industrial base access. 

    MQ-25 Stingray progress report. The Navy successfully synced the aircraft carrier USS Ronald Reagan to an unmanned tanker located more than 2,100 miles away via satellite as part of a series of preliminary sea-trial tests “to validate procedures, networks and interfaces,” the service said in a news release. 

    • “Once the satellite link was up, air vehicle pilots aboard USS Ronald Reagan (CVN 76) connected to the MQ-25A air vehicle on the ground in Mascoutah, Illinois,” the Navy told Defense One via email. “Using the MD-5C [unmanned air command and control station] aboard the ship, the AVPs gave the air vehicle multiple commands to exercise various subsystems of the aircraft and verify an established connection.”
    • Context: The Navy has made several strides with its drone tanker program this year. The program is considered to be a “pathfinder” effort designed to relieve F/A-18E/F aircraft from their refueling duties to focus more on strike missions. 
    • Related: The Navy awarded Applied Intuition a contract for AI data infrastructure “across the manned and unmanned fleet,” the company announced. The service previously awarded the company a contract for its data engine solution and will build on that.  
    • “Its Intelligent Perception System will be the first fleet-scale capability deployed, starting with five Arleigh Burke-class destroyers under the Portfolio Acquisition Executive Robotic and Autonomous Systems and PAE Mission Systems initiative,” the company said in a news release. 

    Making moves + other news

    • BAE Systems bought about 13 acres in Weld County, Colorado, to expand manufacturing related to space-based hardware and sensor systems.
    • The Army expanded its enterprise contract with Striverworks tenfold to $700 million for fullstack AI solutions. The company also has a separate $200 million Army contract for the service’s Next Generation Command and Control program.   
    • Electra plans to demonstrate its hybrid-electric Ultra Short aircraft in Lower Manhattan on Friday. The event is expected to be the “first-ever landing at the heliport by a fixed-wing aircraft without vertical takeoff capability,” the company said in a news release.
    • The National Armaments Consortium added new members and elected James Miller of the Practical Energetics Research as its executive chairman. 
    • The Pentagon awarded Nikon Advanced Manufacturing a contract with an unspecified amount for “customized additive manufacturing systems targeted for production of Tomahawk Land Attack Missile mid-bodies, and other similar potential applications,” the company said in a news release. The award is part of the Defense Department’s Industrial Base Analysis and Sustainment program.  
    • Defense tech firms like Palantir are getting more attention—from Wikipedia editors, the Guardian reported. Fun fact: Once upon a time, I wrote “a long article” about that very unique world.
    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • DOHA, Qatar–Wedged between Saudi Arabia and Iran, Qatar has long used artful diplomacy to keep regional conflicts at arm's length: it provides shelter for Hamas leaders, maintains ties with Israel, and hosts the region's largest U.S. military base. But the Israeli strike on this capital city in September 2025 and subsequent Iranian attacks have Qatari leaders racing to secure allies and boost the peninsular nation’s domestic defense industry. 

    "It's the first time that a mediator has been attacked. This never happened," Sheikh Saoud bin Abdulrahman Al Thani, Qatar's deputy prime minister and minister of state for defense affairs, said Monday at the Global Security Forum in Doha. 

    Al Thani said Qatar is exploring new defense partnerships with the United Kingdom and other Western and regional partners. The government is also looking to spin up a domestic weapons-production hub. The country's priorities include air defense, counter-drone capabilities, cybersecurity and electronic warfare, areas identified in a defense review conducted in 2025.

    A visit to the Milipol Qatar security exhibition, held alongside the Global Security Forum, suggested a banking trade show as much as a military expo, a reminder that Qatar lacks the large defense-manufacturing base of some regional neighbors.

    Qatari officials believe the country can participate more directly in weapons design and manufacturing, rather than simply serving as a buyer. Maj. Gen. Mohammed Abdul Latif Al Mannai, a Qatari defense official, said a proposed partnership with Britain could incorporate operational requirements, intelligence and assessments of emerging threats into weapons development. Gen. Sir Roly Walker, chief of the General Staff of the British Army, said the countries were considering a much broader partnership—not just between operators, but their acquisition corps and suppliers.

    "We have high-level political ambition for a 50-year strategic partnership to gear ourselves up for the future," Walker said.

    "We need to position ourselves almost as a design partner to allow the ingenious engineers and creative entrepreneurs to develop the solutions to our problems."

    Qatar is also looking to increase investment in defense companies, rather than simply purchasing their products. Mohammed bin Badr Al Sada, group CEO of Barzan Holdings, said British companies were already involved in discussions about the proposed hub.

    "We work very closely with UK industries," Al Sada said. "Actually some of them, they are already in town as we speak. And we hope that we can see this hub active very soon."

    Qatar's growing interest in defense production also reflects concerns about the limits of American security guarantees. Iran's June 2025 missile attack on Al Udeid Air Base showed that the presence of U.S. troops on Qatari soil did not, by itself, prevent an attack. And Washington has signaled its intention to play a less interventionist role in regional security.

    Tom Barrack, U.S. ambassador to Turkey and special presidential envoy for Syria and Iraq, acknowledged that shift in an onstage interview Tuesday, while emphasizing that Washington was not abandoning its regional partners.

    "We're not leaving. But what everybody's doing is saying, 'Okay, I can't rely on America to solve all my problems anymore,” 

    Defense One is a media partner of the Global Security Forum.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Attackers are exploiting a zero-day SQL injection flaw in Arista’s VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22. The flaw lets anyone who can log in to the orchestrator, even with a read-only customer account, gain operator privileges, the top level of control over it. For

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private keys of eight of its intermediate CA certificates. eMudhra said it will replace affected customers’ certificates with free ones from partners, though its

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cardano payroll could support ADA salaries and automated payments, but employers must address price volatility, tax obligations, wallet security and compliance.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That’s a lot to deal with in just a few days. And the week isn’t even over yet. But those big headlines are only half the story. Stolen passwords, exposed

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶