-
Threat actors are using adversary-in-the-middle (AitM) phishing pages to seize control of TikTok for Business accounts in a new campaign, according to a report from Push Security. Business accounts associated with social media platforms are a lucrative target, as they can be weaponized by bad actors for malvertising and distributing malware. “TikTok has been historically abused to distribute
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Rising geopolitical tensions are reflected (or in some cases preceded) by cyber operations, while technology itself has become politicized. Let’s admit it: we are in the middle of it. Introduction: One tech power to rule them all is a thing of the past The relative safety, peace and prosperity that much of the world has enjoyed since 1945 was not accidental. It emerged from the ashes
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Iran is using Russian drone-warfare tactics to target U.S. forces and other operations in the Middle East, Ukrainian military personnel said Thursday in Washington, D.C.
Last June, Iran responded to U.S. strikes on Iranian nuclear facilities with drones and missile attacks that were largely thwarted by U.S. and Israeli defenses.
But Iranian tactics have “changed from July last year to now,” one of the visiting Ukrainian military members told a small group of former government officials, analysts, and media at the German Marshall Fund on Thursday. “Now, those tactics are very similar to the Russians we’re fighting.”
Instead of large “existential” attacks, Iran is launching smaller numbers of drones and missiles, but more often, and at a wider variety of targets—including civilian and economic infrastructure that is a lower priority for U.S. forces to protect, as documented by the Institute for the Study of War.
Tehran has largely decentralized its operations and instructed commanders to "fire at will," ISW said. And while ISW suggests that U.S. efforts to incapacitate Iran’s missile and drone capabilities will likely work eventually, Iranian tactics have caused U.S. casualties, damaged bases, and created other disruptions.
The Ukrainian troops said this new strategy mirrors the “attrition” strategy Russia has used against Ukraine: aiming at civilian and infrastructure targets to impose economic and political costs.
ISW reported a similar finding on March 15, saying that Iran seeks to “outlast Washington rather than to militarily defeat it outright.”
The visiting Ukrainians reiterated what top E.U. officials and U.S. intelligence sources have previously stated: that Russia is providing Iran with targeting intelligence. On March 15, Ukrainian President Volodymyr Zelenskyy noted that Russia had supplied Iran with Shahed-136 drones before the U.S. and Israeli launched their surprise attacks in February.
Meanwhile, the war with Iran is having other negative effects on the U.S., Europe, and Ukraine. The United States has suspended sanctions against Russian oil interests and some Iranian oil producers, effectively boosting the finances of two nations aligned against it, even as Washington carries out military strikes against one of them.
However, the White House, has been reluctant to call out Russian President Vladimir Putin's regime for assisting Iran. Instead, President Donald Trump this month snubbed Ukraine’s offer to help the U.S. better defend itself against Russian and Iranian drones.
Some U.S. and NATO military leaders are more open to Ukraine’s assistance. The visiting military officials said that over the last few days, they met with military officials involved in the Defense Department’s “drone dominance” effort launched in July, as well as officials tasked with counter-UAS operations.
During a Tuesday hearing, Space Force Director of Force Structure Lt. Gen. Steven Whitney praised Ukrainian innovation as “out of this world.” Military officers across all ranks also routinely attest to the value partnership with Ukraine is bringing to U.S. military readiness.
That partnership is particularly important now, said the visiting Ukrainian military personnel, as autocratic states increasingly align to weaken the United States and Europe.
“Iran, North Korea, China, and Russia—that's all one war,” said one.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A pro-Ukrainian group called Bearlyfy has been attributed to more than 70 cyber attacks targeting Russian companies since it first surfaced in the threat landscape in January 2025, with recent attacks leveraging a custom Windows ransomware strain codenamed GenieLocker. “Bearlyfy (also known as Labubu) operates as a dual-purpose group aimed at inflicting maximum damage upon Russian businesses;
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The Cybersecurity and Infrastructure Security Agency (CISA) has urgently added a critical flaw affecting Aquasecurity’s Trivy scanner to its Known Exploited Vulnerabilities (KEV) catalog. Tracked as CVE-2026-33634, this security weakness involves embedded malicious code that targets continuous integration and continuous deployment (CI/CD) environments. Because Trivy is a widely adopted open-source vulnerability scanner used natively within […]
The post CISA Adds Critical Aquasecurity Trivy Scanner Vulnerability to KEV Catalog appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A threat actor known as Silver Fox is targeting Japanese organizations with a new wave of spearphishing attacks timed to coincide with the country’s busy tax-filing and corporate restructuring season. The campaign focuses heavily on manufacturers and enterprises that are currently dealing with high volumes of financial and HR-related communications. This seasonal timing is deliberate. […]
The post Silver Fox Cyberattack Targets Japanese Businesses with Tax-Themed Phishing Scams appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The FBI Cyber Division has issued a critical alert following a massive supply chain attack orchestrated by the threat actor group TeamPCP. The hackers successfully compromised two widely used developer tools, creating a cascading security incident for organizations building artificial intelligence software. By exploiting weak credential management and leveraging AI-assisted coding, the group distributed malicious […]
The post TeamPCP Hackers Focus on AI Developers, Planting Malicious Code to Disrupt Projects appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cybersecurity researchers have disclosed three security vulnerabilities impacting LangChain and LangGraph that, if successfully exploited, could expose filesystem data, environment secrets, and conversation history. Both LangChain and LangGraph are open-source frameworks that are used to build applications powered by Large Language Models (LLMs). LangGraph is built on the foundations of
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A South Asian financial institution has been hit by a custom malware toolkit combining a modular backdoor, dubbed BRUSHWORM, and a DLL side‑loaded keylogger known as BRUSHLOGGER. The attackers relied on a backdoor initially named paint.exe and a keylogger masquerading as libcurl.dll, both of which lacked advanced packing or obfuscation. BRUSHWORM acts as the primary implant, handling […]
The post Hackers Target South Asian Financial Firm with BRUSHWORM and BRUSHLOGGER Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Red Hat has issued an urgent security alert regarding a highly sophisticated supply chain attack targeting the popular xz compression utility. Cybersecurity researchers discovered malicious code embedded within recent versions of the xz libraries, which could potentially grant threat actors unauthorised remote access to affected Linux systems. Technical Analysis of the Exploit The xz utility is a fundamental data compression format […]
The post Red Hat Warns of Malware Embedded in Popular Linux Tool, Opening Doors for Unauthorized Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶


