Skip to content

ADMIN.FOUNDATION

  • Coruna iOS Kit Reuses 2023 Triangulation Exploit Code in New Mass Attacks

    ·

    The kernel exploit for two security vulnerabilities used in the recently uncovered Apple iOS exploit kit known as Coruna is an updated version of the same exploit that was used in the Operation Triangulation campaign back in 2023, according to new findings from Kaspersky. “When Coruna was first reported, the public evidence wasn’t sufficient to link its code to Triangulation — shared

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Torg Grabber Malware Shifts from Telegram Exfiltration to Encrypted REST API for C2

    ·

    cyber security, Cyber Security News, Malware, Telegram

    A fast-evolving information‑stealing malware dubbed “Torg Grabber” that has shifted from simple Telegram‑based exfiltration to a hardened, encrypted REST API command‑and‑control (C2) channel fronted by Cloudflare. The operation surfaced when a 747 KB 64‑bit sample initially tagged as Vidar was found to be fundamentally different from known Vidar builds, exposing an internal debug string “grabber […]

    The post Torg Grabber Malware Shifts from Telegram Exfiltration to Encrypted REST API for C2 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Fake Screenshot Lures Target Web3 Support Staff with Multi-Stage Malware Attack

    ·

    cyber security, Cyber Security News, Malware

    Fake screenshot links are being used to quietly deploy a multi‑stage backdoor against Web3 customer support teams, in a campaign assessed to be linked to the Chinese financially motivated group APT‑Q‑27 (GoldenEyeDog). The operation abuses live chat workflows, signed .NET loaders, AWS S3 dead drops, and DLL sideloading to land a memory‑resident Farfli backdoor that […]

    The post Fake Screenshot Lures Target Web3 Support Staff with Multi-Stage Malware Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • IDrive for Windows Vulnerability Allows Attackers to Escalate Privileges and Gain Unauthorized Access

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    A critical security flaw has been identified in the IDrive Cloud Backup Client for Windows, exposing users to local privilege escalation attacks. Tracked as CVE-2026-1995, this vulnerability allows authenticated, low-privilege attackers to execute arbitrary code with the highest system permissions, potentially leading to a complete compromise of the targeted device. IDrive is a widely used […]

    The post IDrive for Windows Vulnerability Allows Attackers to Escalate Privileges and Gain Unauthorized Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Kiss Loader Malware Targets with Early Bird APC Injection in New Attack Campaign

    ·

    cyber security, Cyber Security News, Malware

    A newly identified malware loader dubbed “Kiss Loader” is emerging as a potential threat, leveraging advanced process injection techniques and dynamic delivery infrastructure. The loader, still under active development at the time of discovery, demonstrates a blend of stealth, modular staging, and experimental implementation, suggesting it may evolve into a more mature attack tool. When […]

    The post Kiss Loader Malware Targets with Early Bird APC Injection in New Attack Campaign appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Preventing Account Takeovers: A Practical Guide to Detection and Response

    ·

    Cyber Security News, Technology

    Yesterday’s password leak can become tomorrow’s identity crisis. According to research firm Gitnux, account-takeover attacks jumped 354 percent in 2023, driven by bots that replay stolen credentials and infostealer malware that sidesteps multi-factor prompts. The fallout, billions in fraud losses, shaken customer trust, and security teams scrambling, demands a clear plan. In this article, we: […]

    The post Preventing Account Takeovers: A Practical Guide to Detection and Response appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Synology DiskStation Manager Vulnerability Puts Users at Risk of Remote Command Execution Attacks

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    Synology has issued an urgent security update for its DiskStation Manager (DSM) software to address a critical vulnerability. If left unpatched, this flaw could allow unauthenticated remote attackers to execute arbitrary commands on affected network-attached storage (NAS) devices. Tracked under security advisory Synology-SA-26:03, this ongoing security event requires immediate attention from system administrators to protect […]

    The post Synology DiskStation Manager Vulnerability Puts Users at Risk of Remote Command Execution Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Fake npm Install Messages Conceal RAT Malware in New Open Source Supply Chain Attack

    ·

    cyber security, Cyber Security News, Malware

    Fake npm install messages are the latest social engineering trick in the open source supply chain, with attackers abusing npm post‑install scripts to silently deploy a crypto‑stealing remote access trojan (RAT) in what ReversingLabs is calling the “Ghost campaign.” By wrapping their payloads in realistic but entirely bogus npm install logs, the threat actors turn […]

    The post Fake npm Install Messages Conceal RAT Malware in New Open Source Supply Chain Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Army wants to use bullets, mortars, and artillery rounds to take out small drones

    ·

    Science & Tech
    HUNTSVILLE, Ala.—Army leaders often say they want to stop using million-dollar missiles to shoot down thousand-dollar drones. One of the solutions may be cheap munitions the service already has.

    While the Army is leading an interagency task force to source dedicated counter-drone systems, the Capability Program Executive for ammunition and energetics is taking a look at the Army’s existing rounds to make them capable of shooting down much smaller targets.

    “We all know how important missiles are to the fight. We see it in the news. But there's also a point where missiles can't get after every munition, every threat, so we need to supplement that with something that we already have within our formations,” Kaitlyn Tani, deputy project manager at Maneuver Ammunition systems, said Wednesday at the AUSA Global Force Symposium. 

    There has already been demonstrated success in using bullets against drones, she said, particularly ones like the XM121 High Explosive Proximity round, a 30mm bullet that only needs to get near a target to take it out with its blast radius. 

    There are a handful of other systems that can use this proximity fuze technology and put it into weapon systems that aren’t made to shoot tiny quadcopters in the sky, but could do it with a round that only needs to get close. 

    “We're taking your Bradley fighting vehicle and [making it] counter-UAS capable by using the armament that is already on the system,” Tani said. “We're taking the infantry soldiers who already have Mk-19s within their squad and providing them with counter-UAS capability.”

    There’s also the potential to take some larger rounds, like indirect fire munitions designed to be launched at coordinates rather than targeted using the sight of a gun, and strapping them onto drones.

    “So we're definitely looking at all of our legacy munitions,” said Col. Vinson Morris, project manager for Close Combat Systems.

    To do that, Morris said, they have to tweak the rounds to use them with a UAS, as they’re designed to be fired from a ground-based launcher that does the propelling toward a target.

    “We see the first iteration of this potentially being a legacy mortar or legacy artillery [round] dropped from a UAS,” he said. 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • LeakBase Forum Admin Arrested by Russian Authorities in Global Cybercrime Operation

    ·

    Cyber Crime, cyber security, Cyber Security News

    Russian law enforcement agencies have successfully apprehended the suspected administrator of LeakBase, a prominent international cybercrime forum. The arrest, executed by officers from the Russian Ministry of Internal Affairs (MVD) alongside regional security services in Rostov, marks a significant disruption to the global underground trade of stolen data. The suspect, a resident of Taganrog, is […]

    The post LeakBase Forum Admin Arrested by Russian Authorities in Global Cybercrime Operation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 394 395 396 397 398 … 1,052
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence