• AI-powered malware is beginning to erode one of endpoint security’s oldest assumptions: that malicious code will remain stable long enough to identify, fingerprint, and block. A new class of threats uses large language models during execution to rewrite scripts, generate commands, and alter obfuscation on demand producing variants that can evade static hashes and traditional […]

    The post AI Malware Keeps Changing Its Code to Break Traditional Signature-Based Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The FBI has seized internet domains linked to NightmareStresser, a long-standing distributed denial-of-service (DDoS)-for-hire platform allegedly used to launch hundreds of thousands of attacks or attempted attacks worldwide since 2022. The U.S. Attorney’s Office for the District of Alaska announced the action, which targets the infrastructure that allowed paying customers to overwhelm victims’ networks and […]

    The post FBI Seizes NightmareStresser DDoS-for-Hire Domains Used in Hundreds of Thousands of Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A newly identified Windows malware framework dubbed MovieReaper is being distributed through pirated movie torrents after threat actors compromised a public torrent-file repository used by multiple tracker sites. The campaign combines a multi-stage infection chain, anti-analysis techniques, UAC bypass, file-management capabilities, and Solana blockchain-based command-and-control (C2) discovery to make disruption more difficult. Kaspersky researchers identified […]

    The post MovieReaper Malware Spreads Through Pirated Movie Torrents and Uses Solana for C2 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • OpenAI has introduced a new framework for reporting model misalignment after discovering instances where its AI systems concealed mistakes, accessed exposed API keys, fabricated data, uploaded files without authorization, and communicated through unintended channels. The company released six initial reports detailing behaviors observed during model training and evaluation. They argue that AI developers need more […]

    The post OpenAI Reveals AI Models Concealing Mistakes, Using Exposed API Keys and Sharing Files appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A newly published proof of concept called “BrokenPipe” has revealed a local privilege escalation vulnerability in the Steam Client Service on Windows systems. According to the project’s GitHub repository, this flaw could allow a standard, non-administrative Windows user to make the Steam Client Service launch an executable with NT AUTHORITY\SYSTEM privileges. The proof of concept […]

    The post Steam Windows Vulnerability Lets Users Escalate Privileges to NT AUTHORITY\SYSTEM appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Every penetration testing firm is facing the same pressure right now. AI tools are faster, cheaper, and increasingly capable, and testers are using them whether the company has a policy on it or not. There’s a high change AI has already entered your workflow the question is whether it has entered on your terms or your employee’s personal […]

    The post How Pentest Companies Adapt In The Era of AI appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • NATIONAL HARBOR, Md.—Space Force modernization efforts could slow if Congress doesn’t pass a full budget at the end of the year, the service’s leaders said. 

    “We're on this ramp-up, right, consistent with our overall strategy and the recognition that the space domain is a critical domain, in and of itself, but also for the joint force,” Erich Hernandez-Baquero, the Space Force’s top buyer, told reporters Tuesday. “Now we're going to run into [fiscal year 2027]—and you saw that our budget request was to continue on that—and this [continuing resolution] is definitely going to put the brakes on that for a time period.”

    The Space Force has requested $71.1 billion for 2027, including $19.1 billion for procurement. But with little time remaining before fiscal 2027 begins on Oct. 1, Congress has passed stopgap legislation—a continuing resolution—to keep funding the Pentagon at 2026 levels through Dec. 11. The CR permits no new programs to begin.

    “We certainly appreciate at least not being shut down. So…that's a good thing, but on the CR, it really does pace us at a time where we really need to go faster. So we are obviously encouraging Congress to do what they can to help support the president's budget on that,” Hernandez-Baquero said. “In the meantime, we'll just do what we always do: prioritize the things that will yield the most mission capability soonest, and make sure we're executing on those.”

    Hernandez-Baquero, who was sworn into the chief space acquisition role last month, declined to specify which priorities could be most affected by a continuing resolution because things were “pre-decision at this point.”

    Gen. Doug Schiess, the chief of space operations, said about 10 percent of the service’s programs could be slowed down due continuing resolution. 

    “About 90 percent of the programs we have are programs from last year—so we can still get after those,” but there’s a remaining 10 percent of programs that require full budget funding, Schiess said. “It's going to slow us down, and the threat is not slowing down.”

    Amid a broader push for acquisition reform, Hernandez-Baquero said he’s focused on streamlining and speeding up military purchasing. And when it comes to technology initiatives, there will be a new senior leadership role dedicated to it.  

    The Air Force’s new program acquisition executives, or PAEs, are “establishing those pathways for onboarding new technology, but I'm just conscious that that by itself is not going to support drawing in the right technologies,” he said. “I want somebody that's focused—100 percent—on looking at the most promising tech and driving the prototyping initiatives that are going to help mature it to the level where a PAE can say, ‘Ah, it meets my criteria for this onboard path, and I can go do that’.”

    That person is a technology portfolio executive, who “will have the most promising technology coming out of the [research and development] side, and…will work with industry to ensure that we have the right pathways to do that. Conceptually, there would be prototype efforts that get executed out of that to support the mission areas.”

    The technology portfolio executive office already exists but the role hasn’t yet been filled, he said. 

    “When I designate a TPE, for example, that person is going to report directly to me and represent my authority when it comes to the technology transition,” Hernandez-Baquero said. “I cannot do this without the buy-in of the PAEs that are executing the mission areas, and so my charter to them is going to be not only to deliver on those missionaries, but be part of the enterprise team that's going to deliver on those cross-cutting capabilities.” 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • NATIONAL HARBOR, Md.—With an eye on the Navy’s progress toward an unmanned aerial tanker, Air Force planners are asking questions about their own future tanker fleet.

    “Thinking beyond the current KC-46 buy and the program extension. Whatever that next tanker looks like—our advanced tanker system—it's got to be connected. It's got to be able to defend itself. But it begs the question: Does it need to be manned? Could it be optionally manned, or could it be autonomous, or is there a family of solutions maybe that would answer that question?” Lt. Gen. Daniel Tulley, who leads Air Mobility Command, told reporters at the Air, Space, & Cyber 2026 conference.

    The Air Force is currently buying Boeing KC-46 Pegasus tankers and spent $12 million to explore buying a new tanker this year. But it zeroed out funding to continue those explorations in the 2027 budget request and is asking instead for $13 million for “advanced tanker systems.” 

    Tulley said the Navy’s work on the Boeing MQ-25 Stingray suggests that his own service might eventually not need manned tankers. The Navy announced on Thursday that the MQ-25, which first flew earlier this year, has received approval to enter low-rate production. The service also ordered three more aircraft, bringing its total to 14.

    “I do not believe that it has to be manned, a future air-refueling solution,” he said. “But then, how do we, the U.S. Air Force, bring that to bear in scope, scale, and range?” 

    A drone tanker for the Air Force would need to be a very large aircraft with the capacity for fuel and the ability to fly for a long time. The KC-46, for example, can fly nearly 7,400 miles and carry more than a thousand tons of fuel. The MQ-25 can fly about 500 miles and carry up to 7.5 tons of fuel. 

    “An optionally manned or an unmanned tanker at the ranges we need it to operate at is a very large aircraft. And we're not yet to where we're employing fully autonomous large aircraft,” Tulley said.  

    “Just about any large aircraft these days made by Boeing can take itself off with very little help, can fly on a programmed route and pretty much land itself on autopilot, bring itself to a stop on the runway. But we don't employ it that way with a system that's controlling it and then taxiing it in and making it a part of a more effective, broader system.”

    One maker of autonomous-aircraft control systems said the vision of autonomy for large aircraft was getting clearer. And while the technology isn’t there yet, there’s progress, said Matthew George, CEO of Merlin Labs.

    “We’re the furthest along in the world on making that real—in our opinion,” said Matthew George, CEO of Merlin Labs. “So we're going to be implementing autonomy on the C-130J, which is the same general size class” as the Boeing KC-135 Stratotanker

    “And the advantage with those aircraft is you can start to implement autonomy still with human crews aboard, and you can supplement those human crews in a way that's pretty helpful. That's a way that you can start to chip away at that without actually going fully to the unmanned tanker right away,” George said. “The goal is that the unmanned tanker is ready, and the autonomy ends up being ready at the same time.” 

    George agreed with Tulley’s point that many aircraft can somewhat fly themselves, but there are instances, such as emergency situations, when a human needs to make a decision.

    “What's really hard is those edge cases and those emergencies—or those things where there are decisions to be made. So, for instance, if you're going to a destination and then there's weather in between, how do you get around the weather?” he said. 

    And beyond technology, there are policy challenges. 

    “None of this matters unless it's certified and safe. So for us, getting certification done is important, and that's what we're working really closely with the Air Force on this year,” George said. “We're taking that [autonomous pilot] brain and putting it onto the C-130J. And as far as we know, that's going to be the first time autonomy fully takes control of an operational U.S. Air Force aircraft.”

    No date was provided for when that flight will occur, but the company’s technology completed a critical design review, George said. 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • NATIONAL HARBOR, Md.—The Air Force Test Center is prepared to keep up with the Pentagon’s calls to buy, develop, test, and field technology quickly—but safety remains the top priority, the center’s commander said. 

    “We always want to proceed safely forward. The work that we do, as I've noted, is, can be dangerous. So we don't want to take risks that are unnecessary and unsafe. So that's always something that we're on the lookout for,” Brig. Gen. Mark Massaro, who leads the Air Force Test Center, told reporters during this week’s Air, Space & Cyber conference hosted by the Air and Space Forces Association.

    Some context: Massaro’s comments come just three months after eight airmen died during a test flight of Boeing’s B-52 Stratofortress at Edwards Air Force Base in California. They also come nearly a year after Defense Secretary Pete Hegseth pushed for sweeping acquisition reform, which includes “being open to buying the 85 percent solution” while achieving the more perfect solution over time. Separately, the Pentagon has slashed staff and reorganized its weapons testing organization, which raised oversight concerns, according to a Government Accountability Office report released earlier this year.  

    “There's a lot of capabilities out there today that might not be—from a technology perspective—exactly what it looks like in our minds at the end state. But it's at least the same, if not better, than what might be out there today,” Massaro said. “So there's a risk calculus there from an operational and acquisition risk when you do your cost schedule performance and then overlay that on the effectiveness and employability for the combatant and for the operational warfighter.” 

    The Air Force is currently testing system upgrades for the B-52, one of the service’s oldest aircraft, that could keep it operational through the 2050s. 

    The center works with program acquisition executives and operators to “understand where those balances are, and design our test programs to accommodate for more rapid” testing and integration, Massaro said. 

    “A clear example was our rapid integration of Falco, the [Advanced Precision Kill Weapon System], on the F-15E. Our people, processes, and test assets were postured to respond through integrated developmental and operational testing,” he said. 

    “The Falco was a little bit over a year ago…We had F-15E's. We had the rockets. We just had never connected them together in that way. So we had one technical risk to really get through, and [it] allowed us to go very quickly. So that's balancing the risk of the programmatic side when an operational warfighter needs it really quick, and understanding where you can make those trades. And with safety always as a backdrop.”

    Welcome

    You’ve reached the Defense Business Brief, where we dig into what the Pentagon buys, who they’re buying from, and why. Send along your tips, feedback, and song recommendations to lwilliams@defenseone.com. Check out the Defense Business Brief archive here, and tell your friends to subscribe!

    Here come the MMAs. The Air Force wants Massed Modular Aircraft, or MMAs, to replace General Atomics’ storied MQ-9 Reaper drone, Troy Meink, the service’s secretary announced earlier this week. It’s a call that Swarm Aero has been waiting for—and building toward for the past four years. On Monday, the company unveiled its autonomous Gamera aircraft, a long-range strike aircraft that boasts seven connection points for payloads like missiles and sensors. The UAS is powered by the company’s Legion autonomy software. 

    • “We thought there would be a need that ultimately…to carry a very large payload like the LRASM that we see here, a long distance, and do so as cost effectively as possible,” Peter Kalogiannis, Swarm Aero’s CEO, told Defense One. “The $10 million listed in the solicitation, that really enables those volumes. And again, we've designed from the very beginning for those volumes, and quite frankly, for that price point, we're very very competitive against them. 
    • The company is building “several” prototypes in its Oxnard, California, facility and expects the first flight by the end of 2027. 
    • “This is something that makes the rest of the force—the bombers, the fighters, the B-21s, the F-47s—it makes them more lethal and more survivable. By being able to take some of the mission sets that they would otherwise potentially have to do, and freeing them up where they can be most effective,” Oliver Palmer, the company’s co-founder, told Defense One
    • And while it’s early, the company is looking forward to what the Air Force has in store and the innovation it could spark. 
    • “Frankly, we need competition in large aircraft production. There has historically been a monopoly structure of awarding programs that are intended to be around for 20-, 30-plus years,” Palmer said. “There have been a lot of really great reasons to do that, but increasingly we need competition because the cycle of technology competition with adversaries like China and others is changing so fast…and the model has to change. They started that with CCA. It sounds like they're gonna do that again with MMA. We absolutely welcome this.”

    AI integration station. The technology has had a big week in national security, so it’s only natural that the topic surfaced in chatter throughout the Gaylord National Resort & Convention Center. 

    • The Space Force’s newly appointed top buyer, Erich Hernandez-Baquero, said the military has to “lean in” to the technology. 
      • “We cannot afford to lose this race for artificial intelligence,” he said. “The answer is not to shy away from the technology, but to lean into it, understand it, and apply the right guardrails in place. And I think those AI experts have approaches for how to ensure those guardrails are in play, and we need to continue to support development of those guardrails in a way that supports our space missions.” 
    • The Air Force Test Center is also keen to collaborate with the tech industry, and now has a dedicated senior leader role for AI.
      • “We have an artificial intelligence expert with us on staff now at the Air Force Test Center. So we are stepping into that world. We are looking to build and maintain those partnerships with tech in that space,” AFTC’s Massaro said. 
    • Air Mobility Command wants a more data-link connected fleet, which could allow for some AI use. 
      • “The ability for air crews to communicate, to coordinate tanker orbits and rendezvous, to pass threat information, to save lives and save aircraft has been everything we expected it to be,” Lt. Gen. Daniel Tulley, who leads the command, told reporters. 
      • The command is “well down the path” of having a quarter of its fleet data-link connected despite missing its original 2025 goal. But the strategy has “evolved.” The service is pursuing MAF NEXUS and “the goal is to have this on all mobility aircraft, whether they're future builds and it's incorporated, or it's an add-on capability to existing aircraft.”
      • The system “brings edge compute, the ability to then deploy AI and much more computing horsepower forward on the aircraft, and it does network with the rest of the joint force and the Air Force's battle management system.”

    One last, fun exercise: If you Google “Air Force MMA” you’re definitely going to get UFC-type content. 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A critical vulnerability in Check Point’s Security Management and Log Servers could allow an attacker without login credentials to run code as root on those servers over the network. The Security Management Server is the system that controls firewall policy and administrator access. Check Point has released a fix through its LivePatch update channel and says it has no indication that the flaw

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶