ADMIN.FOUNDATION – Page 41 – cybersecurity / defense / intelligence

New ScarlettGroup Extortion Gang Threatens to Leak Company Data Using Dark Web Countdown Timers

·

cyber security, Cyber Security News, Dark Web

An emerging cyber-extortion operation named ScarlettGroup is using a Tor-based leak site and public countdown timers to pressure organizations over allegedly compromised data. Threat-monitoring records described in Foresiet’s research place its emergence around September 2026, with visibility increasing during October as alleged victim listings and underground forum activity attracted attention. Unlike conventional ransomware campaigns, ScarlettGroup’s […]

The post New ScarlettGroup Extortion Gang Threatens to Leak Company Data Using Dark Web Countdown Timers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Scammers Exploit Dell and Staples Order Emails to Bypass Traditional Phishing Detection

·

cyber security, Cyber Security News, Phishing

Scammers are abusing legitimate Dell and Staples order notifications to deliver callback phishing lures, embedding fraudulent helpline numbers inside transactional emails that pass authentication checks. Cisco Talos observed roughly 1,400 messages across two campaigns, highlighting how trusted retail infrastructure can carry attacker-controlled instructions without relying on spoofed senders or malicious links. The activity extends a […]

The post Scammers Exploit Dell and Staples Order Emails to Bypass Traditional Phishing Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat

·

Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal systems, and works without anyone watching. Nobody reviewed its access. Nobody owns it. If an employee had that much reach with that little oversight, you would call it an insider risk. So why do we still call the agent a productivity tool?

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Fortinet Releases Critical Security Updates for FortiOS, FortiManager, and FortiAnalyzer

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

Fortinet has announced coordinated security hardening updates for FortiOS, FortiManager, and FortiAnalyzer, scheduled for October 22, 2026. These updates aim to address critical and high-severity vulnerabilities. The company urges customers to prioritize updating internet-facing systems and treat these upgrades as urgent, not routine maintenance. In an announcement on October 21, Fortinet’s Chief Information Security Officer, […]

The post Fortinet Releases Critical Security Updates for FortiOS, FortiManager, and FortiAnalyzer appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation

·

Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed “anomalous activity” related to systems that store customer environment variables. Upon further investigation, the company found that an unauthorized third party may have gained access to encrypted environment variables, and, in some cases, obtained the decrypted contents. The impact, it said, is limited to a “subset of users,

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Samsung and Vizio Smart TVs Continue Sending Viewing Data Even After Users Opt Out

·

cyber security, Cyber Security News

Samsung and Vizio smart TVs continued sending traffic consistent with automatic content recognition (ACR) even after researchers disabled the feature. This raises concerns about how reliable privacy controls are at preventing surveillance of viewing. However, encrypted connections made it impossible for researchers to confirm whether those transmissions contained viewing data or whether manufacturers retained them. […]

The post Samsung and Vizio Smart TVs Continue Sending Viewing Data Even After Users Opt Out appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Hackers Used AI-Generated Scripts to Break Into Government Linux Servers and Hunt for Secrets

·

AI, cyber security, Cyber Security News, Linux

Hackers used apparently AI-generated scripts to compromise government Linux infrastructure, harvest credentials and pursue sensitive databases and official mailboxes in a campaign tracked as CL-UNK-1211. The investigation, published October 15, linked the operation to government entities and state-affiliated infrastructure. Attribution remains unresolved: under Unit 42’s attribution framework, the UNK designation means researchers have not established […]

The post Hackers Used AI-Generated Scripts to Break Into Government Linux Servers and Hunt for Secrets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL

·

A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer’s Windows or WSL machine when the developer signed in. OpenCode connects to MCP (Model Context Protocol) servers to add outside tools, and such code would run with the developer’s own access. Anomaly, the company behind OpenCode, fixed the flaw in version 1.18.33 on September

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Hackers Use Fake App Updates to Replace Legitimate Banking Apps With Malicious Versions

·

cyber security, Cyber Security News

Hirudo, an Android banking remote-access trojan (RAT) that can steal credentials and remotely control an infected phone. Its most unusual feature is the ability to replace selected genuine banking apps with modified copies designed to interfere with security checks from inside the app itself. Hirudo uses a two-app setup. Victims first install a convincing shopping […]

The post Hackers Use Fake App Updates to Replace Legitimate Banking Apps With Malicious Versions appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks

·

Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, INC Ransomware, Palo Alto, Qilin, Security, VPN, vulnerability

Qilin and INC ransomware operators exploit a PAN-OS vulnerability (CVE-2026-0257) to gain VPN access, then steal domain credentials…

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶