• Linux rootkits have historically received less attention than their Windows counterparts, but the rapid adoption of Linux in cloud infrastructure, containers, and IoT devices has shifted the threat landscape. Attackers are constantly innovating, and over the past two decades, Linux rootkits have evolved significantly. While early threats relied on easily detectable userland shared object injections […]

    The post New Linux Rootkits Leverage Advanced eBPF and io_uring Techniques for Stealthy Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A China-linked advanced persistent threat (APT) actor has been targeting critical telecommunications infrastructure in South America since 2024, targeting Windows and Linux systems and edge devices with three different implants. The activity is being tracked by Cisco Talos under the moniker UAT-9244, describing it as closely associated with another cluster known as FamousSparrow. It’s worth

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A highly sophisticated China-linked threat actor, identified as UAT-9244, has been actively targeting critical telecommunications infrastructure across South America since 2024. Security researchers assess with high confidence that UAT-9244 exhibits close operational overlap with known espionage groups such as FamousSparrow and Tropic Trooper. To maintain a strong foothold in victim networks, the hackers deploy a […]

    The post China-Nexus Hackers Target Telecommunication Providers with New Malware Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft on Thursday disclosed details of a new widespread ClickFix social engineering campaign that has leveraged the Windows Terminal app as a way to activate a sophisticated attack chain and deploy the Lumma Stealer malware. The activity, observed in February 2026, makes use of the terminal emulator program instead of instructing users to launch the Windows Run dialog and paste a command

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Hikvision and Rockwell Automation products to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The critical-severity vulnerabilities are listed below – CVE-2017-7921 (CVSS score: 9.8) – An improper authentication vulnerability affecting

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • In a major law enforcement operation, authorities have arrested a U.S. government contractor accused of executing a massive cryptocurrency theft. John Daghita allegedly stole over $46 million in digital assets from the United States Marshals Service (USMS). This successful apprehension highlights the growing intersection of insider threat management, cryptocurrency tracing, and international law enforcement collaboration. […]

    The post FBI Detains U.S. Government Contractor in Massive $46 Million Fraud Scheme appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A critical security vulnerability in the popular WordPress User Registration & Membership plugin allows unauthenticated attackers to easily create administrator accounts. The severe flaw, officially tracked as CVE-2026-1492, currently affects all plugin versions up to and including 5.1.2. Because it requires no prior authentication or user interaction to exploit, the vulnerability carries a maximum critical […]

    The post WordPress Membership Plugin Flaw Lets Attackers Create Admin Accounts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Google Threat Intelligence Group (GTIG) reported 90 zero-day vulnerabilities actively exploited in the wild during 2025. While this total is slightly below the 2023 peak, it highlights a critical shift in the cybersecurity landscape, as attackers are increasingly abandoning generic browser exploits to target edge devices, enterprise software, and mobile operating systems.​ Shifting Targets and […]

    The post Google Uncovers 90 Zero-Day Vulnerabilities Under Active Exploitation in 2025 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • U.S. forces destroyed Iran’s military space command, Adm. Brad Cooper, the head of Central Command, announced Thursday, saying the move degraded the regime’s ability to coordinate retaliatory strikes. But experts told Defense One that the country’s nascent space capabilities never posed a significant threat. 

    “We've also struck Iran's equivalent of Space Command, which degrades their ability to threaten Americans,” Cooper said during a press conference.

    The Islamic Revolutionary Guard Corps announced the existence of its own space command in April 2020 during the launch of its first reconnaissance satellite. Iran has launched a total of 26 satellites since 2005, and 13 of them are still operational, according to the American Enterprise Institute’s space data navigator tool. Three of those are registered to the IRGC.

    U.S. Space Command played a crucial role in the early hours of President Donald Trump’s war on Iran, with Joint Chiefs Chairman Dan Caine describing the military’s cyber and space forces as the “first movers” that used waves of non-physical effects, like electronic warfare, to disrupt Iran's “ability to see, communicate and respond.” But Iran’s space capabilities, by comparison, present little threat to the U.S. military, experts said. 

    “I wouldn't compare it to our space command, since Iran had virtually no space assets of its own to speak of,” said Todd Harrison, a defense expert who created AEI’s space data navigator tool. 

    A CENTCOM spokesperson did not respond to Defense One’s questions asking what threat Iran’s space command posed to the American public and how it was eliminated. 

    Iran’s small number of satellites have limited capabilities, and it’s unlikely that the nation has advanced capabilities to destroy satellites. It also hasn’t demonstrated an ability to build homing kinetic kill vehicles, according to the non-profit Secure World Foundation’s 2025 global counterspace capabilities report.

    “Technologically, it is unlikely Iran has the capacity to build on-orbit or direct-ascent anti-satellite capabilities, and little military motivation for doing so at this point,” the 2025 report said. “Iran has demonstrated an [electronic warfare] capability to persistently interfere with the broadcast of commercial satellite signals, although its capacity to interfere with military signals is difficult to ascertain.”

    Since the IRGC’s space command is under the regime’s aerospace forces, which operate missiles, it’s possible that Cooper was referring to that threat being eliminated, said Victoria Samson, the Secure World Foundation’s chief director of space security and stability.

    “They were not a threat in space capabilities,” Samson said. “The threat that they have for counter-space capabilities, they’re great at jamming and spoofing … but, big picture, no.” 

    There are Guardians overseas in the CENTCOM area of responsibility, not just deployed-in-place stateside, an official confirmed to Defense One, but declined to disclose the number, locations, or types of squadrons deployed. In 2022, the Space Force stood up Space Forces Central, the component field command headquartered with U.S. Central Command at MacDill Air Force Base in Florida. 

    The 162nd Electromagnetic Warfare Combat detachment is responsible for “training, equipping, and mobilizing specialized space electromagnetic warfare capabilities within the region,” according to Defense Department images.

    “Proud of our Guardians executing with unmatched precision and professionalism at home station and deployed to CENTCOM,” Saltzman said in a Wednesday post on X.

    Space Forces played crucial roles in last year’s U.S. strikes on Iran’s nuclear facilities and the January operation which led to the capture of then-Venezuelan President Nicolás Maduro. Officials have publicly confirmed guardians tracked missiles, provided satellite communication to transmit position, timing, and navigation data, and used other space-based capabilities to support the joint force.

    Iran has warned, through relevant intermediaries, that countries with ground stations and companies providing uplink services against the regime will have“action…taken against them,” the IRGC-associated Tansim News Agency reported Thursday. 

    Harrison said Thursday’s announcement that Iran’s space command was eliminated could signal an end to the military’s main targeting operations.

    “If anything, this is a sign that we are working our way down to near the bottom of the target list,” Harrison said. 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The U.S.’s war with Iran is about to go up a notch, Defense Secretary Pete Hegseth said Thursday during a press briefing at U.S. Central Command headquarters in Tampa, Fla., as the bombing campaign’s sixth day came to a close.

    Hegseth batted away concerns about U.S. munitions stockpiles, seeming to suggest that as Iran’s capabilities are weakened, the remaining missiles are stretching further.

    “Iran is hoping that we cannot sustain this, which is a really bad miscalculation,” Hegseth said. “Our stockpile of defensive and offensive weapons allow us to sustain this campaign as long as we need to. Again, our munitions status increases as our advantage increases…we have only just begun to fight, and fight decisively.”

    “The amount of firepower over Iran and over Tehran is about to surge dramatically,” Hegseth said, adding that the United Kingdom and others have allowed U.S. forces access to their bases as launch points for strikes, after the U.K. initially denied access to Diego Garcia in the Indian Ocean and Spain initially forbade the U.S. from launching strikes from its bases.

    Over the past three days, said CENTCOM commander Adm. Brad Cooper, U.S. bombers have struck nearly 200 targets inside Iran, including its capital.

    “And in just the last hour, U.S. B-2 bombers dropped dozens of 2000-pound penetrator bombs targeting deeply buried ballistic-missile launchers,” he said.

    The U.S. has also taken out Iran’s space command, degrading its ability to coordinate retaliatory attacks, he said.

    Ballistic missile attacks from Iran have decreased by 90 percent since Saturday, he added, with drone attacks down 83 percent.

    At the same time, Cooper said, the U.S. has ramped up its strikes on the Iranian navy, sinking over 30 ships, including a drone carrier earlier Thursday. 

    Now, CENTCOM is turning much of its attention to destroying Iran’s ballistic-missile industrial base.

    “This is going to take some time, but our forces are well supplied, as the secretary said, and we are absolutely ready to prosecute this mission decisively,” he said. 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶