Skip to content

ADMIN.FOUNDATION

  • China-Based BRONZE SANDCASTLE Hackers Abuse Sandboxie to Load Backdoors

    ·

    backdoor, BRONZE SANDCASTLE, China, cybersecurity, Malware, Sandboxie, Security, Sophos, South Korea, Windows
    Sophos found BRONZE SANDCASTLE abusing legitimate Windows apps to load encrypted backdoors, collect system information and steal Active…

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Russian Hackers Steal Credentials and Open Secret SSH Tunnel Into NATO Defense Firm’s Network

    ·

    cyber security, Cyber Security News

    Swallowtail, the Russian espionage group also tracked as APT28, Fancy Bear and Forest Blizzard, targeted organizations in two NATO member states, including a law enforcement agency, a naval shipbuilder and a manufacturer of military aircraft engines. The targets’ roles point to intelligence collection focused on national security and defense. The U.S. government identifies APT28 and […]

    The post Russian Hackers Steal Credentials and Open Secret SSH Tunnel Into NATO Defense Firm’s Network appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Critical Fortinet FortiSIEM RCE Vulnerability Gets Public PoC Exploit, Allowing Unauthenticated Attacks

    ·

    CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities, vulnerability

    Horizon3.ai has released a public proof-of-concept exploit for CVE-2026-106173, a critical vulnerability in Fortinet FortiSIEM. This vulnerability allows unauthenticated attackers to turn arbitrary file writes into remote code execution. Researcher Zach Hanley published a technical analysis on October 20, following Fortinet’s security advisory released on October 13. The vulnerability specifically affects the product’s gRPC communication […]

    The post Critical Fortinet FortiSIEM RCE Vulnerability Gets Public PoC Exploit, Allowing Unauthenticated Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Oracle Releases 1,295 Security Patches to Fix Critical Vulnerabilities Across Multiple Products

    ·

    CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities

    Oracle has released its October 2026 Critical Patch Update, which includes 1,295 new security patches across its enterprise portfolio. Published on October 20, the advisory addresses vulnerabilities in Oracle software as well as third-party components. Notably, it addresses critical flaws that attackers can exploit remotely without authentication. Affected products include databases, middleware, business applications, Java, […]

    The post Oracle Releases 1,295 Security Patches to Fix Critical Vulnerabilities Across Multiple Products appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Apache Tomcat Security Flaws Allow Attackers to Bypass Authentication and Expose User Data

    ·

    CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities, vulnerability

    Apache disclosed eight vulnerabilities in Tomcat, including authentication bypass, cross-user data exposure, insecure socket access, and cryptographic configuration failures. Of these, three are rated Important, and five are rated Low. Fixes are available in Tomcat versions 11.0.27, 10.1.61, and 9.0.123, depending on the affected version branch. These vulnerabilities affect specific components and configurations, not every […]

    The post Apache Tomcat Security Flaws Allow Attackers to Bypass Authentication and Expose User Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites

    ·

    Unknown threat actors breached TeamUpdraft’s website and potentially gained unauthorized access to customers’ connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, using them to backdoor WordPress sites. TeamUpdraft is the developer behind UpdraftPlus, a popular WordPress backup plugin with over four million active installations. The vendor also offers UpdraftCentral, a remote

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers Compromise 333 Tor Exit Nodes to Steal SSH Credentials and Deploy Ebury Malware

    ·

    cyber security, Cyber Security News

    Attackers compromised 333 Tor exit nodes in a coordinated campaign to intercept SSH connections, steal passwords, and deploy the Ebury Linux backdoor, according to a research account published on October 20, 2026. The compromised infrastructure accounted for approximately 10% of Tor’s roughly 3,000 exit relays. The researcher reported that attackers accessed the underlying servers in […]

    The post Hackers Compromise 333 Tor Exit Nodes to Steal SSH Credentials and Deploy Ebury Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Scattered Spider, LAPSUS$, and ShinyHunters Operate as Distinct Groups Within The Com Ecosystem

    ·

    cyber security, Cyber Security News

    Scattered Spider, LAPSUS$, and ShinyHunters represent distinct intrusion clusters within The Com, not interchangeable names for one cybercriminal organization. The analysis separates these clusters from SP1D3R HUNTERS, also called Scattered LAPSUS$ Hunters (SLH), which it describes as a shared brand and coordination layer rather than a fourth operational group. That distinction has immediate consequences for […]

    The post Scattered Spider, LAPSUS$, and ShinyHunters Operate as Distinct Groups Within The Com Ecosystem appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases

    ·

    U.S. federal civilian agencies must remove DeepSeek products from their information technology systems, along with any third-party products or services “developed using DeepSeek implementations,” under a Department of Homeland Security order. They may also no longer buy information technology products or services from the Chinese AI developer or its affiliates Homeland Security Secretary

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web

    ·

    State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it does not yet know where the data came from. The state-owned bank, India’s largest, said in a stock-exchange filing dated October 21 that it “has experienced an incident involving the loss of certain data.” The count is

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 45 46 47 48 49 … 1,265
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence