ADMIN.FOUNDATION – Page 510 – cybersecurity / defense / intelligence

25 Million Users Affected as AI Chat Platform Leaks 300 Million Messages

·

AI, cyber security, Cyber Security News, Data Breach

“Chat & Ask AI,” a highly popular mobile application available on both Google Play and the Apple App Store, has suffered a significant data exposure. An independent security researcher discovered a vulnerability that left approximately 300 million private messages accessible to the public. This breach impacts more than 25 million users, raising serious concerns about […]

The post 25 Million Users Affected as AI Chat Platform Leaks 300 Million Messages appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
GuLoader Leverages Polymorphic Malware and Trusted Cloud Infrastructure to Evade Detection

·

cyber security, Cyber Security News, Malware

GuLoader, also known as CloudEye, is a sophisticated malware downloader that has been active since late 2019. Its primary function is to download and install secondary malware, such as Remote Access Trojans (RATs) and information stealers, onto compromised systems. One of GuLoader’s most effective evasion strategies is its use of legitimate cloud services. Instead of […]

The post GuLoader Leverages Polymorphic Malware and Trusted Cloud Infrastructure to Evade Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Bloody Wolf Cybercrime Group Uses NetSupport RAT to Breach Organizations

·

cyber security, Cyber Security News

The latest campaign, they have switched to misusing a legitimate remote administration tool called NetSupport RAT. A cybercriminal group known as “Stan Ghouls” (or Bloody Wolf) has launched a fresh wave of attacks targeting organizations across Central Asia and Russia. Active since at least 2023, this group focuses heavily on the manufacturing, finance, and IT […]

The post Bloody Wolf Cybercrime Group Uses NetSupport RAT to Breach Organizations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Chinese Hackers Target Singapore Telecoms in Edge Device Compromise Campaign

·

cyber security, Cyber Security News

A massive, eleven-month campaign to root out sophisticated attackers from the nation’s critical infrastructure. The Cyber Security Agency of Singapore (CSA) and the Infocomm Media Development Authority (IMDA) revealed details of “Operation CYBER GUARDIAN,” a multi-agency effort to defend the country’s four major telecommunications providers Singtel, StarHub, M1, and SIMBA from a persistent cyber espionage […]

The post Chinese Hackers Target Singapore Telecoms in Edge Device Compromise Campaign appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Microsoft Acknowledges Exchange Online Spam Filter Mistakenly Blocks Valid Email

·

cyber security, Cyber Security News, Microsoft, vulnerability

Microsoft is currently tackling a significant service degradation within Exchange Online that is disrupting business communications by incorrectly flagging legitimate emails as phishing attempts. The incident, tracked under the identifier EX1227432, began on February 5, 2026, and is causing valid messages to be trapped in quarantine rather than reaching their intended recipients. Spam Filter Mistakenly Blocks […]

The post Microsoft Acknowledges Exchange Online Spam Filter Mistakenly Blocks Valid Email appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Threat Actors Using Ivanti EPMM Flaws to Install Stealth Backdoors

·

CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities, vulnerability

A sophisticated new cyber campaign has been detected targeting Ivanti Endpoint Manager Mobile (EPMM) systems. Starting on February 4, 2026, threat actors began exploiting two critical vulnerabilities, CVE-2026-1281 and CVE-2026-1340, to plant dormant backdoors. Unlike typical attacks that immediately steal data or deploy ransomware, this campaign focuses on silence and persistence. Stealth Backdoors The attackers […]

The post Threat Actors Using Ivanti EPMM Flaws to Install Stealth Backdoors appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
DPRK IT Workers Use Stolen LinkedIn Identities to Secure Remote Employment

·

cyber security, Cyber Security News, LinkedIn

A new wave of identity fraud has hit the remote job market, with North Korean (DPRK) operatives adopting a sophisticated new tactic to bypass hiring screens. This development marks a significant shift in tradecraft. Previously, these operatives often relied on fabricated profiles with AI-generated headshots and fake resumes. However, hiring managers and security teams have […]

The post DPRK IT Workers Use Stolen LinkedIn Identities to Secure Remote Employment appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
0-Click RCE Found in Claude Desktop Extensions, Putting 10,000+ Users at Risk

·

AI, CVE/vulnerability, cyber security, Cyber Security News, vulnerability

A critical “zero-click” vulnerability in Claude Desktop Extensions (DXT) that allows attackers to compromise a computer using nothing more than a Google Calendar event. The flaw, which has been assigned a maximum severity score of CVSS 10/10, affects more than 10,000 active users and over 50 different extensions. The vulnerability stems from a fundamental architectural decision. […]

The post 0-Click RCE Found in Claude Desktop Extensions, Putting 10,000+ Users at Risk appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Fortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code Execution

·

Fortinet has released security updates to address a critical flaw impacting FortiClientEMS that could lead to the execution of arbitrary code on susceptible systems. The vulnerability, tracked as CVE-2026-21643, has a CVSS rating of 9.1 out of a maximum of 10.0. “An improper neutralization of special elements used in an SQL Command (‘SQL Injection’) vulnerability [CWE-89] in FortiClientEMS may

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Hackers Deliver Global Group Ransomware Offline via Phishing Emails

·

Forcepoint, GLOBAL GROUP, Phishing, Phishing Scam, Phorpiex, Ransomware, SCAM, Security

Global Group ransomware is delivered through phishing emails and can encrypt files offline without any internet connection.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶