• Swarmer, a sophisticated tool designed to manipulate Windows registry hives while bypassing endpoint detection systems. The tool exploits legacy Windows infrastructure to achieve persistent access without triggering traditional EDR monitoring systems that typically flag direct registry modifications. Endpoint Detection and Response (EDR) solutions have significantly hardened defenses against conventional registry persistence techniques. Classic methods using […]

    The post Swarmer Tool Abuses Windows Registry to Evade Detection and Persist on Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A study by OMICRON has revealed widespread cybersecurity gaps in the operational technology (OT) networks of substations, power plants, and control centers worldwide. Drawing on data from more than 100 installations, the analysis highlights recurring technical, organizational, and functional issues that leave critical energy infrastructure vulnerable to cyber threats. The findings are based on

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybercriminals are exploiting Google Search Ads to distribute malware through deceptive landing pages that impersonate Apple’s official website design. The malicious ads appear prominently in Google Search results when users search for “mac cleaner,” displaying trusted domains such as docs.google.com and business.google.com as landing pages. However, clicking these ads redirects users to Google Apps Script […]

    The post Fake “Mac Cleaner” Campaign Uses Google Ads to Redirect Users to Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Beyond the direct impact of cyberattacks, enterprises suffer from a secondary but potentially even more costly risk: operational downtime, any amount of which translates into very real damage. That’s why for CISOs, it’s key to prioritize decisions that reduce dwell time and protect their company from risk.  Three strategic steps you can take this year for better results: 1. Focus on today’s

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Two U.S. Navy submarines—one Los Angeles-class and one Ohio-class—are using robots to help extend the life of aging engines, Steve Pykett, CEO of Fairbanks Morse Defense, told Defense One.

    “To maintain that engine and keep it in service for longer and longer, we go in, we lift the crankshaft, the casing up. Conventionally, we would ask one of our skilled welders to sit inside that engine casing—there's a two-foot opening—and weld hundreds of weld beads to build up those wear locations. And that's clearly not a nice task to ask them to do. It's very, very high temperature, very dirty, not a pleasant experience,” he said.

    So, Fairbanks is using cobots, or collaborative robots, that use machine learning to automate the process. 

    Cobots are particularly useful for repeated, time-consuming welding tasks, with an experienced operator nearby to make sure everything goes well. And using them more could help keep shipbuilding and maintenance schedules on track. 

    “The operator is still there outside the engine, in a safer environment. They're monitoring, supervising, and if there's any special cause of events…[they] may have to go in and investigate,” Pykett said. 

    But the best part, he said, is the cobots shrink a multi-week process to days. 

    “Because we have to weld, we have to machine, we have to peen the surface. What was five weeks is now five days,” Pykett said. “In terms of being able to turn these availabilities around in a compressed schedule and get the fleet back out into theater; that's a major win for us."

    Pykett said Fairbanks already commonly uses automation for machining original equipment, such as forgings, but wants to expand the tech’s use on submarines and surface vessels. 

    “We're already taking that same system and developing it so we could potentially go into other confined spaces within subs and surface fleet vessels, and developing even further so it could, effectively, autoguide itself around a pressure vessel, for example,” he said. 

    “Right now, within our engine environment, it's very predictable. We can put on a rail and it will, effectively, still seek and find the right locations geometrically. But we want to be able to go in and develop that further, so that it can go in more complex geometries and more complex spaces.”

    Welcome

    You’ve reached the Defense Business Brief, where we dig into what the Pentagon buys, who they’re buying from, and why. Send along your tips, feedback, and rooftop recommendations to lwilliams@defenseone.com. Check out the Defense Business Brief archive here, and tell your friends and foes to subscribe!

    2025 Q4 earnings highlights

    Three of the biggest defense contractors held earnings calls this week. Here’s what stood out: 

    • Boeing closed out 2025 with a $565 million loss on the Air Force’s KC-46 tanker. CEO Kelly Ortburg called it a “bad contract” but said the embattled program showed “encouraging operational performance trends, which, if sustained, should enable us to meet our customer delivery commitment and set us up well for the next tanker order. beyond the current program of record.” Defense One’s Thomas Novelly has more
    • Northrop Grumman CEO Kathy Warden talked up the company’s unmanned and munitions production investments, noting the company’s plans to triple tactical solid rocket motor production at two sites by 2027 and 2030. 

    Noteworthy: When asked if the Pentagon’s billion-dollar solid rocket motor deal with L3Harris disadvantaged Northrop, Warden said: “We're not in discussions with the government about an arrangement similar to what they've entered into with L3Harris. And I would say that, as we think about being positioned to compete, it's all about the munitions that you can support with your capacity.”

    • RTX CEO Christopher Calio responded to White House critiques of the company’s munitions production Tuesday: “We absolutely feel the responsibility and urgency to deliver more and to deliver it faster. And candidly, we understand the frustration. And I can tell you, our focus and resources are fully aligned with the department's mandate to ramp production and invest in capacity.” 

    “We made some progress in 2025Output was up over 20 percent on a number of the critical programs, but there's more to do. We expect to significantly increase output again this year, and we're also going to increase our [capital expenditure] to enable that ramp.”

    • Bonus round: Booz Allen Hamilton revealed plans to invest $400 million in venture capital firm Andreessen Horowitz, A16z, during its third-quarter earnings call for 2026 on Friday. The firms announced their partnership earlier this year.  
    • “We understand the operational gaps that are limiting, not just early proofs of concept and when, but what's limiting scaled adoption,” Steve Escaravage, Booz Allen Hamilton’s head of defense technology business, told Defense One in an interview. “And so we've come together, to partner, to figure out: how do we take those companies that are ready to scale, and how do we supercharge that process by opening up all of our existing portfolio, all of our mission insight and making that available to all of the [Andreessen Horowitz] portfolio companies. And we've already seen great results.”

    More on manufacturing

    • Leonardo DRS opened a propulsion manufacturing plant to support Navy submarine and shipbuilding programs.
    • Hadrian, an AI-fueled factory building startup, is opening a new factory in Mesa, Arizona on Thursday. The company, which focuses on the defense and aerospace sectors, also recently announced an additive manufacturing division. Chris Power, the company’s founder and CEO, previously told Defense One about Hadrian’s expansion plans, and the ethos behind its “factory-as-a-service” offering. 
      • “Often what we see with customers is these factories have been from the 1950s. The [capital expenditure] is very aged, the layout is bad, and they're over cost, and they're one to three years behind schedule,” Power said in July. “What we are doing for these customers is looking at those factories, looking at everything inside of that, rebuilding it…and then operating for them.” 
    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • SolarWinds has released security updates to address multiple security vulnerabilities impacting SolarWinds Web Help Desk, including four critical vulnerabilities that could result in authentication bypass and remote code execution (RCE). The list of vulnerabilities is as follows – CVE-2025-40536 (CVSS score: 8.1) – A security control bypass vulnerability that could allow an unauthenticated

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • MicroWorld Technologies’ eScan antivirus platform fell victim to a sophisticated supply chain attack on January 20, 2026, when threat actors compromised legitimate update infrastructure to distribute multi-stage malware to enterprise and consumer endpoints worldwide. Security researchers immediately alerted the vendor, which isolated the affected infrastructure within one hour and took its global update system offline […]

    The post eScan Antivirus Update Server Breached to Deliver Malicious Software Updates appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Security researchers have identified a sophisticated jailbreak technique called Semantic Chaining that successfully bypasses safety filters in leading multimodal AI models, including Grok 4 and Gemini Nano Banana Pro. The vulnerability exploits how these systems process multi-step reasoning, allowing attackers to generate prohibited content both text and text-in-image outputs that would normally trigger safety mechanisms. […]

    The post Researchers Uncover Semantic Chaining Attack That Defeats Grok 4, Gemini AI Safeguards appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A malicious Visual Studio Code extension posing as an AI coding assistant has been caught secretly installing a fully functional remote access tool (RAT) on developer machines. The extension looks convincing at first glance: polished branding, a professional icon, and integration with several AI providers including OpenAI, Anthropic, Google, Ollama, Groq, Mistral, and OpenRouter. In […]

    The post Weaponized VS Code Extension “ClawdBot Agent” Spreads ScreenConnect RAT appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • France’s government has made a decisive move to eliminate foreign videoconferencing platforms from its operations, rejecting Zoom and Microsoft Teams in favor of a domestically controlled alternative. On January 26, 2026, France announced the nationwide rollout of “Visio,” a sovereign videoconferencing solution developed by the Interministerial Directorate for Digital Affairs (DINUM), with full deployment across […]

    The post Zoom and Microsoft Teams Lose French Government Trust After Security Review appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶