ADMIN.FOUNDATION – Page 617 – cybersecurity / defense / intelligence

Critical IBM API Connect Flaw Allows Attackers to Bypass Authentication

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

IBM has disclosed a critical authentication bypass vulnerability affecting its API Connect platform, assigning it a maximum CVSS severity score of 9.8. The flaw, tracked as CVE-2025-13915, represents a primary authentication weakness (CWE-305) that requires no user interaction or special privileges to exploit. The vulnerability impacts IBM API Connect versions 10.0.8.0 through 10.0.8.5 and version […]

The post Critical IBM API Connect Flaw Allows Attackers to Bypass Authentication appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
EmEditor Homepage Download Button Served Malware for 4 Days

·

cybersecurity, EmEditor, Emurasoft, Evernote, Fraud, Infostealer, Malware, Notion, PuTTY, SCAM, Scams and Fraud, Security, WinSCP

Warning for EmEditor users: A third-party breach tampered with the official download link between Dec 19–22, 2025. Learn how to identify the fake installer and protect your data from infostealer malware.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
2025 in review: Marine Corps

·

Policy

Our nation requires three ARG/MEUs
The Marine Corps commandant underscores the necessity of the Amphibious Ready Group/Marine Expeditionary Unit for projecting American strength and sustaining deterrence.
November 16, 2025 | Gen. Eric Smith

Just one prototype won’t cut it anymore, Pacific Marine commander tells industry
MARFORPAC is working faster, so it needs companies with innovative gear to show up with multiples.
November 10, 2025 | Jennifer Hlad

Marine Corps axes plan for third littoral regiment, ready to move on medium landing ship
Halfway to 2030, the service’s latest Force Design update teases upcoming “capstone concept.”
October 29, 2025 | Meghann Myers

Marines press ahead with JLTV purchase after Army quits program
Higher prices are expected once the larger service cancels its contract to buy the Humvee replacement.
September 8, 2025 | Meghann Myers

How the Marines’ attack drone team is defining UAV warfare
A competition to find the Corps’ best operators begins this fall.
August 20, 2025 | Meghann Myers

Defense One Radio, Ep. 180: The Marine Corps in the Pacific littorals
Two generals based in Japan discuss the Corps' multiyear modernization campaign and preparations for potential conflict with China.
May 16, 2025 | Jennifer Hlad

Marines say they’re ‘leading the way’ in battlefield autonomy
But unique technical challenges and tech wariness keep robot trucks on a short leash.
May 3, 2025 | Lauren C. Williams

Marine Corps to field counter-drone systems to dismounted units
The fielding plans follow a September fly-off.
April 9, 2025 | Meghann Myers

Funding gaps slowing down Marine Corps’ modernization efforts
Force Design 2030 is on track, commandant says, but just barely.
January 15, 2025 | Meghann Myers

More is needed to turn the Marine Corps' aspirations into reality
If the force is truly to have balanced lethality and battlefield resiliency, it will need more ships, missiles, and money.
November 23, 2025 | Charles Krulak, Michael Hagee, and James Conway
]]>

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Silver Fox Targets Indian Users With Tax-Themed Emails Delivering ValleyRAT Malware

·

The threat actor known as Silver Fox has turned its focus to India, using income tax-themed lures in phishing campaigns to distribute a modular remote access trojan called ValleyRAT (aka Winos 4.0). “This sophisticated attack leverages a complex kill chain involving DLL hijacking and the modular Valley RAT to ensure persistence,” CloudSEK researchers Prajwal Awasthi and Koushik Pal said in an

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New Spear-Phishing Attack Targeting Security Individuals in the Israel Region

·

cyber security, Cyber Security News, spear Phishing

Israel’s National Cyber Directorate has issued an urgent alert warning of an active spear-phishing campaign specifically targeting individuals employed in security and defense-related sectors. The operation, linked to infrastructure associated with APT42 (also known as Charming Kitten), represents a deliberate and sophisticated threat targeting high-value personnel rather than opportunistic mass phishing. The attack leverages WhatsApp […]

The post New Spear-Phishing Attack Targeting Security Individuals in the Israel Region appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Critical SmarterMail Flaw Allows Attackers to Execute Remote Code

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

SmarterTools has issued an urgent security advisory regarding a critical vulnerability in its widely used SmarterMail software. The flaw, which carries the highest possible severity score, could allow unauthenticated attackers to completely take over affected mail servers. The vulnerability, tracked as CVE-2025-52691, has been assigned a CVSS v3.1 score of 10.0, indicating maximum severity. It affects SmarterMail […]

The post Critical SmarterMail Flaw Allows Attackers to Execute Remote Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Hackers Impersonated Jackson JSON Library to Infiltrate Maven Central

·

cyber security, Cyber Security News

Security researchers have uncovered a sophisticated multi-stage malware campaign targeting Maven Central, the primary repository for Java dependencies. The attack centered on a malicious package impersonating the legitimate Jackson JSON library marking the first significant detection of advanced malware in an ecosystem that has historically remained resilient against supply chain attacks. The malicious package, published […]

The post Hackers Impersonated Jackson JSON Library to Infiltrate Maven Central appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
How to Integrate AI into Modern SOC Workflows

·

Artificial intelligence (AI) is making its way into security operations quickly, but many practitioners are still struggling to turn early experimentation into consistent operational value. This is because SOCs are adopting AI without an intentional approach to operational integration. Some teams treat it as a shortcut for broken processes. Others attempt to apply machine learning to problems

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL Backdoor

·

The Chinese hacking group known as Mustang Panda has leveraged a previously undocumented kernel-mode rootkit driver to deliver a new variant of backdoor dubbed TONESHELL in a cyber attack detected in mid-2025 targeting an unspecified entity in Asia. The findings come from Kaspersky, which observed the new backdoor variant in cyber espionage campaigns mounted by the hacking group targeting

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
CISA Alerts on Active Exploitation of MongoDB Vulnerability CVE-2025-14847

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning about the active exploitation of CVE-2025-14847, a severe vulnerability affecting MongoDB and MongoDB Server. The flaw was added to CISA’s Known Exploited Vulnerabilities (KEV) catalog on December 29, 2025, signaling that threat actors are actively targeting this security weakness in real-world attacks. […]

The post CISA Alerts on Active Exploitation of MongoDB Vulnerability CVE-2025-14847 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶