ADMIN.FOUNDATION – Page 623 – cybersecurity / defense / intelligence

ZeroThreat Review: The Next-Gen Automated Pentesting s DAST Platform

·

cyber security

After spending the past few weeks hands-on with ZeroThreat, it’s clear this platform represents a significant step forward in automated security testing. In an era where web applications, APIs, and microservices ship faster than ever, automated pentesting and DAST have become essential—not optional—for modern security programs in 2025. ZeroThreat delivers a unified platform that blends […]

The post ZeroThreat Review: The Next-Gen Automated Pentesting s DAST Platform appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More Stories

·

It’s getting harder to tell where normal tech ends and malicious intent begins. Attackers are no longer just breaking in — they’re blending in, hijacking everyday tools, trusted apps, and even AI assistants. What used to feel like clear-cut “hacker stories” now looks more like a mirror of the systems we all use. This week’s findings show a pattern: precision, patience, and persuasion. The

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
LastPass 2022 Breach Led to Years-Long Cryptocurrency Thefts, TRM Labs Finds

·

The encrypted vault backups stolen from the 2022 LastPass data breach have enabled bad actors to take advantage of weak master passwords to crack them open and drain cryptocurrency assets as recently as late 2025, according to new findings from TRM Labs. The blockchain intelligence firm said evidence points to the involvement of Russian cybercriminal actors in the activity, with one of the

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
2025 in review: business

·

Business

Space Force's intelligence ‘marketplace’ gets funds to expand
Military units post requests to TacSRT’s webpage, and industry competes to answer them.
April 10, 2025 | Audrey Decker

A closer look at the Chinese space company accused of helping the Houthis
The ostensibly private Chang Guang Satellite Technology emerged from and benefited from state funding.
May 7, 2025 | Matt Bruzzese and Peter W. Singer

Lockheed has cleared backlog of stored F-35s
The company had 72 jets stacked up due to software delays.
July 15, 2025 | Audrey Decker

Microsoft ends use of China-based engineers to patch DOD systems
The move comes after a ProPublica report highlighted a Microsoft program that allows foreign engineers to indirectly interact with U.S. military systems through American “escort” intermediaries.
July 20, 2025 | David DiMolfetta

Anduril becomes third US supplier of rocket motors, company says
Annual production will grow to 6,000 motors by the end of next year, they say.
August 5, 2025 | Audrey Decker

The jets were late. Lockheed got on-time bonuses anyway
After nearly 20 years of F-35 production, the program continues to “overpromise and underdeliver,” GAO said.
September 3, 2025 | Audrey Decker

Silicon Valley in St. Louis?
With the National Geospatial-Intelligence Agency as its north star, a non-profit is working to get defense tech to put down roots in the Midwest.
October 1, 2025 | Lauren C. Williams

Draft list of attendees for Hegseth acquisition-reform speech shows wide industry interest
The guest list for the Pentagon’s new policy roll-out reveals the rapidly changing face of defense tech.
November 5, 2025 | Patrick Tucker

Unveiling acquisition overhaul, Hegseth tells industry to get with the program
One expert said the reforms would sweep away Cold War processes—and draw backlash from established primes.
November 7, 2025 | Lauren C. Williams

Can partner nations help solve the Navy’s shipbuilding woes?
On a trip through the Pacific, the chief of naval operations sought ways to get more warships faster.
November 24, 2025 | Jennifer Hlad

Gargantuan Golden Dome contract vehicle clears 1,000-plus firms to vie for slices of $151 billion
One defense expert said it was one of the largest contract ceilings of all time.
December 3, 2025 | Thomas Novelly
]]>

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability

·

Fortinet on Wednesday said it observed “recent abuse” of a five-year-old security flaw in FortiOS SSL VPN in the wild under certain configurations. The vulnerability in question is CVE-2020-12812 (CVSS score: 5.2), an improper authentication vulnerability in SSL VPN in FortiOS that could allow a user to log in successfully without being prompted for the second factor of authentication if the

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution

·

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a security flaw impacting Digiever DS-2105 Pro network video recorders (NVRs) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2023-52163 (CVSS score: 8.8), relates to a case of command injection that allows post-authentication remote code

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Unpatched FortiGate Security Flaw Allows Attackers to Bypass 2FA Controls

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

A critical authentication bypass vulnerability in FortiGate devices enables threat actors to circumvent two-factor authentication (2FA) protections through case-sensitive username manipulation. The flaw, tracked as CVE-2020-12812, affects organizations with specific LDAP integration configurations and remains exploitable on unpatched systems. The vulnerability stems from FortiGate’s default case-sensitive username handling conflicting with LDAP directories that treat usernames […]

The post Unpatched FortiGate Security Flaw Allows Attackers to Bypass 2FA Controls appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Microsoft On Women In Cybersecurity At Black Hat Europe 2025 In London

·

Blogs
This week in cybersecurity from the editors at Cybercrime Magazine

Sausalito, Calif. – Dec. 24, 2025

–Watch the YouTube video

Cybercrime Magazine met with Alex Zoldova, Board Member, Women In Cybersecurity at Microsoft when we were at Black Hat Europe 2025 in London.

Zoldova spoke with us about the state of women in cybersecurity today, as well as the value of mentoring, the imperative to increase STEM education opportunities for young people, and more.

“It’s a challenge to be a woman in cybersecurity; we’re not many,” says Zoldova. “I think that the big value would be if everyone can do just a little bit to help each other. Maybe you can volunteer, maybe you can encourage your female colleague to go speak in an event because she’s a bit shy, or maybe you can mentor some other women. I think it would be amazing if we can all support each other and work in a more collaborative environment to help each other grow and succeed.”

Zoldova spoke about two people she met at Black Hat Europe. “Today at the event I met a very young and impressive girl aged 25 and I also met a male, 24, and I think it’s beautiful to see people at a very young age coming into cybersecurity as their first job.”

Watch the Video

Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:
- SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
- NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
- HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
- VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
- M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
- BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
- PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
- PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
- RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.
Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

The post Microsoft On Women In Cybersecurity At Black Hat Europe 2025 In London appeared first on Cybercrime Magazine.
¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
2025 in review: policy

·

Policy

Hegseth stands up anti-DEI task force
Some of the task force’s targets, like quotas and discriminatory promotion policies, don’t exist.
January 30, 2025 | Meghann Myers

Bloodbath: Joint Chiefs chair, CNO, Air Force vice chief, three top JAGs to be replaced
Trump, Hegseth announce plans to oust several of the military’s top officers amid larger DEI purge.
February 21, 2025 | Audrey Decker and Bradley Peniston

Pentagon to fire up to 61,000 workers, starting with 5,400 next week
After the first round of firings, DOD will launch a review intended to cut the civilian workforce by 5 to 8%, a personnel official said.
February 21, 2025 | Meghann Myers

In Pentagon shakeup, some see bid for more secret actions, less oversight
Trump's unconventional pick for Joint Chiefs chair brings deep special-warfare experience.
February 23, 2025 | Patrick Tucker

Confusion, fear as changes whipsaw Defense workforce
Workforce cuts, travel freezes, and administrative burdens are leaving civilians shaken.
March 12, 2025 | Meghann Myers

SecDef gives DOD leaders less than two weeks to lay out cuts, changes
A Friday memo opens a new phase in Hegseth’s hurried effort to shrink the defense workforce.
March 29, 2025 | Bradley Peniston

Military support to law enforcement is supposed to be temporary. DOD is making it a core mission
“Sealing the border,” helping ICE, and counter-drug ops top the list, according to Pentagon documents.
August 31, 2025 | Meghann Myers

More than 60K defense civilians have left under Hegseth—but officials are mum on the effects
Months into a hastily ordered overhaul, officials declined to disclose metrics, discuss problems.
September 25, 2025 | Meghann Myers

SecDef uses unprecedented meeting to unveil 10 personnel, due-process reviews
After summoning senior officers from around the world, Hegseth invites them to resign if they don’t agree with him.
September 30, 2025 | Meghann Myers

‘Make Europe Great Again’ and more from a longer version of the National Security Strategy
A fuller version reviewed by Defense One outlines the Trump administration’s plans for shedding old relationships and creating new ones.
December 9, 2025 | Meghann Myers

Trump rebrands Congressionally-approved troop housing subsidy as ‘warrior dividend’ bonus
More than $2.9 billion in reconciliation funds was allocated to beef up troop housing allowances. Now it’s being used for $1,776 checks.
December 18, 2025 | Thomas Novelly
]]>

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper

·

Cybersecurity researchers have discovered a new variant of a macOS information stealer called MacSync that’s delivered by means of a digitally signed, notarized Swift application masquerading as a messaging app installer to bypass Apple’s Gatekeeper checks. “Unlike earlier MacSync Stealer variants that primarily rely on drag-to-terminal or ClickFix-style techniques, this sample adopts a more

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

This week in cybersecurity from the editors at Cybercrime Magazine