Skip to content

ADMIN.FOUNDATION

  • New MacSync Stealer Disguised as Trusted Mac App Hunts Saved Passwords

    ·

    ClickFix, Cyber Attack, cybersecurity, Infostealer, Jamf Threat Labs, Macbook, macOS, MacSync Stealer, Malware, Password, Privacy, Security
    Jamf security experts have found a new version of MacSync Stealer. Disguised as a zk-call app, it uses official notarization to bypass security and steal your saved passwords.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The D Brief: New ‘battleship’ announced; Nigeria, under US surveillance; China’s ICBMs; Boat-strike Qs; And a bit more.

    ·

    Threats
    Plans to build a new class of giant surface combatants were announced Monday by President Trump, Defense Secretary Pete Hegseth, and Navy Secretary John Phelan at the president’s Florida mansion. Dubbed “battleships” in defiance of the usual meaning of the term and the “Trump class” in defiance of American tradition, the vessels are to displace some 35,000 tons, three times as much as today’s Arleigh Burke-class destroyers.

    Their armament is to include 128 Mk 41 vertical-launch missile tubes, which would be more than the 96 on the Navy’s latest Burkes but less than the 154 on its SSGN guided-missile submarines. 

    A fact sheet says the class will also include several weapons that don’t yet exist: a 32-megajoule railgun, two 300kW tactical lasers, and a dozen large tubes for the under-development Conventional Prompt Strike hypersonic missiles. The Associated Press notes that “the Navy has struggled to field some of the technologies Trump says will be aboard the new ship. The Navy spent hundreds of millions of dollars and more than 15 years trying to field a railgun aboard a ship before finally abandoning the effort in 2021.”

    Phelan said parts of the ship will be built in all 50 states, hewing to the Navy’s two-century-old practice of spreading contracts to shore up political support. See coverage by the Wall Street Journal and USNI News.

    Historian’s note: “The last battleship in history to be built was the HMS Vanguard, completed in 1946; the last battleship commissioned by the U.S. was the USS Missouri, which was decommissioned in the 1990s,” Heather Cox Richardson recounted following the president’s announcement. 

    Additional reading: 

    • “France to build first aircraft carrier in decades,” Semafor reported Monday, though current plans won’t have the carrier ready until 2038;
    • But also from France, read “How U.S. Defense Industry Dodged a Rare-Earth Shortage After China’s Curbs,” via the New York Times reporting Monday on a cache of samarium nitrate found at a Belgium-owned chemical factory in Solvay, France (gift link). 

    Welcome to our final D Brief of 2025, brought to you by Ben Watson and Bradley Peniston. Amid our hectic daily lives, it remains more important than ever to stay informed. So we’d like to take an additional moment to thank you this year for reading. We welcome your tips and feedback here. And if you’re not already subscribed, you can do that here. On this day in 2002, the U.S. military lost its first drone in aerial combat when an MQ-1 Predator was shot down by an Iraqi MiG-25.

    Around the Defense Department

    The U.S. is now conducting surveillance flights over Nigeria after Trump threatened to send American troops there to halt violence against Christians, Reuters reported Monday. 

    The contracted flights have been taking place since late November, just weeks after Trump issued the threat, and they typically depart from Ghana before returning, according to flight tracking data. An expert from AEI told Reuters “the operation appeared to be running out of an airport in Accra, a known hub for the U.S. military's logistics network in Africa.” Pentagon officials declined to discuss the surveillance flights. Read more, here. 

    Following Monday’s new row between the White House and Denmark, the State Department approved a $951 million sale of 230+ AMRAAM-ER missiles to Copenhagen, the Pentagon’s Defense Security Cooperation Agency announced. 

    Additional reading: 

    • “Mass Recall of U.S. Ambassadors Leaves Unprecedented Global Vacancies,” the Wall Street Journal reported Monday; 
    • And “China likely loaded more than 100 ICBMs in silo fields, Pentagon report says,” Reuters reported Monday as well. 

    Etc.

    Lastly this year, we’ve compiled a list of recent and semi-recent extended reading links following up on several top U.S. national-security themes from 2025. Topics include DOGE’s hype vs. its reality, Trump’s aggressive deportation campaign, billions in U.S. missile defense contracts, the National Guard’s numerous domestic deployments, Israel’s war with Iran, the Pentagon’s rush to adopt AI, and more. 

    Think we missed something big or particularly impactful? Let us know, and have a great upcoming holiday. We’ll see you again in 2026! 

    • “How Did DOGE Disrupt So Much While Saving So Little?” the New York Times reported Tuesday in a wrap-up of DOGE reporting highlighting the hype and the actual returns to date;  
    • The Times also takes readers “Inside the Deportation Machine,” in a visually-stunning (and arguably terrifying) multimedia presentation published Monday; 
    • “How the US is preparing a military staging ground near Venezuela,” which is another illuminating visual presentation, this time from nearly a dozen Reuters reporters, writing last month; 
    • “Stephen Miller’s hard-line Mexico strategy morphed into deadly boat strikes,” via the Washington Post, reporting Thursday on how a border-security prerogative evolved into something quite different;
    • “U.S. Boat Strike Campaign: Questions Congress Should Ask Executive Branch Officials,” via three veteran lawyers writing in early December for Just Security; 
    • “The International Law Obligation to Investigate the Boat Strikes,” also via Just Security, writing last Monday; 
    • “Russia Dismisses Reports of Progress in Ukraine Peace Talks,” the Times reported Sunday; 
    • “Gargantuan Golden Dome contract vehicle clears 1,000-plus firms to vie for slices of $151 billion,” via Defense One’s Tom Novelly, reporting in early November; 
    • “Another 1,000 defense companies chosen for $151B Golden Dome competition,” which is also from Novelly, reporting Friday in an update; 
    • “Build Your Own Golden Dome: A Framework for Understanding Costs, Choices, and Tradeoffs,” via Pentagon veteran Todd Harrison of the American Enterprise Institute, delivering a whopping 51-page report on the technology in September;
    • Harrison also authored the much shorter analysis, “Golden Dome is a Trillion Dollar Gambit,” over at War on the Rocks a week later; 
    • Lawfare is maintaining a “Trump Administration Litigation Tracker,” which includes numerous cases involving the president’s National Guard deployments across nearly a half-dozen U.S. cities since June, several of which have been put on hold while others have been stayed pending appeal; 
    • Israeli “Army chief, hinting at potential new Iran war, says IDF will strike ‘wherever required,’” the Times of Israel reported Sunday; 
    • “​​Pentagon to Add xAI’s Grok to AI Service Early Next Year,” the Information reported Tuesday;
    • See also “The Good, Bad, and Really Weird AI Provisions in the Annual Defense Policy Bill,” via the Brennan Center for Justice, writing last Monday; 
    • “Global investors turn to Chinese AI as Wall Street fears bubble,” Reuters reported Tuesday;  
    • And relatedly, “The Pentagon and A.I. Giants Have a Weakness. Both Need China’s Batteries, Badly,” the New York Times reported Tuesday. 
    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Now you can train for the next drone war on simulated Ukrainian front lines

    ·

    Ideas
    The war in Ukraine has made one thing unmistakably clear: drones are no longer a support weapon on the battlefield. They are central to how modern wars will be fought. From reconnaissance and targeting to direct strikes, low-cost, fast-moving drones with powerful payloads are causing massive destruction and racking up kills against traditional armed forces. And that mastery of drone warfare is allowing a smaller country like Ukraine to hold its own on the front lines against a superpower, performing devastating strikes that keep the Russian Army on its back foot.   

    The world is taking notice. Other countries in the region are already planning to use drones in their defense should war come to their door, while also countering those of their potential enemies. The shift in military thinking was on display earlier this year as Estonia announced plans to build a so-called “drone wall” along its border, a layered defensive system designed to detect and counter unmanned aerial threats. As Estonian defense officials explained to Nextgov/FCW, their goal is not simply to buy more hardware, but to rethink how borders and battlespaces are protected in an era where inexpensive drones can have a large strategic impact. 

    But that same lesson is not theoretical in Ukraine, where drones have become one of the most decisive tools of the conflict. In Ukraine, small, fast and often expendable drones are now used for everything including reconnaissance, precision attacks in the midst of combat, electronic warfare, air defense interception and even strategic strikes far behind the frontlines. Most of the drones used by Ukraine are FPV, or first person view, models flown by operators who often receive only weeks of training before being sent to the front. In that environment, pilot skill matters a lot. And that is where simulation technology has quietly become just as important as the hardware.

    Over the past two years, Ukrainian forces have relied heavily on high-fidelity drone simulators to train operators before they ever touch a real aircraft. According to Simtech Solutions, the developers of one of the main Ukrainian training tools, their platform alone has been used to get over 5,000 military pilots flight ready, capable and certified to perform even the most advanced and critical missions. And the results speak for themselves. The company says that pilots who trained with their simulator have successfully struck over 100,000 real-world targets.

    That platform has now been released in a public-facing version called Ukrainian Fight Drone Simulator, which is available on the Steam platform. I was able to experiment with the new simulator, logging in over 100 hours of flight time and training. With real-world physics and battlefield conditions, it was not a walk in the park. I ended up crashing almost 200 drones before I even got through the training academy, much less get anywhere close to an enemy. But even while I was still learning how to fly drones in combat, it was clear how much this technology could dominate the battlefields of the future, perhaps even more so than any other conventional weapon.

    Although it’s available on a gaming platform like Steam, calling Ukrainian Fight Drone Simulator a game understates its rich history on the frontlines and its commitment to realism. The developers describe it as a public adaptation of their ultra-realistic trainer, built directly from battlefield lessons. Everything from the physics of flight to the ruthlessness of battlefield opponents are intentionally unforgiving. 

    You can’t even use a game controller too effectively with it. For a true training experience, you need to have a real RC Controller, just like the pilots in Ukraine. I used my Radiomaster TX16S that controls my personal drone, but almost any other model works just fine. The developer recommends Radiomaster Pocket, Zorro, TX12, Boxer, TX16S or TBS Tango 2 RC controllers. 

    The simulator includes multiple classes of combat drones, as most of the ones being used in Ukraine are fairly modular in terms of their possible loadouts. You can set them up for bomb drops against infantry, although that technique can also be effective against light vehicles or rear supply areas. More powerful are the kamikaze drones that can lug around huge bombs or artillery shells in their undercarriages. Although this greatly complicates flight physics, direct hits from them can destroy armored vehicles — like fast-moving Russian BMPs — or hardened targets — like earthen bunkers. Even frontline tanks, once the kings of the battlefield, can be damaged or disabled by a hit from a drone in a critical spot, and then destroyed with follow-up strikes.

    If you are up for a real challenge, air interceptor drones are also included. If you thought that hitting a moving vehicle or a group of running soldiers was difficult, try chasing down a helicopter or even an enemy drone. It takes a lot of skill and practice. 

    What really stood out to me during my time on the simulated frontline was how much Ukrainian Fight Drone Simulator emphasizes military elements beyond just flying drones. You actually have to plan your missions, taking into account things like time of day, lines of sight, potential exposure to enemy defenses and whether or not the enemy is operating electronic warfare in the area. I had to learn how to manage things like battery power too, because going around an area with dense anti-air defenses to get at juicy targets sitting behind them might be a great idea, but only if your heavily laden drone has enough juice to make the run and still give you a least a few minutes of time over your target.

    Although I had a great experience with Ukrainian Fight Drone Simulator, it was not really about flying for fun. It was more about understanding how drones can be successfully used in modern conflicts. My success in the field really depended on training, discipline and repetition.

    And that is where something like Ukrainian Fight Drone Simulator becomes relevant far beyond Ukraine. For defense agencies, allied militaries and even policymakers, tools like this provide insight into why drones are changing warfare so rapidly. They also help explain why training has become such a critical bottleneck. Hardware can be produced quickly. Skilled operators cannot.

    What simulations like Ukrainian Fight Drone Simulator ultimately demonstrate is that the drone revolution is not theoretical. It’s operational, and it’s happening now. Armies that go into their next fight without an extremely capable drone wing and a cadre of qualified and experienced pilots are likely to be at a serious disadvantage. 

    As more agencies track drone developments and consider how to defend against or deploy them, simulations will play an increasingly important role too. They offer a safe way to understand a technology that is anything but safe on the battlefield. And for anyone trying to grasp how modern conflicts are evolving, stepping into a virtual cockpit like the ones that Ukrainian Fight Drone Simulator offers may be the most instructive place to start.

    John Breeden II is an award-winning journalist and reviewer with over 20 years of experience covering technology. He is the CEO of the Tech Writers Bureau, a group that creates technological thought leadership content for organizations of all sizes. Twitter: @LabGuys

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The twists and turns of Trump’s 2025 war on unions

    ·

    Policy
    The Trump administration in 2025 made excising or otherwise cracking down on unions a focal point of its push to overhaul the federal workforce.

    The campaign began in February, when the Office of Personnel Management issued guidance encouraging agencies to disregard collective bargaining agreements when implementing President Trump’s January memo barring most telework.

    And the following month, the Homeland Security Department sought to ban collective bargaining at the Transportation Security Administration, where union rights had been administratively granted and expanded during the Obama and Biden administrations, respectively. And Trump signed an executive order banning unions across 40 agencies under the auspices of national security, effectively stripping two-thirds of the federal workforce of their right to bargain collectively.

    In the months since, labor groups have fought to retain their foothold within agency workforces across a myriad of court cases. Though judges have issued at least a dozen decisions in favor of unions, mostly citing First Amendment violations, appellate courts have put most of those decisions on hold, allowing agencies to implement the edict and its August follow-up.

    These stories track how the administration’s campaign against federal unions has played out across agencies, courts and Congress. 

    • Trump continues to curtail union rights and career pipelines
    • Labor groups: Trump’s union-busting EO amounts to ‘revenge’ for suing to block workforce cuts
    • Pro-labor Republicans push Trump to rescind order busting most federal unions
    • Trump administration ends union dues collection for most feds without notice
    • Unions sue to stop demolition of mediator agency
    • VA is selectively enforcing Trump’s order stripping workers of union rights
    • Trump administration lacks standing to sue to enforce anti-labor executive order, union says
    • Judge grills administration on ‘broad discretion’ to break up federal unions
    • Judge blocks Trump’s anti-union executive order
    • Judge: Trump’s national security reasoning for anti-union EO was 'pretext for retaliation'
    • Judge orders halt to the shuttering of three independent agencies
    • A judge has moved again to block Trump’s anti-union EO
    • Appeals court issues stay of judge’s decision blocking Trump’s anti-union order
    • TSA union urges judge to block ‘retaliatory’ order outlawing bargaining at agency
    • Federal judge blocks dissolution of union at TSA
    • Trump’s anti-union executive order has been blocked, again
    • Trump’s anti-union EO can remain in effect during challenge, appellate court says
    • Lawmakers pursue parallel paths toward blocking Trump’s anti-union order
    • New lawsuit scrutinizes Hegseth’s implementation of Trump’s anti-union EO
    • A second appeals court has allowed Trump’s anti-union EO to go into effect
    • VA terminates most of its union contracts, appearing to disregard OPM guidance
    • EPA becomes the second federal agency to cancel its union contracts
    • Trump administration nixes union contracts at FEMA, USCIS, food safety agencies
    • A fresh executive order aims to ban unions at more federal agencies
    • More unions sue following second edict banning them, alleging retaliation
    • House NDAA would exempt Defense civilians from union ban
    • Bill to nullify Trump’s union executive orders introduced by 48 senators
    • Labor groups warn of ‘gaping hole’ in First Amendment if court OKs Trump’s anti-union orders
    • Federal appellate decision restores union rights for Defense Department teachers
    • Judge blocks Trump’s anti-union executive order for IFPTE-represented workers
    • IBEW: Trump’s anti-union EOs target unions expressly protected by law
    • Lawsuit offers new details of VA’s anti-union EO implementation
    • Lawmakers force House vote on bill nullifying anti-union EOs
    • Correctional officers sue for restoration of union rights
    • House strips its own provision protecting Defense civilians’ union rights from NDAA
    • House passes bill nullifying Trump’s anti-union EOs
    • TSA plans to bust labor union despite court order blocking it
    • Appellate judges mull challenge to Trump’s efforts to bust most federal labor unions
    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Two Chrome Extensions Caught Secretly Stealing Credentials from Over 170 Sites

    ·

    Cybersecurity researchers have discovered two malicious Google Chrome extensions with the same name and published by the same developer that come with capabilities to intercept traffic and capture user credentials. The extensions are advertised as a “multi-location network speed test plug-in” for developers and foreign trade personnel. Both the browser add-ons are available for download as of

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Ransomware Hits Romanian Water Authority, 1000 Systems Knocked Offline

    ·

    Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, europe, IoT, National Water Agency, OT, Romania, Security, vulnerability
    Romania’s national water authority, Romanian Waters, was hit by a major ransomware attack affecting 1,000 systems but dams remain safe. Learn how authorities are fighting back without paying the ransom.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Penetration Testing In The Boardroom

    ·

    Blogs
    This week in cybersecurity from the editors at Cybercrime Magazine

    Sausalito, Calif. – Dec. 23, 2025

    –Read the full story from BreachLock

    Penetration testing is one of the very few ways to evaluate how attackers would compromise your environment without actually experiencing an incident.

    To position pentesting as a strategic investment, CISOs and security leaders are challenged to move the conversation away from “What does this cost?” and toward “What does this help us prevent?” The silver lining in that challenge is that pentesting directly protects revenue, customer trust, and operational continuity, which are all things boards already prioritize.

    When the value of pentesting is universally understood, it shifts from an annual cost to a catalyst for proactive risk reduction that enables both security and business goals.

    When reframed this way, it becomes far easier to justify investments in modern pentesting approaches like Penetration-Testing-as-a-Service, commonly known as PTaaS, security testing automation with manual, human-delivered pentesting, and in some cases, AI.

    In a recent blog post, BreachLock, an award-winning cybersecurity company, presents a pentesting ROI formula that can be used internally to quantify savings in order to make your case for PTaaS far more defensible. While you may not present this formula to the board, it can definitely help a CISO prepare a compelling boardroom presentation.

    Read the Full Story



    Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

    • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
    • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
    • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
    • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
    • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
    • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
    • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
    • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
    • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

    Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

    The post Penetration Testing In The Boardroom appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • INTERPOL Dismantles Six Ransomware Operations, Detains 500+ Individuals

    ·

    cyber security, Cyber Security News

    Law enforcement agencies across 19 countries have made a significant breakthrough in combating cybercrime, arresting 574 suspects and recovering approximately USD 3 million during a month-long coordinated operation across Africa. The crackdown underscores the escalating threat of ransomware, business email compromise (BEC), and digital extortion schemes plaguing the continent. Operation Sentinel, conducted from October 27 […]

    The post INTERPOL Dismantles Six Ransomware Operations, Detains 500+ Individuals appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • HardBit 4.0 Ransomware Abuses Unsecured RDP and SMB for Access Persistence

    ·

    cyber security, Cyber Security News, Ransomware

    HardBit ransomware continues its evolution with the release of version 4.0, introducing sophisticated mechanisms to establish persistence through vulnerable network services. The latest variant leverages open Remote Desktop Protocol (RDP) and Server Message Block (SMB) services as entry points, enabling threat actors to maintain long-term access to compromised networks while deploying advanced evasion techniques that […]

    The post HardBit 4.0 Ransomware Abuses Unsecured RDP and SMB for Access Persistence appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • INTERPOL Arrests 574 in Africa; Ukrainian Ransomware Affiliate Pleads Guilty

    ·

    A law enforcement operation coordinated by INTERPOL has led to the recovery of $3 million and the arrest of 574 suspects by authorities from 19 countries, amidst a continued crackdown on cybercrime networks in Africa. The coordinated effort, named Operation Sentinel, took place between October 27 and November 27, 2025, and mainly focused on business email compromise (BEC), digital extortion, and

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 624 625 626 627 628 … 1,063
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence