Skip to content

ADMIN.FOUNDATION

  • Malicious Claude Code Extensions in Cursor Marketplace Install Persistent SSH Backdoors on Windows and macOS

    ·

    AI, cyber security, Cyber Security News

    Malicious Claude Code extensions distributed through Cursor’s VS Code The Extension Marketplace tried to create persistent SSH backdoors on Windows and macOS developer systems. The affected packages were the Anthropic.claude-code versions 2.1.312 and 2.1.313, which were available on October 29, 2026, between approximately 2:27 a.m. and 1:35 p.m. Cursor stated that Anthropic did not develop […]

    The post Malicious Claude Code Extensions in Cursor Marketplace Install Persistent SSH Backdoors on Windows and macOS appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers Weaponize ARTEX AI Agents to Automate Network Intrusions and Steal Sensitive Data

    ·

    AI, cyber security, Cyber Security News

    Threat actors are weaponizing ARTEX, an autonomous penetration-testing framework, to accelerate network intrusions, escalate privileges, and steal sensitive information. Google Threat Intelligence Group and Mandiant investigations described in the supplied report show attackers delegating substantial portions of post-compromise operations to coordinated AI agents, compressing execution sequences into seconds. Observed since late August 2026, the activity […]

    The post Hackers Weaponize ARTEX AI Agents to Automate Network Intrusions and Steal Sensitive Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hacktober 2026: Major Cyberattacks Hit Binance, PHP, Node.js, LiteLLM, and Pentagon

    ·

    Cyber Attack, cyber security, Cyber Security News, Data Breach

    October’s cybersecurity disclosures spanned cryptocurrency platforms, developer infrastructure, certificate authorities, government records, gaming accounts, and retail operations. Dubbed Hacktober, the wave included unrelated incidents rather than a single coordinated campaign. Confirmed breaches, malicious releases, vulnerable configurations, and possible credential exposure require separate treatment, particularly where discovery dates differ from intrusion timelines. Cryptocurrency Platforms Face Different […]

    The post Hacktober 2026: Major Cyberattacks Hit Binance, PHP, Node.js, LiteLLM, and Pentagon appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Profile Victims and Rank Stolen Data

    ·

    cyber security, Cyber Security News

    A self-deleting Windows infostealer named VOLTA uses commercial AI models to turn stolen credentials, sessions, and cryptocurrency data into prioritized victim assessments. The malware, self-named “VOLTA-AUTODOXER,” combines extensive collection capabilities with automated identity enrichment. Its distinguishing feature is analytical outsourcing: after harvesting information, it asks a large language model to determine who the victim is, […]

    The post New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Profile Victims and Rank Stolen Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • FBI Confirms North Korean Hackers Stole Over $6 Billion From Binance in Massive Crypto Attack

    ·

    cryptocurrency, Cryptocurrency hack, cyber security, Cyber Security News

    The Federal Bureau of Investigation (FBI) has linked the theft of over $6 billion in virtual assets from Binance to North Korean hackers, labeling the operation as “TraderTraitor.” In an advisory released on October 31, the FBI reported that the cryptocurrency exchange was targeted around October 29, 2026. This announcement marks an official attribution but […]

    The post FBI Confirms North Korean Hackers Stole Over $6 Billion From Binance in Massive Crypto Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Critical Incus and LXD Vulnerabilities Allow Unauthenticated Attackers to Gain Full Cluster Access

    ·

    CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities, vulnerability

    Critical certificate-validation vulnerabilities have been identified in Incus and Canonical LXD, allowing unauthenticated attackers to impersonate trusted identities and compromise management infrastructure. Exploitation of these vulnerabilities requires network access to the HTTPS listener but does not require valid credentials or the private key for a trusted certificate. This LXD vulnerability may expose entire clusters and […]

    The post Critical Incus and LXD Vulnerabilities Allow Unauthenticated Attackers to Gain Full Cluster Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Pentagon’s IT agency wants to bridge network gaps in the Pacific

    ·

    Science & Tech
    HONOLULU—Lags in communication could undermine even the most advanced technology available, the deputy chief of Indo-Pacific Command warned Thursday. 

    “If we field cutting-edge compute and advanced software applications, but retain rigid, multi-layered bureaucracies requiring hours to authorize time-sensitive engagements, then we've negated our technological overmatch,” Lt. Gen. George Rowell, deputy commander of INDOPACOM, told attendees at TechNet Indo-Pacific. “No competitor on Earth can match America's network of capable allies and partners. That network is our greatest advantage. It is our strategic center of gravity. But the old ways of connecting with partners are simply no longer sufficient.” 

    Upgrading military networks in the Pacific so the U.S. can quickly share battle details with allies has been a key priority in recent years. The command recently deployed the Pacific mission partner network, a unified version of a series of bespoke networks for individual allied or partner nations in the region. Throughout the year, the command has tested the network in military exercises, where it has shown progress and allowed better coordination, with fewer devices to toggle between. 

    Still, there are still gaps that need to be addressed to improve communications with allies and partners. 

    “We're in the middle of a transition right now,” said Col. Michael Hlad, who leads the Defense Information Systems Agency’s regional field command in the Pacific. “We are migrating to a data-centric environment, helping our partners understand what does it mean to be zero trust? What are the key items that we need to agree on, let's say, from an identity standpoint, a data standardization standpoint?” 

    While some nations are more technologically aligned, such as the Five Eye partners, the plan is to build a data-sharing environment malleable enough to bring in other nations as well.

    “I don't know what the coalition of the future necessarily looks like,” Hlad said. “So how are we, DISA, building a coalition environment that is agile and common enough that we can bring in those partners instead of making it brittle…where it's just bilateral or just multilateral? We've got to bring that agility to [Indo-Pacific Command] as well as our partners, so they're able to integrate for an [humanitarian assistance and disaster relief] scenario as well as a high-conflict scenario of the future.”

    Getting to that common digital ground means agreeing on what tools and methods to use. 

    There must be “clear standardization of what that common architecture looks like,” Hlad said. “This only works if we get the data right. And we are still siloed.” 

    In addition to improving communication with allies and partners, one of DISA Pacific's top priorities is to improve data transfer, speed, and security in the region. 

    “How do we have better transport resiliency in the Pacific so that we can make sure that the critical feeds and data are where we need them?…How do we deliver those for the warfighters in the Pacific so the data is closer to the operational need?” Hlad said.

    The field command recently unveiled the Regional Network Operations Security Center Pacific—which aims to increase network support for INDOPACOM’s headquarters. 

    “That's an enhanced [network operations center]. That's an enhanced [security operations center]. That's a regional service support desk, and that's some data fusion capabilities that were not resident in this theater to synchronize,” Hlad said. 

    The idea is for the center to respond to connectivity challenges, including when undersea cables cut out and during electromagnetic spectrum or application disruptions. 

    The center has yielded a 20 percent personnel increase to assist in solving those connectivity problems, Hlad said.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • FBI Links 628 Crypto Wallet Addresses to North Korea’s Binance Hack

    ·

    Binance, Blockchain, Crypto, Cyber Crime, cybersecurity, FBI, North Korea, Security, TraderTraitor
    FBI links 628 crypto wallet addresses to North Korea’s TraderTraitor after the $6.3 billion Binance hack, asking services to block transfers involving stolen funds.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

    ·

    A critical flaw in Canonical’s LXD and MicroCloud let an attacker log in as a trusted client without holding that client’s private key. To do it, the attacker had to reach their HTTPS API over the network and have the trusted client’s public certificate. Once in, the attacker would act as that client, with access to the cluster and its virtual machines. If the impersonated account is

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script

    ·

    Malicious code on the website of prediction market Polymarket sold some signed-in traders’ positions and moved their funds to the hackers on October 29. The code had replaced a page-speed script that the site loaded from an outside company. Polymarket says it is refunding about $2.7 million to 726 affected wallets. Blockchain records show crypto worth about $2.64 million reached

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 5 6 7 8 9 … 1,263
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence