• Cybersecurity researchers have discovered 36 malicious packages in the npm registry that are disguised as Strapi CMS plugins but come with different payloads to facilitate Redis and PostgreSQL exploitation, deploy reverse shells, harvest credentials, and drop a persistent implant. “Every package contains three files (package.json, index.js, postinstall.js), has no description, repository,

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Fortinet has released out-of-band patches for a critical security flaw impacting FortiClient EMS that it said has been exploited in the wild. The vulnerability, tracked as CVE-2026-35616 (CVSS score: 9.1), has been described as a pre-authentication API access bypass leading to privilege escalation. “An improper access control vulnerability [CWE-284] in FortiClient EMS may allow an

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • North Korean group UNC1069 targets Node.js maintainers using fake LinkedIn and Slack profiles to spread malware and compromise open source packages.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Following the high-profile supply chain compromise of the widely used Axios package, a highly coordinated social engineering campaign has been uncovered targeting top-tier Node.js and npm maintainers. Security researchers confirm that the Axios breach was part of a scalable operation aimed at infiltrating the global software supply chain. The threat actors are actively hunting developers […]

    The post Hackers Launch Social Engineering Offensive Against Key Node.js Maintainers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • In the dynamic and increasingly complex cybersecurity landscape of 2026, privileged accounts remain the most coveted targets for cybercriminals and malicious insiders alike. From system administrators and database managers to automated scripts and applications, these “digital crown jewels” hold the keys to an organization’s most sensitive data and critical infrastructure. A single compromised privileged credential […]

    The post Top 10 Best Privileged Access Management (PAM) Solutions 2026 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • In the rapidly evolving digital landscape of 2026, Identity and Access Management (IAM) has transcended its traditional role to become the foundational pillar of enterprise security. As organizations navigate the complexities of multi-cloud environments, remote workforces, burgeoning SaaS applications, and the relentless rise of cyber threats, the ability to accurately verify who (or what) is […]

    The post Top 10 Best Identity And Access Management (IAM) Companies 2026 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A new investigation by Fairlinked e.V. claims that Microsoft-owned LinkedIn is running a massive, undisclosed corporate surveillance operation. According to the “BrowserGate” report, hidden code on LinkedIn’s website secretly scans the computers of its one billion users to detect installed software and browser extensions. This scanning reportedly happens without user consent, disclosure, or any mention […]

    The post LinkedIn Hidden Code Secretly Scans Users’ Computers for Installed Software appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Anthropic has officially shut down third-party AI agent access to its Claude subscription services, pulling the plug on unauthorized external integrations. This move marks a major shift in how developers and power users can interact with Claude’s frontier models outside the company’s official ecosystem. According to Anthropic executive Boris Cherny, the restriction takes effect today, […]

    The post Anthropic Ends Claude Subscription Access for Third-Party Tools Like OpenClaw appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Pentagon R&D spending would drop by about one-third under the White House’s 2027 defense-spending proposal—but the impact of that $4.5 billion reduction might be cushioned by the tech industry’s willingness to fund its own research.

    The proposed drop, which echoes a similar cut in the first Trump administration’s 2020 proposal, was outlined in Friday’s record-breaking $1.5 trillion defense-spending request. 

    Basic research spending would fall $3.7 billion from this year’s appropriated amount. Most of that—$2.6 billion—would be borne by the Space Force, but reductions would also hit the Army ($173 million), Navy ($529 million), Air Force ($150 million), and the Defense Department-wide account ($202 million).

    Applied research funding would drop by about $1.3 billion. The Army’s pool would drop by $1.312 billion while the Navy and Air Force would each lose $150 million. But the DOD-wide account would gain nearly $600 million and Space Force would edge up $56 million, both buoyed by Golden Dome missile-defense work.

    The documents released on Friday don’t provide any real explanation for decreasing research spending, although one alludes cryptically to “unnecessary spending and excessive bureaucracy” and “woke frivolities.”The new proposal comes as the White House has already worked to reduce non-defense spending on science and technology research —for example, by 22 percent in the fiscal year 2026 budget.

    “While the United States is dismantling the very foundations that have sustained our STEM and innovation leadership for generations, Beijing has announced its plans to continue accelerating its investments in science, technology, and innovation,” says a Nov. 5 letter from Rep. Raja Krishnamoorthi, D-Ill., ranking member of the House Select Committee on the CCP.

    China is increasing its spending on basic and applied research in a wide number of areas in what could be called dual-use technology. Its government says it allocated $569 billion for research and engineering last year. The number is in line with a broader trend of year-over-year increases that have boosted government-funded science spending to 23 times its 2000 level. 

    Decreases in U.S. government funding for military research and development don’t necessarily mean less basic and applied research funding overall—not when you factor in private-sector spending. Venture capital funding for new defense startups–which largely goes to R&D–is steadily rising.

    New and established technology companies that specialize in dual-use products spend more of their own money on R&D than do traditional defense contractors, KPMG reported in January. 

    Ukraine provides an excellent example of what a newly re-wired industrial base can look like. By some estimates, the country boasts more than a thousand defense startups that are finding customers across continents—and all with very limited government help. The Ukrainian government has allocated about $20 billion for military R&D this year. Ukrainian companies have leaned into information technology, rapid innovation, and continuous experimentation to produce new weapons on short timelines.

    Kurt Freshley, a former Marine who leads growth for technology company Valinor, says his company is “encouraged by signals that the Department wants to open the industrial base to new entrants.” 

    But Freshley said a larger topline for DOD doesn’t necessarily mean more money for new competitors.

    “The rewiring question will be answered not by the overall number, but by whether new entrants can compete and deliver,” he said. “If the procurement architecture actually creates room for new companies to compete, if this budget delivers on that, it's genuinely significant.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The White House wants nearly $65.8 billion for naval shipbuilding in fiscal 2027, up from about $45.1 billion it requested for the current fiscal year.

    If approved by Congress, the sum would pay for 18 warships and 16 “non-battle force ships,” according to documents released by the Office of Management and Budget on Friday. About $5.6 billion would come from a proposed reconciliation bill, the second in as many years, according to Pentagon documents released Friday. 

    “The 2027 Budget will establish President Trump’s Golden Fleet, including initial funding for the Trump-class battleship and next generation frigates, as well as increasing the capacity of public shipyards and improving overall ship production,” according to a White House fact sheet

    The shipbuilding request is part of a White House proposal to spend $1.5 trillion on defense in 2027, half again as much as this year’s record-breaking amount. The plan requests $1.15 trillion in regular appropriations plus the balance in a reconciliation bill.

    Funding for Columbia-class submarines—the missile boats that will replace the Ohios—would rise to $15.2 billion from the $9.3 billion appropriated in 2026. The sum would include $14.9 billion from the Defense Department’s budget and $205.7 million from the proposed reconciliation bill. The White House budget said $250 million would come from the National Sea-Based Deterrence Fund, created in 2014 to boost submarine construction with funds from outside the traditional shipbuilding budget. 

    The Pentagon documents also include $28.4 billion for “other warships,” such as Virginia-class submarines, aircraft carriers, destroyers, and $1.4 billion for the first next-generation frigate. About $1.9 billion would come from reconciliation. 

    The battleship would get $1 billion in advanced procurement funding for 2027. Other funding includes $13.9 billion for “auxiliaries, craft, and prior-year program costs,” and $8.3 billion for amphibious ships. 

    The proposed funding would also “maintain or increase” procurement of existing platforms from submarines to amphibious ships, according to White House budget summary. 

    The documents released on Friday do not list the types and quantities of the 18 battle force ships. 

    Landing Ship Mediums—of which six were listed in the Pentagon documents—were likely counted toward the warship total, said Mark Cancian, a budget expert and senior adviser with the Center for Strategic and International Studies. 

    “Still, nine other battle force ships in a single year is a good program, though they need to build more to reach the 350 battle force ships that the Navy has aimed for,” Cancian said.

    The 16 non-battle force ships include “strategic sealift vessels, hospital vessels, Consolidated Cargo Replenishment at Sea tankers, a special mission ship, submarine tenders and other vessels vital for logistics,” according to a White House budget summary document. 

    The White House summary said some of the requested 2027 funds would be used to increase the repair capacity of the nation’s four public shipyards

    The summary also highlights funding to design and develop the proposed battleship and new frigate. 

    “Those will involve a lot of development and won't be actually constructed for several years,” Cancian said. “What the Navy can do in the near term is build a lot of auxiliaries where the U.S. shipbuilding defense industry has some capacity.” 

    Brent Sadler, a senior fellow and naval expert with the Heritage Foundation, said the $65.8 billion shipbuilding topline should be carried into future years to increase production.

    "This is actually the closest to what is needed and it needs to be sustained for several budgets,” Sadler said, proposing legislation that includes a block order for warships the Navy plans to buy in the next five years, boosts worker salaries and provides a mechanism to place underperforming shipyards in a conservatorship. 

    But even with more funding, the challenge still lies in translating orders into production capacity in the foreseeable future. 

    That “requires a strategic industrial planning effort, beyond the Navy, to achieve and which the Department of the Navy still not fully organized to achieve nor is the interagency,” Sadler said. “New shipyards need to be funded with orders of new builds with longer delivery times as the goal is, firstly, to grow capacity,” which also means stockpiling key components to shrink supply delays.

    Lawmakers’ reaction to the proposed $1.5 trillion defense budget largely split along party lines. 

    Republican leaders of the congressional defense committee praised the proposal. 

    “These funds will drive the U.S. toward a defense budget of 5 percent of GDP–-a benchmark we have long supported as necessary to maintain our national defense. President Trump is also sending a clear signal for our allies and partners to build on recent progress and meet this benchmark alongside us,” Sen. Roger Wicker, R-Miss., and Rep. Mike Rogers, R-Ala., who chair the Senate and House Armed Services Committees, respectively, said in a statement. 

    Sen. Jack Reed, D-R.I., SASC’s ranking member, called the budget request “bloated” and “undisciplined.”

    “We must wisely invest in technology and efficiency.  We must learn the right lessons from Ukraine and Iran. The military has to adapt to changing threats and invest in smart, cost-effective, advanced technologies that strengthen our defensive capabilities and contribute to America’s economic and technological edge. We must also continue investing in our people and build up our defense manufacturing base to meet America’s needs now and in the future,” Reed said in a statement.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶