• A newly observed ClickFix campaign is pushing beyond simple user-triggered infections, introducing a more persistent and stealthy intrusion chain using PySoxy, a 10-year-old open-source Python SOCKS5 proxy. Unlike traditional ClickFix attacks that rely on a single PowerShell execution, this campaign builds a layered access model. A single user action typically executing a malicious PowerShell command […]

    The post ClickFix Evolves Using Decade-Old Open-Source Python SOCKS5 Proxy appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Ransomware is evolving faster than many defenses can keep up. In 2026, attackers are no longer just encrypting files they are systematically dismantling security tools, stealing sensitive data, and even preparing for a post-quantum future. Despite a slight global decline in ransomware incidents, the threat remains deeply entrenched and increasingly sophisticated. In the manufacturing sector […]

    The post Ransomware Gangs Use BYOVD and EDR Killers to Disable Security Tools appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Infostealer malware is no longer just a consumer nuisance it has become a direct bridge between personal device infections and full-scale enterprise breaches. Once these credentials are harvested and posted on dark web forums, attackers gain immediate footholds into corporate environments. A long-standing assumption in cybersecurity is that infostealers primarily target gamers downloading cracked software. […]

    The post Infostealer Malware Fuels Corporate Breaches From Personal Devices appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Google on Tuesday unveiled a new opt-in Android feature called Intrusion Logging for storing forensic logs to better analyze sophisticated spyware attacks. Intrusion Logging, available as part of Advanced Protection Mode, enables “persistent and privacy-preserving forensics logging to allow for investigation of devices in the event of a suspected compromise,” the company said. The feature, it

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Ransomware activity remained elevated in Q1 2026, continuing the trend established over the past year. The latest State of Ransomware Q1 2026 report reveals that 2,122 organizations were listed on ransomware data leak sites (DLS), marking the second-highest Q1 total on record. While attack volume has stabilized at historically high levels, the dominance of a smaller set […]

    The post Q1 2026 Ransomware Attacks Hits 2,122 Orgs Amid Fewer, More Impactful Groups appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers are abusing fake download sites for popular tools like FinalShell and Xshell to deliver a new remote access trojan known as Kong RAT, in a highly staged and stealthy campaign that ran from at least May 2025 through March 2026. In this campaign, attackers poisoned search engine results so that Chinese‑speaking developers and IT […]

    The post Fake FinalShell and Xshell Sites Push Kong RAT Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • In a sudden about-face, Pentagon leaders are asking the White House to restore funding for the E-7 Wedgetail, even after the Air Force sought to spend the money on satellites instead of the next-generation radar plane.

    Defense Secretary Pete Hegseth told House appropriators on Tuesday that the Pentagon has sent a budget amendment to the White House after funding for the E-7 was zeroed out of the 2027 budget request. Hegseth, in response to a question from Rep. Tom Cole, said the early warning aircraft will be crucial for future conflicts.

    “I know our department had taken the position that it was airborne or other satellite ISR that was probably going to be capable of a lot of that in the future, but I think that mindset was indicative of a mindset that we’ve shed, which is the divest-to-invest mindset,” Hegseth said. “Which was an austerity mindset that we’re going to get in continuing resolution after continuing resolution, so we have got to get rid of these platforms in order to invest in these platforms. And there are gaps that need to still be filled, and there are systems that still need to be funded that are used on the battlefield right now.”

    Last year, Hegseth echoed Air Force arguments that the proper replacement for the E-3 Sentry—aka the AWACS—is new-technology satellites, not the E-7, which he said was too vulnerable for modern conflict. The service itself asked to zero out funding for the plane in its 2026 budget request, but lawmakers allocated more than $1 billion for it.

    One E-3s was heavily damaged during the Iran war, and only a few others remain. 

    Air Force officials have hinted in recent weeks that E-7 funding could return, but have also announced plans for major spending on space-based systems, such as $7 billion for a new airborne moving-target communication capability. 

    “The capability that the E-7 will provide is an important capability, and so we need to look at what we're going to do,” Air Force Secretary Troy Meink told reporters at Space Symposium in Colorado last month. “We're finalizing those decisions within the Pentagon about how we want to do that, and we'll roll that out to the Hill when it's appropriate.”

    Late last month, Meink told House lawmakers that the Air Force is planning to buy five E-7s in addition to the two prototypes under contract. 

    An Air Force spokesperson told Defense One that while the budget request does not include Wedgetail funding, “the Air Force is evaluating options to resource the E-7 program in FY 2027 to deliver Rapid Prototyping aircraft and continue Engineering and Manufacturing Development activities.”

    Amid the damage to the E-3and losses of aging tankers during the Iran war, former military leaders have told Defense One that key upgrades to battlespace awareness technology and AWACS replacements need to be prioritized. 

    "I think it has a future,” Hegseth said, referring to the Wedgetail. “It has a place on the battlefield."

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Navy’s new 30-year shipbuilding plan outlines an effort to buy 15 battleships by 2055, and reveals details about the 80-plus robot boats it aims to add within five years.

    “Our success will be measured by one metric: a larger, more capable fleet—manned and unmanned—ready to defend our homeland and project power globally,” Acting Navy Secretary Hung Cao said in the report's foreword.

    The fiscal year 2027 update of the plan, released Monday, adds new details on the Navy’s vision for a 450-vessel fleet by 2031, including 299 warships, 68 auxiliary ships, and 83 unmanned vessels, which would likely include medium unmanned surface vessels and extra large unmanned underwater vessels

    “High-end platforms remain essential, but they must be complemented by systems that can be produced at volume and adapted in real time. That includes a range of unmanned systems operating everywhere from the seabed to space, fully integrated with current force structure. The high-low mix is how we increase new market entrants and competition within the industrial base,” the plan says. 

    The Navy did not submit a fiscal year 2026 shipbuilding plan. While previous shipbuilding plans have mentioned unmanned vessels, this year’s plan details what exactly the Navy wants to buy and when. Specifically, the service wants to buy 47 MUSVs by 2031, with the goal of having 72 in the inventory by 2056. However, footnotes for several inventory and funding tables state that “all items beyond the FYDP are under review by the administration.” 

    Before the 2027 budget, the Navy didn’t outline how many MUSVs it wanted, said Bryan Clark, who leads the Hudson Institute’s Center for Defense Concepts and Technology. 

    The move comes after the Navy announced plans for a new MUSV marketplace earlier this year. 

    According to the proposal request, the Navy “wanted to know if a contractor could build five or 10 in FY27,” Clark said. 

    “The difference now is there are several vendors with mature designs or vessels under construction that they can rapidly move into prototyping. The Navy can now ask for them to demonstrate their vessels and move into serial production right away.”

    On the subsea side, the Navy plans to spend $135.8 million on two UUVs in fiscal year 2027 and $1.1 billion through fiscal year 2031 for 16 vessels, the document states.

    “We will field a high-low mix of platforms, integrate unmanned and autonomous systems, increase payload capacity, and ensure the power and digital architecture needed for future weapons and networks. Leveraging a smart mix of capabilities allows us to solve the most pressing operational problems faced by combatant commanders globally,” Adm. Daryl Caudle, chief of naval operations, wrote in the report’s opening. 

    As part of that high-end mix, the Navy also wants to buy 15 new Trump-class battleships by 2055, including three in the next five years. 

    The report spends 876 words laying out the Navy’s rationale for the battleship, including its potential to launch nuclear weapons and to “reduce reliance on high-cost single-use munitions” through electronic warfare and high-energy lasers. 

    “The nuclear-powered battleship is designed to provide the fleet with a significant increase in combat power by longer endurance, higher speed, and accommodating advanced weapon systems required for modern warfare,” the report states. “Adding capability at the highest end of the high-low mix, the battleship’s primary role is to deliver high-volume, long-range offensive fires and serve as a robust, survivable forward command and control platform; it is not a destroyer replacement.” 

    Eric Labs, a senior naval analyst at the Congressional Budget Office, noted the shipbuilding plan eschews a next-generation destroyer, DDG(X), seemingly in favor of the battleship, and would continue building about two Arleigh Burke destroyers per year. The three Zumwalt-class destroyers are described as the “bridge between existing DDG technologies and the battleship,” the plan says. 

    But just who would build the U.S. Navy’s first nuclear-powered surface combatant in decades?

    “Since they have decided to build the nuclear-powered battleship, that's a bigger challenge for the shipbuilding industrial base. And it becomes a big question [of] who, at the very least, does the final assembly of these ships? Is it one yard? Is it two?” Labs said.  

    “The traditional surface-combatant-building builders are not, as of now, nuclear-capable. One of them, at least, if not both, might need to become nuclear-capable if the Navy wants to build their ships there. Alternatively, if the Navy wants to…maybe they do final assembly of a nuclear-powered battleship at Newport News, which is certified because it builds nuclear-powered aircraft carriers and submarines…but then Newport News is already very, very full with its carrier work and its submarine work.”

    The report also calls for a five-fold increase in modular or distributed shipbuilding for new construction across multiple sites. 

    “Today, roughly 10 percent of shipbuilding work is performed at distributed sites. Our goal is 50 percent. New hulls will prioritize modular, digital designs that enable distributed shipbuilding across multiple yards and suppliers. Modular construction expands production capacity, reduces bottlenecks, and accelerates delivery by leveraging industrial capability across the country, not just at a handful of legacy shipyards. It also provides flexibility to ensure we are not locking capability into a single hull, but building systems that can evolve, integrate, and expand across the fleet,” the report says. 

    The battleships, designated BBG(X), are expected to cost $43.5 billion for three ships through fiscal year 2031, according to the report, noting that advanced procurement of $1 billion in fiscal year 2027 would use “existing efforts with the lead ship of the class to be procured in [fiscal year 2028].” 

    But those numbers don’t account for the ship being nuclear-powered, which will be an additional expense.

    “The Navy could buy a larger surface combatant in around those numbers and field 15 by 2055. Our force design study for the Navy proposes building a dozen CG(X) cruisers (rather than a battleship) with the expectation it will cost $9 billion to $10 billion each, and that is possible even if budgets return to their 2025 levels,” Clark said.

    “However, the battleship the Trump administration is envisioning would be more expensive than they estimate because it will be nuclear powered and incorporate several new technologies that have not been integrated into a new ship before, such as high-power lasers and electromagnetic railguns. Those elements will drive the cost up toward $20 billion for the first ship and will make it hard to design and build the first ship in 10 years. Normally a ship like this would take five years to design and seven or more to build and deliver.” 

    There’s also the matter of increased sustainment costs. 

    “The shipbuilding plan envisions buying more ships and growing the fleet, but the expected sustainment costs seem to rise only at the rate of inflation (assuming inflation gets back down to 2–3 percent),” Clark noted in an email. “If the fleet is going to expand by about 100 ships (33 percent), I would expect sustainment costs to grow by much more. In practice, this means future Navy leaders will likely need to retire ships or inactivate them to reduce sustainment costs.”

    A Congressional Budget Office analysis of the 2025 plan estimated it would cost $1 trillion for new ship builds. A detailed analysis of the current plan is expected later this year.

    “This is a shipbuilding plan that will definitely cost more than the previous shipbuilding plan because you have a somewhat larger number of ships in the 30-year period, and a number of those ships—if not most of those ships—are more expensive than they were two years ago,” Labs said. 

    The Navy plans to buy four frigates, which it envisions working closely with MUSVs, by fiscal 2031 and plans to have 66 by fiscal year 2056. A predecessor program was canceled last year amid ballooning costs and delays

    But estimated costs for the frigate are higher than they were in the last shipbuilding plan. 

    “The frigate is a realistic cost estimate in the shipbuilding plan. But it was not a realistic cost estimate in the prior Navy shipbuilding plan,” he said. “It's a smaller ship, but it's more expensive…so it's definitely going to cost more money than the prior Navy shipbuilding plan one way or the other.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in human-made computer code. That reality is on full display this month with some of the more widely-used software makers — including Apple, Google, Microsoft, Mozilla and Oracle — fixing near record volumes of security bugs, and/or quickening the tempo of their patch releases.

    As it does on the second Tuesday of every month, Microsoft today released software updates to address at least 118 security vulnerabilities in its various Windows operating systems and other products. Remarkably, this is the first Patch Tuesday in nearly two years that Microsoft is not shipping any fixes to deal with emergency zero-day flaws that are already being exploited. Nor have any of the flaws fixed today been previously disclosed (potentially giving attackers a heads up in how to exploit the weakness).

    Sixteen of the vulnerabilities earned Microsoft’s most-dire “critical” label, meaning malware or miscreants could abuse these bugs to seize remote control over a vulnerable Windows device with little or no help from the user. Rapid7 has done much of the heavy lifting in identifying some of the more concerning critical weaknesses this month, including:

    • CVE-2026-41089: A critical stack-based buffer overflow in Windows Netlogon that offers an attacker SYSTEM privileges on the domain controller. No privileges or user interaction are required, and attack complexity is low. Patches are available for all versions of Windows Server from 2012 onwards.
    • CVE-2026-41096: A critical RCE in the Windows DNS client implementation worthy of attention despite Microsoft assessing exploitation as less likely.
    • CVE-2026-41103: A critical elevation of privilege vulnerability that allows an unauthorized attacker to impersonate an existing user by presenting forged credentials, thus bypassing Entra ID. Microsoft expects that exploitation is more likely.

    May’s Patch Tuesday is a welcome respite from April, which saw Microsoft fix a near-record 167 security flaws. Microsoft was among a few dozen tech giants given access to a “Project Glasswing,” a much-hyped AI capability developed by Anthropic that appears quite effective at unearthing security vulnerabilities in code.

    Apple, another early participant in Project Glasswing, typically fixes an average of 20 vulnerabilities each time it ships a security update for iOS devices, said Chris Goettl, vice president of product management at Ivanti. On May 11, Apple shipped iOS 15, which addressed at least 52 vulnerabilities and backported the changes all the way to iPhone 6s and iOS 15.

    Last month, Mozilla released Firefox 150, which resolved a whopping 271 vulnerabilities that were reportedly discovered during the Glasswing evaluation.

    “Since Firefox 150.0.0 released, they have been on a more aggressive weekly cadence for security updates including the release of Firefox 150.0.3 on May Patch Tuesday resolving between three to five CVEs in each release,” Goettl said.

    The software giant Oracle likewise recently increased its patch pace in response to their work with Glasswing. In its most recent quarterly patch update, Oracle addressed at least 450 flaws, including more than 300 fixes for remotely exploitable, unauthenticated flaws. But at the end of April, Oracle announced it was switching to a monthly update cycle for critical security issues.

    On May 8, Google started rolling out updates to its Chrome browser that fixed an astonishing 127 security flaws (up from just 30 the previous month). Chrome automagically downloads available security updates, but installing them requires fully restarting the browser.

    If you encounter any weirdness applying the updates from Microsoft or any other vendor mentioned here, feel free to sound off in the comments below. Meantime, if you haven’t backed up your data and/or drive lately, doing that before updating is generally sound advice. For a more granular look at the Microsoft updates released today, checkout this inventory by the SANS Internet Storm Center.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • ShinyHunters says its shinyhunte.rs domain was suspended after the Canvas LMS attacks, forcing the group to move fully to its dark web (.onion) site.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶