-
Cybersecurity researchers have disclosed details of a new banking malware targeting Brazilian users that’s written in Rust, marking a significant departure from other known Delphi-based malware families associated with the Latin American cybercrime ecosystem. The malware, which is designed to infect Windows systems and was first discovered last month, has been codenamed VENON by Brazilian
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Scammers are hijacking popular security tools like Cloudflare to hide fake Microsoft 365 login pages. Learn how this new invisible phishing campaign bypasses antivirus software and how you can stay safe.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cybersecurity researchers have disclosed details of a suspected artificial intelligence (AI)-generated malware codenamed Slopoly put to use by a financially motivated threat actor named Hive0163. “Although still relatively unspectacular, AI-generated malware such as Slopoly shows how easily threat actors can weaponize AI to develop new malware frameworks in a fraction of the time it used to take
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
·
US-Israeli war on Iran, day 13: The U.S. military spent more than $11 billion in just the first week of Trump’s war against Iran, Pentagon officials told lawmakers in a classified briefing Tuesday on Capitol Hill. The New York Times reported the fiscal tally, which “did not include many of the costs associated with the operation, such as the buildup of military hardware and personnel ahead of the first strikes,” on Wednesday.Sen. Chris Murphy, D-Conn., attended the two-hour briefing behind closed doors Tuesday. “I obviously can't disclose classified info, but you deserve to know how incoherent and incomplete these war plans are,” he wrote on social media afterward. “Maybe the lead is that the war goals DO NOT involve destroying Iran's nuclear weapons program,” he said, which is in sharp contrast with Defense Secretary Pete Hegseth’s message earlier Tuesday that the U.S. is working to “permanently deny Iran nuclear weapons forever” with the ongoing war.
The Pentagon’s goals for Iran include “destroying lots of missiles and boats and drone factories,” Murphy said, which echoes some input this week from Trump, Secretary of State Marco Rubio, and even Hegseth earlier Tuesday. “But the question that stumped them,” Murphy said of the classified briefing, is “what happens when you stop bombing and they restart production? They hinted at more bombing. Which is, of course, endless war.”
And perhaps most vexing for the White House at the moment, “on the Strait of Hormuz, they had NO PLAN,” Murphy said. “I can't go into more detail about how Iran gums up the Strait, but suffice it [to] say, right now, [U.S. officials] don't know how to get it safely back open.”
- Related: The U.S. military warned “civilians in Iran to immediately avoid all port facilities where Iranian naval forces are operating,” in a statement from Central Command officials Wednesday. “The Iranian regime is using civilian ports along the Strait of Hormuz to conduct military operations that threaten international shipping,” and “Civilian ports used for military purposes lose protected status and become legitimate military targets under international law,” CENTCOM said.
Murphy and more than 40 other senators are demanding detailed answers from the U.S. military about a strike on an elementary school that reportedly killed around 170 people, including children, on Feb. 28 in southern Iran. The lawmakers’ 22 questions were submitted to the Defense Department after numerous media outlets noticed what appeared to be a U.S.-made Tomahawk missile striking the area near the school during the time when the strike occurred. Those reports began emerging late last week and over the weekend, and continued early this week.
United Nations and human rights experts have requested an independent investigation into the strike, which they said may be a violation of the laws of war prohibiting attacks against civilians and civilian objects. Key detail: The apparent use of a Tomahawk, which only the U.S. military is known to use in this conflict, strongly suggested the Defense Department was responsible for the strike on the school. President Trump initially blamed the strike on Iran, but as more reporting surfaced this week, he said Wednesday he didn’t know about the incident. The 40-plus lawmakers—in an ensemble that does not include any Republicans—are seeking insight into the attack no later than next Wednesday.
Latest: U.S. military officials now allege “outdated targeting data” may have led to the strike on the school, the New York Times reported Wednesday, citing an ongoing internal investigation. The Washington Post corroborated that account later Wednesday. If true, that would seem to suggest the U.S. military may have been using satellite imagery from at least 2016, according to these BBC satellite comparisons, because Google Maps shows a playground and a wall in place around the school beginning around 2017.
By the way: Two satellite imaging firms are restricting or delaying access to imagery over the Middle East in order to protect NATO and “allied” partner forces, Planet Labs and Vantor said this week, Reuters reported Tuesday.
Last week, Planet Labs announced a four-day delay in accessing imagery; but that hold has now been expanded to two weeks. According to a company spokesman, “the change is not the result of a directive or requirement from any government. It is Planet’s decision,” the Washington Post reported Wednesday evening. Vantor released a similar statement, and said it “independently determines when and how these controls are implemented as part of our responsible business practices. These decisions are not mandated by any government, military organization, or third party.”
Update: “At least 11 American military bases or installations have been damaged” by Iranian retaliatory strikes across the region, the Times reported Wednesday after reviewing satellite imagery. That includes Prince Sultan Air Base in Saudi Arabia; Ali Al Salem Air Base and Camp Buehring Base in Kuwait; and Al Udeid Air Base in Qatar. Air-defense sensors at an Air Force base in Jordan was also attacked early in the conflict.
Replenishing the Pentagon’s advanced munitions “will take years and billions” of dollars, Becca Wasser writes for Bloomberg. And that would seem to suggest “Iran is waging a cost-imposing battle on the US defense industrial base—and its working,” she says.
- Related reading: The NYT offers “a guide to the primary weapons being used in the current conflict.”
USS Gerald R. Ford (CVN 78) update: The U.S. Navy’s newest aircraft carrier is racing through the region to help with the Iran war. Its crew experienced a slight hiccup on Thursday however, after a fire broke out “in the ship’s main laundry spaces,” injuring two people, officials said in a statement. “The cause of the fire was not combat-related and is contained,” and the aircraft carrier remains fully operational.”
Toward an end to the fighting: “Iran's president has set conditions for an end to the war, including reparations and guarantees against future aggression,” Germany’s Deutsche Welle, or DW, reported Wednesday.
But Iran’s leader has vowed to continue fighting, and to keep the Hormuz Strait closed as long as possible, Reuters and the Wall Street Journal reports. Three merchant ships sustained minor damage after being attacked in or near the strait on Wednesday, British maritime authorities reported.
Two fuel tankers were hit by explosive Iranian boats on Thursday while in Iraqi waters. Iraqi officials said they’ve completely stopped oil exports for now. “We will deliver the most severe blows to the aggressor enemy by maintaining the strategy of keeping the Strait of Hormuz closed,” an Iranian naval commander vowed on social media Thursday.
Brent crude prices soared above $100 per barrel again on Thursday, and “The International Energy Agency's plan to release 400 million barrels of oil from its reserves, announced on Wednesday in the largest such move in its history, failed to soothe investors,” Reuters reports.
Low oil prices are bad for Russia’s economy, which means Moscow is doing pretty well during this Iran war since “Currently, Russia can balance its budget with a price of $59 a barrel,” the Wall Street Journal reported Tuesday.
Additional reading:
- “US to release 172m barrels of oil from strategic petroleum reserve,” the Guardian reported Wednesday;
- “Thanks to Trump, petro-imperialism is back,” Brown University’s Jeff Colgan wrote Wednesday in Mother Jones; relatedly, scientists recently discovered sea levels are “higher than assumed in most coastal hazard assessments,” according to a new study published in Nature; someone online joked, “If we could just raise sea levels by 150 meters we get a backup Strait of Hormuz.”
- After Iranian strikes on three Amazon Web Services facilities in the region, review “The Legal and Policy Fallout from Data Center Strikes in the Middle East War,” via a new explainer published Thursday at the Tech Policy Press;
- “AI Used to Promote Non-Existent Evacuation Flights From the Middle East,” Bellingcat reported Thursday;
- And ICYMI (we did), “State Department Bypasses Congress to Send Israel More Than 20,000 Bombs,” the Times reported Friday.
Welcome to this Thursday edition of The D Brief, a newsletter focused on developments affecting the future of U.S. national security, brought to you by Ben Watson with Bradley Peniston. It’s more important than ever to stay informed, so we’d like to take a moment to thank you for reading. Share your tips and feedback here. And if you’re not already subscribed, you can do that here. On this day in 1947, President Harry S Truman laid out what would become known as the Truman Doctrine: “It must be the policy of the United States to support free peoples who are resisting attempted subjugation by armed minorities or by outside pressures.”
Around the Defense Department
Some see effort to evade accountability in Hegseth’s “ruthless” review of JAG, civilian legal offices. “I'm directing the service secretaries, the Army, Navy, and Air Force through their general counsels and JAGs and the [staff judge advocate] to the commandant to execute a ruthless, no-excuses review,” Hegseth said in a video posted on Wednesday. “Scrub it clean, cut duplication and bureaucracy, clarify roles, and reporting. No more moral ambiguity.” But current and former members of the judge advocate general corps told Defense One’s Thomas Novelly that they fear the move is part of attempts to gut legal oversight of the administration’s actions. Read on, here.
B-21 spotted in aerial-refueling test flights. After planespotters posted photos of the new bomber flying close to a tanker, an Air Force spokesperson confirmed to Defense One’s Thomas Novelly that the Raider was executing tests leading up to aerial refueling. A bit more, here.
The Defense Department is seeking investment bankers to help invest $200 billion in defense deals, Semafor reports. The department is “specifically going after Goldman Sachs, Morgan Stanley, JPMorgan, and Bank of America as prime recruiting targets for the 30-person team, the headhunter brief outlines, explaining that ‘this is not a career move, but a two-to-three-year secondment program’” intended to help counter China. Read on, here.
Update: “The U.S. has spent at least $3.4 trillion countering China militarily since 2012,” according to a recent report from Brown University’s Costs of War project. “This figure, an average of $260 billion a year, is more than total U.S. spending on 20 years of war in Afghanistan ($2.3 trillion),” Jennifer Kavanagh of Defense Priorities said.
Pentagon bans photographers after “unflattering” photos. “The Defense Department has barred press photographers from briefings on the ongoing U.S.-Israeli military conflict with Iran after they published photos of Defense Secretary Pete Hegseth that his staff deemed ‘unflattering,’” the Washington Post reported Wednesday, citing “two people familiar with the decision who spoke on the condition of anonymity out of fear of retaliation.” In a statement, Pentagon press secretary Kingsley Wilson wrote: “In order to use space in the Pentagon Briefing Room effectively, we are allowing one representative per news outlet if uncredentialed, excluding pool.” More, here.
Etc.
Ukraine is making China-free drones. “A year ago, most Ukrainian defense companies could not produce these [circuit] boards, which are key ingredients in small exploding drones. But this advance, among others, has helped the country reach a milestone: It can now make drones with no components imported from China,” the New York Times reported on Wednesday.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Bell Ambulance disclosed a data breach impacting 237,830 individuals after unauthorized access to its network exposed personal and medical data.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Defense Secretary Pete Hegseth on Wednesday ordered an overhaul of the military’s civilian and uniformed legal offices, raising fears among current and former members of the judge advocate general corps that he will gut legal oversight of the administration’s actions.
“I'm directing the service secretaries, the Army, Navy, and Air Force through their general counsels and JAGs and the [staff judge advocate] to the commandant to execute a ruthless, no-excuses review,” Hegseth said in a video posted on Wednesday. “Scrub it clean, cut duplication and bureaucracy, clarify roles, and reporting. No more moral ambiguity.”
Members of the military’s legal community who spoke to Defense One said they are as skeptical of Hegseth’s message as they are of his timing.
The call to reorder the “current allocation of legal resources and functions” of the Defense Department’s civilian and uniformed lawyers comes as the U.S. is fighting a war with Iran—a conflict some experts have claimed is illegal, and which has involved an airstrike on an Iranian elementary school that left 175 people dead. The investigation into that airstrike is going on now, and early evidence reportedly points to the U.S. as the responsible party.
Hegseth posted his latest video a little more than a year after he fired the Army, Navy, and Air Force’s top lawyers, claiming they were “roadblocks to orders that are given by a commander in chief.”
Steve Lepper, a retired Air Force lawyer and a member of a group of former JAGs that has spoken out about the administration’s military actions, said Hegseth’s words on Wednesday were at odds with his actions as secretary.
“I think it’s probably one of the most hypocritical messages he’s communicated in his tenure at DOD,” Lepper said. When Hegseth fired the top JAGs, he said, “His message was clear: ‘The law and lawyers should have little influence over the military and its operations’.”
A defense legal insider said there was talk of potential changes among lawyers on Tuesday, but many had expected a memo, not a video, outlining the reforms. As of late Wednesday evening, no formal memo outlining the effort had been widely circulated, sources told Defense One.
On Thursday, Defense One reviewed a copy of the memo, dated March 11 and addressed to the service secretaries, JAG corps, and general counsels, which it said “are best positioned to enhance the war fight, and that our general counsel personnel are best positioned to execute non-operational, supporting functions of the Military Departments.”
The memo included a suggested split of duties between the JAGs and the general counsel offices. Civilian general counsels were advised to take on business, acquisition, real estate, patent, medical, and “litigation before non-military administrative boards and federal courts and coordination with the Department of Justice,” among other areas.
The memo suggested JAGs remain in the realm of military justice, national security, operational, military administrative, claims related to military operations, and procurement and fiscal law in operation settings.
Both the uniformed and civilian lawyers must also cover “any other legal subject area prescribed by the respective Secretary concerned or otherwise required by law or regulation.”
It wasn’t immediately clear how Hegseth’s reforms may affect the many civilian employees who answer directly to each service’s top judge advocate general, or TJAG, nor the general counsels of each service.
The memo set a deadline of 45 days for reports on any overlap between the service’s civilian and military legal departments to the Defense Department’s General Counsel with full changes expected within six months.
A Defense Department spokesperson declined to answer questions about the memo and its intent. “We have nothing additional to provide beyond the Secretary’s video,” they said.
The insider said leaders of the department’s various legal offices had spoken in various ways about Hegseth’s latest action. Some said it would be an opportunity for civilian general-counsel lawyers to detangle any functions that may overlap with uniformed Judge Advocate General work.
But: “Some of them made it clear it could be a seismic shift in how things are done,” the insider said. “Subtext-wise, I think myself, and a few of the people that I've talked to, we're pretty sure this is just a way to reduce accountability” for Hegseth and other Pentagon leaders.
The general counsel for each of the military services is a political appointee chosen by the president and confirmed by the Senate. While the TJAGs are similarly chosen, they must also be “recommended by a board of officers,” and the Defense Department must not interfere with “independent legal advice” given to service secretaries, according to U.S. law.
“I think it's probably a way to put more legal decisions on the [general counsel] side, because I think they think that's probably more responsive to a direct civilian political nominee rather than a uniform TJAG, who's gonna have had quite a bit of experience,” the insider said.
Overworked and stretched thin
Hegseth claimed in his Wednesday video that “legal shops across the services have grown bloated, duplicative” and are in need of reform.
“They've muddied lines of authority and pulled critical judge advocates away from what matters most: advising commanders in the fight on operations in deployed environments where seconds and minutes count,” the secretary said. “But right now, military lawyers are sometimes stuck doing civilian side work that belongs to general counsels instead, and that drains readiness and leaves gaps where we can't afford to have them.”
Ever since Hegseth fired the Army and Air Force’s most experienced TJAGs, military lawyers have been thrown at some of the administration’s largest legal hurdles—including taking on civilian duties.
Last year, the Trump administration approved the temporary assignment of more than 600 JAGs to work for the Justice Department as immigration judges. And in January, Defense One reported that dozens of military lawyers had been temporarily assigned as federal prosecutors to support law-enforcement surges in Minneapolis and other cities.
Assigning those often-inexperienced military lawyers as special assistant U.S. attorneys has been met with legal criticism. An Army lawyer serving as a federal prosecutor was held in contempt of court last month when a man was released from Immigration and Customs Enforcement custody without his identification documents.
On Monday, former JAG officers called for an end to the practice in an amicus brief filed in federal court in Minnesota, writing that they were “deeply concerned that deploying JAGs to prosecute civilians in federal court in cases without a substantial military nexus erodes vital democratic norms, harms military readiness, and impermissibly inserts the military into civilian law enforcement’s core functions.”
Lepper, who joined the amicus brief, said Hegseth’s message is also at odds with these frequent civilian tasks.
“If he’s so concerned about JAGs doing their jobs, why does he continue to detail them to the Department of Justice to perform immigration judge roles for which they are not qualified and special assistant U.S. attorney roles in cases that have absolutely no military nexus,” Lepper said.
By the numbers
In December, Defense One asked the Army, Air Force, and Navy how many uniformed lawyers and civilian employees were assigned to their respective JAG corps.
The Air Force reported that it had 1,236 JAGs, about nine more than it had the previous year, while civilian staffing had been cut to 996 from 1,022, an Air Force spokesperson told Defense One.
The Navy said it had about 1,030 JAGs as of November, up from about one thousand the previous year, but that its civilian staffing had been cut from some 700 people to roughly 550, a spokesperson said.
The Army did not return multiple phone calls and emailed requests from Defense One seeking staffing figures.
Last year, Hegseth ordered his department to shrink its civilian workforce. About 110,000 of the department’s roughly 795,000 civilians quit, retired, or were laid off, although some 30,000 jobs deemed essential to national security were subsequently re-filled. Many workers across the department said have since reported their offices have seen lowered productivity and performance, Defense One reported this week.
The legal insider said due to the administration’s heavy reliance on JAGs after the workforce cuts, many offices were authorized to rehire for key jobs.
“For the last year now, we've been bleeding people and the work hasn't slowed down,” the insider said. “Lots of offices were getting crushed, and they've been able to make their case and get approval to hire back and fill those positions.”
Aaron Brynildson, a former judge advocate and a law professor at the University of Mississippi, said some deconfliction of JAGs and general counsels could be beneficial.
“I agree with Secretary Hegseth’s sentiment that JAGs sometimes perform work better handled by civilian attorneys and that more clear lines of responsibility with the service Offices of General Counsel are needed,” Brynildson said. “I hope we do not reduce the number of JAGs, but place them closer to commanders.”
He also suggested that more JAGs be trained to provide legal guidance for space and cyber domains.
Members of the former-JAG working group, which was formed after the firing of the TJAGs last year, have continued to speak out against the administration’s actions, including the continued strikes on alleged drug trafficking boats in the Caribbean Sea and the ongoing war in Iran—both of which they claim violate U.S. and international law.
Lepper and the other former military lawyers in the group have said that if proper legal guardrails were in place, many of the administration’s actions wouldn’t have taken place.
“If Secretary Hegseth is truly concerned about the law, he should try following it. If he’s concerned about letting judge advocates provide legal advice, he should listen to them,” Lepper said.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Phishing has quietly turned into one of the hardest enterprise threats to expose early. Instead of crude lures and obvious payloads, modern campaigns rely on trusted infrastructure, legitimate-looking authentication flows, and encrypted traffic that conceals malicious behavior from traditional detection layers. For CISOs, the priority is now clear: scale phishing detection in a way that helps
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Another Thursday, another pile of weird security stuff that somehow happened in just seven days. Some of it is clever. Some of it is lazy. A few bits fall into that uncomfortable category of “yeah… this is probably going to show up in real incidents sooner than we’d like.” The pattern this week feels familiar in a slightly annoying way. Old tricks are getting polished. New research shows how
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
AI-generated phishing is rapidly reshaping email risk, with more attacks slipping past filters and landing directly in users’ inboxes, even though AI-generated emails remain a minority of total phishing. The human element remains central: 68% of breaches involve people, and 80–95% of those begin with phishing, making social engineering the dominant breach vector. Phishing volume […]
The post AI-Driven Phishing Attacks Bypass Email Filters, Land in Inboxes appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
This week in cybersecurity from the editors at Cybercrime Magazine
Sausalito, Calif. – Mar. 12, 2026Stacy Horn, 66, is an author and the founder of East Coast Hang Out, or ECHO, which is widely regarded as the first social network. She joined Cybercrime Magazine Podcast host Heather Engel to discuss her background and the startup of ECHO in 1990, as well as its impact on broader cyber culture and the future of social media on the Internet.
Here’s an excerpt from a 2023 story on ECHO in MIT Technology Review:
When Horn, 37 at the time, founded ECHO in 1989, she wanted to create a digital space that was social and unequivocally New York. Members had to meet two requirements: they had to be geeky enough to navigate a cumbersome, text-based digital platform in the early days of the internet, but culturally in tune enough to foster the types of conversations you might hear at a West Village dinner party.
Horn enlisted her graduate school friends (she was a recent graduate of New York University’s interactive telecommunications program), as well as members of other bulletin-board-style platforms.
One primary source of inspiration was the California-based online community known as the WELL (for “Whole Earth ’Lectronic Link”), started by Stewart Brand in 1985. Brand is well known for being a counterculture impresario in the Bay Area during the 1960s, editing the widely distributed Whole Earth Catalog.
Just as the WELL brought together experimental, self-sufficient individuals who foresaw the endless possibilities of computers, ECHO defined the New York web scene and influenced the design of contemporary social networks, creating lifelong friendships in the process. [Full Story…]
Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:
- SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
- NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
- HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
- VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
- M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
- BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
- PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
- PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
- RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.
Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.
The post Backstory Of East Coast Hang Out (ECHO), The First Social Network Launched In 1989 appeared first on Cybercrime Magazine.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶


