1010.cx – cybersecurity / defense / intelligence

The Best Network Traffic Analysis (NTA) Tools, Compared and Priced (2026)

·

Top 10

Network traffic analysis spans two buying worlds — ops tools with published price lists and security platforms with quote-only enterprise pricing — and knowing which world you’re shopping in saves months. The verdict up front: Auvik and SolarWinds own transparent ops-tier pricing, ElastiFlow is the open-flow value revelation, Kentik prices modern observability fairly, and Darktrace/Corelight/ExtraHop […]

The post The Best Network Traffic Analysis (NTA) Tools, Compared and Priced (2026) appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Microsoft Outlook RCE Vulnerability Lets Attackers Execute Code Remotely

·

CVE/vulnerability, cyber security, Cyber Security News, Microsoft, vulnerability

Microsoft has disclosed a new remote code execution (RCE) vulnerability in Outlook, tracked as CVE-2026-70329. They warn that successful exploitation could allow attackers to run malicious code on affected systems. Released on August 11, 2026, this vulnerability has been rated as Important and carries a maximum CVSS 3.1 score of 8.8. The flaw falls under […]

The post Microsoft Outlook RCE Vulnerability Lets Attackers Execute Code Remotely appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations

·

Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting cloud keys, SSH keys, Kubernetes tokens, database passwords, and other secrets from systems that installed them. Threat intelligence firm CloudSEK now says a dataset it obtained, built from roughly 434,000 files the attackers captured, maps potential exposure to more

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Project CAV3RN Uses Google Apps Script and DNS to Hide C2 Traffic in Israeli Cyberespionage Attacks

·

cyber security, Cyber Security News, DNS, Google

Project CAV3RN, a modular cyberespionage framework targeting organizations in Israel, has added a sophisticated command-and-control design that dynamically blends direct HTTPS traffic with Google Apps Script relays. The latest findings show an operator prioritizing resilience, modularity and network camouflage rather than reliance on a single C2 channel. Earlier reporting documented its use of Microsoft Outlook […]

The post Project CAV3RN Uses Google Apps Script and DNS to Hide C2 Traffic in Israeli Cyberespionage Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Windows AFD.sys Zero-Day Exploited by Lazarus Hackers to Gain SYSTEM Access

·

Cyber Security News

Lazarus has expanded its long-running Operation Dream Job campaign by exploiting a Windows zero-day vulnerability that grants attackers SYSTEM-level access and helps neutralize endpoint visibility. This DPRK-linked threat actor is specifically targeting defense, aerospace, and aviation organizations worldwide, with recent activity impacting entities in Europe and India. Check Point Research identified the flaw as CVE-2026-68820, […]

The post Windows AFD.sys Zero-Day Exploited by Lazarus Hackers to Gain SYSTEM Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

·

SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. The vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of insufficient authorization checks and input validation. “SAP Commerce Cloud allows an

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access

·

The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a proof-of-concept (PoC) for a new Microsoft zero-day called ShieldBreak. The vulnerability, rooted in Microsoft Defender for Windows, demonstrates a patch bypass for CVE-2026-50656 (CVSS score: 7.8), otherwise known as RoguePlanet. RoguePlanet has been described

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Fake Corporate VPN Test Creates Scheduled Task and Downloads Malware on Windows

·

cyber security, Cyber Security News, Malware, VPN

An advanced recruitment-themed intrusion campaign attributed to UAC-0145, a cluster that includes subcluster UAC-0002, also tracked as Sandworm, APT44 and Seashell Blizzard. The activity, observed since at least May 2026, begins on job-search platforms. Operators review a candidate’s résumé, contact the individual while impersonating an IT company such as ATLAS Business Group, and move the […]

The post Fake Corporate VPN Test Creates Scheduled Task and Downloads Malware on Windows appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS

·

Cisco has warned that a new vulnerability impacting Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild. The high-severity flaw, tracked as CVE-2026-20349 (CVSS score: 8.6), is a case of insufficient error checking when processing HTTP requests that could allow an unauthenticated, remote attacker to trigger

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Microsoft Patch Tuesday Update August 2026 Fixes Actively Exploited Windows Zero-Day

·

cyber security, Cyber Security News, Microsoft

Microsoft’s August 2026 Patch Tuesday released fixes for hundreds of vulnerabilities across various products, including Windows, Office, SharePoint, Azure, .NET, PowerShell, Visual Studio Code, and other enterprise solutions. A total of 394 distinct flaws were documented in this release. Among these vulnerabilities, three zero-day issues are particularly noteworthy. One of these is a Windows elevation-of-privilege […]

The post Microsoft Patch Tuesday Update August 2026 Fixes Actively Exploited Windows Zero-Day appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶