• The Defense Department has spent an estimated $25 billion in 60 days of operations against Iran so far, the Pentagon’s comptroller said during a congressional hearing Wednesday.

    The administration plans to send a supplemental budget request to Congress to cover spent munitions and operational costs once they’re more fully fleshed out, Jay Hurst, the official performing the duties of the Pentagon’s chief financial officer, told House Armed Services Committee lawmakers during testimony on the department’s 2027 budget request. 

    “Okay, interesting…I'm glad you answered that question, because we've been asking for a hell of a long time, and no one's given us the number,” Rep. Adam Smith, D-Wash., told Hurst. “So if you could get those details over to us, that would be great.”

    The hearing also marked the first time Defense Secretary Pete Hegseth and Gen. Dan Caine, the chairman of the Joint Chiefs of Staff, have publicly answered questions from Congress since Operation Epic Fury began Feb. 28. Lawmakers dug into the Pentagon’s most recent budget request, as well as the war with Iran, the blockade of the Strait of Hormuz, and the status of negotiations to end both. 

    “For the first time in over 40 years, we've been presented a budget that accounts for the true cost of American deterrence,” HASC Chairman Rep. Mike Rogers, D-Ala., said of the $1.5 trillion defense spending proposal for fiscal year 2027.

    Increases in acquisition funding, operations and maintenance balance both modernization and readiness, he said, compared to past budgets that made near-term readiness tradeoffs in favor of focusing funding toward new technology. 

    “This will enable us to truly catch up in our modernization efforts, by quickly fielding new munitions, aircraft, ships, land, space and autonomous systems to replenish and expand our arsenal,” Rogers said.

    But there are questions about how that 50-percent increase over last year’s budget will be spent. Last year, Hegseth promised during his first weeks in office that DoD would pass an audit by the end of the second Trump administration, but a Government Accountability Office report released last year found that the Pentagon hadn’t laid enough groundwork to change its accounting processes to meet that milestone.

    “I think last year's bill put us on a good trajectory to get to the point where we can, in fact, innovate faster at scale,” Smith said. “But we’ve got a long way to go. Can the Pentagon really absorb another five, $600 billion, depending on what the supplemental and the reconciliation package are? I don't think so. We need to pay as much attention to how we're spending the money as to how much we're spending, and we never seem to do that.”

    Smith then turned to the Iran war as a core reason to question how the Pentagon will spend the funding increase.

    “And one of the big questions that we need to get answered today is, where is this going? What is the plan to achieve our objectives? We've seen the cost, and the cost is very, very high,” Smith said. “All we keep hearing, on the objectives, is we keep seeing all of the targets that we have struck.”

    While that’s a laudable tactical accomplishment, he said, the stated purpose of the war has been to “fundamentally” change Iran, though the country continues to block the Strait of Hormuz and has not agreed to end its nuclear ambitions or conventional weapons programs.

    “And most disturbingly, the president keeps telling us that it's over. What was it? A week ago, Friday, the President announced that Iran had agreed to give up their nuclear program, to give up their ballistic missile program, to stop support for terrorist groups, to re-open the Strait of Hormuz,” Smith said. “The only problem with that is literally none of that was true. He was completely making it up. Iran hadn't even agreed to meet with us.” 

    Hegseth deflected criticism of the administration’s Iran war strategy to service members, accusing lawmakers who questioned his leadership of spreading propaganda and bristling at the charge that he is leading the U.S. into another “quagmire.”

    “The way you stain the troops when you tell them—two months in, Congressman—you should know better. Shame on you calling this a quagmire, two months into the effort, what they've undertaken, what they've succeeded, the success on the battlefield that could create strategic opportunities, the courage of a president to confront a nuclear Iran—and you call it a quagmire, handing propaganda to our enemies,” Hegseth said.

    But lawmakers clarified that their issue is with the overall strategy, not the performance of the military.

    “Their professionalism and selfless service are not in question and never have been,” Rep. Jim Garamendi, D-Calif., said. “What is in question is the purposes and the strategic direction of this war. Any unvarnished review of what is happening right now in the Middle East would reveal a geopolitical calamity, a strategic blunder resulting in worldwide economic crisis. The result of Trump's war of choice is a serious, self-inflicted wound to America. It will take years and a new administration to recover from the grave damage to our standing in the world, as well as our economy and our military.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Bluekit Phishing Kit is a new PhaaS tool that targets major platforms, using AiTM techniques to steal session data and bypass MFA protections.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers are sounding the alarm about a new supply chain attack campaign targeting SAP-related npm Packages with credential-stealing malware. According to reports from Aikido Security, SafeDep, Socket, StepSecurity, and Google-owned Wiz, the campaign – calling itself the mini Shai-Hulud – has affected the following packages associated with SAP’s JavaScript and cloud application

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A hacker using the alias “Xorcat” claims to have breached Polymarket using API flaws, but research suggests the leak could be just data scraping incident.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Lt. Gen. Douglas Schiess is likely to be nominated by President Donald Trump to serve as the Space Force’s next top uniformed leader, Defense One has learned.

    Schiess currently serves as the deputy chief of space operations for operations at the Pentagon. If confirmed by the Senate, the three-star general will replace Gen. Chance Saltzman—who has served as the service’s top military leader since September 2022. Two defense insiders confirmed to Defense One that Schiess was the likely nominee.

    A Space Force spokesperson declined to comment on the presumptive nominee. White House officials did not immediately return a request for comment on Wednesday afternoon.

    If confirmed, Schiess would be the third Chief of Space Operations in the service’s six-year history. Earlier this month, Saltzman addressed reporters and attendees at the Space Symposium conference in Colorado and acknowledged it would likely be one of his last public engagements ahead of his retirement, which is expected later this year. 

    Like both of his predecessors, Scheiss is a career space operator, as distinct from an acquisitions specialist—the service’s other large officer community.. 

    Schiess served as the Space Forces–Space commander and U.S. Space Command’s vice commander, according to his biography. Earlier in his career, he directed the space forces component of Air Forces Central Command at Al Udeid Air Base in Qatar and commanded the 45th Operations Group at Cape Canaveral in Florida. Like Saltzman, he began his career as an Air Force intercontinental ballistic missile operator. 

    Saltzman, during his time as the service’s chief of space operations, encouraged the Space Force to embrace a warfighting identity and pushed to expand its mission sets. Under his tenure, the Space Force budget grew from $26 billion to a record-breaking $72 billion funding request this year. It’s also expanded to nearly 11,000 service members today.

    “I'm not sad,” Saltzman told reporters. “This is so exciting…We're starting to marry up resourcing and processes and guardian talent; the joint force is recognizing how important this is. I think our messaging is getting through.” The Space Force also received some of its first public recognition from the top Pentagon brass for providing necessary support for joint operations in Iran and Venezuela.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have discovered malicious code in an npm package after a malicious package as a dependency to the project by Anthropic’s Claude Opus large language model (LLM). The package in question is “@validate-sdk/v2,” which is listed on npm as a utility software development kit (SDK) for hashing, validation, encoding/decoding, and secure random generation. However, its real

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Lazarus Group is abusing “ClickFix” social engineering to push a new macOS malware kit dubbed “Mach-O Man,” giving attackers a direct path to credentials, Keychain secrets, and corporate access in fintech and crypto environments. This research is authored by Mauro Eldritch, an offensive security expert and founder of BCA LTD, a company focused on threat intelligence and […]

    The post Lazarus Targets macOS Users With New “Mach-O Man” Malware Kit appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • This week in cybersecurity from the editors at Cybercrime Magazine

    Sausalito, Calif. – Apr. 29, 2026

    Watch the YouTube video

    Executive risk management has evolved far beyond physical protection and travel security. Today, the most pressing threats to leadership come from digital exposure, where publicly available data creates direct pathways for threat actors to exploit, according to VanishID, developers of agentic AI-powered digital executive protection.

    A single executive’s digital footprint can influence not only their personal safety but also the financial stability, operational continuity, and reputation of the entire organization.

    As impersonation attacks, financial fraud, and targeted social engineering continue to rise, executives have become high-value entry points. Their visibility, authority, and access make them uniquely vulnerable.

    For modern enterprises, executive risk is no longer a niche concern. It is a strategic priority that demands structured, ongoing digital protection at scale.



    Last year, VanishID announced the launch of a new CEO Protection offering designed specifically to protect Chief Executives and their families from the unique digital privacy and security risks.

    The company also announced a $10 million investment led by Dell Technologies Capital and joined by Mark McLaughlin, former CEO and Chairman of Palo Alto Networks, with participation from Crosslink Capital, Rally Ventures, Energy Impact Partners, Bright Pixel, and LockStep Ventures.

    Since then, VanishID, trusted by more than 100 client organizations, has garnered interest around its digital executive protection, as well as solutions for workforce protectionfamily office protection, and public sector protection.

    Matt Polak, founder and CEO at VanishID, explains why digital executive protection is critically important to organizations in a new 2-minute video produced by Cybercrime Magazine.

    Watch the Video


    Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

    • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
    • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
    • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
    • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
    • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
    • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
    • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
    • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
    • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

    Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

    The post VanishID: Agentic AI-Powered Cybersecurity Protects C-Suite Executives appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • WILMINGTON, Delaware, 29th April 2026, CyberNewswire

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Security researchers at LayerX have uncovered a high-severity vulnerability in the popular AI-powered development environment, Cursor. Dubbed “CursorJacking,” this flaw carries a CVSS score of 8.2 and exposes developers to immediate credential theft. Any installed extension can silently access a user’s API keys and session tokens without requiring special permissions or user interaction. Standard security […]

    The post Cursor AI Extension Flaw Exposes Developer Tokens to Credential Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶