• A 13-year-old critical remote code execution (RCE) vulnerability in Redis, dubbed RediShell, allows attackers to gain full access to the underlying host system.

    The flaw, tracked as CVE-2025-49844, was discovered by Wiz Research and has been assigned the highest possible CVSS severity score of 10.0, a rating reserved for the most severe security issues.

    The vulnerability is a Use-After-Free (UAF) memory corruption bug that has existed in the Redis source code for approximately 13 years. A post-authentication attacker can exploit this flaw by sending a specially crafted Lua script.

    Because Lua scripting is a default feature, the attacker can escape the Lua sandbox environment to achieve arbitrary code execution on the Redis host.

    This level of access grants an attacker complete control, enabling them to steal, delete, or encrypt data, hijack system resources for activities like crypto mining, and move laterally across the network.

    The potential impact is magnified by Redis’s ubiquity. An estimated 75% of cloud environments utilize the in-memory data store for caching, session management, and messaging.

    The combination of this critical flaw with common deployment practices that often lack proper security hardening creates a significant risk multiplier for organizations globally.

    Redis Instances Exposed to the Internet

    Analysis by Wiz Research revealed an extensive attack surface, with approximately 330,000 Redis instances exposed to the internet. Alarmingly, about 60,000 of these instances have no authentication configured.

    The official Redis container image, which accounts for 57% of cloud installations, does not require authentication by default.

    This configuration is highly dangerous, as it allows any unauthenticated attacker to send malicious Lua scripts and execute code within the environment.

    Even instances exposed only to internal networks are at high risk, as an attacker with an initial foothold could exploit the vulnerability for lateral movement to more sensitive systems.

    The attack flow begins with the attacker sending a malicious Lua script to the vulnerable Redis instance. After successfully exploiting the UAF bug to escape the sandbox, the attacker can establish a reverse shell for persistent access.

    From there, they can compromise the entire host by stealing credentials like SSH keys and IAM tokens, installing malware, and exfiltrating sensitive data from both Redis and the host machine.

    On October 3, 2025, Redis released a security advisory and patched versions to address CVE-2025-49844. All Redis users are strongly urged to upgrade their instances immediately, prioritizing those that are internet-exposed or lack authentication.

    In addition to patching, organizations should implement security hardening best practices.

    These measures include enabling strong authentication, disabling Lua scripting if it is not required, running Redis with a non-root user account with minimal privileges, and implementing network-level access controls like firewalls and Virtual Private Clouds (VPCs) to restrict access to authorized networks only.

    Follow us on Google News, LinkedIn, and X for daily cybersecurity updates. Contact us to feature your stories.

    The post 13-year-old Critical Redis RCE Vulnerability Let Attackers Gain Full Access to Host System appeared first on Cyber Security News.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Golden Dome missile-defense project has a lot of money, and contractors have a lot of questions—so many that the Missile Defense Agency has pushed back the deadline to submit proposals for a chunk of its $151 billion pot.  

    Industry proposals for the Scalable Homeland Innovative Enterprise Layered Defense contract vehicle, or SHIELD, were originally due Oct. 10. However, due to “considerable interest” into the up-to-$151 billion, 10-year indefinite-quantity, indefinite-delivery contract, the deadline has been pushed to Oct. 16. 

    “The solicitation posted on [Sept. 10] generated considerable interest, resulting in over 1,500 questions from industry,” said an Oct. 2 memo from the Missile Defense Agency. 

    “The questions received were primarily focused on requests for clarification based on individual company interests/situations and resulted in very few updates to the solicitation," Mark Wright, a Missile Defense Agency spokesman, said later. "The extension is predominantly due to the sheer volume of answers for industry to review and not the updates to the solicitation.”

    The flood of queries shows how eager industry is to get a slice of the Trump administration’s wildly ambitious missile shield, said Todd Harrison, a senior fellow at the American Enterprise Institute.

    “I think it’s an indication of strong industry interest, which is not surprising given the enormous amount of money already appropriated by Congress,” Harrison said. 

    In May, the president claimed Golden Dome would cost around $175 billion, would be completed in about three years, and would be completely effective in keeping missiles from striking the continental United States.

    The reconciliation bill passed this summer provided $25 billion for the project, but that, according to some estimates, is just a few percent of what it will ultimately cost..

    In May, a Congressional Budget Office report said estimates ranged from $542 billion to $831 billion over 20 years. Last month, Harrison wrote that depending on the actual goals and scope, the project could cost from $252 billion to more than ten times as much.

    “A system that protects against the full range of aerial threats posed by peer and near-peer adversaries could cost $3.6 trillion, and even then, it would fall short of the ‘100 percent’ effectiveness claimed,” Harrison wrote in a report. “In contrast, the $175 billion price tag President Trump cited only affords a much less capable system that is no match for the quantity of missiles China and Russia possess.”

    The Trump administration has claimed Golden Dome can and will use interceptors on Earth and in orbit to mount defenses impenetrable by ballistic, cruise, and hypersonic missile. The project is overseen by Space Force Gen. Michael Guetlein, once vice chief of space operations.

    In September, the Space Force began soliciting prototype proposals for its space-based interceptor program. Guetlein briefed members of the Senate Armed Services Committee members late last month, sparking skepticism among some Democratic lawmakers. 

    Designing orbital interceptors will take a lot of money and effort, industry officials said at the Air & Space Force Association’s Air, Space and Cyber conference near Washington, D.C., last month. 

    “It’s really a large system, engineering architecture problem and it's heavily driven by economics,” said Robert Fleming, corporate vice president and president of Northrop Grumman's Space Systems sector. “So, there’s a lot of work to be done, there’s money involved to get that figured out.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • As the government shutdown continues into its second week, federal agencies will soon be revising their responses and sending home tens of thousands of additional staff. 

    Many agencies across government are leaning on carryover funds—money previously provided by Congress and left over in the new fiscal year—to cushion the impact. With the shutdown now in its sixth day, some of that money is starting to run dry and agencies must soon enter a new stage of their operations. 

    At the Interior Department's Bureau of Land Management, carryover funds in the Wildland Fire Management account are enabling 3,300 employees to continue working on wildfire preparedness, suppression, and response, as well as fuels management and recruiting. Once those funds are exhausted, only 1,000 employees will be permitted to carry on work on preparedness, suppression and emergency services. 

    The Census Bureau is using carryover funds to prepare for a decennial census test next year, which the agency called a “mission critical priority for ensuring 2030 Census operational viability.” If the shutdown continues for long, however, employees working on the test would be furloughed. 

    All told, more than 620,000 federal employees are furloughed, according to agencies' most up-to-date plans. That number will climb if the shutdown continues for days and weeks. 

    Some of the most dramatic changes are quickly approaching. The Internal Revenue Service has kept all of its employees working by using Inflation Reduction Act funds. On Wednesday, the agency plans to begin to furlough nearly half of its employees—around 35,000 employees, according to a Bloomberg report. Some, but not all, have been hearing from from their managers about whether they would be furloughed if the shutdown persists. The agency planned to retain all of its staff for five working days of a shutdown, wihch began last Wednesday. 

    “People legit don't know whether they are working on Wednesday,” said one employee who had not heard from anyone in management as of Monday afternoon. “No one's been told whether they are excepted, exempt, or furloughed.” 

    The Smithsonian Institution also retained all employees to start the shutdown, and kept its museums open, using prior-year funds. It has since announced it will be forced to close its properties Oct. 12. Nearly 3,700 employees are working on prior-year funds, most of whom will be furloughed starting next week. 

    The Senate on Monday is set to vote once again on a House-backed bill to reopen the government through Nov. 21, but Democrats do not appear likely to provide the 60 votes necessary to send the measure to President Trump's desk.

    Other agencies instructed employees to continue coming to work only for the initial days of a shutdown. The Transportation Department, for example, retained human-resources, budget, and finance personnel to help ensure an orderly transition. Those staffers, and many in similar roles across government, will be sent home this week. 

    Large swaths of employees who remain on the job do so without a clear timetable. The Indian Health Service retained all of its staff using advance appropriations, third-party collections, and carryover balances. The agency did not forecast what would occur if carryover funds are exhausted, or when that might occur. All told, HHS is keeping 35,000 employees working by using funding available from sources other than annual appropriations. 

    The Defense Department similarly has 183,000 employees working using such funds, though it has not spelled out whether or when that money could run dry. It, like other agencies, will likely not have to furlough every employee currently tapping the leftover money if such funding expires.

    The General Services Administration noted that while carryover funds are financing 3,377 employees who are currently working, mostly at the Public Buildings Service, some of those staff will move to the “excepted” category of employees who continue working throughout a shutdown even if spending runs out. 

    Some agencies were more confident in their ability to carry on at near-normal levels. Interior’s Bureau of Reclamation has about 94 percent of its employees working and said it would slowly send people home over time as funds run dry, but would not reach its full-furlough state for two to three months. The Agriculture Department's Child Nutrition Programs has sufficient carryover funds to continue reimbursing schools for meals provided through October. 

    NASA did not detail what would happen when its leftover spending runs dry, but in an usual message within its plan the agency said the carryover funds “will be restricted to presidential priorities.” 

    Some agencies will adjust their shutdown plans by recalling employees back to their duty stations if the lapse continues. The Homeland Security Department is set to ask more than 1,700 employees currently on furlough to resume working this week, concentrated mostly at the U.S. Coast Guard, Customs and Border Protection the management directorate. The Housing and Urban Development Department, which has sent home 71 percent of staff, will ask around 1,000 employees to work intermittently on excepted activities as the shutdown drags on. 

    The Justice Department also noted that its components “may call some employees back to work if the need for their services becomes critical, and furlough others as conditions change.” 

    During the 35-day shutdown of 2018-19, the IRS, Federation Aviation Administration, Food and Drug Administration, and Agriculture Department's Farm Service Agency collectively recalled tens of thousands of workers to prepare for tax season, conduct various safety and inspection work, and offer services to farmers. 

    Other agencies were forced to increase their furlough numbers due to the unprecedented length of the shutdown. 

    The number of employees showing up to work could also vary due to actions workers take on their own accord. Transportation Department Secretary Sean Duffy said on Monday the Federal Aviation Administration has seen a “slight tick up” in employees calling out sick since the shutdown began. FAA’s air traffic controllers are forced to work without immediate pay during a funding lapse. They have yet to actually face delayed pay due to the timing of paycheck delivery, though Duffy noted checks set to their accounts next week would be missing pay from the first few days of the shutdown. 

    “If we have additional sick calls, we will reduce the flow consistent with a rate that's safe for the American people,” Duffy said of the possibility of canceling flights. 

    On its website, the National Air Traffic Controller Administration posted a notice that it does not "endorse, support or condone" any employees participating in any coordinated effort to call out. Doing so, the group said, could result in removal from federal service and undermine the union's credibility. 

    Still, if the shutdown lasts until paychecks are delayed, employees across government could decide to take steps that would enable them to earn paychecks elsewhere. Both FAA and the Transportation Security Administration in 2019 were forced to reorient their operations in light of higher-than-normal absenteeism as the shutdown dragged into its second month. Lawmakers acted to end the shutdown shortly thereafter.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Weakened militarily and facing declining Palestinian support, particularly among residents of Gaza, Hamas was already a shadow of the militant group it once was. And then came President Donald Trump’s peace plan.

    On Oct. 3, 2025, Hamas said that it accepted some aspects of the 20-point proposal, including handing over administration of the Gaza Strip to a body of independent Palestinian technocrats and releasing all remaining Israeli hostages.

    Those hostages are the last of the 252 taken during the Oct. 7, 2023, attack – an event that two years on looks to represent a high point, so to speak, of Hamas’ power. As an expert on Palestinian political attitudes, I believe the group now has few options to survive.

    Like former resistance groups in past peace processes, it could renounce arms and transform itself into a purely political party. But to do so, it needs to overcome a series of hurdles: confronting other parts of Trump’s plan, its unpopularity at home and its rigid ideology being the three most prominent. 

    It is worth taking stock of just how degraded Hamas has become as the result of two years of onslaught by Israel’s vastly superior military.

    According to many intelligence reports, Hamas has lost most of its senior command in the Al-Qassam Brigades, its military wing. Izz al-Din al-Haddad, its current commander, survives, having presumably taken over from Mohammed Sinwar – the brother of Yahya Sinwar, mastermind of Oct. 7 attack – who was killed in May 2025. But he presides over a dwindling army.

    Trump may not have been exaggerating when he indicated on Truth Social on Oct. 3 that Hamas had lost 25,000 fighters. Estimates regarding the group’s losses vary, but it could represent more than half of the fighting force it had at the beginning of the war.

    Hamas has succeeded in recruiting new fighters during that time. But many of these new recruits lack the competence and the experience of the dead ones. And the only motivations the new recruits have are hate and anger toward Israel.

    Hamas’ political leadership has also been decimated. Chief political leaders, including Ismail HaniyehSaleh al-Arouri and Yahya Sinwar, have all been killed.

    And it could have been worse. Had the Israeli attack on Hamas’ political leadership in Doha, Qatar, succeeded in September 2025, it could have been a devastating loss for the movement. But the operation missed its primary targets there.

    Palestinian public pressure on Hamas has risen as the miseries of war have mounted. 

    According to local health officials, more than 67,000 have been killed and more than 169,000 have been injured. Most of the Gaza Strip has been reduced to rubble, and more than 90% of the population has been displaced multiple times– with most residents now living in tents. International organizations have reported famine and starvation in some parts of Gaza.

    Hamas has lost its power and influence over many areas now under Israeli control. Israeli military and intelligence have encouraged some members of the local Palestinian clans and militia to offer services in militia-controlled areas.

    In such areas, Hamas fighters have often clashed with other Palestinian groups, resulting in many deaths and growing resentment toward Hamas.

    Hamas’ execution and torture of Palestinians suspected of collaboration with Israel has only worsened the situation, leading to chaos and lawlessness in many parts of Gaza.

    It is little wonder, then, that half of Palestinians in Gazan in the latest poll of attitudes – taken in May 2025 – say they supported anti-Hamas demonstrations. Indeed, support for the group in both Gaza and the West Bank has continued to decline as the war has progressed.

    The ongoing war and the inhumane daily conditions that local Palestinians in Gaza are dealing with have led to exhaustion and fatigue among the public.

    On social media, many Palestinians are asking Hamas publicly to endorse the Trump plan and put an end to their misery. 

    In deciding whether to accept all the plan’s 20 points, Hamas will, from its perspective, have to weigh whether agreeing to a very bad outcome is better than the alternative. Trump has warned that a failure to get on board will cause Hamas to face “all hell.”

    Hamas has already agreed to release the remaining Israeli hostages and to relinquish power in Gaza to a technocratic Palestinian committee. If endorsed in full, this would put an end to the war and see the gradual Israeli withdrawal from Gaza, and no expulsion of the Palestinians out of Gaza.

    Egypt, Qatar and Turkey have been facilitating Hamas’ response to the plan. And there is huge regional and international pressure to get the deal over the line.

    However, it would force Hamas to disarm itself and allow the entry of an international and regional force into Gaza to oversee the destruction of military infrastructure, including tunnels, weapons manufacturing and the remaining rockets – points of the latest plan that Hamas appears more unwilling to accept.

    What happens to the remaining Hamas fighters is a sticking point that might lead to the collapse of the whole plan. 

    And any rejection of the plan that can be blamed on Hamas will no doubt be welcomed by members of the Israeli extreme right. Hard-line factions of Israeli Prime Minister Benjamin Netanyahu’s coalition have an alternative plan: to fully occupy Gaza, expel the Palestinians and reestablish Israeli settlements in Gaza.

    Perhaps the most viable option for Hamas is to transform itself into a political party. But to do so, the group will need to reform not only its structures but also its ideology.

    Political momentum is swinging back to a two-state solution. France and Saudi Arabia recently spearheaded a fresh push to that end at the United Nations, and a host of Western nations recognized Palestinian statehood for the first time. Hamas may feel the pressure to finally accept a two-state solution, something it has long resisted. For its part, Trump’s plan only makes vague assertions noting the Palestinian “aspiration” for a state.

    If transforming into a purely political party is to be the fate of Hamas, it will need to play its cards shrewdly and swiftly. The Palestine Liberation Organization went through this process after its departure from Beirut in 1982, eventually putting politics and diplomacy over armed resistance. And Qatar, Turkey and Egypt can help Hamas moderate its stances, too. 

    The rigid ideology of Hamas remains a hurdle. Since it was formed in 1987, Hamas has tethered itself to a hard-line Islamist ideology that does not allow fundamental compromises on issues such as recognition of Israel and the development of Palestine as a secular state.

    But there is the recent example of Syria where, following the ouster of long-term dictator Bashar Assad, the main Islamist fighting group pivoted to politics – and was lauded in the international community for doing so.

    Whether Hamas can succeed in such a transformation – should it even attempt to – remains to be seen. And there is one final snag: Even if Hamas does accept the latest peace proposal, other Palestinian militant groups in Gaza might not – and could attempt to sabotage the whole process.

    This article is republished from The Conversation under a Creative Commons license. Read the original article.

    The Conversation

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • For many in Venezuela, the question is no longer whether tensions with Washington will reach a boiling point – they already have. Rather, the big unknown now is whether the U.S. will follow up on threats and the sinking of drug boats with something more drastic: direct military engagement or even regime change.

    Certainly, Venezuelan President Nicolás Maduro is preparing for all eventualities. On Sept. 29, 2025, the leftist leader signed a decree granting him additional powers. The following day, Maduro threatened a “state of emergency.” Already, Caracas has carried out military drills amid talk of being a “republic in arms.”

    It follows a month in which Washington has positioned warships, an attack submarine and aircraft in the Caribbean and destroyed at least four suspected “go-fast” drug boats. At the United Nations General Assembly on Sept. 23, U.S. President Donald Trump warned of more to come, vowing to blow drug traffickers “out of existence” while repeating his assertion that Maduro was behind the trafficking networks.

    Maduro and his generals deny that charge. Nonetheless, Washington has set a $50-million bounty on Maduro’s arrest and has rejected Venezuela’s appeals for talks.

    As an expert on international security and U.S.-Latin American relations, I believe the U.S. position appears to be inching toward regime change from a prior position of ambiguity that has fallen short of an outright pledge to remove Maduro. 

    But Washington will be aware that any direct military engagement in Venezuela will be a messy affair. Despite increasing international isolation, Maduro still has friends in Moscow and Beijing, as well as closer to home in Havana. And such factors may force the Trump administration to continue to walk a fine line between maximum pressure on the Maduro government without full commitment to armed conflict.

    Recent deployments by the U.S. Southern Command demonstrate a shift in posture by the U.S. administration. 

    The USS Stockdale became the ninth U.S. Navy vessel and third destroyer – alongside USS Gravely and USS Jason Dunham – to join the USS Iwo Jima Amphibious Ready Group maneuvering between Puerto Rico and the Lesser and Leeward Antilles, and the waters north of Venezuela. In all, at least 4,500 Marines and sailors are positioned in the area. 

    Meanwhile, at least 10 F-35 fighters and multiple MQ-9 drones are reportedly operating from Aguadilla and Ceiba airports in Puerto Rico, offering the capacity for persistent surveillance and strike options. 

    These forces are more powerful than the entire Venezuelan navy but reportedly fall short of the forces needed for a full-scale invasion.

    For the moment, SouthCom is framing the campaign as enhanced counternarcotics operations, rather than a prelude to a blockade or invasion. Statements have highlighted joint patrols and interdiction efforts with the Royal Netherlands Navy, Canada, the Dominican Republic and the United Kingdom, and the humanitarian or information-sharing nature of missions. 

    SouthCom has described its position as one of readiness, not war. But this could change, especially with the much-anticipated 2025 national defense reviewexpected to prioritize countering the perceived threat of Chinese interference in the Western Hemisphere.

    And it is worth recalling that the U.S. has long maintained a light but steady military footprint in the region.

    Caracas has staged military displays of its own.

    Defense Minister Vladimir Padrino López announced on Sept. 15 three days of drills involving naval units, aircraft air-defense assets and militia participation. Maduro has declared “maximum preparedness” and threatened to mobilize a “republic in arms” if attacked. 

    If enacted, the state of emergency would be effective for 90 days and centralize military control in the office of the president. The aim is clear: to project resolve and raise the cost for Washington of any further escalation.

    Venezuela’s military is not negligible, but readiness has been eroded by decades of economic crisis, sanctions and maintenance shortfalls. It is no match for U.S. military dominance at sea or in the air, although it could inflict damage through asymmetric tactics and militia mobilization. 

    On the U.S. side, the means for coercion through targeted strikes, interdictions, cyberattacks and sanctions are already at hand. Further escalation may, however, hinge on a catalyzing event, such as an attack resulting in the killing of Venezuelan or U.S. military personnel. 

    Regionally, most governments have avoided taking sides. One exception is Colombian President Gustavo Petro, who at the United Nations General Assembly called for “criminal proceedings” over the recent U.S. strikes. 

    In the Caribbean, there is little appetite for hosting a U.S. invasion force. The president of Dominica noted in her speech at the General Assembly that “there is no place in the Caribbean for war.” One exception is Guyana, which is locked in a territorial dispute with Venezuala over the oil-rich Essequibo region and has welcomed U.S. security cooperation. 

    Yet, an attack on Venezuela or an attempt at regime change risks rallying the country’s allies. 

    First among them in the region is Cuba. Cuban intelligence and security advisers have long been embedded across Venezuela’s military and security services. This gives Maduro some resilience against internal coups and complicates U.S. efforts to precipitate elite defections from Maduro’s inner circle. 

    While expressing political support for Maduro, it is highly unlikely that Cuba would ever be in a position to supplement any Venezuelan combat forces given Havana’s own weak position, struggling economy and relatively modest military capabilities. 

    And despite fresh affirmations of solidarity and the continued presence of Russian “military experts,” Moscow also lacks the political military bandwidth for large, new deployments. Still, long-standing military and technical ties such as training, maintenance, weapons sales and selective systems support offer Maduro a modest but valuable hedge against external pressure. 

    Even a token port call or bomber overflight could add political friction – and pause for thought in Washington. Russia has sent nuclear-capable bombers to Venezuela in the past, and its navy made a publicized visit to La Guaira in July 2024. 

    One much more consequential factor could be the position of China. 

    Beijing plays a consequential role as a buyer of Venezuelan oil. As Western sanctions have set in, a growing share of Venezuelan hydrocarbon exports is now funneled through “shadow fleet” tankers and complex rerouting schemes, allowing crude to reach Chinese refineries despite sanctions and export restrictions. 

    Any U.S. campaign that disrupts these flows would hit Chinese refiners first. This would likely prompt Beijing to push back diplomatically and commercially. 

    In late September, China stressed that it “opposes the use of force” and decried external interference in Venezuela’s internal affairs – a clear rebuke of the U.S. military buildup. 

    The Chinese ambassador in Caracas has also conveyed solidarity to his host, emphasizing that Beijing will “firmly support Venezuela in safeguarding sovereignty, national dignity and social stability.” 

    China is offering diplomatic support but has stopped short of any pledge of force. 

    For now, America’s most likely path is, I believe, coastal policing and military pressure. At sea, this means the U.S. continuing to lead counternarcotics operations, but with Navy cover close at hand. The U.S. buildup could well boost underground opposition networks in Venezuela, increasing pressure on the Maduro regime from within.

    This will be paired with increased financial pressure in the form of sanctionsaimed at further squeezing Venezuela’s state oil industry, but calibrated to avoid a global energy shock. Measures also include restricting dollar-clearing and maritime insurance, blacklisting intermediaries and dark fleet tankers, and targeting front companies.

    Nonetheless, expectations of a military clash are edging upward. Several forecasters now put the odds of some form of U.S. strike against Venezuela before year’s end at roughly 1 in 3, with the chances rising further into 2026. 

    Yet the prospect of an outright invasion remains, I believe, remote. U.S. domestic politics may act as a brake: Opinion polls show most Americans oppose military action to topple Maduro, and an even larger majority reject the idea of a full-scale invasion.

    Even so, three factors could shape if and when Washington steps up its action: a deadly incident at sea involving civilians or U.S. personnel; hard evidence that Venezuelan officials are directly tied to large-scale trafficking to the U.S.; and regional governments lining up behind stronger action.

    While the odds of a strike and even regime change are rising, Washington’s strategy in the very near term appears to remain one of pressure without full commitment, using shows of force, sanctions and selective strikes to weaken Caracas while avoiding being dragged into a messy war or sparking an oil shock.

    This article is republished from The Conversation under a Creative Commons license. Read the original article.

    The Conversation

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Reemo continues its mission to secure enterprise remote access and becomes the first French cybersecurity provider to protect all remote access within a single platform. Reemo announces Bastion+, a next-generation bastion solution deployable without limits. “Companies don’t need another bastion. They need a global vision that remains simple and secure as infrastructure scales,” said Yann […]

    The post Paris, France, October 6th, 2025, CyberNewsWire appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Paris, France, October 6th, 2025, CyberNewsWire

    Reemo continues its mission to secure enterprise remote access and becomes the first French cybersecurity provider to protect all remote access within a single platform.

    Reemo announces Bastion+, a next-generation bastion solution deployable without limits.

    “Companies don’t need another bastion. They need a global vision that remains simple and secure as infrastructure scales,” said Yann Fourré, co-founder of Reemo.

    “With Bastion+, each user only sees the authorized sites and resources upon connection, policies are applied everywhere in a uniform way, and the solution offers unlimited scalability.”

    Designed for CISOs, Bastion+ unifies visibility and supervision of privileged access, consolidates logs and session recordings into a single console, and simplifies audit and compliance requirements.

    “Bastion+ is at the core of our mission to free companies from traditional remote access solutions, by opening up a world where security and performance coexist in perfect harmony,” added Bertrand Jeannet, CEO of Reemo.

    Why is this a first

    Bastion+ combines a global vision of privileged access with unlimited deployment scalability.

    Moreover, Bastion+ is natively integrated into the Reemo platform, which already offers, in a single interface, Remote Desktop, Remote Browser Isolation (RBI), third-party access security, and Restricted Information Systems (SI Diffusion Restreinte).

    With this full range of solutions, Reemo becomes the first French cybersecurity provider to secure all remote access within one unified platform.

    Availability

    Bastion+ is available starting today. Demonstrations available upon request.

    Reemo Bastion+

    About Reemo

    Reemo is a sovereign cybersecurity platform that secures all enterprise remote access to critical resources, with no compromise on performance.

    From remote desktops (Remote Desktop) to virtualized environments (DaaS/VDI), to web and business applications (RBI, third-party access, legacy apps), and even the most sensitive environments (Restricted Information Systems and bastion)… Reemo provides unified, granular, and traceable access.

    The company is ISO 27001 and SOC 2 certified across all operations. Users can learn more about Reemo on https://reemo.io.

    Contact

    Head of Marketing & Communications

    Florent Paret

    Reemo

    florent.paret@reemo.io

    The post Reemo Unveils Bastion+: A Scalable Solution for Global Privileged Access Management appeared first on Cyber Security News.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Over the weekend, President Donald Trump tried repeatedly to send the U.S. military into two more American cities—including to Portland, Oregon, “in direct contravention” of a judge’s order on Saturday—and against the wishes or requests of both states’ elected governors. 

    The state of Oregon sued the White House last week over Trump’s decision to send 200 Oregon National Guard troops to Portland following the president’s claim that the city is “ravaged” by war, with “ICE Facilities under siege from attack by Antifa, and other domestic terrorists.” The troops were scheduled to begin arriving in Portland early this week, prompting U.S. District Judge Karin Immergut to issue a ruling on the lawsuit Saturday. 

    “The President’s determination was simply untethered to the facts,” wrote Immergut, who was appointed by Trump. “There is not a legal basis to bring federalized National Guard members into Oregon,” she told the administration’s lawyers, stressing, “You have to have a colorable claim that Oregon conditions require it, but you don’t.”

    “This historical tradition boils down to a simple proposition: this is a nation of Constitutional law, not martial law,” Immergut said in her ruling. She added, “Defendants have made a range of arguments that, if accepted, risk blurring the line between civil and military federal power—to the detriment of this nation.”

    So on Sunday, Pentagon chief Pete Hegseth ordered 300 California National Guard troops to Oregon, which prompted California to join Oregon’s lawsuit against the administration’s alleged abuse of power. Hegseth’s decision to use California troops in this instance “is the legal equivalent of a child kicking a sibling after his mother says ‘violence is never acceptable, so I order you to stop hitting your brother,’” observed Liza Goitein of the Brennan Center for Justice. “If any other litigant pulled a stunt like this, they (and their lawyers) might well be facing sanctions.” 

    After an emergency hearing later Sunday, Immergut again froze the deployment of National Guard troops to Oregon for two weeks, and extended her freeze to cover all 50 states.

    Then Sunday evening, Trump ordered the Texas National Guard to “Illinois, Oregon, and other [unspecified] locations throughout the United States,” for 60 days (PDF), including “up to 400 members of the Texas National Guard for deployment in Portland, Chicago, and elsewhere, under Title 10, section 12406.” That is the same legal justification the White House used in June to order troops to protect immigration-enforcement officers in California. 

    Notable: Last month, District Judge Charles Breyer ruled that the June order violated the Posse Comitatus Act, which bans the military from conducting civilian law enforcement unless authorized by Congress—and that’s just what the troops were doing as they tagged along for patrols and carried out riot response as well as traffic and crowd control. “The ruling is historic, as it is the first time a court has issued an injunction to stop a violation of the Posse Comitatus Act of 1878,” wrote Joseph Nunn of the Brennan Center for Justice. However, the White House appealed Breyer’s ruling, which put a hold on his decision.

    Illinois Gov. JB Pritzker: “No officials from the federal government called me directly to discuss or coordinate” the 400 Guardsmen from Texas. “We must now start calling this what it is: Trump’s Invasion,” he wrote on social media Sunday night. “It started with federal agents, it will soon include deploying federalized members of the Illinois National Guard against our wishes, and it will now involve sending in another state’s military troops.” 

    “I call on Governor Abbott to immediately withdraw any support for this decision and refuse to coordinate,” Pritzker said. “There is no reason a President should send military troops into a sovereign state without their knowledge, consent, or cooperation,” he added, and said, “The brave men and women who serve in our national guards must not be used as political props. This is a moment where every American must speak up and help stop this madness.”

    But Texas Gov. Greg Abbott is all in, responding to Pritzker on social media: “I fully authorized the President to call up 400 members of the Texas National Guard to ensure safety for federal officials. You can either fully enforce protection for federal employees or get out of the way and let Texas Guard do it. No Guard can match the training, skill, and expertise of the Texas National Guard. They defend our country with pride. America must also know that Texas still has thousands of National Guard assisting with the Border security.”

    Reminder: Just four years ago, Abbott argued the federal government had practically no authority over his National Guard when it came to enforcing COVID vaccinations. 

    The state of Illinois is now suing the White House over this latest National Guard order, Gov. Pritzker announced today on social media. 

    Legal reax: “We are watching the adjudication of some of the most important constitutional issues of federalism, executive discretion, and judicial review since the 19th c[entury],” argues Lindsay Cohn of the U.S. Naval War College. She lists a series of possibly-applicable judicial precedents going back to 1827, and finds that the related matters “haven’t been adjudicated in a long time, and there is at least room in the jurisprudence to find that the earlier precedents are quite narrow.”

    Second opinion: “Texas proudly invading Illinois. It’s hard to describe the level of potential constitutional crisis here,” Bradley Moss said on social media. 

    One more thing: “Reuters took a closer look at violent crime in D.C. after President Trump began a show of force” in August, Brad Heath of Reuters reports. “Despite the big investment of federal resources, it's really hard at this point to see any dramatic changes.” Story and data, here

    Extra reading: 


    Welcome to this Monday edition of The D Brief, a newsletter dedicated to developments affecting the future of U.S. national security, brought to you by Ben Watson and Bradley Peniston. It’s more important than ever to stay informed, so thank you for reading. Share your tips and feedback here. And if you’re not already subscribed, you can do that here. On this day in 1884, the U.S. founded the Naval War College in Rhode Island. 

    Around the Defense Department

    Hegseth says the U.S. military has blown up a fourth alleged drug-hauling boat. On Friday, the SecDef tweeted that “four male narco-terrorists aboard the vessel” were killed “in international waters just off the coast of Venezuela.” 

    “Our intelligence, without a doubt, confirmed that this vessel was trafficking narcotics,” Hegseth wrote, offering no evidence. You can read his tweet and watch a video clip of an explosion, here.

    Reax: “If one man alone decides when and where America fights, we abandon the checks and balances that safeguard our democracy,” Sen. Jack Reed, D.-R.I., said in a statement.

    Sea routes from Venezuela to U.S. territory, mapped by Philip Bump, a former Washington Post data reporter.

    Hegseth fires Navy chief of staff, a Trump appointee who helped reorganize the service’s policy and budgeting offices. Jon Harrison had worked with Secretary John Phelan on the changes, which among other things sought to reduce the power of the Navy undersecretary. “The sudden ouster, according to two defense officials and a former defense official, follows the confirmation this week of Navy Undersecretary Hung Cao,” Politico reported Friday.

    Army’s Future Soldier Preparatory Course continues to boost recruiting. “Mr. Trump’s election win and a higher unemployment rate among people ages 16 to 24 could have played a small role in improving recruiting, Army officials said. The Army’s recent success, though, would not have been possible without the program at Fort Jackson. About 22 percent of the Army’s more than 61,000 new recruits this year came in through the Future Soldier Preparatory Course, a senior Army official said,” the New York Times reported off an August visit to the program.

    Rewind to a year ago, when the program helped the service break a two-year streak of missing recruiting goals. In 2024, the FSPC contributed some 13,000 soldiers, more than a quarter of the Army’s total recruits for the year, Defense One reported in September 2024.

    NGA wants to put its idle PCs to work. “Analysts will be plenty busy at the National Geospatial-Intelligence Agency’s new St. Louis campus, but they won’t use their powerful workstations around the clock. So General Dynamics Information Technology is helping NGA stitch together the high-end PCs so their unused compute power can be harnessed even when their humans are elsewhere,” reports Defense One’s Lauren C. Williams.

    Around the world

    A wave of Russian airstrikes across Ukraine. Early on Sunday, 53 ballistic and cruise missiles and 496 drones struck nine regions of the country, Ukrainian officials said, adding that the barrages appeared to target civilian infrastructure.

    At least five people died in Lviv, a western-Ukrainian city that had earlier in the war been seen as a haven from the fighting. Saturday’s attack was the largest in the region since the war began. AP reports, here.

    China is secretly bartering for Iranian oil, a financial lifeline for the regime. “Iranian oil is shipped to China—Tehran’s biggest customer—and, in return, state-backed Chinese companies build infrastructure in Iran,” the Wall Street Journal says in an exclusive report. “Completing the loop, the officials say, are a Chinese state-owned insurer that calls itself the world’s largest export-credit agency and a Chinese financial entity that is so secretive that its name couldn’t be found on any public list of Chinese banks or financial firms.” More, here.

    Zoom out: the scheme is just part of the world’s growing “shadow economy” that “are no longer peripheral nuisances but core strategic terrain,” Army Maj. Benjamin Backsmeier wrote in a recent op-ed for Defense One. “Trade executed outside regulatory, taxation, and enforcement frameworks prolongs wars, defangs sanctions, frays alliances, and helps rogue governments and groups survive and thrive. These flows have long been treated as problems for law enforcement, but military and defense policymakers and planners must increase their efforts to account for and stem them.” Read that, here.

    Lastly today: China’s infowar in the Philippines. Reuters has a 2,000-word deep dive on a 2021 campaign by a Chinese company that created fake social-media accounts to push narratives as Beijing’s naval forces ramped up efforts against the archipelagic nation—and worked to drive a wedge between Manila and Washington. Read that, here

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A threat actor has claimed responsibility for a significant data breach at Huawei Technologies, a multinational technology corporation based in China.

    The actor is reportedly attempting to sell what they allege is the company’s internal source code and development tools on a dark web forum.

    The post, which appeared in early October 2025, asserts that the breach resulted in the exfiltration of sensitive intellectual property.

    Details Of The Alleged Breach

    According to the threat actor’s post, the compromised data includes a wide range of internal assets. The actor specifically listed source code, development tools, build files, scripts, and technical manuals as being part of the stolen data package.

    An image of the forum post shows the actor asking for $1,000, with the price open to negotiation, and communication restricted to the Session messaging platform.

    Huawei Alleged Breach Claim
    Huawei Alleged Breach Claim

    The incident has drawn attention from cybersecurity intelligence groups that monitor dark web activities. This alleged incident adds to a long history of security scrutiny and espionage accusations leveled against Huawei.

    For years, the U.S. government and other Western nations have raised concerns that the Chinese government could use Huawei’s equipment for espionage.

    These concerns date back to at least 2012, when a U.S. House Intelligence Committee report warned that using Huawei’s technology could undermine U.S. national security interests.

    The company has also faced multiple allegations of intellectual property theft from competitors. Past security incidents have kept Huawei under a microscope.

    In 2019, reports emerged that Vodafone Italy had discovered hidden backdoors in Huawei equipment between 2009 and 2012, which could have granted unauthorized access to the carrier’s network.

    While Huawei described the backdoors as “technical mistakes” that were later fixed, the findings damaged the company’s reputation.

    More recently, in July 2025, a nationwide telecom outage in Luxembourg was reportedly linked to a cyberattack targeting Huawei routers, prompting a government investigation. The company has also been the target of state-sponsored hacking, with reports confirming that the U.S.

    National Security Agency (NSA) infiltrated Huawei’s servers in 2009 to find links to the Chinese military and steal source code. The full impact and authenticity of this latest claimed breach are still under investigation.

    If validated, the exposure of Huawei’s source code and internal tools could have far-reaching consequences, potentially exposing new vulnerabilities in its products and providing malicious actors with the means to compromise the company’s extensive global infrastructure.

    Follow us on Google News, LinkedIn, and X for daily cybersecurity updates. Contact us to feature your stories.

    The post Threat Actors Claim Breach Of Huawei Technologies Source Code and Internal Tools appeared first on Cyber Security News.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A Chinese company named the Beijing Institute of Electronics Technology and Application (BIETA) has been assessed to be likely led by the Ministry of State Security (MSS). The assessment comes from evidence that at least four BIETA personnel have clear or possible links to MSS officers and their relationship with the University of International Relations, which is known to share links with the

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶