1010.cx

  • GhostPoster Malware Targets Chrome Users via 17 Rogue Extensions

    ·

    , ,

    A sophisticated malware campaign has compromised users of Chrome, Firefox, and Edge by deploying 17 malicious extensions that employ advanced steganography techniques to evade detection. Collectively downloaded more than 840,000 times, the GhostPoster operation represents one of the most technically mature and persistent browser extension threats documented to date. The GhostPoster campaign leverages an uncommon […]

    The post GhostPoster Malware Targets Chrome Users via 17 Rogue Extensions appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • How Security Teams Use IP Location and DNS History In Cybercrime Investigation

    ·

    In many security teams, a cybercrime investigation often begins without a complete picture. It starts with a small signal. A suspicious login. An unexpected outbound connection. A single alert that does not look right. From that moment, investigators need context. Logs alone show what happened, but not who is behind it or why it matters. […]

    The post How Security Teams Use IP Location and DNS History In Cybercrime Investigation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Black Basta Ransomware Leader Added to EU Most Wanted and INTERPOL Red Notice

    ·

    Ukrainian and German law enforcement authorities have identified two Ukrainians suspected of working for the Russia-linked ransomware-as-a-service (RaaS) group Black Basta. In addition, the group’s alleged leader, a 35-year-old Russian national named Oleg Evgenievich Nefedov (Нефедов Олег Евгеньевич), has been added to the European Union’s Most Wanted and INTERPOL’s Red Notice lists, authorities

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Google Vertex AI Flaw Lets Low-Privilege Users Escalate to Service Agent Roles

    ·

    , , , ,

    Security researchers have discovered critical privilege escalation vulnerabilities in Google’s Vertex AI platform that allow attackers with minimal permissions to hijack high-privileged Service Agent accounts. The flaws affect the Vertex AI Agent Engine and Ray on Vertex AI, where default configurations enable low-privileged users to access powerful managed identities with project-wide permissions. As enterprises rapidly […]

    The post Google Vertex AI Flaw Lets Low-Privilege Users Escalate to Service Agent Roles appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • OpenAI to Show Ads in ChatGPT for Logged-In U.S. Adults on Free and Go Plans

    ·

    OpenAI on Friday said it would start showing ads in ChatGPT to logged-in adult U.S. users in both the free and ChatGPT Go tiers in the coming weeks, as the artificial intelligence (AI) company expanded access to its low-cost subscription globally. “You need to know that your data and conversations are protected and never sold to advertisers,” OpenAI said. “And we need to keep a high bar and give

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Critical XSS Vulnerabilities in Meta Conversion API Enable Zero-Click Account Takeover

    ·

    , , , ,

    Security researchers have uncovered two critical cross-site scripting (XSS) vulnerabilities in Meta’s Conversions API Gateway that could enable attackers to hijack Facebook accounts on a massive scale without any user interaction. The flaws affect Meta-owned domains, including facebook.com and meta.com, as well as potentially 100 million third-party deployments of the open-source gateway infrastructure. Understanding the […]

    The post Critical XSS Vulnerabilities in Meta Conversion API Enable Zero-Click Account Takeover appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Researchers Breach StealC Infrastructure, Access Malware Control Panels

    ·

    , , ,

    Criminal infrastructure often fails for the same reasons it succeeds: it is rushed, reused, and poorly secured. Security researchers recently demonstrated this vulnerability by exploiting the very malware infrastructure designed to steal victims’ credentials. StealC Malware and Its Infrastructure Weaknesses StealC is an infostealer malware distributed under a Malware-as-a-Service (MaaS) model since early 2023. The […]

    The post Researchers Breach StealC Infrastructure, Access Malware Control Panels appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Windows 11 January Update Sparks Widespread Shutdown Complaints

    ·

    , ,

    Microsoft’s latest security update for Windows 11 has triggered an unexpected problem affecting enterprise users: PCs equipped with Secure Launch are unable to shut down or hibernate properly. Instead of powering off, affected devices restart automatically, disrupting workflows and forcing users to work around the issue until a fix arrives. Secure Launch Devices Face Shutdown […]

    The post Windows 11 January Update Sparks Widespread Shutdown Complaints appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Trump’s ‘battleship’ could be most expensive US warship in history

    ·

    The first Trump-class “battleship” ordered up by the White House could cost as much as $22 billion, and could cut into the Navy’s plans for next-generation destroyers, Congressional researchers said Thursday.

    An early analysis by the Congressional Budget Office indicates that the BBG(X) could cost between $15 billion and $22 billion, depending on weight and other decisions, CBO analyst Eric Labs said during a presentation at the Surface Navy Association symposium outside Washington, D.C.

    “You're talking about a lead ship in the range of $18 to $19 billion for the 35,000-ton displacement, north of $20 billion if the displacement ends up being higher,” Labs said.

    That would make the BBG(X), which Trump announced in December, one of the most expensive ships in U.S. history—more than the $13 billion aircraft carrier Ford, which came in 30 percent over budget. 

    Labs speculated that subsequent Trump-class warships could cost somewhere between $10 billion and $15 billion, depending on the size of the vessels and under ideal labor conditions. In his presentation, he noted that the U.S. shipbuilding workforce, which has not grown since 1990, is too small to handle even the Navy’s current plans.

    “There's a lot of reasons to think that those numbers are not going to be correct. I think it's a starting point,” Labs said. “There are a number of factors that are going to play in that lead me to conclude that the ship might be more expensive than what I've said so far … and there's reasons to think why they could be less expensive.”

    The vessel is pitched as a cornerstone of the president’s “Golden Fleet,” announced after the Navy cancelled its Constellation frigate program in November and subsequent launched a new frigate effort. 

    Congressional researchers also wonder what the battleship program means for the Navy’s next-generation guided missile destroyer, or DDG(X), program. Navy officials have suggested that the former will replace the latter: “The battleship took the DDG(X) concept and it's put that on steroids, under the assumption that the counter-targeting efforts of the Navy will protect it and make it survivable,” Chief of Naval Operations Adm. Daryl Caudle said on Wednesday.

    But what happens if a future administration cancels a giant warship that many naval experts have called impractical?

    “I think it's worth asking the question if at some point, for some reason, there's a change of heart on the battleship program a few years from now, then what will be the impact of the time loss on the DDG(X),” Ronald O’Rourke, a naval affairs analyst for the Congressional Research Service, said during Thursday’s presentation

    The DDG(X) and the Constellation frigate programs have been under heavy scrutiny for inaccurate cost estimates and running behind schedule. To avoid similar pitfalls, O’Rourke said, Congress should also consider whether the starts of both the BBG(X) and the frigate programs have received sufficient analysis—particularly since their announcement caught some service officials off guard.

    “It's at least worth asking the question and understanding whether the program came first and the analysis came later or not,” he said. 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • CNO drops hints about forthcoming ‘Fighting Instructions’ strategy

    ·

    The U.S. Navy is in its overhaul era: new warfighting strategy, new ways of doing business, new ships, and more ships ready to deploy. The chief of naval operations previewed his soon-to-be-unveiled “Fighting Instructions” on Wednesday, another initiative to follow 2025’s Golden Fleet announcement and Naval Sea Systems Command’s plan to get 80 percent of the fleet deployable by 2027.

    Adm. Daryl Caudle plans to officially roll out “Fighting Instructions” in the near future, a defense official told Defense One.

    “That document will be my strategy for naval operations going forward,” Caudle said during a speech at the Surface Navy Association symposium outside Washington, D.C. “It will explain how I view the Navy as the joint-force hedge for achieving our vital national interest.”

    The “hedge strategy” within Fighting Instructions will balance Navy posture and investments against a range of potential threats.

    “At its core, the Navy is already a collection of hedges,” Caudle said. “Navy special warfare is our hedge against low-intensity, irregular warfare. Our ballistic missile submarines and E-6B Mercuries are our hedge against nuclear and strategic attack. And when crisis erupts or conflict breaks out, the Navy is the joint-force hedge—the ultimate hedge, able to move fast, stay forward and deliver sovereign options from the sea.”

    The Golden Fleet, anchored by the new Trump-class battleship, aims to deliver the largest Navy—by tonnage, if not by ship count—since World War II.

    “The Golden Fleet will give our combatant commanders and our president what they need for the fight of the future,” Caudle said. “It will also give our sailors the warfighting tools they deserve for the fights they will have to wage.”

    At the same time, the Navy is working to speed up its shipbuilding process while making its roughly 300 existing commissioned ships more available.

    The service has 90 ships under contract to be built, Vice Adm. Jim Downey, NAVSEA’s commander, said Thursday at the SNA symposium, with 57 under construction, and 52 existing ships in maintenance availabilities. 

    Keeping those maintenance periods from going over schedule is the cornerstone of NAVSEA’s plan to get 80 percent of ships deployable at any given time. In the strategy’s first year, according to the head of Navy Regional Maintenance Centers, the goal was to get 71 percent of ships undergoing maintenance in service-owned shipyards finished on schedule. 

    “I got 41 percent, so we missed the mark,” Rear Adm. Dan Lannamann said. “We reset the mark for this year. I'm looking at north of 60 percent, and I'm on plan to make that.”

    The key to bringing up those numbers has been doing more planning ahead on what will be fixed during maintenance periods, including more required repairs and replacements, rather than waiting to open up a ship until it gets to the yard, and then finding out it needs months more work than expected.

    The service is also working to award contracts for maintenance periods much earlier, to give shipyards plenty of time to order parts and hire staff so that they are ready to go as soon as the ship pulls in.

    “Just a couple of years ago, our standard for awarding a maintenance contract was…60 days before the start of a maintenance availability,” said Rear Adm. Andrew Biehn, NAVSEA’s director of surface ship maintenance. “We heard loud and clear from industry that 60 days was not enough time to plan and prepare for a successful maintenance period.”

    His office is working on getting that standard to 180 days, he said, with last year’s average sitting at 134. As recently as last week, he added, they awarded a maintenance contract for the amphibious assault ship Iwo Jima 228 days ahead of time.

    Speaking of big-deck amphibs, another piece of the Navy’s readiness overhaul has been extending service life for some ship classes, hoping to avoid a capability gap as new ships come online.

    Last fall, the CNO approved a five-year extension for the amphibious assault ship Wasp, the Navy’s director of expeditionary warfare said on Tuesday. Next the service will study the feasibility of extending the service lives of the entire seven-ship Wasp class, Marine Brig. Gen. Lee Meyer said.

    “Maintenance and modernization of our biggest warship fleet go hand in hand to ensure that the Navy-Marine Corps team continue to support the CNO’s hedge strategy,” Meyer said.

    The service has also been able to extend service life for 17 ballistic missile destroyers, Biehn said, with shorter maintenance availabilities that extend the time between full on dry dock overhauls to every six years.

    “Based on guidance from the CNO, [Surface Maintenance Engineering Planning Program] is reviewing the class maintenance plans for all surface ship classes, to help us replicate the success that we've had with DDGs across the entire fleet,” Biehn said.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶