• Security researchers from the Google Threat Intelligence Group (GTIG) have uncovered “Coruna,” a highly sophisticated iOS exploit kit responsible for compromising thousands of iPhones. Targeting iOS versions 13.0 through 17.2.1, the framework contains five complete exploit chains leveraging a staggering 23 vulnerabilities. What began as a tool for a commercial surveillance vendor in early 2025 […]

    The post Thousands of iPhones Compromised in Massive Hack via Coruna Exploit Kit with 23 Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a recently disclosed security flaw impacting Broadcom VMware Aria Operations to its Known Exploited Vulnerabilities (KEV) catalog, citing active exploitation in the wild. The high-severity vulnerability, CVE-2026-22719 (CVSS score: 8.1), has been described as a case of command injection that could allow an

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • President Donald Trump’s nominee to lead the Cybersecurity and Infrastructure Security Agency is leaving the Department of Homeland Security, where he has most recently been serving as an advisor in the U.S. Coast Guard, multiple people familiar with the matter told Nextgov/FCW and Defense One

    Sean Plankey is still expected to remain the nominee to lead CISA, said three of the people, who spoke on the condition of anonymity to discuss details of his departure. He is expected to leave the Coast Guard this week, one of the people said. Two other people familiar with the matter also said he’s expected to get an award ceremony in the coming days.

    Plankey held Energy Department cybersecurity roles in the first Trump administration and was nominated last year to lead the cyberdefense agency, but various congressional holds and other obstacles in the last year have slowed the confirmation process. He has been serving in his Coast Guard position for about the past year. 

    A Coast Guard spokesperson declined to comment and referred inquiries to DHS. 

    “We have no personnel matters to announce at this time,” a DHS spokesperson said. Plankey and CISA did not return a request for comment. 

    It’s not clear when or whether Plankey will be confirmed for the CISA position. On Tuesday, Senator Thom Tillis, R-N.C., threatened to slow all Senate proceedings if Homeland Security Secretary Kristi Noem doesn’t soon address inquiries from his office regarding immigration enforcement operations and disaster response funding in his state.

    “If I don’t get an answer that you’ve had a month to respond to, and the remaining ones … as of today, I’ll be informing leadership that I’m putting a hold on any en bloc nominations until I get a response, and in two weeks, if I don’t get a response, I’m going to deny quorum and markup in as many committees as I can until I get a response,” the senator said in an oversight hearing of DHS activities.

    Last week, CISA’s then-acting director Madhu Gottumukkala was moved to another role in DHS, while Nick Andersen—the previous executive assistant director for the cyber division—took his place helming the agency in an acting capacity.

    DHS’s funding has been lapsed for around two weeks without a clear indication that lawmakers are ready to reconcile on a funding deal. The war in Iran, which broke out Saturday, is expected to test U.S. cyber defenses, which have been impacted in the last year by significant workforce cuts at CISA and other key cyber units across the government.

    Mark Montgomery, a senior fellow at the Foundation for Defense of Democracies, said Tuesday evening he was aware of Plankey’s departure from DHS and added that he was an ideal choice to lead CISA.

    “[CISA] needs Senate-confirmed leadership immediately,” Montgomery said. “Whether he’s the perfect guy for every administration, I don’t know. He’s the perfect guy for this administration.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Army is looking to stretch its limited research and development dollars by teaming up with private industry to develop projects that can be used by the service as well as commercial customers.

    A request for information that went live Friday kicked off what the service is calling its Strategic Capital Initiative, seeking out private sector ideas for new operating models, public-private partnerships and contracting methods that can combine Army funding with private capital investment to tackle what the service estimates is a $150 billion backlog of needed infrastructure updates. 

    “The ask to industry is: Help us solve our problems. But in a way where they can get return on their investment that is not reliant solely on the Army as a customer, because then you ultimately come back to the appropriated funds issue,” Dave Fitzgerald, the Army’s chief operating officer, told reporters Tuesday.

    Rather than figure out what it wants and then put out specific requests, the Army has a list of areas it wants to work on to help direct some of the pitches. They are:

    • Energy resilience and dominance
    • The organic industrial base
    • Strengthening logistics and supply chains
    • Real assets and facilities utilization
    • Advanced and flexible manufacturing and technology adoption
    • Critical minerals and research development

    “What we're trying to do is let them see what we think we need across our entire footprint, and they may be able to come up with a model that kind of bundles some of that, or networks some of those things together in a way that we just haven't arrived at yet,” Fitzgerald said.

    The Army has been trying to save money by using commercial parts in some of its programs, including the infantry squad vehicle, which is built off of the Chevy Colorado pick-up truck’s chassis and makes use of that existing commercial production line.

    Now the service is looking for more of those types of partnerships, Fitzgerald said, where a contractor can put up much of the initial investment and then be able to sell the final product commercially as well as to the Army. 

    “So we're looking for models that present a diversified customer base, because I think that de-risks it for the taxpayer as well as it de-risks the investment for industry,” he said. “Certainly, we are looking to de-risk the initial investment, either by becoming a long-term partner through a co-investment model, or signing up as an anchor customer for things that we know that we need, that align to one of these six areas.”

    This includes investing in securing supply chains for resources like rare-earth metals, which the Army needs in order to build things like brushless motors for unmanned aerial systems, but that have wide commercial use as well. The Army and a private investor could team up to source them. 

    “Heavy rare earths that go into small drones, but they also go into the motors that make your car window go up,” he said. “So that's, I think, how we kind of unlock the dual-use potential.”

    The idea is that the Army can save some of its investment funds with these public-private partnerships, then use its appropriations for must-do projects that don’t have a commercial purpose, like building bigger hangars for its forthcoming MV-75 tiltrotor aircraft.

    “I know for a fact that we're never going to be able to dig out of our current infrastructure backlog without a different approach,” Fitzgerald said. “I think how much remains to be seen. But I am optimistic.”

    The RFI is open until April 2. From there, the goal is to review proposals and get to work on the best ones right away. 

    “I think we want shovels in the ground by summer,” Fitzgerald said. “I don't know what that looks like, if it's a [letter of intent] signed, if it's an actual shovel going in the ground—it's going to be different.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Pentagon’s Friday move to label Anthropic’s AI models a “supply-chain risk” likely won’t stand up in court and could result in a wave of expensive legal judgments, according to legal experts and officials who spoke with Defense One. They described the move as legally “dubious.” A defense official who manages information security called the designation “ideological” rather than an accurate description of risk.

    Quick recap: Last week, after AI company Anthropic and the Department of Defense failed to reach an agreement on AI safety standards, Defense Secretary Pete Hegseth said on X that he was “directing the Department of War to designate Anthropic a Supply-Chain Risk to National Security” and that, “Effective immediately, no contractor, supplier, or partner that does business with the United States military may conduct any commercial activity with Anthropic.” Hegseth’s comments followed President Trump’s social post directing all federal agencies to stop using Anthropic. Many have already stopped using its software.  

    Hegseth also said in his post that Anthropic will continue to provide services to the Defense Department for six months, “to allow for a seamless transition” to another frontier AI model.

    But no one knows if the statement will result in an actual, legal designation or if it was just a negotiating tactic. 

    “We have not yet received direct communication from the Department of War or the White House on the status of our negotiations,” Anthropic said in its own statement Friday.

    The move to bar virtually any company that works with the Defense Department from also working with Anthropic could have devastating effects for the AI firm. Adam Conner, the vice president for technology policy at The Center for American Progress, wrote on X that Anthropic relies on large-scale cloud computing providers like Amazon Web Services to train models and host services. 

    “It’s the equivalent of the death penalty for Claude since AWS and Google Cloud could no longer host Anthropic,” Conner said. 

    And the penalty doesn’t fit the alleged crime, several sources told Defense One.

    The Pentagon’s stance is that allowing private companies to dictate terms of use for their products to the Pentagon could create risks or delays for soldiers during operations.

    However, a defense official told Defense One that elements of U.S. Central Command used Anthropic, among other AI tools, as part of Operation Epic Fury. The official said the military had already spent hundreds of hours training the model and did so under rigorous human oversight. While they emphasized that CENTCOM has many AI tools and the move will not impact operations, they noted that the idea that it would be quick or easy to replace Anthropic’s model with one from another frontier AI company does not reflect reality.

    “If a command trained more off of Claude than OpenAI’s ChatGPT, for example, putting combat data against a particular model, that model is going to outperform another provider just because you've trained on it for however long,” the official said.

    Hegseth’s statement suggests the supply-chain risk designation stems from the belief that “Anthropic’s stance is fundamentally incompatible with American principles,” rather than a failure of the model to operate as designed, leaked intelligence, or technical vulnerability.

    Anthony Kuhn, a managing partner at the New York law firm Tully Rinckey, told Defense One that designation, accompanied by the threat against Anthropic’s corporate and commercial partners, could expose the Pentagon to lawsuits—not only from the company, but also from the defense contractors it is threatening—if the Pentagon cannot prove the risk is real.

    That’s because the definition of what constitutes a supply-chain risk is not up to the administration, Kuhn said, it is a matter of law: specifically Title 10, Section 3252. “It deals with any type of potential sabotage or maybe creating a back door in an IT system, or any of those risks. And in this situation, he's not expressing a risk. In fact, they're going to continue using the organization’s software for the next six months,” Kuhn said. Furthermore, Kuhn noted that under that law, Hegseth would not have the authority to bar private companies from working with one another.

    Another defense official who specifically evaluates supply-chain and other potential intelligence threats told Defense One “there is no evidence of supply-chain risk” from Anthropic’s model. The official called the designation “ideologically driven.”

    And defense contractors that obey the administration’s demand and cut ties with the company could open themselves to lawsuits, Kuhn said, despite not issuing the ban themselves. While such a scenario would depend on venue, jurisdiction, and other factors, there exists a legal doctrine called joint and several liability which “imposes on each wrongdoer the responsibility for the entire damages awarded, even though a particular wrongdoer’s conduct may have caused only a portion of the loss,” according to a 2019 Supreme Court opinion.

    If Anthropic were to take that route, Kuhn said, “They would likely file suit against everybody who's involved and just get their money one way or another, and then leave it up to everyone to fight about who owed them the money.” 

    Anthropic has vowed to challenge the designation in court, should it become official, but did not comment on specific legal action the company might take.  

    The situation represents a significant escalation of what is essentially a philosophical disagreement. The “stance” in question relates to Anthropic’s preferred safeguards for the use of AI—safeguards that prohibit the use of the model for hypothetical autonomous weapons and mass surveillance of the U.S. population. These are two use cases that “have never been included in our contracts with the Department of Defense,” and “we believe they should not be included now,” the company said in a Feb. 26 statement.

    The apparent move to damage the company rather than simply walk away is already chilling relations between the Pentagon and the technology firms it is trying to attract, Jessica Tillipman, an associate dean at George Washington University Law School, told Defense One.

    “If the government just thinks it's going to keep trying these outlandish legal theories as a means to inflict maximum damage… I don't know how any company makes a major move right now, given this," Tillipman said. "Everyone looks at this and goes, ‘This is so legally dubious.’”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Threat hunters have called attention to a new campaign as part of which bad actors masqueraded as fake IT support to deliver the Havoc command-and-control (C2) framework as a precursor to data exfiltration or ransomware attack. The intrusions, identified by Huntress last month across five partner organizations, involved the threat actors using email spam as lures, followed by a phone call from

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Amid airspace and airport closures throughout the Middle East, the U.S. is urging Americans to depart immediately from more than a dozen countries in the region as Israeli Prime Minister Benjamin Netanyahu and President Trump’s war on Iran approaches its fifth day. 

    The U.S. military’s death toll rose to six on Monday after a strike on a poorly-protected tactical operations center in Kuwait, as CBS News reported Tuesday. Two other Defense Department employees were injured in Bahrain following a drone strike on a hotel there, according to the Washington Post

    And more than 780 people have been killed inside Iran since the U.S. and Israel launched their attack early Saturday, according to al-Jazeera reporting Tuesday. In an apparent effort to assert some leverage, Iran’s military announced Monday it has closed the Strait of Hormuz and any vessel trying to pass through would be attacked. The closure has sent global oil and gas prices soaring, Reuters reported Tuesday morning. That includes an 11-cent spike across the U.S. overnight, according to AAA. Investors are increasingly worried the war could stoke inflation as global markets tumbled Tuesday, the New York Times reports

    Israel sent more troops into Lebanon Tuesday after Hezbollah militants said they are ready for an open war. Relatedly, “Beirut’s southern suburbs were subjected to a series of strikes in the early afternoon Tuesday that came without warning, and the Israeli military later said it targeted Hezbollah officials,” the Associated Press reports

    The U.S. Embassy in Jerusalem announced Tuesday that it “is not in a position at this time to evacuate or directly assist Americans in departing Israel,” according to an alert posted to social media. By contrast, the British, Germans, Chinese and Indians are all sending planes to evacuate their citizens from the region. 

    The State Department closed its embassies in Saudi Arabia and Kuwait Tuesday after Iranian drone attacks struck those facilities. “We feel abandoned,” retired U.S. Army Maj. Gen. Randy Manner told CNN Monday amid the abrupt and unplanned evacuation advisories. The State Department is “in survival mode, quite frankly, because as we know, the administration reduced their budgets by almost one half over the past year,” he said. “So this is a difficult situation for people who are not used to being in a combat situation. And that, of course, is, quite frankly, probably 99% of the travelers that are here.” 

    After giving a variety of answers to nearly a half-dozen news outlets Sunday, Trump said Monday he won’t rule out sending U.S. troops into Iran “if necessary,” he told the New York Post. “I don’t have the yips with respect to boots on the ground. Like every president says, ‘There will be no boots on the ground.’ I don’t say it. I say ‘probably don’t need them,’ [or] ‘if they were necessary,’” he said Monday ahead of an at-times mumbling appearance before reporters at the White House. 

    By the way: Only 12% of Americans favor sending U.S. ground troops into Iran, and 60% said they do not think Trump has a clear plan for handling the situation. Another 62% think he should get congressional approval for any further military action. That's according to new survey results published Monday by CNN. 

    Update: Trump was allegedly “dragged” into Israel’s war against Iran because he thought “he had no choice but to join a strike that Israel would launch…since America would be dragged in anyway.” That’s according to the New York Times, reporting Monday after Trump spoke with right-wing podcaster Tucker Carlson and following a congressional briefing from Secretary of State Marco Rubio and CIA Director John Ratcliffe just a few days before the war. 

    Rubio echoed that sentiment Monday, telling reporters, “We knew that if Iran was attacked, even by someone else, they would immediately come after us.”

    Second opinion: “That's not the definition of preemptive” Beth Sanner, a former deputy director of National Intelligence told CNN’s Jake Tapper on Monday. “This is all based on the idea that, number one, we can't control Israel, and number two, our entire war with Iran is because of what Israel is doing. In other words, Israel is the tail wagging the dog.”

    Thousands of Iranians attended a funeral procession Tuesday for 175 people killed in an airstrike Saturday on an elementary school in the southern town of Minab. It’s still unclear who exactly targeted the school. The Times has a bit more in video, here, and in reporting Sunday, here

    Coverage continues after the jump…


    Welcome to this Tuesday edition of The D Brief, a newsletter focused on developments affecting the future of U.S. national security, brought to you by Ben Watson with Patrick Tucker. It’s more important than ever to stay informed, so we’d like to take a moment to thank you for reading. Share your tips and feedback here. And if you’re not already subscribed, you can do that here. On this day in 1938, oil was discovered in Saudi Arabia.

    New: Trump alleges the U.S. has “a virtually unlimited supply” of munitions and “Wars can be fought ‘forever,’ and very successfully, using just these supplies,” he said last night, writing four minutes before midnight on social media. 

    Just one day prior, “Inside the Pentagon, and among some members of the Trump administration, there was deepening concern Sunday that the Iran conflict could spiral out of control,” the Washington Post reported

    Spin zone: The White House circulated talking points for Republicans on Monday, which advised telling the American public the U.S. military is conducting “major combat operations” against Iran—as opposed to the U.S. actually being “at war” with Iran. Independent journalist Ken Klippenstein shared that document on social media, here

    In video: The U.S. military released at least three airstrike reels over the last 24 hours featuring airstrikes against Iranian people and military assets. Those include naval strikes, exposed missiles destroyed, and mobile missile-launchers attacked in U.S. strikes. 

    Ally watch: U.S. military aircraft departed Spain over the weekend after the government there refused the use of its military bases for the war against Iran. Reuters has more. On the other hand, the Brits reversed their position and opened their airbases to U.S. military use against Iran. The BBC has more on that.

    NATO chief Mark Rutte is working to keep Turkey close after Ankara’s leader said he’s trying to broker an agreement to cease the U.S.-Israeli war against Iran, Rutte said Monday on social media. Earlier Monday, Turkish President Tayyip Erdogan called the attacks against Tehran a “clear violation of ​international law,” and “As their neighbour and brother, we share the pain of the ​Iranian people.” Rutte later praised Trump in a brief appearance on Fox TV Monday. 

    Also on Fox TV Monday, Sen. Markwayne Mullin, R-Okla., told viewers, “War is ugly. It smells bad. If anybody has ever been there and been able to smell the war and taste it and fill it in your nostrils and hear it, it's something that you'll never forget.” While Mullin is on the Armed Services Committee, he has never served in the military. 

    “Fortunately, we have President Hegseth,” the senator said, apparently confusing the defense secretary’s title, and not once. “President Hegseth has been there,” Mullin assured viewers. He also later confused Iran with Iraq during a separate Fox Business appearance, suggesting the “Iraqi people” should overthrow their government before he corrected himself.

    In missile-defense developments: Supply chains are exciting again. The Israeli military assessed that Iran had 2,500 ballistic missiles and was accelerating production, the Times of Israel reported on Sunday. By Monday, Iran “had fired at least 165 ballistic missiles, two cruise missiles, and 541 [one-way attack] drones at the UAE. Another 97 ballistic missiles and 283 OWA drones targeted Kuwait,” according to public statements assembled by Derek Bisaccio of Forecast International. 

    The UAE is projected to exhaust its interceptor missile stock within one week at the current rate of fire, and Qatar within four days; both are urgently seeking additional military support from the United States and seeking drone and air defense capabilities from Italy, Bloomberg reported. 

    The U.S. is considering relocating Korea-based THAAD and Patriot batteries to the Middle East, the Chosun Daily reported Tuesday.

    Iran likely possesses a “larger number of Shaheds” than the 2,000 ballistic missiles it was estimated to have retained after last June’s conflict with the U.S. and Israel, according to analysis by Bloomberg Economics defense lead Becca Wasser. 

    The U.S. produced only about 600 Patriot (PAC-3) missiles in 2025, according to Wasser, citing industry numbers. A Friday report by the Financial Times said that the U.S. had fired 150 last June during the brief conflict between Israel and Iran. The report quotes Center for New American Security fellow Stacie Pettyjohn assessment that the U.S. could “easily” spend “a year’s worth” of munitions in just a few days. And, at a cost of around $4 million a-piece, they are far costlier than Shahed-136 drones. Iran is limited in its ability to produce those and to secure parts. But Russia, should it decide to assist Iran, can produce 18,500 a year. Read more from our Saturday analysis

    Worth noting: The United States also has interceptor options beyond expensive PAC-3 systems, such as AGR-20 Advanced Precision Kill Weapon System, or APKWSs, which are easier and cheaper to produce. But they are not “unlimited” either.

    Related reading: 

    Around the world

    Afghan and Pakistani forces clashed again Tuesday in what is now the fifth consecutive day of fighting between the two countries, AP reports from Islamabad. More than 40 locations were attacked along both the northern and southern portions of the nations’ borders, Pakistani officials said. Both countries have claimed enormous casualties in the fighting, and each nation strongly disputes the other’s public estimates. More, here

    In Africa, the U.S. just sanctioned the Rwandan military for allegedly violating a peace agreement in the Democratic Republic of Congo. That conflict is one of the 8 wars Trump has repeatedly and falsely claimed he’s ended, as CNN pointed out following his recent State of the Union address. 

    In a new first, France said it will deploy nuclear-armed jets in allied nations across Europe, President Emmanuel Macron announced Monday. He called it “forward deterrence,” and said in a speech, “To be free, one needs to be feared.” 

    Background: “The speech primarily aimed to spell out how French nuclear weapons fit into Europe’s larger security posture in the wake of new questions raised by the Russian invasion of Ukraine and recurring tensions with US President Donald Trump over Ukraine, Greenland and NATO,” France24 reports

    Macron also vowed to increase France’s nuclear arsenal, citing “a period of geopolitical upheaval fraught with ⁠risk.” AP reports “It will be the first time France increases its nuclear arsenal since at least 1992.” 

    The leaders of Germany and Poland welcomed the moves, with Warsaw’s Prime Minister Donald Tusk writing on social media, “We are arming up together with our friends so that our enemies will never dare to attack us.” 

    Around the Pentagon

    Update: DOD’s “vibes-based” AI policy. OpenAI on Friday announced it had reached an agreement with the Pentagon involving “more guardrails than any previous agreement for classified AI deployments,” including Anthropic’s for using the company’s AI models in classified environments. 

    The ongoing fight inside the Pentagon regarding frontier AI is mostly a “fight about vibes and personalities masquerading as a policy dispute,”  Michael Horowitz, a former Defense Department official who worked on AI policy, told the Wall Street Journal Monday. 

    Background: In its statement last week, OpenAI said its “multi-layered approach” stipulates that “cleared OpenAI personnel are in the loop,” when it comes to the company’s cloud-deployed AI tools. The company says that they are not deploying “our models on edge devices” where operators could use them for targeted strikes. “And we have strong contractual protections. This is all in addition to the strong existing protections in U.S. law.”

     Additional reading: 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • San Francisco, CA, United States, March 3rd, 2026, CyberNewswire Archipelo and Checkmarx today announced a technical partnership focused on correlating application vulnerability findings with development-origin context within modern software delivery workflows. Application security platforms identify and prioritize vulnerabilities across repositories and pipelines. These systems indicate where risk exists but typically do not capture how a […]

    The post Archipelo and Checkmarx Announce Partnership Connecting AppSec Detection with DevSPM appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Every CISO knows the uncomfortable truth about their Security Operations Center: the people most responsible for catching threats in real time are the people with the least experience. Tier 1 analysts sit at the front line of detection, and yet they are also the most vulnerable to the cognitive and organizational pressures that quietly erode SOC performance over time. The Paradox at the Gate:

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The threat actor behind the recently disclosed artificial intelligence (AI)-assisted campaign targeting Fortinet FortiGate appliances leveraged an open-source, AI-native security testing platform called CyberStrikeAI to execute the attacks. The new findings come from Team Cymru, which detected its use following an analysis of the IP address (“212.11.64[.]250”) that was used by the suspected

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶