• Cybersecurity researchers have uncovered a sophisticated AsyncRAT campaign exploiting Cloudflare’s free-tier services and TryCloudflare tunneling domains to evade detection while delivering remote access trojan payloads through multi-stage infection chains that leverage legitimate infrastructure. Threat actors behind this AsyncRAT operation are weaponizing Cloudflare’s trusted infrastructure to host WebDAV servers, effectively masking malicious activities under legitimate domains […]

    The post AsyncRAT and the Misuse of Cloudflare Free-Tier Infrastructure: Detection and Analysis appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A critical remote code execution vulnerability has left over 100,000 n8n workflow automation instances exposed to potential cyberattacks. The Shadowserver Foundation disclosed that 105,753 vulnerable instances were identified on January 9, 2026, representing nearly half of all detected n8n deployments. Attribute Details CVE ID CVE-2026-21858 CVSS Score 10.0 (Critical) Vulnerability Type Remote Code Execution (RCE) […]

    The post Over 100,000 Internet-Exposed n8n Instances Vulnerable to RCE Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A high Cross-Site Scripting (XSS) vulnerability has been discovered in Angular’s Template Compiler, potentially exposing millions of web applications to malicious JavaScript execution. The flaw, tracked as CVE-2026-22610, affects multiple versions of Angular’s core packages and carries a High severity rating with a CVSS score of 7.3/10. Attribute Details CVE ID CVE-2026-22610 Severity High (CVSS 4.0: 7.3/10) Vulnerability […]

    The post New Angular Vulnerability Allows Attackers to Execute Malicious Payloads appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Gogs, a self-hosted Git service, to its Known Exploited Vulnerabilities catalog, warning that the flaw is being actively exploited in the wild. Critical Vulnerability Details Tracked as CVE-2025-8110, the vulnerability is a path-traversal flaw in Gogs’ improper symbolic link handling in the PutContents […]

    The post CISA Alerts on Actively Exploited Gogs Path Traversal Flaw appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A sophisticated malware campaign targeting cryptocurrency traders has been uncovered by Socket’s Threat Research Team, revealing a malicious Chrome extension designed to steal MEXC exchange API credentials and enable unauthorized account control. The malicious extension operates by programmatically creating new MEXC API keys, enabling withdrawal permissions without user knowledge, and exfiltrating the resulting credentials to […]

    The post Malicious Chrome Extension Steals Wallet Credentials, Enables Automated Trading Abuse appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A new experimental tool called InvisibleJS has emerged on GitHub, demonstrating how JavaScript source code can be completely hidden from human view while remaining fully executable. Created by developer oscarmine, this proof-of-concept obfuscation technique leverages zero-width Unicode characters to encode executable payloads that appear as blank files to the naked eye. How InvisibleJS Works InvisibleJS employs steganographic […]

    The post InvisibleJS: Executable ES Modules Hidden in Plain Sight with Zero-Width Characters appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Can quantum physics enable better, cheaper, faster satellite photos? In a month or two, a startup will test a “quantum camera” aboard an orbital telescope. If it works, it could slash the cost of missile defenses and give smaller NATO allies and partners spy-satellite capabilities that were once exclusive to major powers.

    Funded in part by NASA and DARPA, the Boston-based Diffraqtion is testing a radically different way to make images from photons.

    You might think that the cameras on the world’s most expensive satellites are fundamentally different from what your grandfather used to take old movies. But whether using chemicals and paper or chargeable transistors on a circuit, the process of deriving images from the behavior of photons has changed little in more than a century. That is one reason why space-based image collection—especially at high resolution—is incredibly expensive.

    It’s also why Johannes Galatsanos, Diffraqtion’s co-founder and CEO, uses the term “quantum camera” rather than “photography.”

    “You basically have light coming through a lens; it hits a sensor, and then that sensor takes a JPEG, an image, and then you can view it… or you can run AI on top, right, and detect things,” Galatsanos said. “Whether in space with high-resolution digital cameras or old-fashioned pinhole cameras, that process hasn’t [changed].”

    That traditional method limits what can effectively be photographed based on diffraction, the process by which light beams pass through an aperture. It’s also a reason why high-resolution imaging satellites, like the WorldView-3, are large and heavy: like a telescope, they are mostly glass lenses and empty space. This is a reason why launches cost an average of about $50 million per satellite, and why why only a few countries have access to high-resolution satellite imagery.

    Quantum science opens the possibility of collecting images using sensors that don’t require the same dense, heavy components. One of Diffraqtion’s cameras is the size of a small suitcase, launchable for just half a million dollars..

    That just might be the key to shooting down highly maneuverable hypersonic missiles, as envisioned by the White House’s Golden Dome effort. The method proposed by Diffraqtion might lower the cost of the imaging systems on space-based interceptors, or even reduce the number needed to do the job.

    “You have more area coverage, you can look at more targets at the same time, and so on,” said Galatsanos.

    The idea effectively reverses the process of deriving an image from photonic data. But in quantum science, the simple act of observing quantum behaviors changes them. That’s useful for things like quantum encryption because it means that the message changes—obviously so—when intercepted. But it is also what makes quantum “photography” impossible.

    Saikat Guha, another co-founder and the company’s chief science officer, has spent several years describing a new method for deriving information from quantum behaviors related to light. This method does not “observe” the photons in the traditional sense, nor does it act like a bed of capacitors or a sheet of film. Instead, it uses AI to model the optical field; so, rather than treating the scene as a blurry picture on a sensor, Guha’s method treats the arriving light itself as the ‘thing’ to be measured via quantum mathematics.

    “What we do is [take] light as it comes to us. The visible light coming—we don't capture it, so there's no observation. But we transform the light, and at the end, when we have done the transformation, then we capture it. So we still retain the entire information of the photon as it traverses through the camera. And at the very, very end, we can observe the outcome of that processing,” said Galatsanos.

    Galatsanos says that a wide constellation of quantum camera satellites won’t be possible before 2030. But if the hypothesis proves out next month, it could change all aspects of space satellite imaging.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Arizona Democratic Sen. Mark Kelly sued Defense Secretary Pete Hegseth and the department on Monday for trying to demote Kelly’s retirement rank and pay after he appeared in a video where he and other lawmakers told service members they didn’t need to follow illegal orders. 

    Kelly’s suit, filed in the federal district court for the District of Columbia, says attempts by the Trump administration to punish him violate the First Amendment, the separation of powers, due process protections and the Speech and Debate clause of the Constitution.

    “Pete Hegseth is coming after what I earned through my twenty-five years of military service, in violation of my rights as an American, as a retired veteran, and as a United States Senator whose job is to hold him—and this or any administration—accountable,” Kelly wrote in a statement. “His unconstitutional crusade against me sends a chilling message to every retired member of the military: if you speak out and say something that the President or Secretary of Defense doesn’t like, you will be censured, threatened with demotion, or even prosecuted.”

    Kelly appeared in the video alongside Michigan Sen. Elissa Slotkin, Colorado Rep. Jason Crow, Pennsylvania Reps. Chris Deluzio and Chrissy Houlahan and New Hampshire Rep. Maggie Goodlander — all of whom are former members of the military or intelligence agencies, though none of the others are still subject to the military's legal system.

    President Donald Trump was irate after seeing the video, posting on social media that he believed it represented “SEDITIOUS BEHAVIOR, punishable by DEATH!”

    DOD investigation

    The Defense Department announced in late November that it was looking into “serious allegations of misconduct” against Kelly, a retired Navy captain, for participating in the video. 

    Kelly said during a press conference on Capitol Hill in December the Defense Department investigation into him, along with one by the FBI into all of the lawmakers in the video, marked “a dangerous moment for the United States of America when the president and his loyalists use every lever of power to silence United States senators for speaking up.”

    Hegseth, who originally threatened to court-martial Kelly, said in early January the Defense Department would instead downgrade his retirement rank and pay. 

    “Captain Kelly has been provided notice of the basis for this action and has thirty days to submit a response,” Hegseth wrote in a social media post. “The retirement grade determination process directed by Secretary Hegseth will be completed within forty five days.”

    Kelly said at the time he would challenge Hegseth’s course of action. 

    First Amendment cited

    The 46-page lawsuit marks the next step in the months-long saga, with Kelly asking a federal judge to declare the effort to demote him “unlawful and unconstitutional.”

    “The First Amendment forbids the government and its officials from punishing disfavored expression or retaliating against protected speech,” the lawsuit states. “That prohibition applies with particular force to legislators speaking on matters of public policy. As the Supreme Court held 60 years ago, the Constitution ‘requires that legislators be given the widest latitude to express their views on issues of policy,’ and the government may not recharacterize protected speech as supposed incitement in order to punish it.”

    The lawsuit alleges that the Pentagon’s actions against Kelly “also trample on protections the Constitution singles out as essential to legislative independence.” 

    “It appears that never in our nation’s history has the Executive Branch imposed military sanctions on a Member of Congress for engaging in disfavored political speech,” the lawsuit states. ”Allowing that unprecedented step here would invert the constitutional structure by subordinating the Legislative Branch to executive discipline and chilling congressional oversight of the armed forces.”

    Kelly’s legal team asked the judge to grant “emergency relief” in their favor by Friday, Jan. 16.

    The case was assigned to Senior Judge Richard J. Leon, who was nominated to the bench by President George W. Bush.

    This story was originally published by Stateline.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Department of Homeland Security has created an office to operate drones and counter bad ones, with millions of dollars already slated to protect upcoming high-profile mass gatherings across the United States, agency officials said on Monday.

    The new Program Executive Office for Unmanned Aircraft Systems and Counter-Unmanned Aircraft Systems will “oversee strategic investments in drone and counter-drone technologies that can outpace evolving threats and tactics,” the agency said in a press release

    DHS said the office “has already begun its work” and is finalizing a plan to spend $115 million on counter-drone tech.

    The launch comes as the Trump administration looks to protect the World Cup and its 100-plus soccer matches spread across the U.S., Canada and Mexico. DHS officials also said the office will help protect celebrations surrounding the United States’ 250th anniversary.

    “Drones represent the new frontier of American air superiority,” DHS Secretary Kristi Noem said in a statement, adding that the office “will help us continue to secure the border and cripple the cartels, protect our infrastructure, and keep Americans safe as they attend festivities and events during a historic year of America’s 250th birthday and FIFA 2026.”

    Late last year, the Trump administration made some $500 million in grants available to states and localities to help fund their own anti-drone efforts; half is expected to be allocated in fiscal year 2026 and half in FY27.

    The FY26 National Defense Authorization Act, which President Trump signed into law last month, also extended DHS and the Justice Department’s counter-drone authorities until 2031. The powers, first granted in 2018, lapsed during last year’s government shutdown, but the renewal means that both agencies can continue to track, detect, and disable drones that are deemed a threat to public safety. 

    Drones have been used for a host of nefarious purposes, from smuggling drugs across the U.S.-Mexico border to delivering contraband to prisons. Others have strayed or been sent into sensitive areas, disrupting airports and sporting events.

    The Federal Aviation Administration said it receives over 100 reports each month of drones operating near airports. After passage of the FY26 NDAA, the National Football League said it had detected roughly 2,300 drones around NFL stadiums in violation of game-day Temporary Flight Restrictions.

    Since 2018, DHS said, it has conducted over 1,500 missions to counter “illicit drone activities” across the country.

    “The new Program Executive Office will be taking the threat of hostile drones head-on and innovating ways drones can keep us safe from other threats on the ground, equipping the Department with the technology and expertise we need to keep us Americans safe,” the agency said.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • New research from Recorded Future reveals how Russian state hackers (BlueDelta) are using fake Microsoft and Google login portals to steal credentials. The campaign involves using legitimate PDF lures from GRC and EcoClimate to trick victims.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶