• Anthropic has launched a free Claude Code terminal plugin, “security-guidance,” that continuously reviews AI‑generated code in-session to detect and remediate security vulnerabilities before they ever reach a pull request or CI pipeline. Designed as a lightweight yet powerful layer within a defense‑in‑depth strategy, the plugin targets common classes of weaknesses, including injection flaws, unsafe deserialization, […]

    The post Anthropic Launches Free Claude Code Terminal Plugin to Detect Security Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft has disclosed a critical security vulnerability in SharePoint Server that could allow attackers to execute arbitrary code remotely, raising significant concerns for enterprise environments that depend on on-premises collaboration platforms. The flaw, tracked as CVE-2026-45659, was initially published on May 21, 2026, and later updated on May 26, 2026, with additional technical details emphasizing […]

    The post Microsoft SharePoint Server Flaw Enables Remote Code Execution Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft Defender XDR has introduced automatic attack disruption capabilities that autonomously contain ransomware and sophisticated cyberattacks in real-time by isolating compromised assets. This advanced feature correlates millions of security signals to identify active threat campaigns with high confidence. It automatically disrupts attacks before they can spread across enterprise networks. The automatic attack disruption system operates […]

    The post Microsoft Defender Gains Auto-Isolation Feature to Block Ransomware Spread appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The House Armed Services Committee has not received a budget amendment to fund the E-7 Wedgetail, though the Defense Department recently reversed course and promised to support the next-generation radar plane. 

    Earlier this month, Defense Secretary Pete Hegseth told House lawmakers that the Pentagon would amend its $1.5 trillion budget request to include Wedgetail—which had been zeroed out in favor of space-based systems. Last week, Air Force Secretary Troy Meink told House lawmakers the estimated $1.5 billion amendment is “working its way” to Congress. But the initial draft of the HASC chairman’s 2027 National Defense Authorization Act released on Tuesday did not include funding for the E-7.

    “The administration has indicated that they intend to send us a budget amendment to address Wedgetail, E-7, procurement in ‘27,” one senior HASC staffer told reporters Tuesday. “We haven't received it yet, so I don't know how much they're seeking, and I don't know if they're seeking it in discretionary or mandatory, and I don't know what they're intending to use as an offset.”

    Hesgeth told lawmakers the Pentagon’s past disregard for the E-7 resembled a “divest-to-invest mindset,” and emphasized that it has a “future” on the battlefield. The promise to renew funding followed the damage of an E-3 Sentry aircraft in the Iran war, according to a recent Congressional Research Service report. Damage to the E-3 and other support aircraft during Operation Epic Fury has led former military leaders to call for more funding for battlespace awareness upgrades and AWACS replacements, Defense One reported.

    HASC said it would add the E-7 funding once they received the amendment. A White House Office Management and Budget spokesperson told Defense One it will send the updated funding request along soon.

    “OMB will be sending a budget amendment to Congress in short order so it can be considered in the NDAA,” the spokesperson said. “We look forward to continuing our work with Congress to fund the President’s defense priorities.”

    An Air Force spokesperson previously said the service is “evaluating options to resource the E-7 program in FY 2027 to deliver Rapid Prototyping aircraft and continue Engineering and Manufacturing Development activities.” 

    Meink told lawmakers in April that the service plans to buy five additional Wedgetails in addition to two prototypes already under contract. 

    While there is no procurement or research and development funds for the aircraft in the House’s 2027 National Defense Authorization Act, the committee’s initial draft added an $55 million outside of the Pentagon’s budget request for a E–7 AWACS Squadron Operations Facility at Oklahoma’s Tinker Air Force Base.

    “We do support the E-7 program,” the staffer said. “We would like to see that budget amendment.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Office of Personnel Management is set to propose requiring all federal employees to sign a nondisclosure agreement barring them from divulging “confidential” information in most cases, a move that experts warn violate workers’ First Amendment rights and statutes aimed at protecting whistleblowers from retaliation.

    OPM announced its plan in a filing set for publication in the Federal Register Wednesday. In justifying the requirement, officials cited reporting in Government Executive and other news outlets disclosing controversial proposals to overhaul federal layoff and performance management rules—and internal warnings against their implementation—prior to their formal publication.

    “Unauthorized disclosures of confidential government information disrupt agency operations and erode public trust,” OPM wrote. “In recent months, unauthorized disclosures have included internal government materials not intended for public release such as pre-decisional documents and interagency comments exchanged during internal coordination processes . . . Such disclosures risk chilling candid interagency feedback, disrupting orderly decision-making and weakening trust within and among federal agencies.”

    According to a draft copy of the proposed NDA, feds would be required to sign a document barring them from disclosing information related to internal agency operations, personnel and procurement matters and “any sensitive, pre-decisional or deliberative material” and vowing to inform their agency if they learn of others making such a disclosure.

    The draft NDA includes language stating that it does not conflict with the Whistleblower Protection Act, and that whistleblowers may continue to disclose information either to Congress or their agency’s inspector general’s office. But Kevin Owen, a partner at Gilbert Employment Law, a firm that specializes in federal employment issues, described those exceptions as mere “lip service.”

    “Time and time again, we see circumstances where whistleblowers try to go through internal channels—either through an IG or agencies like the Office of Special Counsel—and for one reason or another, either they’re overburdened with work, or with this administration particularly, politically captured and therefore don’t do the necessary work,” Owen said. “So a lot of those channels are ineffective. Only once wrongdoing becomes more widely known is there an appropriate remedy to the waste, fraud and abuse going on. Simply having OPM pick and choose the channels for whistleblowers is not in accordance with the Whistleblower Protection Act.”

    Michael Fallings, managing partner at Tully Rinckey, another federal employment law firm, said it will be hard to gauge the NDA’s true impact until a final draft is released, likely after OPM’s 30-day comment period. As things stand now, much of the document’s language is “over-broad,” he said.

    “When you’re dealing with NDAs, you have to be careful about impacting somebody’s rights to engage in protected activity,” he said. “Even in the private sector, they still have the right to disclose waste, fraud and abuse, and with government entities, you have to be careful of employees’ First Amendment rights as well. That’s the fear of a lot of the employee rights organizations and attorneys right now, especially given what has happened with this administration and the sense that it is trying to prevent employees from speaking out.”

    Owen noted that federal agencies already have longstanding rules governing the unauthorized disclosure of internal government information. OPM’s proposed NDA, which the agency explicitly tied to its effort to assert governmentwide firing power through suitability determinations, could create a new class of federal firings, shielded from Merit Systems Protection Board oversight. An employee deemed unsuitable not only would lose their job but also could be barred from being rehired into government for up to five years.

    “The impact of this is, coupled with other recent changes to its regulations, OPM could become the sole arbiter of whether it is abiding by these rules,” he said. “OPM is now trying to become this super personnel office that centralizes its authority over all federal employees, ostensibly at the direction of the White House. By now controlling how federal employees are even able to communicate about matters of political concern, it’s one further step toward enacting a spoils system and making the civil service a political arm of the White House.”

    Everett Kelley, national president of the American Federation of Government Employees, blasted the proposal as an effort to “silence” federal workers.

    “This proposed NDA is another attempt by the administration to purge the civil service of nonpartisan career employees and replace them with loyalists who won’t speak out against waste, fraud and abuse,” he said. “Federal employees do not surrender their First Amendment rights when they accept federal employment, and the public has a right to know about this administration’s abuses.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybercriminals are using SEO poisoning and fake Gemini and Claude installer sites to infect developers with fileless malware and steal data.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Anthropic says its Claude Mythos AI identified more than 10,000 software vulnerabilities in one month, including critical flaws in open-source code.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Iranian hacking group known as MuddyWater has been linked to a new campaign affecting at least nine organizations across nine countries on four continents in the first quarter of 2026. The activity targeted industrial and electronics manufacturing, education and public-sector bodies, financial services, and professional services, per the Threat Hunter Team from Symantec and Carbon Black.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • India’s national cyber security agency CERT-In has issued a new blueprint that tells organizations to fix critical vulnerabilities in internet‑facing and “crown‑jewel” systems within 12 hours of discovery, as AI‑driven attackers slash exploitation timelines. The guidance marks one of India’s most aggressive expectations yet on patching speed for exposed infrastructure. CERT-In’s 38‑page document, titled “Blueprint […]

    The post CERT-In Mandates 12-Hour Patch Deadline for Internet-Facing Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Quasar Linux (QLNX) is a new, stealthy Linux Remote Access Trojan that quietly turns developer and DevOps workstations into high‑value beachheads for software supply‑chain attacks, using fileless execution, an eBPF rootkit, PAM backdoors, and a P2P C2 mesh to evade conventional defenses. Despite its name, it is unrelated to the Windows‑focused QuasarRAT family. It is […]

    The post Quasar RAT Hits Developers With Fileless Linux Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶