• Security researchers at Zscaler ThreatLabz have uncovered three malicious npm packages designed to install a sophisticated remote access trojan (RAT) targeting JavaScript developers. The packages, named bitcoin-main-lib, bitcoin-lib-js, and bip40, collectively registered over 3,400 downloads before being removed from the npm registry in November 2025. The attack exploits developer trust in the legitimate BitcoinJS project […]

    The post Three Malicious NPM Packages Target Developers’ Login Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Linux laptop users are being urged to update after a flaw in a popular battery optimisation tool was found to allow authentication bypass and system tampering.   The vulnerability affects the TLP power profiles daemon introduced in version 1.9.0, which exposes a D-Bus API for managing power profiles with root privileges.  How the flaw works  TLP’s profiles daemon runs as […]

    The post Linux Battery Utility Vulnerability Allows Authentication Bypass and System Tampering  appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • ownCloud has issued an urgent security advisory urging users to enable Multi-Factor Authentication (MFA) following a credential theft incident reported by threat intelligence firm Hudson Rock. The incident, discovered in January 2026, affected organizations using self-hosted file-sharing platforms, including some ownCloud Community Edition deployments. What Happened The incident did not result from any vulnerability or […]

    The post ownCloud Warns Users to Enable MFA After Credential Theft Incident appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A groundbreaking cybersecurity research team has developed a novel defensive technique that renders stolen artificial intelligence databases virtually useless to attackers by deliberately poisoning proprietary knowledge graphs with plausible yet false information.​ The research, conducted by scientists from the Institute of Information Engineering at the Chinese Academy of Sciences, National University of Singapore, and Nanyang […]

    The post Researchers Poison Stolen Data to Sabotage AI Model Accuracy appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A sophisticated modular botnet known as GoBruteforcer is actively targeting Linux servers worldwide, with researchers estimating that more than 50,000 internet-facing servers remain vulnerable to these coordinated attacks. The threat, which has evolved significantly since its initial discovery in 2023, poses a growing danger to organizations that rely on exposed database and file-transfer services.​ GoBruteforcer, […]

    The post Global GoBruteforcer Botnet Campaign Threatens 50,000 Linux Servers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Huntress security researchers have uncovered a sophisticated VMware ESXi exploitation campaign using a zero-day toolkit that remained undetected for over a year before VMware’s public disclosure. The December 2025 intrusion, which began through a compromised SonicWall VPN, demonstrates how threat actors are chaining multiple critical vulnerabilities to achieve complete hypervisor compromise. Attack Chain Begins With […]

    The post Cybercriminals Exploit VMware ESXi Vulnerabilities Using Zero-Day Toolset appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added two security flaws impacting Microsoft Office and Hewlett Packard Enterprise (HPE) OneView to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below – CVE-2009-0556 (CVSS score: 8.8) – A code injection vulnerability in Microsoft Office

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • President Donald Trump wants a 50-percent boost to the Pentagon budget—to $1.5 trillion a year—and a pay cap for defense CEOs to encourage them to produce weapons faster. 

    In a flurry of social media posts Wednesday, the president also said he would bar defense companies from buying back stock and issuing dividends until they invest more to develop new technologies and increase production. Later on Wednesday, the White House released an executive order to that effect.

    In one of his posts, Trump said “long and difficult negotiations with Senators, Congressmen, Secretaries, and other Political Representatives” led him to determine that “our Military Budget for the year 2027 should not be $1 Trillion Dollars, but rather $1.5 Trillion Dollars…I would stay at the $1 Trillion Dollar number but, because of Tariffs, and the tremendous Income that they bring…we are able to easily hit the $1.5 Trillion Dollar number while, at the same time, producing an unparalleled Military Force, and having the ability to, at the same time, pay down Debt, and likewise, pay a substantial Dividend to moderate income Patriots within our Country!”

    In reality, the tariffs brought in roughly $236 billion through November—less than half of Trump’s proposed spending hike. 

    And far from paying down the national debt, the tariff income is dwarfed by last year’s federal budget deficit. 

    “The national debt has risen significantly during Trump's first year, going from $36.2 trillion to $38.4 trillion, an increase of $2.2 trillion or nearly 6 percent”—the largest jump in recent years outside the pandemic, a recent USA Today analysis found.

    In another post, Trump said, “Defense Companies are not producing our Great Military Equipment rapidly enough and, once produced, not maintaining it properly or quickly. From this moment forward, these Executives must build NEW and MODERN Production Plants, both for delivering and maintaining this important Equipment, and for building the latest Models of future Military Equipment. Until they do so, no Executive should be allowed to make in excess of $5 Million Dollars.” Also, he said, “I will not permit Dividends or Stock Buybacks for Defense Companies until such time as these problems are rectified…” 

    Trump had particular criticism for “Raytheon,” likely a reference to RTX. In a subsequent post, he said the company would receive no further defense contracts until it invests more in production capacity, nor be allowed to buy back its own stock “until they are able to get their act together.” 

    Boeing, Lockheed Martin, Northrop Grumman, and RTX did not respond to requests for comment on the president’s statements by publication. General Dynamics, HII, and L3Harris declined comment.

    Trump didn’t specify how restricting buybacks or measuring research investments would be enforced. 

    The president’s comments touch on a longstanding tension between the government, taxpayers, and defense companies, but they also omit existing efforts like acquisition reforms. 

    “They're working to change incentive structures, which is one of, really, the strongest parts about the acquisition reform,” said Jerry McGinn, director of the Center for Strategic and International Studies’ industrial base center. “You want different outcomes, you change the incentives. And that's what they're working to do.”

    Incentives can include bigger budgets, longer-term contracts, or cheaper loans—something the Pentagon is already doing. For example, Lockheed Martin is more than tripling its annual Patriot missile production from 600 to more than 2,000 as part of a seven-year deal announced Tuesday. 

    The White House released an executive order to limit stock buybacks late on Wednesday. 

    “Effective immediately, [defense contractors] are not permitted in any way, shape, or form to pay dividends or buy back stock, until such time as they are able to produce a superior product, on time and on budget,” the order states. 

    In the next 30 days, the defense secretary must identify underperforming contractors “not investing their own capital into necessary production capacity, not sufficiently prioritizing United States Government contracts, or whose production speed is insufficient,” according to the executive order. 

    There’s also a 60-day requirement to create a provision for future contracts that ban “any stock buy-back and corporate distributions” if the contractor isn’t performing to standards set by the defense secretary.

    Mark Montgomery, senior director of the Foundation for the Defense of Democracies’ Center on Cyber and Technology Innovation, said he can see “the problem the president is trying to address in the shipyards. For a number of years, some of them have maintained a ‘backlog’ of ships—ships paid for but not built or even started—and yet we instinctively order more ships each year. The yards could use this backlog to justify investments in modernizing the yards—or they could use this future revenue to justify payments such as dividends or stock buybacks. They have all too often chosen the latter.”

    The second Trump administration has so far keenly focused on defense manufacturing, and specifically shipbuilding, where yearslong program delays, workforce shortages, and supply chain challenges have increased costs. 

    Navy Secretary John Phelan, like his predecessor, vowed to rein in costs and has pushed shipbuilders to perform and deliver on time. Phelan recently canceled the service’s frigate program, but then brought it back. The Navy also inked a deal with Palantir to install AI in shipyards to reduce costs, automate manual processes, and, ideally, build ships faster.  

    Montgomery, a retired rear admiral and former policy director for the Senate Armed Services Committee, said Trump’s call to restrict buybacks and dividends could be part of a broader calculus to get expensive programs, like naval ships, on track. 

    “A lot of problems need to be addressed to get our shipbuilding system back in order, and this action will certainly not do this alone, but it is part of an overall effort that includes more investments, partnering with successful Korean yards and more efficient design and acquisition processes,” he said. 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Pentagon policies that forbid troops from repairing and modifying their weapons and gear are hindering efforts to accelerate U.S. operations with ground and air robots, special operators and defense experts warn.

    The problem stems from defense contracts that enable manufacturers to retain lucrative repair and data rights, Dara Massicot, a senior fellow at the Carnegie Endowment for International Peace, said at a Carnegie event on Wednesday. 

    Massicot noted that Ukrainian forces can’t repair much of the U.S. gear they have been given.

    “For some of the Western equipment, if it's damaged to a certain point, they can't necessarily maintain it, and they actually have to ship it back out and back in, which is terrible. So there is a drag there if you try to isolate this core function, especially if you're in a high-intensity conflict,” she said.

    But the Ukrainians can modify domestically produced drones, and that has helped them adapt at the lightning-fast pace of modern warfare. Their efforts are of intense interest to the instructors who train U.S. special operators at the Kennedy Special Warfare Center and School at Fort Bragg, North Carolina.

    The robotic-warfare concepts being taught at the Kennedy school depend on being able to repair and rapidly modify weapons in the field, said Army Col. Simon Powelson, who leads First Special Warfare Training Group at Bragg

    “We're all about open architecture,” Powelson said in a recent interview. “You have to have the ability to change them rapidly on the fly, and that's also important.” 

    Powelson believes that outpacing future adversaries will depend on being able to swiftly integrate air and ground robots with older weapons such as artillery and missiles using AI, in new ways, often during conflict.

    “When I think of robotics, I don't think of just a drone doing one particular thing. I think drones are a system of systems, systems of systems that are also tied to legacy systems,” he said. ”There's a lot of talk about: ‘Is tube artillery or cannon artillery dead? No, I could have an…operational objective where I have my reconnaissance drone, my [electronic warfare] drone… strike drone, my bombers, my mine-laying drones are all operating to impart that plan in conjunction with tube artillery.”

    In the past year, the Pentagon has urged its acquisition corps to favor open architecture systems that can be easily repaired and modified. But vast amounts of its weapons and gear were designed to proprietary standards.

    In 2025, Sen. Elizabeth Warren, D-Mass., and other senators attempted to insert a “Warrior Right to Repair provision in the National Defense Authorization Act. The provision would have required weapons makers to provide “fair and reasonable access to all the repair materials, including parts, tools, and information, used by the manufacturer or provider or their authorized repair providers to diagnose, maintain, or repair the goods.” 

    After the provision failed to make it into the bill’s final version, Warren issued a Dec. 8 statement: “We support the Pentagon using the full extent of its existing authorities to insist on right to repair protections when it purchases equipment from contractors, and we will keep fighting for a common-sense, bipartisan law to address this unnecessary problem.”

    As the Pentagon advances efforts to bring more types of companies into the defense industrial base, it will have to contend with more problems related to intellectual property, William C. Greenwalt, a senior fellow at the American Enterprise Institute, warned at the Carnegie event. 

    “This is not a cut-and-dried issue,” said Greenwalt,  a former staffer for the Senate Armed Services Committee. “There are many, many things in the law that emanate from political sources that end up having to be massaged, and I think that's where we are on this issue.”

    Massicot said that Russia has found a way to speed battlefront repairs and mods. 

    “On the Russian side, they actually do repairs within their units. But they have to supplement with forward-deployed defense industry specialists to the front. So we would have to think about what that means for us moving forward. That's one way to do it. You push it forward, and they're doing it together.”

    U.S. defense contractors have taken varied approaches to moving technicians closer to the battlefield. Some, like Palantir, Anduril, and Shield AI, are open about the work they do alongside Ukrainian operators. Larger and more established contractors have been less eager to take similar steps, resulting, for instance, in snafus that affected the use of Javelin missiles and other weapons.

    In late 2024, the Biden administration eased restrictions that had limited the ability of defense contractors to provide consulting and support to Ukrainian forces. Massicot said more armsmakers and other contractors should take advantage of the opportunity to observe and work with their products in the war zone.

    “Why do we still have policy restrictions on ourselves? It's four years later, I think we can be pretty confident that the Russians are not going to escalate because we are starting to slip in observers, but that's just my point of view,” she said. “There's a closing window to get this done. There are some American companies that are testing in Ukraine. I just don't think it's as robust as it needs to be, given that it's a laboratory for experimentation right now.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Congress won’t fund the Army’s plans to outsource training for new helicopter pilots until it sees the results of a trial program. That hasn’t stopped the service from notifying several companies that they’re progressing in the competition to take on the job. 

    Tucked into the 3,000-page National Defense Authorization Act, which was signed into law last month, is a provision stating that funds can’t “be obligated or expended to solicit proposals or award a contract for the implementation of any transformation of the Initial Entry Rotary Wing training program” at Fort Rucker, Alabama.

    Instead, the provision requires a detailed report on the ongoing, one-year pilot program that is trying out the Army’s ideas about shifting initial helicopter training from an in-house school to a contractor-owned and -operated model. And it requires a briefing from Army Secretary Dan Driscoll on the cost-effectiveness and “the rationale for any proposed changes to training systems or platforms.”

    Service officials and defense contractors have said the new model, dubbed Flight School Next, will reduce costs by taking helicopters, instructors, and maintenance out of the service’s hands. They also say switching to a single-engine helicopter will better help aviators to refine their skills. A call-for-solutions document issued last month says that the winner of the Flight School Next contract would produce 800 to 1,500 Army aviators annually for 26 years.

    Several companies vying for the contract said this week that Army officials had notified them that they’re advancing to the next stage of the competition for the Flight School Next contract.

    The Army did not return a request for comment by publication time regarding the NDAA provision and the names of the companies tagged to move ahead.

    Lockheed Martin was notified by the Army in December, company spokesperson Leighan Burrell told Defense One on Wednesday. Burrell said the nation’s largest defense contractor plans to reveal later this month who it's working with and which helicopter it will propose to use. In November, the company touted its success with international training programs such as Australia’s AIR5428 Pilot Training System, the Singapore Basic Wings Course, and the United Kingdom Military Flying Training System.

    A spokesperson for Bell said that their company, which is basing its bid on the 505 helicopter, had similarly been notified last month.

    “We are honored to move forward in the Army’s Flight School Next program,” said Jeffrey Schloesser, senior vice president of strategic pursuits at Bell, in a Monday news release. “With Bell’s extensive history in military flight training, the proven Bell 505, and the expertise of our teammates, we are confident that our turnkey solution will support the Army in developing the next generation of Aviation Warfighters.”

    M1 Support Services, whose Flight School Next bid includes Robinson Helicopters and its R66 trainer, will also be moving ahead.

    “M1 has advanced to Phase II and will provide the Army impactful innovations including the R66 and many other exceptional training and simulation capabilities,” James Cassella, the chief growth officer for M1, said in an emailed statement. “Our extensive experience at Fort Rucker makes us the only company to offer a seamless, low-risk transition.”

    Lee-Anne Jae Aranda, a Robinson Helicopter spokesperson, said in an emailed statement “we look forward to our Prime contracting partners making additional announcements about our collective participation in Flight School Next in the near future.”

    The current Army training helicopter, the twin-engine UH-72 Lakota, has been criticized by service leaders as more expensive to operate and more restrictive for teaching fundamental aviation techniques. Its manufacturer, Airbus, has repeatedly pushed back on those claims.

    An Airbus spokesperson declined to say whether the company was advancing in the Flight School Next competition.

    “We submitted a proposal that reduces Army training costs while meeting its stated training objectives,” Airbus said in an emailed statement. “This includes changes to the multiple contracts supporting Fort Rucker, altering the instructional syllabus, maximizing the UH-72A’s inherent training capabilities, and exploring a hybrid training option with a single engine aircraft alongside the UH-72A. Our solution is affordable, sustainable, retains the safest rotary wing trainer in Fort Rucker history, and honors the U.S. taxpayer’s $2.2B investment in the program.”

    Other companies reportedly vying for the contract with single-engine training helicopters are MD Helicopters and Enstrom. Neither returned requests for comment by publication time. Boeing, which is teaming up with Leonardo and its AW119T light helicopter for the offering, declined to comment on the team’s progress in the competition. 

    The NDAA provision casts doubt on the Army’s plan to award the Flight School Next contract by September.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶