• Microsoft has officially released a security update addressing a severe vulnerability found within the Windows Admin Center. Tracking under the identifier CVE-2026-26119, this critical flaw presents a significant risk to enterprise environments relying on the platform for server management. The vulnerability, described as an Elevation of Privilege issue, allows authorised attackers to escalate their permissions […]

    The post Critical Flaw in Windows Admin Center Exposes Systems to Privilege Escalation Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • New phishing activity is again abusing the Booking.com ecosystem to defraud both hotel partners and their guests, using a coordinated multi‑stage campaign that blends email, infrastructure abuse, and social engineering across email and WhatsApp. The primary objective is financial gain, using tailored phishing kits to first capture partner credentials and then harvest guest payment data. The operators […]

    The post New Phishing Campaign Exploits Booking.com Partners, Targets Customers in Multi-Stage Fraud Scheme appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A severe “log poisoning” vulnerability has been discovered in the popular OpenClaw AI assistant, potentially allowing attackers to manipulate the agent’s behaviour through indirect prompt injection. OpenClaw, an open-source autonomous agent known for its deep system integrations and ability to manage complex tasks, has recently seen massive adoption. However, its ability to self-debug and read […]

    The post OpenClaw AI ‘Log Poisoning’ Flaw Enables Malicious Content Injection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A new malware campaign, dubbed CRESCENTHARVEST, that abuses the ongoing Iran protest narrative to deliver a powerful information‑stealing remote access trojan (RAT) against Farsi‑speaking users. The operation appears tailored to supporters of the protests and other Iran‑focused audiences, with a clear focus on long‑term surveillance rather than short‑lived disruption. The campaign surfaced shortly after January 9 […]

    The post CRESCENTHARVEST Malware Campaign Uses Iran Protest Lures to Deploy Info‑Stealing RAT appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A critical zero-day vulnerability in Dell RecoverPoint for Virtual Machines has been actively exploited by Chinese state-sponsored hackers since mid-2024. Mandiant and Google Threat Intelligence Group (GTIG) attribute this campaign to UNC6201, a threat cluster with significant overlaps to the group known as Silk Typhoon. The vulnerability, tracked as CVE-2026-22769, carries a maximum CVSS score of 10.0, allowing attackers to gain […]

    The post Dell 0-Day Vulnerability Targeted by Chinese Hackers Since Mid-2024 for Ongoing Malware Campaign appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The troubled Sentinel intercontinental ballistic missile program will hit a key milestone by year’s end, with hopes to deliver the initial ICBM by the early 2030s, Pentagon and Air Force officials announced Tuesday.

    In 2024, the Northrop Grumman program to modernize the land-based arm of the nuclear triad went so far over budget that the Pentagon rescinded a 2020 decision to move the program into its engineering and manufacturing development phase. Program officials said in September 2025 that they hoped to re-enter that phase by mid-2027, but now say they plan to hit that milestone this year. 

    “Leveraging considerable progress over the last 12-18 months, program officials are executing a transformed acquisition strategy paving the way to complete the restructure and achieve a Milestone B decision by the end of 2026, while delivering an initial capability targeted for the early 2030s,” the service said in a Tuesday news release. 

    Air Force officials said successful ground tests, solid rocket motor qualifications, and critical design reviews are examples of much-needed progress since the program triggered a Nunn-McCurdy Act review in 2024. Additionally, service officials highlighted the new direct reporting portfolio manager role for critical major weapon systems—which includes F-47, B-21, and Sentinel—as crucial to accelerating the program. Gen. Dale White was confirmed for that position in December.

    “The DRPM has the direct authority to make decisions, informed by integrated inputs across the enterprise and in alignment with the mission priorities set by the Secretary of War and the Secretary for the Air Force,” White said in the news release. “That construct allows us to resolve tradeoffs quickly and move with the speed required to deliver credible deterrence—while preserving the discipline this mission demands.”

    White’s position, and the creation of his new direct reporting portfolio manager role that reports directly to Deputy Defense Secretary Steve Feinberg, appeared to be at odds with Defense Secretary Pete Hegseth’s acquisitions reforms—including changes to expand decision-making authority at lower levels. 

    The new role “signifies a major lack of confidence in the Air Force to pull off its main acquisition programs” and allows White and the Pentagon to call the shots on Sentinel, said Todd Harrison, a defense budget expert at the American Enterprise Institute.

    “I think it also signifies that there are certain programs that are too big or too important to fail,” he said. “A lot of these processes it doesn't seem like are going to apply to these too-big-to-fail programs. Sentinel is definitely one of those, because we don't have an alternative. We don’t have a fallback.”

    Other Sentinel program developments:

    • Construction has already started on the first of three new command and control centers at F.E. Warren Air Force Base in Wyoming, and on test facilities at Vandenberg Space Force Base in California.
    • Teams plan to break ground on a prototype launch silo at Northrop Grumman’s Promontory, Utah, site, this month, which “will allow engineers to test and refine modern construction techniques, validating the new silo design before work begins in the missile fields,” the news release said. 
    • Prototyping activities this summer at F.E. Warren will validate construction methods being used for utility corridors.

    Officials are planning for the first missile pad launch for Sentinel in 2027, the news release said. 

    “The deliberate progress being made on Sentinel ensures that for decades to come, there will be no doubt in the minds of our adversaries about the credibility and readiness of our nation's nuclear deterrent,” Navy Adm. Richard Correll, head of U.S. Strategic Command, said in the news release. “That is the ultimate deliverable."

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Government Accountability Office has dismissed allegations that ManTech International had several conflicts of interest and should not have won a $96.5 million Army contract.

    MAG Aerospace was the incumbent contractor on the Network Modernization & Mission Network Technical Service Support program, known as NetMod. The contract provides technical support to the Army’s tactical network.

    After ManTech won the recompete in February 2025, MAG filed its protest complaining that ManTech had all three types of organizational conflicts of interest: biased ground rules, unequal access to information and impaired objectivity.

    MAG's protest led the Army to take a corrective action in March and investigate the OCI allegations.

    The Army’s investigation found no actual or potential conflicts, clearing the way for a re-award of the contract to ManTech in August. MAG again filed a second protest in November.

    But while that protest was pending, the Army said it would waive the OCI rules and procedures as in the service branch's best interest. With that waiver, GAO dismissed the OCI allegations as moot.

    GAO then denied MAG's challenge to the Army's finding of ManTech as a responsible contractor and the best value for the program, according to the protest decision unsealed Thursday.

    For the responsibility challenge, MAG cited an administrative agreement from July 31 between ManTech and the Homeland Security Department about mischarged time and overbillings. The Army’s contracting officer did not consider the agreement in his determination because the person could not find it in searches.

    GAO said the contracting officer was not aware of it, therefore he did not ignore it. The legal standard for overturning a responsibility determination is whether contracting officers ignore those determinations.

    MAG cannot go to the U.S. Court of Federal Claims with its protest because this is a task order under the RS3 vehicle. GAO holds sole authority for task order protests.

    ManTech can now begin working on the contract, which runs for five years at an evaluated price of $96.5 million.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have disclosed that artificial intelligence (AI) assistants that support web browsing or URL fetching capabilities can be turned into stealthy command-and-control (C2) relays, a technique that could allow attackers to blend into legitimate enterprise communications and evade detection. The attack method, which has been demonstrated against Microsoft Copilot and xAI Grok

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • SINGAPORE, Singapore, February 17th, 2026, CyberNewswire The OWASP Smart Contract Security Project has released the OWASP Smart Contract Top 10 2026, a risk prioritization framework developed from structured analysis of real world exploit data observed across blockchain ecosystems in 2025. Crypto protocols continued to experience significant smart contract failures in 2025, with exploit patterns increasingly […]

    The post CredShields Contributes to OWASP’s 2026 Smart Contract Security Priorities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A new Android backdoor that’s embedded deep into the device firmware can silently harvest data and remotely control its behavior, according to new findings from Kaspersky. The Russian cybersecurity vendor said it discovered the backdoor, dubbed Keenadu, in the firmware of devices associated with various brands, including Alldocube, with the compromise occurring during the firmware build phase.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶