• The 2025 spam and phishing landscape shows a sharp rise in AI-generated lures and QR code–based “quishing,” alongside complex malware campaigns abusing cracked games and software to deliver information stealers at scale. These trends highlight how social engineering and multi‑stage loaders now work together to bypass traditional security controls and monetize stolen data. Threat actors […]

    The post AI-Driven Phishing and QR Code Quishing Surge in 2025 Spam and Phishing Report appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A security vulnerability has been discovered in next-mdx-remote, a popular TypeScript library used for rendering MDX content in React applications. The flaw, tracked as CVE-2026-0969 and identified by researchers at Sejong University, enables attackers to execute arbitrary code on servers when untrusted MDX content is processed. The vulnerability affects the serialize function in next-mdx-remote versions […]

    The post next-mdx-remote Vulnerability Allows Arbitrary Code Execution in React SSR appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A new wave of ClickFix attacks is targeting Windows users with fake Cloudflare-style CAPTCHA verification pages that trick victims into executing malicious PowerShell commands. This campaign delivers a multi-stage, fileless infection chain that ends with StealC, a powerful information stealer capable of harvesting credentials, cryptocurrency wallets, gaming accounts, emails, and detailed system fingerprints. The operation […]

    The post New ClickFix Attack Wave Targets Windows Systems to Deploy StealC Stealer appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Over 1,800 Windows IIS servers worldwide have been compromised in a large-scale search engine optimization (SEO) poisoning campaign driven by the BADIIS malware, a malicious IIS module used to hijack legitimate web traffic. The operation, tracked by Elastic Security Labs as REF4033, is attributed to a Chinese-speaking cybercrime group that monetizes these compromised servers by […]

    The post BADIIS Malware Targets Over 1,800 Windows Servers in Massive SEO Poisoning Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Zimbra has officially released a critical security update, version 10.1.16, addressing multiple high-severity vulnerabilities that could compromise email infrastructure and user data. The company has classified this patch with a “High” security severity rating, urging administrators to prioritize the upgrade to mitigate risks associated with web-based attacks. The update primarily focuses on closing gaps related […]

    The post Zimbra Issues Security Update to Address XSS, XXE, and LDAP Injection Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • BeyondTrust has urgently released security updates to address a critical remote code execution (RCE) vulnerability affecting its widely used Remote Support (RS) and Privileged Remote Access (PRA) products. Designated as CVE-2026-1731, this severe flaw carries a near-maximum CVSS v4 score of 9.9. The vulnerability creates a dangerous opening for unauthenticated remote attackers to execute arbitrary […]

    The post BeyondTrust RCE Vulnerability Under Active Exploitation – Urgent Patch Released appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Air Force is using a framework to test autonomy on its drone wingman prototypes, showing that multiple companies can supply hardware and software for its future collaborative combat aircraft.

    Using the government-owned Autonomy Government Reference Architecture, or A-GRA, the service has integrated RTX Collins software with General Atomics YFQ-42 aircraft and Shield AI’s technology on Anduril's YFQ-44 CCA, according to a Thursday news release.

    “By proving the architecture functions effectively across different airframes and mission autonomy from different vendors, the Air Force is demonstrating that mission software can be decoupled from specific vehicle hardware, breaking down barriers for technology integration and fostering a more competitive and innovative ecosystem,” the service said in the news release. 

    Col. Timothy Helfrich, the Air Force’s portfolio acquisition executive for fighters and advanced aircraft, said breaking the hardware and software out of a single company’s hands aligns with the Defense Department’s latest National Defense Strategy—which calls for “clearing away outdated policies, practices, regulations, and other obstacles” that hinder rapid weapons production. 

    “Verifying A-GRA across multiple partners is critical to our acquisition strategy,” Helfrich said in the news release. “It proves that we are not locked into a single solution or a single vendor. We are instead building a competitive ecosystem where the best algorithms can be deployed rapidly to the warfighter on any A-GRA compliant platform, regardless of the vendor providing the algorithm.”

    The framework has been around since at least 2024. “A-GRA avoids vendor lock, enables rapid iteration, is extensible to other platforms, and underpins interoperability,” a briefing slide said.

    The Air Force issued contracts to Anduril and General Atomics in 2024 for the first increment of the service’s CCA competition. In December, the service announced that Northrop’s Project Talon CCA, designated YFQ-48A, could also compete in Increment 1 and the next round of contracts. 

    Anduril and General Atomics both notched their first semi-autonomous CCA flights last year, while Northrop plans to fly its drone wingman in 2026.

    General Atomics quickly boasted on Thursday that it had logged another semi-autonomous flight on its YFQ-42 drone wingman with RTX Collins’ autonomy software onboard. A photo accompanying a news release showed three General Atomics CCAs on a runway. In November, the company had released photos showcasing just two of its prototypes.

    “We are excited to collaborate with Collins to deliver enhanced autonomous mission solutions,” David R. Alexander, president of GA-ASI, said in the news release. “The integration of Sidekick with our YFQ-42A demonstrates our commitment to innovation and operational excellence in unmanned aircraft technology.”

    Anduril and Shield AI have not had a joint CCA flight together yet. But Jason Levin, Anduril’s senior vice president of engineering, said in an emailed statement that the company will hit that milestone “very soon.”

    “Integrating mission autonomy into the CCA program represents a meaningful step towards fielding a real operational capability by the end of the decade,” Levin said in the statement. 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • SAN DIEGO, California—Deliver what we ask for on time. That’s the terse message two maritime service chiefs are sending to industry.  

    “What I need is: when I have a contract with you, you deliver it on time. That's really what I need. I don't know how to sugarcoat that. It's impossible to sugarcoat that. I need my stuff on time,” Adm. Daryl Caudle, chief of naval operations, told attendees Wednesday at the annual WEST Conference. “We just have to be very transparent about that. So I'd rather, you know, go into that contracting strategy and negotiation with that in mind, and be very honest about that.”

    Marine Corps Commandant Gen. Eric Smith agreed: “If it's going to be delayed, well, that's a you problem. That's not a me problem, because I paid for something and I expect to get it.”

    Smith, who shared the stage with Caudle, said the goal is to buy what Marines need at the “best cost.” 

    “I know what I need. I'm a recovering requirements officer. I need a missile that shoots [200] miles. If you have something that you can give me for the same cost and on the same performance, same schedule, but it goes 250 miles, then that's great. I'll take it,” Smith said, as an example. 

    The service chiefs acknowledged how erratic government funding and single-year appropriations affect private industry.

    “We do owe industry a time horizon [where] they can stabilize their workforce,” Caudle said. 

    “I don't know why I don’t have a five-year horizon with the shipyards that do my surface ship maintenance,” which could give companies the time to plan ahead. 

    Smith pushed the need for multi-year funding, suggesting the services and industry sync messaging to Capitol Hill to advocate for it.

    Congress “can appropriate multi-year funding” but doesn’t like to, Smith said. The result is single-year funding that could mean “$100 million this year and it's nothing the next year. And you can't, you can't operate that way. So I think we have to collaborate…on our messaging to the Hill that, ‘Hey, we need multi-year funding.”

    ‘Everything costs what it costs’

    Keeping costs down without sacrificing quality or on-time delivery is a longstanding conundrum for military procurement. But while there’s general reticence towards higher costs, especially for large platforms like ships, it’s a reality the Navy must accept, Smith said. 

    “I don't want to pay, you know, $4 billion for a ship. Neither does my shipmate [Adm.] Daryl Caudle, but that's what it costs to have pipefitters, steamfitters, welders, electricians build the ship,” and have a livable wage, Smith said. “Everything costs what it costs.”

    Smith’s comments come as shipbuilders look to boost wages—with some reports of success—as a way to attract and keep the workers essential to meeting maritime national security needs. 

    But simply increasing wages may not be enough, argued Ronald O'Rourke, a recently retired naval analyst and researcher for the Congressional Research Service. Those wages need to be at a level that distinguishes shipbuilding not only from competing sectors in a given region, but from other manufacturing jobs. 

    “It's widely recognized that to attack this issue, wages and benefits need to be increased to help re-establish a larger wage differential between shipbuilding jobs and service sector jobs. Less widely recognized is that wages and benefits also need to be increased to help establish more of a wage differential between shipbuilding jobs and other manufacturing jobs. The government reported last year that there were about 400,000 manufacturing jobs that were unfilled,” O’Rourke said during a separate shipbuilding panel Wednesday.

    Those same skilled workers may also be lured by the boom in AI data centers nationwide. 

    In a report to the White House in October, OpenAI claimed data centers and energy infrastructure would need about 20 percent of the nation’s existing skills trade workforce over the next five years. 

    “So people interested in going into manufacturing and construction work have a choice of jobs—and a lot of those jobs are done in settings that are more comfortable than shipbuilding,” O’Rourke said.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Measuring the frequency of words and themes in a document can offer insights, reveal underlying messages, and even illuminate what’s on the minds of its writers. The 2026 National Defense Strategy is meant to help align ends, ways, and means, and to signal goals and values. But to find the truth, sometimes you just have to count. 

    This kind of content analysis can act like an X-ray for a document, unveiling structural DNA that the authors themselves might not realize they’ve left behind. The cold, hard math of the text itself can reveal overall priorities or even a “Say-Do” gap. For instance, if a corporate strategy has five mentions of “customers” but 50 of “shareholders,” you know who the company cares most about. 

    It also tracks rhetorical inflation—i.e., whether the strategy is largely actionable or mostly fluff. A high frequency of “aspiration” words with a low frequency of “resource” words usually signals a strategy that lacks a real execution plan. Tone and context can also be indicative. As an illustration, a strategy paper heavy on defensive terminology suggests an organization playing not to lose vs one with more aggressive terms is seeking change. 

    Beyond raw counts, identifying semantic networks—that is, words that appear near each other—can also reveal logic and emotional clusters. For instance, if the word “cloud” is consistently clumped near terms like “cost overrun,” the organization is likely not a fan. 

    What is not said can be just as telling, as Sherlock Holmes said about the dog that didn't bark. If a previously "vital" product line suddenly drops to zero mentions, you’ve identified a pivot or a failure that the text isn't explicitly admitting. 

    While words have power, word counts can show who has power. In documents produced by co-authors or even committees, content analysis can reveal who has the true hand in the relationship, which voice had more sway in the crafting and editing. This is especially important inside government, where the process of getting various offices and leaders to agree to a published “strategy” involves not just linguistic compromise, but also bureaucratic and even ideological battles. 

    Finally, no matter how thorough, a “normal” read is subject to your cognitive biases. You tend to notice what you’re already looking for. You react based on pre-existing views of everything from the authors to the issues. But as the great rhetorician Jay-Z reminds us, “Men lie, women lie, numbers don't.” 

    Top themes

    Of all its issues, themes, and topics, the new National Defense Strategy is most concerned with “allies,” who are mentioned 61 times. That's more often, per thousand words, than the 151 mentions in the 2022 strategy issued by President Biden’s team or the 20 in the 2018 summary document issued during Trump’s first term.

    More striking is the shift in tone. Just over half of the mentions of allies in the 2026 strategy appear in a demanding or derogatory context. Allies are not described this way in the 2018 or 2022 documents.

    By the numbers, the national defense strategy's second major focus is “Trump.” The president gets 52 mentions, plus his face in half of the document's ten photos. The 2018 strategy made no mention of President Trump, and the 2022 strategy mentioned “President Biden” twice. The contrast again is not just in the number, but the tone. More than two-thirds of the mentions of “Trump” in the strategy are linked to terms of praise such as “decisively” or “courageously.” The strategy also declares, twice, that “President Trump is leading the nation into a new golden age.” 

    The third-most-important topic, at 48 mentions, is American leaders who are not President Trump. There were no such mentions in the previous strategies, which were more typical ends-ways-means guides to the future. Here too, each mention is negative in tone or context: for example, the document says former leaders “neglected—even rejected—putting Americans and their concrete interests first.”

    Dueling voices

    Analysis of the 2026 NDS reveals two editorial voices, likely reflecting the different writers and editors behind them. 

    The first voice is political-ideological. It uses rhetoric foreign to traditional military documents, such as aggressive adjectives (previous policies are “grandiose nation-building projects,” “self-congratulatory pledges,” and “rudderless war”), persona-centric language (such as crediting “President Trump” for “historic achievements”), and a decidedly populist framing (“America First” appears multiple times). 

    The second voice is professional-strategic. It uses the technical and bureaucratic style of policy wonks and career military, with precise doctrinal language (“line of effort,” “denial defense,” “Joint Force,” and “operational flexibility”), and analytical and data-driven assessments (“nominal GDP” and “economic center of gravity.” 

    Overall, the political-ideological voice overshadows the professional-strategic voice, especially in the introduction and conclusion, which customarily summarize a document’s overall message. 

    Within these voices, word analysis indicates three major narrative themes. The first is “peace through strength,” which appears 13 times. It is hardly a novel theme; it has been espoused by Emperor Hadrian, George Washington, Theodore Roosevelt, and, more recently, Barry Goldwater and Ronald Reagan. But its frequency in the new NDS is a sharp increase from two mentions in 2018 and none in 2022. 

    The second theme, at 11 mentions, is “burden-sharing” among allies. This theme was absent in 2018 and appeared three times in 2022, and was then only used in the sense of “nuclear burden-sharing.” 

    Tied for second is “defense industrial base.” While the topic has been reported as a new focus of U.S. strategy, its frequency is statistically similar to the nine mentions it received in the 2022 document.

    New words

    The 2026 NDS includes several terms and focus areas that have not appeared in earlier such documents.

    The most frequent is the Trump administration's moniker for the agency that issued the document: “Department of War,” used 27 times. A department's name can only officially be changed by Congress, so the document’s title “National Defense Strategy” is not included in that count.

    In second place is "narco-terrorist," which is an interesting reframing of a threat. “Terrorism” and “terrorist” are hardly new terms; they collectively appear 18 times in 2026, up from 14 times in 2022 and 22 times in 2018. However, two-thirds of the mentions in the new strategy take the form of “narco-terrorists,” which did not appear in either of the previous two strategies. 

    A similar reframing takes place around threats within or near U.S. national territory. The new document mentions “homeland” 28 times, down from 58 in 2022. But “Western Hemisphere” and “hemispheric” get 13 mentions, up from just two in previous strategies. This regional focus is reinforced by four mentions of the "Monroe Doctrine," which did not appear in the 2022 or 2018 documents. "Greenland” appears five times, after not being an area of discussion in either the prior Trump or Biden national defense strategy documents.

    Finally, the document also includes five mentions of “warrior ethos.” It is a new term for U.S. national defense strategy documents, but notably each use talks about “restoring” it.

    What’s left out

    Defense analysts often focus on what’s on the page, but the real intelligence can often lie in what’s been scrubbed or reduced. 

    Unsurprisingly, the new document does not mention “climate” or “diversity,” which appeared 13 and eight times, respectively, in the previous version. More striking is the absence of “Taiwan,” which was mentioned four times in 2022. 

    The strategy is also mute on the “Department of Government Efficiency,” or DOGE, effort, a signature (and controversial) part of the first year of the Trump Pentagon that arguably had the largest effect on the future “means” side of any discussion of U.S. defense strategy.

    Perhaps most striking, though, is the absence of action items. As a parallel, when business analysts examine company strategy documents, they often chart the ratio between abstract aspiration terms (e.g., “synergy,” “seamless,” “world-class”) and concrete verbs (e.g., “procure,” “divest,” “test”). The 2026 NDS lacks any mention of force planning or the size and shape of the military, which consumed entire sections of past US defense strategies. 

    Declining importance

    Beyond omissions, there are also notable areas that the new strategy does not like to talk about as much as past documents. 

    The most significant reduction is mentions of “China” or “PRC,” which dropped from 101 mentions in 2022 to 26 in the new document. The tone has shifted as well: four of the discussions of China emphasize a goal of being respectful towards Beijing and the rest offer reassurance that U.S. strategy’s goal simply is to deter but not threaten it. By contrast, the 2022 strategy called the Chinese military a “pacing challenge”—the phrase, which appeared 10 times, is absent from the new version—while the 2018 version was directly adversarial, using descriptors like “China is a strategic competitor using predatory economics to intimidate its neighbors while militarizing features in the South China Sea.”

    “Russia” sees a similar decline in frequency—15 mentions, down from 89 in 2022—and a marked defanging of tone. Three-quarters of the 2026 mentions of Russia in the strategy downplay its threat—for example, describing it as “manageable” by Europe with less U.S. help. This is quite different from the 2022 discussion of Russia and, even more, the 2018 strategy that declared “Russia wants to shape a world consistent with their authoritarian model.” Related, “Ukraine” falls from 13 mentions in 2022 to four in 2026. 

    Iran and North Korea are similarly downgraded in rhetorical importance. Mentions of “Iran” fall to 13 from 33 mentions in 2022, while the nine mentions of “North Korea” and “DPRK” are down from 34 in the previous version. 

    Defense technology, long a pillar of U.S. strategies, gets far shorter shrift in the new document. “Cyber” declines to six mentions, from 32 in 2022 and eight in 2018. “Bio” threats and tech, mentioned eight times in 2022 and five in 2008, go entirely unmentioned. And, while AI may have drastically taken off in the last few years, it only gets one mention in the new US National Defense Strategy, as compared to 4 in 2022 and 2 in 2018. Even "missile defense" is largely absent as a broader concept. The “Golden Dome” project is mentioned just three times, a stark contrast to the 48 times that “missile defense” appeared in 2022, bolstered by the deliberate accompanying Missile Defense Review. 

    Finally, “Space” as a domain or issue of conflict shrank drastically. After being discussed six times in the 2018 document, it skyrocketed to 41 times in the 2022 document. It plummeted back to earth with just two mentions in the 2026 document, despite the creation of the Space Force being one of the more significant national defense actions of Trump’s first administration. 

    Conclusion

    No strategy fully survives contact with a changing world. So the raw numbers in the new document don’t directly tell us what happens next—in everything from defense budgets and military sizing to where, when, and against whom the U.S. military might be asked to use force. 

    But overall word counts and their patterns do reveal something maybe more important. At least by the raw numbers, America’s official national defense strategy now has drastically changed priorities, interests, tones, narratives, and even voices. As such, it may be the most revelatory strategy ever written.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A gearbox failure forced a Marine Corps V-22 to make an emergency landing on Feb. 3, days before Navy leaders briefed lawmakers on fixes being implemented for the troubled tiltrotor aircraft.

    A MV-22B with the 1st Marine Aircraft Wing landed in the Tactical Flight Training Area on Oahu, Hawaii, “after experiencing an in-flight malfunction,” according to an emailed statement from the aviation wing.

    None of the crew was injured but the aircraft will “require maintenance actions and repairs” before returning to its home station, the statement said. An investigation into the mishap is ongoing. A gearbox failure was the root cause of a 2023 Air Force Osprey crash that killed eight airmen and a 2022 crash that killed five Marines.

    Naval Air Systems Command confirmed in an emailed statement that the Osprey belonged to the wing’s VMM-268 squadron and added that “the aircrew executed the precautionary procedure in accordance with established standards, remaining fully committed to safety.” 

    The incident happened a week before a Feb. 10 briefing about the Osprey program by Naval leaders to Congress. They discussed efforts to address recommendations  in two watchdog reports released late last year, and said some of the permanent fixes won’t be fully implemented until the 2030s. News of the latest mishap was made public by Rep. Joe Courtney, D-Conn, during the hearing.

    “Your office was very good about notifying, I think, a number of us,” Courtney told Brig. Gen. David Walsh, NAVAIR’s program executive officer for air anti-submarine warfare, assault and special mission programs. “There was a crack in the gearbox that was detected just, actually, last week or so.”

    Since 2022, four V-22 crashes have killed a total of 20 service members. Investigations blamed  failures within the Osprey’s proprotor gearbox and sudden surges in power after a clutch slip, known as a hard clutch engagement. After the crashes, the Pentagon imposed range and other limits on V-22 flights. 

    A person familiar with the Feb. 3 incident told Defense One that the MV-22B does not have the permanent mechanical solution for the gearbox yet and that it is flying in a restricted status. He said the interim gearbox on the aircraft was in its early flight hours. 

    “It looks like this is going to be a situation where a gearbox failed within the realm of what we would expect because of the interim solution,” the person said. “Some of these gear boxes have that infant mortality where if something is going to happen, we expect it to happen within X amount of hours.”

    In the Marine Corps’ 2026 aviation plan, released the same day as the House hearing, the service praises the Osprey as the “cornerstone” of its air-ground task forces. 

    “The MV-22 Osprey provides unmatched operational flexibility due to its combination of speed, range, payload, and aerial refueling capability,” the document reads. 

    The service began replacing its gearboxes this month and is “estimated to result in an unrestricted operational fleet by December 2027,” according to the service’s aviation plan. 

    The gearbox upgrades are to be finished for the Air Force and Navy in 2029 and the Marine Corps in 2033, according to a Feb. 11 statement by NAVAIR.

    Vice Adm. John Dougherty, NAVAIR’s commander, told lawmakers on Tuesday that completely redesigned Input Quill Assemblies to remedy hard clutch engagements should be fielded in late 2027. The Marines plan to install its new assemblies in 2028, the service’s aviation plan said.

    In December, the Government Accountability Office and NAVAIR separately issued reports that said the V-22 Joint Program Office failed to adequately assess and address mounting safety risks, even as service members died.

    No Navy rotorcraft had more "systems safety risk assessments”—that is,  unresolved catastrophic parts problems, the reports said. Only one other aircraft type—the F-35—had more than the V-22’s 28.

    On Tuesday, Courtney told Navy leaders that the service “should explore the possibility of legislative action to codify elements of these recommendations,” akin to the late Sen. John McCain’s push for naval safety reforms after a string of ship collisions in 2017.

    That “would send a powerful message to our service members and the public that ‘real change is happening.’” he said.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶