• Protective DNS is the rare control where the cheap options are genuinely good so this comparison leads with value. The verdict: DNSFilter is the best published-price PDNS for most organizations, Cloudflare Gateway owns the free-to-enterprise arc (and now runs the UK’s national PDNS with Accenture), N-able and ScoutDNS serve MSPs at fair rates, CIRA gives […]

    The post The 12 Best Protective DNS (PDNS) Services, Compared and Priced (2026) appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Trax International Corporation is asking the U.S. Court of Federal Claims to direct the Army to reevaluate bids for mission support services at White Sands Missile Range — in part because the department allegedly misused AI to determine the contract award.

    Trax's complaint, filed in late July, alleges that the Army used AI that hallucinated multiple times, creating the false impression that the company's bid was weaker than rival Southwest Range Services’ successful bid of roughly $450 million. The Government Accountability Office denied Trax’s bid protest in May.

    The lawsuit claims that records the Army provided to GAO did not explain whether assigned strengths for the Southwest Range Services bid came from a human at the Source Selection Evaluation Board or an AI tool. 

    The suit also claims that the Army conceded that one of the weaknesses it identified with Trax’s bid is unsupported by documentation. In fact, the suit said, the purported weakness is a “classic AI hallucination, with made-up references to TRAX’s proposal, that no one on the [Source Selection Evaluation Board] checked.”

    “Given the $29.4 million price premium associated with [Southwest Range Services’] proposal, there is a reasonable possibility that the removal of this Weakness could have changed the award decision,” the lawsuit states.

    The Army declined to comment on the ongoing litigation.

    Trax is not the first contractor to publicly allege that an agency has wrongfully used AI to evaluate contract bids. 

    Salient CRGT alleged that a Defense Department subagency improperly used AI, rather than human employees, to evaluate bids. The Government Accountability Office dismissed the allegation in a decision dated Jan. 5, 2026.

    Contractors will likely continue to scrutinize federal agencies’ use of AI in evaluating bids, according to David Timm, a partner at Burr & Forman.

    In a recent Washington Technology op-ed, Timm raised concerns that few civilian agencies are reporting the use of AI in bid evaluations as “high-impact.” That means agencies have either not implemented minimum risk practices or have not publicly disclosed them if they have, he told Nextgov/FCW in an email.

    The Defense Department has said that it used AI to help evaluate bids in several recent solicitations. But if agencies don’t widely disclose this, it could become harder for contractors such as Salient CRGT and Trax to successfully argue the government misused AI.

    “More bid protests are likely to come as the ungoverned and undisclosed use of GenAI tools results in errors throughout the procurement, but if agencies do not comply with the [Office of Management and Budget] rules it will complicate how contractors prove their allegations,” Timm wrote in the op-ed.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Apparently, opening the thing is now enough. A repo can run before the first prompt, a package can hide among hundreds, and a harmless-looking PDF can finish the job. This week runs on cheap leverage: exposed servers, recycled bugs, poisoned agent instructions, remote-access tools dressed as support software, and trusted defaults doing attackers a favor. Nothing here is especially mystical.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Forescout disclosed 15 TP-Link flaws at Black Hat USA 2026 that could expose Omada credentials and VPN keys, allow internal access and affect VIGI camera feeds.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Critical vulnerabilities in the open-source Paperclip AI-agent orchestration platform could allow attackers to execute commands remotely on exposed servers or on a developer’s local machine. These flaws arise from broken authorization boundaries across agent imports and API routes, as well as trust assumptions for localhost. Paperclip is designed to coordinate autonomous agents across “companies,” with […]

    The post Critical Paperclip AI Agent Flaws Allow Unauthenticated Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The fake “undetected” Xeno Roblox executor currently circulating on gaming forums and Discord is a weaponized loader for the Powercat Java stealer, a multi‑stage RAT and infostealer that targets Discord, Roblox, Minecraft, crypto wallets and payment tokens while enabling full remote control of infected Windows systems. Threat actors are promoting trojanized Xeno executors through Roblox‑focused […]

    The post Fake Xeno Roblox Executor Delivers Powercat Java Stealer Through Discord appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • This week in cybersecurity from the editors at Cybercrime Magazine

    Sausalito, Calif. – Aug. 5, 2026

    Cybersecurity VC Deal Flow Tracker

    During Black Hat USA 2026 at the Mandalay Bay Convention Center in Las Vegas this week, outdoor daytime high temperatures reached roughly 109°F to 113°F under an active Extreme Heat Warning.

    The excessive heat is a barometer for cybersecurity venture funding this season. Since the beginning of summer Jun. 21, the Cybersecurity Ventures VC Report has tracked the following 9-figure deals:

    6/30. Quantifind raises $200M for AI-powered risk management

    7/7. Keyfactor secures $1B+ to lead post-quantum security race

    7/20. Neo Launches with $100M to Secure AI Software Across the Enterprise

    7/22. Glow Emerges From Stealth With $180M to Reinvent Endpoint Security in the AI Era

    7/29. ThreatLocker Raises $190M in Series F Funding

    7/29. Bot-detection startup Spur nabs $200M from Insight

    7/30. AI security startup Onyx raises $113M Series B Funding Round

    8/3. Israeli cybersecurity startup Zenity raised $125M Series C funding round

    8/3. Cyber Startup Horizon3.ai Raises $250M

    In addition to these $100 million+ investments, we’ve tracked far too many $50 million+ deals to be listed here.

    The forecast for cybersecurity VC investments for the rest of 2026 is hot.

    Cybersecurity VC Deal Flow Tracker



    Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

    • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
    • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
    • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
    • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
    • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
    • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
    • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
    • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
    • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

    Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

    The post Extreme Heat Warning: Summer 2026 Cybersecurity Venture Capital Investments appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cloudflare has open-sourced Cloudflare OS, a platform designed to provide enterprise AI agents with controlled access to internal systems, company context, and workflows without exposing long-lived credentials or bypassing access controls. This release addresses a significant security challenge for enterprises: while agents need access to business data and tools to be effective, conventional API keys […]

    The post Cloudflare Launches Open-Source OS to Secure AI Agents’ Access to Internal Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network. Its August 3 scan counted 4,407 exposed Rockwell controllers worldwide, including 2,844 in the United States, but Forescout could not confirm any were compromised. That figure counts exposed

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Vanta Stealer is a Python‑based, cross‑platform information stealer that uses layered PyArmor obfuscation on top of a PyInstaller‑packed executable to harvest browser passwords, crypto wallet data, Discord tokens, gaming accounts, VPN configs, and sensitive documents. Vanta Stealer exemplifies the current shift toward Python for modular, easily maintainable malware, while abusing commercial protection frameworks like PyArmor […]

    The post Vanta Stealer Uses PyArmor to Steal Browser Passwords, Crypto Wallets and Discord Tokens appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶