The News And Times Review - NewsAndTimes.org | Links | Blog | Tweets  | Selected Articles 

Categories
Full Text Articles - Audio Posts

Palo Alto Networks fixed multiple privilege escalation flaws

Spread the news

Palo Alto Networks addressed multiple vulnerabilities and included the latest Chrome patches in its solutions.

Palo Alto Networks fixed seven privilege escalation vulnerabilities and integrated the latest Chrome security patches into its products.

Palo Alto applied 11 Chrome fixes and patched CVE-2025-4233, a cache vulnerability impacting the Prisma Access Browser.

The most severe vulnerability, tracked as CVE-2025-4232 (CVSS score of 7.1), is an authenticated code injection through wildcard on macOS.

“An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™ app on macOS allows a non administrative user to escalate their privileges to root.” reads the advisory.

The company also addressed a PAN-OS Authenticated Admin Command Injection Vulnerability, tracked as CVE-2025-4231 (CVSS score of 6.1), in the Management Web Interface.

The command injection flaw in Palo Alto Networks PAN-OS allows authenticated admins with web interface access to execute actions as root. The company states that Cloud NGFW and Prisma Access are unaffected.

Another issue fixed by the company is PAN-OS: Authenticated Admin Command Injection Vulnerability Through CLI that is tracked as CVE-2025-4230 (CVSS score of 5.7).

“A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI.The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators.” reads the advisory. “Cloud NGFW and Prisma® Access are not affected by this vulnerability.”

The firm also fixed a PAN-OS flaw, tracked as CVE-2025-4228 (CVSS score 1.0) exposing unencrypted SD-WAN data and a Cortex XDR Broker VM bug that let attackers escalate privileges to root.

The security vendor is not aware of attacks in the wild exploiting any of these vulnerabilities.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, PAN-OS)


Spread the news
Categories
Full Text Articles - Audio Posts

British Defence Intelligence Update Ukraine 12 June 2025

Spread the news

Latest from the British Defence Intelligence.

Spread the news
Categories
Full Text Articles - Audio Posts

The Invisible Side of Reconstruction: How EU Sanctions on Russia are Impacting Businesses in Ukraine

Spread the news

Many businesses are preparing for a post-war gold rush in Ukraine. But whoever wants to get on the ground before the war ends must contend with serious legal constraints.

Spread the news
Categories
Full Text Articles - Audio Posts

Russia-Ukraine War: Any Chance of a Negotiated Solution?

Spread the news

European commentators discuss what steps could end the war.

Spread the news
Categories
Full Text Articles - Audio Posts

The Return of Peace Through Strength

Spread the news

“Two months ago,” Donald Trump posted Friday morning, “I gave Iran a 60 day ultimatum to ‘make a deal.’ They should have done it! Today is day 61.” That deadline was firmer than the mullahs realized. Thursday night, Israeli operatives in Iran released swarms of drones and other precision munitions while Israeli aircraft rained down strikes from above. Within hours, they killed the commander of Iran’s military, his deputy, the commander of the Islamic Revolutionary Guard Corps, the head of the terrorist Quds Force, and several top nuclear scientists. The Israelis lured nearly all of the Revolutionary Guard’s aerial leadership into a bunker and then destroyed it. As one reporter put it, “the senior chain of command has collapsed.”

If it achieves its greater goals, Israel will not only mete out justice for the countless lives ruined by Tehran’s murderous fanatics and devastate one of its—and America’s—greatest foes. It will also give the Middle East its first real chance for peace in decades. Donald Trump, who played an important role in this masterstroke, has rediscovered the key to American success in the Middle East: Work with Israel against our shared enemies.

Israel is a model ally for the United States. It is a nuclear armed, militarily powerful, pro-American democracy in a strategically important part of the world. Our interests are not always identical, but our enemies are. Actual realists understand that reinforcing Israeli power, like Henry Kissinger did, is the key to achieving American strategic objectives in the Middle East. In the 1970s, America’s close relationship with Israel forced the Soviet’s Arab lackeys to come begging to Washington. Despite the protestations of the peace process crowd, Kissinger used Israeli power to drive Moscow out of the region.

Yet for some reason, many cannot understand these basic facts and their implications. The peaceniks believe the key to Middle East peace is to convene multilateral conferences that browbeat Israel into, well, something. And since Oct. 7, a swarm of ne’er-do-wells have emerged from the woodwork to claim that the Jewish state is trying to get the United States to fight its wars.

This uniparty of Obama administration veterans, other left-wingers, and self-proclaimed MAGA leaders shrieked in horror at the blow Israel administered to the “death to America” crowd. Tucker Carlson whined that Trump was “complicit in the act of war.” Failed vice-presidential candidate Tim Walz plaintively hoped on Friday that “it might be the Chinese” who could “negotiate some type of agreement … and hold the moral authority.”

This smooth-brained bigotry masquerading as strategic analysis led the United States into a dilemma where its biggest enemy in the region, which has attacked Americans at home and abroad continuously for nearly half a century, was within days of getting the bomb.

Trump is not nearly such a fool. Unlike those ideologues, he is a shrewd judge of power and knows that his base loves allies who fight their own battles and defeat America’s enemies. “I told Iran they should settle,” he told the Washington Free Beacon Friday. “If I were them, I would want to settle.” In the past few weeks, Trump and Netanyahu initiated a textbook deception campaign that caught Iran’s leadership completely by surprise. “I always knew the date,” Trump assured the New York Post, “because I know everything.”

Most of Iran’s senior leaders did not survive long enough to discover their blunder, and the initial Iranian attempt at retaliation was a pathetic failure: Israel crippled the ayatollah’s ballistic missile force while Iran’s Lebanese lackey, Hezbollah, practically begged Israel to let it stay out of the fight. As of this writing, another wave of Israeli aircraft is above Iran again.

This is but the latest battle in the war that Iran began on Oct. 7, and the going could get tougher as Iranian forces reorganize. Israel has reportedly sent many of Iran’s top nuclear scientists to their eternal reward, but the nuclear facilities are still intact.

“Let me be clear,” Secretary of State Marco Rubio said Thursday night. “Iran should not target U.S. interests or personnel.” Two American destroyers that can intercept Iranian missiles sailed toward Israel on Friday. These are good first steps. He and his subordinates should give the Israelis the time they need to finish the job. Encouraging British prime minister Keir Starmer to borrow a spine from French president Emmanuel Macron would be good.

Removing Iran’s nuclear arsenal is also a priority. It is possible that Israel will not be able to reach some of the more fortified Iranian facilities using conventional explosives. Since this is an existential battle for Israel, it would be prudent to resolve that problem by either convincing what remains of Iran’s leadership to surrender its entire nuclear program or by offering Israel some of our much larger bunker busters.

“I think it’s been excellent,” Trump told ABC. “We gave them a chance [to negotiate] and they didn’t take it. They got hit hard, very hard … And there’s more to come. A lot more.” During Trump’s first campaign, many observed that the best way to understand the future president was to take him seriously, not literally. It turns out that when he said he wanted peace through strength, he meant it both ways.

The post The Return of Peace Through Strength appeared first on .


Spread the news
Categories
Full Text Articles - Audio Posts

Virginia AG Hopeful Was Outraising His Rival — Then Dominion Energy Tipped the Scale

Spread the news

Both candidates for Virginia attorney general in Tuesday’s Democratic primary have much in common. They’ve both promised, for instance, to fight against Donald Trump and DOGE, and to protect abortion rights.

When it comes to who is funding their campaigns, though, there’s one source of cash that marks a striking difference between the candidates: Dominion Energy, the Fortune 500 utility company that has long thrown around huge sums to shape politics in Virginia.

In the attorney general primary this year, local prosecutor Shannon Taylor has accepted $650,000 in donations from Dominion, while former state delegate Jay Jones has not taken any from the company.

And that cash has made a difference: Jones had a significant fundraising lead this year — until Dominion began sending checks to Taylor.

The spending split shows how Dominion continues to shape Democratic politics in the state, six years after party leaders said they would refuse donations from the controversial electricity monopoly. In response to Dominion’s attorney general race donations, 14 current and former Democratic officials aligned with Jones wrote a letter this week calling out Taylor for what they said was a looming conflict of interest.

“The scale of these contributions appears to be unprecedented in Virginia Attorney General races,” the officials said. “This level of corporate influence over a candidate seeking the state’s highest law enforcement position undermines public confidence in the independence and integrity of the office.”

Hitting a theme of her long experience as a prosecutor, Taylor’s campaign said in a statement, “Shannon is the only Democrat who can be trusted to flip this seat and fight back against Donald Trump.”

In a statement, Jones’s campaign manager Rachel Rothman took a swipe at Taylor’s reliance on Dominion cash. She said, “Shannon Taylor is clearly aspiring to be Dominion’s in-house counsel.”

Power Player

Nobody in Virginia politics has a pocketbook quite like Dominion. The company is the leading campaign contributor this election cycle, according to the nonprofit Virginia Public Access Project. For years, it has showered candidates with what one observer called a “staggering” amount of cash.

Meanwhile, the company has faced complaints about its business.

Dominion has been accused of overcharging customers by $1.2 billion over a yearslong period, slowing efforts to develop rooftop solar energy, and threatening the climate with a since-canceled natural gas pipeline.

Dominion’s political vise grip allowed it to get away with it all, critics said.

In recent years, however, that grip has loosened. Responding to outrage from voters, the Democratic Party announced that it would no longer accept donations from Dominion — though individual candidates were not obliged to follow suit.

Some Democrats have continued to take money from the company, while others have aligned themselves with the Clean Virginia Fund, a political organization created by a wealthy Charlottesville investor named Michael Bills to combat Dominion’s influence in state politics.


Related

$800,000 of Mystery Money Shaped the Virginia AG Race in the Final Weeks


In 2018, then-attorney general Mark Herring, a Democrat, said he would stop taking money from Dominion. That did not stop the company from donating in 2021 to the Democratic Attorneys General Association, which spent on ads to support Herring when he was fighting a primary battle against Jones. The donation was not made public until after Jones had lost the race.

The intra-party split is playing out again in this year’s attorney general race.

Dominion, which partnered with environmental groups on an unsuccessful clean energy bill last year, defended its involvement in state politics in a prepared statement.

“Like most companies, we participate in the political process on behalf of our thousands of employees and millions of customers,” said Aaron Ruby, a company spokesperson. “They depend on us for reliable, affordable and increasingly clean energy. We contribute to candidates from both parties in support of common sense public policy.”

An Equalizer

The Virginia attorney general race is one of this year’s marquee contests. Because the state has a large contingent of federal workers affected by DOGE cuts and the office’s ability to challenge actions by the administration, the race viewed as a bellwether for how Trump’s second term is going over with voters.

Dominion has its own reasons for being interested. The attorney general’s office also plays an important role in utility regulation in the state. In 2022, Jason Miyares, a Republican and the current attorney general, tangled with Dominion Energy over whether a large offshore wind project did enough to protect ratepayers from potential cost overruns before reaching an agreement.

The massive donations to Taylor have helped her even out Jones’s fundraising advantage. Jones has won endorsements from centrist Democrats such as former Virginia governors Ralph Northam and Terry McAuliffe, as well as national figures like Sen. Cory Booker, D-N.J. Along the way, Jones raised $2.7 million compared to Taylor’s $2.1 million. Jones’s major contributors include the Clean Virginia Fund, which has given his campaign nearly $579,000, according to disclosures.

Prolific campaign spending by Bills, the Clean Virginia Fund founder, has drawn criticisms of its own from observers who say it is drowning out small-dollar donors.

Earlier this month, Jones also received $1,000 from a Dominion Energy executive, complicating his allies’ criticism of Taylor. Jones’s campaign said they are refunding the money.

Both candidates have criticized Miyares for not doing enough to fight back against Trump, and both have promised to fight for abortion rights.

Jones has pointed to his experience fighting for consumer rights as a lawyer at the D.C. attorney general’s office and his legal fights with the administration of Republican Gov. Glenn Youngkin over voting rights.

Taylor, the commonwealth attorney for Henrico County, has leaned heavily on her experience as a criminal prosecutor. In a statement responding to the letter from Democratic officials criticizing the Dominion donation, Taylor repeated her allegation that Jones lacks the experience to serve as the state’s top law enforcement official.

“Jay Jones has never prosecuted a case and spent less than 10 months in the DC AGs office,” the release said. “Shannon spent 30 years prosecuting thousands of cases to protect Virginia families and hold fraudsters accountable.”

Taylor also called out a few thousand dollars that Jones took from lobbyists associated with Dominion Energy between 2021 and 2024, and donations from the company itself in 2017 and 2018.

Rothman, Jones’s campaign manager, said, “Virginia needs an Attorney General who fights for Virginians first. That candidate is Jay Jones.”

Democrats are banking on outraged voters angry at Trump to hand them victories in key statewide races on the ballot this year, including governor and lieutenant governor.

Dominion could be the ultimate winner, regardless of whether Democrats are right. The company has also donated $175,000 to the campaign of Miyares, who rallied with Trump ahead of last year’s election. His campaign did not respond to a request for comment.

The post Virginia AG Hopeful Was Outraising His Rival — Then Dominion Energy Tipped the Scale appeared first on The Intercept.


Spread the news
Categories
Full Text Articles - Audio Posts

‘I’m Losing Blood… I’m Under a Tree’: HUR Intercept Reveals Dying Russian Soldier’s Haunting Last Words

Spread the news

Fatally wounded, a Russian soldier lies under a tree, bleeding and hallucinating, telling a comrade, “My calf is torn off, you can’t stop it.”

Spread the news
Categories
Full Text Articles - Audio Posts

Israel Attack on Iran Tests Trump Promise Not To Be Dragged Into War

Spread the news

Israel’s strikes on Iran test Trump’s vow to avoid new wars, exposing divisions in his base over how far the US should go in backing its closest ally.

Spread the news
Categories
Full Text Articles - Audio Posts

Unusual toolset used in recent Fog Ransomware attack

Spread the news

Fog ransomware operators used in a May 2025 attack unusual pentesting and monitoring tools, Symantec researchers warn.

In May 2025, attackers hit an Asian financial firm with Fog ransomware, using rare tools like Syteca monitoring software and pentesting tools GC2, Adaptix, and Stowaway. Symantec researchers pointed out that the use of these tools is unusual for ransomware campaigns. Notably, attackers created a service post-attack to maintain access, a rare persistence move. The attackers remained in the network for two weeks before launching the ransomware, signaling a more calculated, long-term strategy.

Fog ransomware has been active since at least May 2024 and focused on U.S. schools. The threat initially spread via compromised VPNs. By late 2024, it exploited a severe Veeam VBR flaw (CVE-2024-40711, CVSS 9.8). In April 2025, attackers shifted to email-based infections, with ransom notes mocking Elon Musk’s DOGE agency and offering free decryption if victims infected others, highlighting its evolving and provocative tactics.

The researchers were not able to determine the initial infection vector in a recent Fog ransomware attack, however, experts thought Exchange Servers were involved. Attackers deployed rare tools, including GC2, which uses Google Sheets or SharePoint for C2, and the Syteca monitoring tool, possibly for espionage. They used Stowaway for delivery, PsExec/SMBExec for lateral movement, and removed evidence post-use. Attackers used tools like Adaptix C2, FreeFileSync, MegaSync, and Process Watchdog to steal data, maintain persistence, and control.

This ransomware attack was highly unusual due to the atypical toolset used, the researchers speculte that tools like Syteca, GC2, Stowaway, and Adaptix C2 are rarely seen in such cases. The attackers also established persistence post-ransomware deployment, which is uncommon. These signs suggest the attack may have had espionage motives, with ransomware possibly used as a decoy or secondary goal.

“These factors mean it could be possible that this company may in fact have been targeted for espionage purposes, with the ransomware attack merely a decoy, or perhaps also deployed in an attempt by the attackers to make some money while also carrying out their espionage activity.” concludes the report that includes indicators of compromise. “What we can say with certainty is that this was an unusual toolset to see in a ransomware attack and is worth noting for businesses and corporations wanting to guard against attacks by malicious actors. “

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, Fog ransomware)


Spread the news
Categories
Full Text Articles - Audio Posts

Drone Strike Hits Russia’s Largest Chemical Plant in Overnight Attack

Spread the news

Drones struck deep inside Russia overnight, targeting major chemical sites including Nevinnomysskiy Azot, a strategic fertilizer giant in the heart of southern industry.

Spread the news