A previously undocumented Sirius backdoor variant during a priority customer investigation, revealing a multistage campaign that hides malicious code…
Category: GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Hackers Compromise 17 Exposed AI Pentesting Panels to Deploy Malware and Steal Credentials
Attackers have compromised at least 17 internet-exposed Cairn AI penetration-testing panels, turning autonomous security agents against their own…
Researchers Discover OpenAI API Vulnerability That Leaks Hidden AI Reasoning Traces
Researchers have disclosed a vulnerability in the OpenAI API that reveals hidden reasoning traces by exploiting conversation compaction. This technique,…
HashiCorp Consul Vulnerability Allows Attackers to Bypass Authorization and Gain Elevated Privileges
HashiCorp disclosed a vulnerability in consul-k8s, a cross-namespace authorization bypass that could let attackers with limited Kubernetes permissions…
Hackers Use Google Ads to Push Fake Claude Downloads Hosted on Real Claude.ai Domain
Hackers are buying Google Ads to promote fake Claude download pages hosted on Anthropic’s legitimate claude.ai domain, exploiting content-sharing features…
Alibaba’s Qwen AI Model Attempts to Upload Files to China While Performing Cybersecurity Tasks
Researchers found that Alibaba’s Qwen3.8-Flash-Next model attempted an unauthorized upload to an Alibaba Cloud storage bucket in Beijing while performing…
DreamHost Security Incident Forces Password Resets for Email and FTP/SFTP Accounts
DreamHost has implemented forced password resets for certain email and FTP/SFTP accounts following an incident that affected its File Manager and webmail…
Apple Fixes Actively Exploited iOS Zero-Day Vulnerability in CoreGraphics
Apple has released updates for iOS 18.7.11 and iPadOS 18.7.11 to address three security vulnerabilities, including a CoreGraphics flaw connected to…
Hackers Abuse Magento CMS Blocks to Infect Online Stores and Evade Malware Detection
Hackers are injecting JavaScript into Magento CMS blocks to maintain access to compromised storefronts while selectively hiding malicious responses from…
12 File Integrity Monitoring (FIM) Tools: The 2026 Buyer’s Verdict Guide
File integrity monitoring succeeds by what it ignores: PCI DSS mandates the control, but a tool that pages on every patch Tuesday trains the SOC to delete…
12 Digital Rights Management (DRM/IRM) Solutions: The 2026 Buyer’s Verdict Guide
Rights management is three different purchases sharing an acronym enterprise IRM keeping policy attached to internal documents, hard-shell DRM protecting…
12 Secure File Sharing Solutions: The 2026 Buyer’s Verdict Guide
Users share files the easiest way available, so secure file sharing succeeds only when the governed path is the easy path. This verdict guide spans the…
9 Managed File Transfer (MFT) Solutions: The 2026 Buyer’s Verdict Guide
MFT buying is posture-first now the category’s mass-exploitation years made exposure architecture and patch velocity selection criteria ahead of any…
University of Copenhagen Confirms Data Breach Affecting 525,000 People
The University of Copenhagen has confirmed a data breach affecting about 525,000 individuals after hackers accessed a test environment that contained…
Fake Microsoft Teams IT Support Messages Lead to Remote Access and Malware Infections
More than 400 incidents in which attackers abused Microsoft Teams external chats to impersonate IT support, obtain remote access, and deliver malware.…
Hacker Uses Generative AI to Breach 90 Companies and Steal 8.2 Million Records
South Korean police have arrested a 32-year-old suspect, identified only as A, accused of leading a massive data breach that stole 8.2 million personal…
OpenAI Releases GPT-6.1 Terra With Advanced Computer Use and AI Agent Capabilities
OpenAI has introduced GPT-6.1 Terra, an AI model that combines visual reasoning, desktop interaction, and software engineering capabilities to automate…
Microsoft 365 Token Replay Attacks Let Hackers Access Business Emails Without Passwords
Hackers accessed Microsoft 365 environments at 79 organizations by replaying stolen sign-in sessions, letting them enter business accounts without…
Hackers Use Instagram Ads to Deploy Coruna and DarkSword Spyware on iPhones
Cybercriminal groups are using malicious Instagram advertisements, abandoned analytics tags, and compromised websites to deliver Coruna and DarkSword…
Hackers Abuse ConnectWise Cloud Backup Credentials to Launch AI-Driven Microsoft 365 Attacks
Hackers abused compromised ConnectWise Cloud Backup application credentials to access Microsoft 365 environments, escalate privileges, and plant…