Dark Project, an emerging financially motivated ransomware operation, has claimed 38 victims across eight countries in the supplied threat intelligence…
Category: GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Hackers Use Fake Streaming Apps to Spread Mirax Android Malware and Steal Bank Accounts
Hackers are using streaming app lures to distribute Mirax. This Android banking trojan lets operators remotely control victims’ phones and initiate…
Hackers Put AI Agents on Autopilot to Steal Gaming Accounts and Apple Signing Certificates
ARTEX, a Chinese open-source agentic penetration-testing platform, to run autonomous attacks. The operators set a goal and then mostly check progress.…
Claude AI Flaw Lets Malicious Browser Extensions Execute Commands on Remote Computers
A design flaw in Anthropic’s Claude Dispatch feature let a malicious browser extension run commands on the operating system, even on a different computer.…
ChatGPT Lockdown Mode Bypass Allowed Hackers to Steal Private Chats Without User Interaction
Research found a flaw that bypassed ChatGPT’s Lockdown Mode. It let attackers silently exfiltrate full chat histories, deliver malware, and phish…
11 IT & Cyber Risk Management Tools: The 2026 Buyer’s Verdict Guide
IT and cyber risk management tooling is the register discipline underneath GRC’s broader umbrella: risks captured with owners and treatments, controls…
10 Security Ratings Services: The 2026 Buyer’s Verdict Guide
Security ratings grade organizations from the outside exposed services, patch cadence, breach signals and the scores now move real money: insurance…
11 Audit Management Software: The 2026 Buyer’s Verdict Guide
Audit management software succeeds on a simple test: do auditors live in it, or do they live in spreadsheets and paste into it before committee meetings?…
11 Security Policy Management Tools: The 2026 Buyer’s Verdict Guide
“Security policy management” names two different markets wearing one label, and this roster contains both: network security policy management (NSPM)…
Hackers Use ARTEX AI to Steal Azure Key Vault Secrets Just 5 Minutes After Finding Exposed GitHub Credentials
Attackers using the ARTEX agentic AI framework to discover exposed GitHub credentials and rapidly compromise cloud environments. In one intrusion, an AI…
OpenSSH sshole Flaw Allows Hackers to Log Into Password-Disabled Linux Accounts Using 257-Character Passwords
A decade-old authentication bypass in OpenSSH on musl-based Linux lets attackers log into accounts that should never accept a password. The flaw, dubbed…
Storm-2603 Hackers Exploit SharePoint and Abuse Cloudflare Tunnel to Hide Remote Access
A December intrusion to Storm-2603, the China-based group Microsoft ties to Warlock ransomware. The attackers used ToolShell flaws in on-premises…
Microsoft Paint Vulnerability Allows Hackers to Execute Malicious Code Remotely Without User Interaction
Microsoft has announced a vulnerability in Windows Paint that could let unauthenticated attackers execute malicious code remotely without any user…
New GhostMap Android Vulnerability Can Crash Phones Permanently Without Opening an App or Granting Permissions
Bitdefender researchers have revealed a vulnerability called GhostMap that affects Android devices. This vulnerability can cause phones to become stuck in…
ARTEX AI Framework Linked to Bank Breaches and Cloud Attacks Found Exposed Across Hundreds of Servers
An autonomous penetration-testing framework linked to South Korean banking breaches and cloud supply-chain attacks is publicly exposed across 1,465 hosts.…
Shopify Makes IP Allowlisting Mandatory for All Public Apps to Prevent Stolen API Token Abuse
Shopify is making IP allowlisting mandatory for all public apps to limit abuse of stolen API access tokens. Shopify announced this requirement on November…
OpenAI’s New GPT-6 Cyber Finds 81 High-Severity Firefox Vulnerabilities and 948 Linux Kernel Exploits
OpenAI has introduced GPT-6 Cyber, a security-focused model built to find and validate exploitable vulnerabilities while staying within the scope…
China-Aligned Hackers Hijack Popular Sogou Keyboard Software to Secretly Install DarkVigil Malware
A China-aligned espionage group abused the update traffic of Sogou Input Method, one of China’s most widely used keyboard apps, to quietly install the…
Apple to Scan Publicly Shared iCloud Photos and Files for Harmful Content Starting With iOS 27.3
Apple will start checking iCloud photos and files shared through “Anyone with the Link” for harmful content beginning with iOS 17.3. This policy also…
Hackers Develop New HYFLOCK Ransomware That Encrypts Files and Attempts to Block Recovery
HYFLOCK ransomware operators have developed successive Windows encryptors that lock files, access network shares, and attempt to obstruct recovery, while…