Hackers used apparently AI-generated scripts to compromise government Linux infrastructure, harvest credentials and pursue sensitive databases and…
Category: GBHackers Security | #1 Globally Trusted Cyber Security News Platform
12 DevSecOps Platforms: The 2026 Buyer’s Verdict Guide
DevSecOps platforms sell one promise in several architectures: security that rides the development workflow instead of auditing it afterward. The 2026…
Hackers Use Fake App Updates to Replace Legitimate Banking Apps With Malicious Versions
Hirudo, an Android banking remote-access trojan (RAT) that can steal credentials and remotely control an infected phone. Its most unusual feature is the…
Hackers Exploit Siemens Software Center Vulnerability to Execute Malicious Code
Siemens has confirmed that the CVE-2026-110936 vulnerability, a DLL side-loading flaw in Siemens Software Center, is being actively exploited. Attackers…
Attackers Target Flowise AI Agents With Credential Theft, Prompt Injection and Workflow Hijacking
An attacker used an exposed Flowise AI orchestration server to enumerate workflows, harvest credentials, and try to turn its language-model agent into an…
North Korean Hackers Use Post-Quantum Encryption to Conceal Malware in New Cyberespionage Campaign
North Korea-linked Lazarus Group used post-quantum cryptography in a cyberespionage campaign targeting South Korean organizations, concealing malware…
Hackers Plant Malware on Onamae.com Cloud Servers, 26,739 Systems Potentially Affected
Hackers gained unauthorized access to Onamae.com Desktop Cloud. They installed malicious programs in customer server environments, prompting the Japanese…
Hackers Combine Claude Code, Codex, Grok, and DeepSeek to Automate Attacks Worldwide
A Chinese-speaking threat operator combined ARTEX, Claude Code, Codex, and configurations requesting DeepSeek, GLM, and Grok models to coordinate attacks…
Signal Vulnerability Could Keep Microphone Active Even After Users Hang Up
A critical vulnerability in Signal’s RingRTC calling library could let a malicious call participant keep receiving audio after another user tries to hang…
Node.js Patches 10 Security Vulnerabilities, Including High-Severity RCE Flaw
The Node.js Project released security updates on October 21, 2026, addressing 10 vulnerabilities across its 26.x, 24.x, and 22.x release lines. The…
LiteLLM Supply Chain Compromise Exposes AI Developer Credentials to Malware Attacks
LiteLLM version 1.107.0 was compromised in a supply chain attack that distributed credential-stealing malware through PyPI wheels and container images. On…
PHP Fixes Two Critical RCE Vulnerabilities Allowing Unauthenticated Code Execution
PHP released emergency security updates to address two critical vulnerabilities that could allow unauthenticated attackers to execute code on vulnerable…
Critical PHP Vulnerabilities Were Under Attack Days Before Security Updates Were Released
The detected exploitation attempts targeting two critical PHP vulnerabilities on October 17, 2026, four days before their public disclosure and security…
GoDaddy Revokes 404,607 SSL Certificates Following Certificate Issuance Error
GoDaddy has revoked 404,607 SSL/TLS certificates after discovering that certain subscriber certificates were issued outside the defined profiles in its…
GitLab Patches Critical 10.0 RCE Vulnerability Allowing Unauthenticated Remote Code Execution
GitLab has released emergency security updates to address a critical remote code execution vulnerability that could allow unauthenticated attackers to…
Google Chrome Integrates Gemini AI to Detect Fake Antivirus and Browser Update Scams
Google has enhanced Chrome’s AI-powered scam defenses with a new server-side Gemini model that detects fake antivirus alerts, fraudulent browser updates,…
Gemini-Compatible AI Browsers Could Help Scammers Run Thousands of Fake Accounts, Researchers Warn
Antidetect browsers tools that create separate browser profiles with altered digital fingerprints could help scammers operate thousands of apparently…
Gentlemen Ransomware Hackers Hijack Legitimate Lenovo Drivers to Disable Security Software
The Gentlemen ransomware operation is abusing legitimate Lenovo and Safetica kernel drivers to terminate security software, weakening endpoint defenses…
Cloudflare Warns of Active Exploitation Attempts Against Two Leaked PHP Flaws
Cloudflare has issued a warning about emerging attacks targeting two critical PHP vulnerabilities. In response, the company has implemented emergency web…
BRONZE SANDCASTLE Hackers Steal Active Directory Database Using Hidden Windows Backdoors
BRONZE SANDCASTLE intrusions involving hidden Windows backdoors and the theft of the Active Directory database. The suspected China-based group combines…