Rank Math has reported a security incident involving malware distributed through Rank Math PRO version 3.0.123. They warn that WordPress websites using…
Category: GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Hackers Can Take Over WordPress Websites Without a Password Using Two Security Flaws
Hackers can compromise vulnerable WordPress websites without stealing passwords by chaining two security flaws in the platform’s core. Disclosed in July…
Ransomware Gangs Use AI to Find and Steal the Most Sensitive Company Data Quickly
Ransomware operators are using generative AI to sharpen phishing campaigns, speed up reconnaissance, and identify sensitive corporate information to…
Hackers Exploit Zimbra Zero-Click Flaw to Take Control of Email Servers
Hackers are exploiting a command injection vulnerability (CVE-2026-73570) in the Zimbra Collaboration Suite. This vulnerability allows attackers to…
Hackers Turn Low-Cost Android Phones Into Hidden Proxy Botnets Through Preinstalled Malware
Midnight Mimosa, a widespread Android malware campaign, is turning inexpensive smartphones into advertising fraud engines and potential residential proxy…
GhostAction Hackers Inject Malicious Security Workflows Into 790 GitHub Repositories
GhostAction has returned with an expanded credential-theft operation, injecting malicious GitHub Actions workflows into 790 repositories by October 9,…
New RedAgents AI Platform Deploys Multiple Hacking Agents to Find and Exploit Vulnerabilities
RedAgents, a cloud platform that deploys multiple AI penetration testing agents against authorized targets to discover vulnerabilities and test attack…
Claude Code Detects Hidden XMRig Cryptominer Consuming 1175% CPU on Mac
A Mac user reported that Anthropic’s Claude Code found an unauthorized XMRig cryptocurrency miner while helping develop a temperature-monitoring…
Hacker Uses AI Agents to Breach Over 100 Company Websites With Minimal Human Effort
A Chinese-speaking hacker used autonomous AI agents to compromise the websites of more than 100 companies, relying primarily on software for most of the…
OpenCode Data Breach Exposes API Keys Linked to Third-Party Services
OpenCode has reported a security breach affecting 1.4% of its Console users, which it attributes to a “large-scale distillation attack.” The company said…
FBI Uncovers Suspected Links Between Ransomware Negotiators and ShinyHunters Hackers
Federal investigators examining the ShinyHunters group have uncovered potential connections between the extortion group and executives at two ransomware…
SBI Data Breach Allegedly Exposes Personal Information of 3.75 Lakh Users
A threat actor known as Siriusim allegedly leaked customer information and documents related to the State Bank of India (SBI), according to a CyberPulse…
Microsoft Warns AI Agents Can Be Hijacked Through Prompt Injection Attacks
Microsoft has issued a warning about the risks posed by AI agents that access enterprise systems, especially when attackers manipulate them through…
Google Uncovers Hackers Hijacking Legitimate Software Updates to Deploy Hidden Backdoors
A software supply chain campaign that hijacked AOMEI Technology’s update infrastructure to distribute hidden backdoors. Tracked as UNC7017, the attackers…
Researchers Hack Snowflake PostgreSQL Database to Gain Full Server-Level Code Execution
A security test of Snowflake-managed PostgreSQL has shown how a database role with limited privileges could be turned into control of the server running…
Drupal Warns Critical RCE Flaw Could Let Unauthenticated Attackers Compromise Websites
Drupal has warned of a critical remote code execution vulnerability that could let attackers compromise affected websites without logging in. Tracked as…
SiteGuard Warns Patching Actively Exploited Security Flaw Could Erase Evidence of Attacks
EG Secure Solutions has warned that a flaw in SiteGuard Server Edition is being exploited and that applying a fix could remove signs of an earlier attack.…
Researchers Hack Broadcom Wi-Fi Routers Without Passwords and Gain Full Root Access
A flaw in Broadcom’s Wi-Fi software can let someone within wireless range take control of vulnerable routers without knowing the Wi-Fi password. The issue…
Microsoft Pays Researcher $4,000 for Discovering Critical VS Code Security Bypass Flaw
Microsoft awarded security researcher Sam Chen US$4,000 for reporting a flaw in Visual Studio Code that could let an attacker bypass Workspace Trust…
U.S. Agencies Warn AI Agents Could Exploit Security Flaws and Establish Hidden Backdoors
U.S. agencies have warned that advanced AI agents could exploit security flaws, break out of their assigned limits, and leave hidden backdoors behind. New…