Hackers linked to attacks on South Korean banks used Claude Code, DeepSeek, Grok, and Zhipu AI alongside ARTEX, an open-source AI penetration testing…
Category: GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Your Docking Station Has a Patching Problem
Summary: One BIOS setting can stop a dock from updating, and two dock CVEs live in the update tools themselves. Here’s how docks end up unpatched, and…
Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise to shut off…
Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds for five NIST elliptic curves in under 30…
Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to analysis by Seqrite researcher Amruta Wagh.…
OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a separate out-of-bounds write to obtain root…
GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises malicious JavaScript as a font file and…
SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with spear-phishing attacks that…
New GhostBat Android Malware Targets 60 Banking and UPI Apps to Steal PINs
A new GhostBat RAT variant targets 60 Android financial application packages used in India, combining accessibility-based PIN capture with a transparent…
New ROMULUS Malware Platform Uses Six Servers to Deliver Multiple Malicious Payloads
ROMULUS, a shared ClickFix delivery platform operating across six identified servers, with confirmed routes distributing a trojanized Stardock package and…
Midnight Blizzard-Linked Malware Server Still Delivering Payloads 8 Weeks After Disclosure
A server linked to a malware campaign attributed to a Midnight Blizzard-associated cluster was still delivering malicious files on October 5, 2026. The…
Android Malware Exposes Its Own Operators While Hijacking Phones and Stealing Sensitive Data
An Android remote-access Trojan, YuanKong, whose weakly protected dropper reveals more than its hidden payload: it exposes the operator account…
AI-Assisted Hackers Compromise Government Linux Servers to Deploy Backdoors and Steal Credentials
Hackers used AI-assisted scripts to compromise government Linux servers, harvest administrator credentials, and establish persistent backdoors during a…
Researchers Demonstrate iOS 27.0.1 Untethered Jailbreak on iPhone 18 Pro
Security researchers from Calif (Calif.io) demonstrated a working untethered jailbreak on iOS 27.0.1 running on an iPhone 18 Pro. They showed it live at…
Progress Warns of MOVEit Transfer Vulnerabilities Allowing Authentication Bypass and Privilege Escalation
Progress Software has released fixes for 12 vulnerabilities in MOVEit Transfer, its managed file transfer (MFT) platform. Several of the flaws allow…
MITRE ATT&CK v20 Adds New AI Attack Techniques for Prompt Injection and Data Theft
MITRE released ATT&CK v20 on October 13, 2026. It adds the first Enterprise techniques for direct and indirect prompt injection, AI-enabled exfiltration…
Google Chrome 155 Patches Critical Use-After-Free Flaw and Nine Additional Security Bugs
Google has released Chrome 155 to the Stable channel with 10 security fixes. One is rated Critical: a use-after-free in Prerender, tracked as…
BAE Systems Cybersecurity Incident Disrupts Bankruptcy Court Operations Across the U.S.
A cybersecurity incident at defense contractor BAE Systems has taken offline the systems that send bankruptcy notices for every federal bankruptcy court…
Google Android Flags 5 Million Suspected Scam Calls and Texts Monthly
Google says its Android scam-detection capabilities now flag more than 5 million suspected scam calls and text messages each month, as mobile fraud…
Researchers Uncover 20,000 Malicious Cloudflare Pages Domains Used in Tech Support Scams
More than 20,000 malicious Cloudflare Pages subdomains used by Help TDS, a longstanding traffic distribution system that funnels victims into fraudulent…