A suspected China-nexus espionage group exploited a critical zero-day in BeyondTrust Remote Support, tracked as CVE-2026-102764. It then deleted logs to…
Category: GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Hackers Use Hundreds of AI Agents to Exploit PaperCut Servers and Steal Windows Credentials
A likely Russian-speaking threat actor used hundreds of AI agents to exploit PaperCut NG/MF servers, steal Windows credentials and establish reusable…
Critical Collabora Online Flaw Lets Attackers Execute Commands on Nextcloud Servers
A critical unauthenticated OS command injection flaw in Collabora Online’s built-in CODE Server app for Nextcloud lets remote attackers run commands as…
Microsoft Disrupts CoGUI Phishing Kit Linked to Over 100 Million Malicious Emails a Month
Microsoft and international partners have disrupted infrastructure supporting CoGUI. This phishing kit Proofpoint says generates more than 100 million…
Researchers Use AI to Discover Critical Linux Kernel Flaw That Enables Virtual Machine Escape
Researchers at pwn.ai used an AI-assisted research harness to find a critical Linux kernel networking flaw, tracked as CVE-2026-99999 and nicknamed…
12 Best Mobile Application Security Testing Tools Compared (2026): Features & Pricing
NowSecure and Data Theorem mobile security lead automated mobile testing, Guardsquare owns shielding/obfuscation, and Corellium’s virtual devices changed…
12 Best CI/CD Pipeline Security Tools Compared (2026): Features & Pricing
Your CI platform’s native controls (GitHub Advanced Security, GitLab Ultimate) are the baseline, Cycode and Legit lead dedicated pipeline posture, and…
12 Best SBOM Tools Compared (2026): Features & Pricing
Anchore’s Syft SBOM generator is the free generation standard, FOSSA and Cybeats lead SBOM management, and Finite State owns the embedded/OT depth…
Hackers Target Claude, ChatGPT and Cursor Credentials Using Aoki Infostealer
The Aoki infostealer, also known as Aokigahara, has expanded its collection capabilities to steal credentials and session files from AI coding assistants,…
New Proxyjacking Campaign Exploits Network Device Flaws to Build Stealthy Proxy Infrastructure
A newly disclosed proxyjacking campaign has compromised at least 143 devices across 34 countries, exploiting vulnerabilities in network appliances and…
Google Warns Chinese Hackers Exploited Critical BeyondTrust Zero-Day to Gain Root Access
A suspected China-linked espionage group exploited a critical BeyondTrust Remote Support vulnerability as a zero-day in late August 2026 weeks before…
Cisco Warns of Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks
Cisco has warned that attackers are actively exploiting a zero-day flaw in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway. An…
Palo Alto Warns of PAN-OS 0-day Flaw Actively Exploited in Attacks
Palo Alto Networks has warned that attackers are exploiting a high-severity remote code execution flaw in the PAN-OS management interface. Tracked as…
Hackers Use Online Ads to Infect Devices With Spyware Without a Single Click
Citizen Lab has confirmed the first public case of zero-click mercenary spyware delivered through targeted online ads. It calls the technique “AdFection”.…
Hackers Steal UK Legal Aid Records Dating Back to 1978 in Major Cyberattack
The UK’s Legal Aid Agency (LAA) now says the 2025 data breach exposed far older data than first reported. About 250,000 stolen records predate 2007, and…
New ClickFix Attack Deploys Lorem Ipsum Malware Loader to Establish Remote Access
A ClickFix campaign uses the Lorem Ipsum Loader to install a Python-based tunneling implant, giving attackers a covert route into victims’ networks and…
New PEERSTITCH Malware Targets FortiGate Firewalls and Hides Inside System Memory
PEERSTITCH, a memory-resident ARM64 implant deployed against FortiGate firewalls during a prolonged intrusion into a telecommunications managed service…
Claude Code Helps Linux Creator Address Longstanding Kernel Memory Performance Bottleneck
Linus Torvalds used Anthropic’s Claude Code to build experimental patches that remove a long-running page-cache scalability bottleneck in the Linux…
AI Agent Workflows Could Expose Credentials Through Trusted Developer Tools
AI agents can expose credentials during routine development tasks, moving secrets from protected stores into command arguments, logs, transcripts, and…
Iron Man Phishing-as-a-Service Kit Impersonates Banks, Couriers and Government Agencies Worldwide
Iron Man System, a commercial phishing-as-a-service platform supplying criminals with ready-made websites impersonating banks, couriers, tax agencies,…