Vercel has released an out-of-band security update for Next.js that fixes two critical remote code execution (RCE) flaws and one high-severity…
Category: GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Citrix Patches XenServer Vulnerabilities That Could Enable Host Compromise
Citrix has released security updates for XenServer 8.4 and XenServer 9. The updates fix several vulnerabilities, three of which could let a malicious…
Cartoon Network Leak Exposes 200GB of Source Files, Storyboards and Animation Assets
A large cache of internal Cartoon Network production material is circulating online. It reportedly exceeds 200GB and includes source files, storyboards…
PoC Exploit Code Released for Fortinet FortiClient EMS Authentication Bypass Flaw
A public proof-of-concept (PoC) exploit is now available for CVE-2026-35616, a critical authentication bypass in Fortinet FortiClient Endpoint Management…
AI Used in 84% of Ransomware Attacks as Identity Infrastructure Comes Under Fire.
Artificial intelligence appeared in ransomware incidents affecting 84% of surveyed victims, while 87% reported attacks targeting or exploiting identity…
10 Best Container Image Scanning Tools Compared (2026): Features & Pricing
Trivy and Grype give every team a free scanning floor, Snyk developer workflows and Sysdig lead the platform lanes, and Chainguard attacks the problem…
10 Best RASP Tools Compared (2026): Features & Pricing
Contrast Protect remains the dedicated RASP anchor, Waratek the JVM virtual-patching specialist, and the platform lanes (Datadog with Hdiv inside,…
12 Best Bug Bounty Platforms Compared (2026): Features & Pricing
HackerOne and Bugcrowd remain the global anchors, Intigriti and YesWeHack lead the European lane, and Synack’s vetted red team defines the private…
SonicWall NSM Bugs Let Attackers Intercept Communications and Execute Commands
SonicWall has disclosed two vulnerabilities in its on-premises Network Security Manager (NSM) that could let authenticated attackers escalate privileges,…
11 Best Infrastructure as Code (IaC) Security Tools Compared (2026): Features & Pricing
Checkov (Palo Alto’s OSS, counted once despite two sheet rows) anchors the free scanner floor, Snyk IaC and Wiz lead the platform lanes, and the…
10 Best Secrets Detection Tools Compared (2026): Features & Pricing
GitGuardian anchors the dedicated platform lane, TruffleHog owns verification-first scanning (one vendor, despite two sheet rows), and GitHub’s native…
Google Play Hosted Fake Chrome App With 100,000+ Downloads
A counterfeit Google Chrome app published by Hizbartech appeared on Google Play with 100,000+ downloads and secured sponsored placement above the…
KGB RAT Uses FUD Crypter to Evade Windows Defender and Spy on Victims
KGB RAT, a Windows remote access trojan marketed as legitimate administration software, combines surveillance, credential theft, and configurable…
UAT-6275 Hackers Use WinRAR Exploit and GitHub PowerShell to Target CIS Governments
An espionage campaign targeting government organizations across the Commonwealth of Independent States (CIS), with additional interest in water,…
Ransomware Gangs Threaten Employees’ Families as AI-Powered Attacks Escalate
Ransomware operators are extending their extortion tactics beyond corporate networks by threatening employees’ families and using artificial intelligence…
Google Pays $250,000 for AI-Assisted Chrome Exploit Enabling Windows Code Execution
Google has awarded XBOW $250,000 for creating an AI-assisted exploit chain that enabled code execution outside the Chrome browser’s renderer sandbox on…
Meta GitHub Repositories Compromised, Exposing Software Code and Employee Personal Data
Meta has revealed a breach of a GitHub repository that exposed software code and personal information belonging to about 1,500 individuals, most of whom…
Hackers Use Compromised Credentials to Infiltrate European Bank Through VPN
Hackers used compromised credentials to infiltrate a European bank through a misconfigured, third-party-managed VPN gateway, conducting months of…
Google Chrome Update Fixes 37 Security Vulnerabilities, Including 7 Critical Flaws
Google has released Chrome 155 for Windows, macOS, and Linux, addressing 37 security vulnerabilities, including seven critical flaws. Announced on October…
Windows Server Zero-Day Flaw Lets Attackers Crash Servers With a Single Malicious Packet
Corelight researchers have disclosed a Windows Server vulnerability that lets attackers with network access crash affected systems with a single malicious…