A financially motivated threat actor used ARTEX, Claude Code, and multiple large language models in a campaign targeting South Korean financial…
Category: GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Hackers Spread Marsalek Infostealer Through Fake Game Downloads to Steal Browser Passwords and Cookies
Marsalek, a free malware-as-a-service (MaaS) platform that disguised infostealers as game cheats and utilities for Roblox, Fortnite, Counter-Strike 2,…
DigiCert Confirms Data Breach After Security Misconfiguration Exposes Customer Personal Information
DigiCert confirmed unauthorized access to an internal business system containing archived customer information due to a security misconfiguration that…
Critical Citrix XenServer Flaw Allows Unauthenticated Attackers to Take Control of Virtualization Hosts
Citrix has released security updates for XenServer versions 8.4 and 9 to address a critical vulnerability. This flaw could allow an unauthenticated…
11 Digital Forensics Tools: The 2026 Buyer’s Verdict Guide
Forensic tooling is bought under two pressures that pull apart: caseload arithmetic (mostly mobile, always backlogged) and courtroom survival (every…
11 Cyber Risk Quantification Tools: The 2026 Buyer’s Verdict Guide
Cyber risk quantification turns posture into currency expected annual loss with a confidence interval and its credibility lives entirely in the…
11 GRC Platforms: The 2026 Buyer’s Verdict Guide
GRC platforms fail one way above all: bought heavier than the team that must feed them, until the risk register quietly stops reflecting reality. This…
AI-Powered BOSSAI Attacks Expose Patient Records and Emergency Dispatch Data in Taiwan
BOSSAI, an agentic attack platform run by one operator that exposed emergency medical and dispatch data in Taipei. The campaign targeted hundreds of…
10 Third-Party / Vendor Risk Management (TPRM) Tools: The 2026 Buyer’s Verdict Guide
Third-party risk management is where questionnaires go to die or get automated: the modern platforms fuse assessment workflow, outside-in ratings, and…
11 Compliance Automation Software (SOC 2 / ISO 27001): The 2026 Buyer’s Verdict Guide
Compliance automation collapsed the SOC 2 timeline from consulting-year to integration-quarter: connectors pull evidence from your cloud, HR, and device…
DreamHost Confirms Data Breach After Hackers Steal FTP/SFTP Credentials and Access Customer Emails
DreamHost has confirmed a security breach involving its browser-based File Manager, which exposed FTP/SFTP usernames and passwords, as well as the…
OpenAI’s New Cyber AI Model Finds 948 Linux Privilege Escalation Vulnerabilities in Just 10 Days
OpenAI has developed an autonomous pipeline that discovers, validates, exploits, and patches flaws in the Linux kernel. In a single run in mid-October…
Hackers Use ClickFix Tricks to Infect Macs With Phexia Malware That Hides Through Blockchain Infrastructure
Phexia, a modular macOS backdoor and infostealer sold to multiple threat actors. Operators deliver it through ClickFix lures. Since May 2026, newer builds…
Hackers Exploit Zyxel GS1900 Zero-Day Vulnerability to Compromise Nearly 1,000 Network Switches
Attackers used a pre-authentication remote code execution exploit against Zyxel GS1900 switches. They compromised nearly 1,000 devices before Zyxel…
Google Chrome 157 Released With 213 Security Fixes, Including 7 Critical Vulnerabilities
Google has released Chrome 157 for Windows, macOS, and Linux, fixing 213 security vulnerabilities, seven of which are classified as critical. This update,…
MuddyWater Hackers Suspected of Targeting Israeli Organizations With Fake Tax Authority Emails
Israeli organizations have been targeted since September 2026 in a phishing campaign impersonating the Israel Tax Authority and distributing SimpleHelp…
French Banking Giant Crédit Mutuel Arkéa Hit by Cyberattack, $133 Million Reportedly Stolen
The French banking group Crédit Mutuel Arkéa announced that a cyberattack caused fraudulent transactions, leading to temporary restrictions on transfers.…
Debian and Ubuntu Linux APT Vulnerability Allows Attackers to Execute Malicious Code With Root Privileges
A vulnerability in the APT package manager lets attackers intercept communications between Linux systems and package repositories, install malicious…
Russia-Aligned Gorbag APT Exploits WinRAR CVE-2025-8088 to Deploy BeautyStealer Infostealer
A targeted cyberespionage campaign by Gorbag, a Russia-aligned threat actor exploiting WinRAR vulnerability CVE-2025-8088 to deploy BeautyStealer against…
Russian Hackers Create Fake US and UK Websites to Target Visitors With Mobile Exploits
A large-scale watering hole campaign that it assesses, with moderate to high confidence, is the work of APT29. APT29 is also tracked as Midnight Blizzard,…