A WatchGuard VPN impersonation attack that steals connection credentials in the browser before delivering the vendor’s genuine, digitally signed…
Category: GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Windows BitLocker Vulnerabilities Could Allow Attackers to Bypass Security Protections and Escalate Privileges
Three Windows BitLocker vulnerabilities, as described in the provided advisory, could let attackers elevate privileges or bypass security protections…
Ivanti Connect Secure CVE-2026-104935 Flaw Enables Unauthenticated Remote Code Execution
Ivanti released security updates for Ivanti Connect Secure (ICS) to address CVE-2026-104935, a high-severity authentication-bypass vulnerability. This…
Hackers Chain 3 Ivanti VPN Zero-Days to Gain Root Access Without Authentication
Attackers chained three zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances to execute commands as root without authentication, then…
Zoom Certificate Validation Vulnerability Allows Attackers to Access Sensitive Information
Zoom has disclosed a high-severity vulnerability in the My Notes feature that affects multiple Zoom Workplace clients. This issue, tracked as…
Critical Docker Hub Vulnerability Lets Attackers Impersonate Users and Tamper With Container Images
Docker disclosed a critical vulnerability in Docker Hub that let attackers impersonate other users at the container registry level. This flaw, tracked as…
Meta Removes 3.7 Million Scam Accounts as 28 Arrested in Global Crackdown
Meta removed more than 3.7 million Facebook and Instagram accounts, Pages, and Groups during an international crackdown on West African scam networks that…
Windows Shell Zero-Day Lets Attackers Bypass Mark of the Web Security Protections
Microsoft has addressed a vulnerability in Windows Shell that attackers are actively exploiting, allowing them to bypass the Mark of the Web (MOTW)…
TFG London Confirms Cyberattack Affecting Hobbs, Whistles, and Phase Eight
TFG London has confirmed a cybersecurity incident affecting the IT systems that support its brands Hobbs, Whistles, and Phase Eight. Several of these…
Hackers Target PuTTY Users With SEO Poisoning and Ethereum-Powered Malware
A search for PuTTY can lead to more than a fake download. In a campaign reported on October 12, attackers used search-engine optimization (SEO) poisoning…
North Korean IT Worker Scheme Targets Dozens of Organizations Across Critical U.S. Sectors
The FBI and CrowdStrike have disrupted U.S. laptop farms supporting FAMOUS CHOLLIMA, a North Korean operation that places fraudulent remote IT workers…
Critical FortiSandbox Vulnerability Lets Remote Attackers Bypass Authentication and Execute Commands
Fortinet has disclosed a critical authentication bypass vulnerability in FortiSandbox that could let remote attackers access its web management interface…
OpenAI Engineer Arrested for Allegedly Installing Secret Recording Device to Spy on Executive Meetings
An OpenAI engineer has been arrested for allegedly concealing an audio recording device in an executive conference room at the company’s San Francisco…
Microsoft October 2026 Patch Tuesday Fixes 1,411 Vulnerabilities, Including 3 Zero-Days
Microsoft’s October 2026 Patch Tuesday security updates address 1,411 vulnerabilities across its product portfolio, including three zero-day flaws that…
iOS Exploit Kits Can Compromise iPhones Through a Single Malicious Website
A single visit to a compromised or deceptive website can let a sophisticated exploit kit take control of a vulnerable iPhone. On the Packet Protector…
Attackers Can Hijack npm Packages Without Stealing Developer Credentials
A flaw in npm’s Trusted Publishing mechanism could let attackers publish malicious updates to legitimate packages without compromising a developer’s npm…
SAP Patches Critical NetWeaver and S/4HANA Security Flaws Affecting Enterprise Systems
SAP’s Security Patch Day on October 13, 2026, addresses critical vulnerabilities found in enterprise applications, integration platforms, and developer…
Hackers Target Hundreds of French Supermarkets, Heating Refrigeration Systems to 50°C
Hundreds of French supermarkets experienced refrigeration disruptions after hackers reportedly manipulated control systems overnight, destroying fresh and…
Anthropic Warns AI Models Could Soon Self-Replicate Across Smart TVs and IoT Devices
Anthropic researchers have raised concerns that small artificial intelligence models could soon replicate autonomously across consumer Internet of Things…
New macOS Malware Uses Fake System Prompts to Steal Passwords and Deploy RAT
A newly marketed macOS malware-as-a-service platform, ICMacOS, is using fake Apple system dialogs to steal login passwords before deploying an information…