Security researchers have revealed a critical vulnerability in Discourse, tracked as CVE-2026-55420. This flaw could let a low-privileged user read and…
Category: GBHackers Security | #1 Globally Trusted Cyber Security News Platform
CISA Adds Actively Exploited Apache Struts Command Injection Flaw to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2016-3081, a critical command injection vulnerability in Apache Struts, to…
WhatsApp-Delivered Malware Injects Into Windows Task Scheduler to Run as SYSTEM
A WhatsApp-delivered financial-document lure is being used to deploy a sophisticated Windows malware chain that injects code into the Task Scheduler…
Android Firmware Malware Uses Ad Fraud and Proxy Botnets to Generate Revenue
Midnight Mimosa, an Android malware campaign embedded in firmware that monetizes compromised smartphones through advertising fraud and residential proxy…
AnyDesk Vulnerability Allowing Remote Code Execution With Root Privileges
Security researcher has disclosed a heap buffer overflow vulnerability in AnyDesk Linux version 8.0.2, named AnyPwn. This vulnerability allows remote…
Hackers Use AI-Generated Event Lures to Steal Google Accounts and Bypass MFA
An advanced persistent threat spear-phishing campaign targeting individuals affiliated with Taiwanese research organizations, combining likely AI-assisted…
Casbaneiro Banking Trojan Activates Only When Victims Visit Targeted Bank Websites
A Casbaneiro banking trojan campaign in August 2026 that targeted Latin American users via phishing emails and malicious PDFs disguised as invoices and…
Microsoft Teams Adds New Security Feature to Detect Malicious QR Codes in Messages
Microsoft is enhancing Teams security with a new feature that detects malicious URLs hidden in QR codes and alerts recipients after they receive messages.…
REA: New AI-Powered Reverse Engineering Tool Supports Ghidra, Hopper, and Claude Code
REA, short for Reverse Engineer Anything, connects AI coding agents to reverse-engineering tools, enabling in-depth analysis of native binaries,…
Ransomware Hackers Exploit Palo Alto Networks GlobalProtect VPN Authentication Bypass Vulnerability
Ransomware operators are actively exploiting CVE-2026-0257, an authentication bypass vulnerability affecting Palo Alto Networks PAN-OS GlobalProtect and…
Attackers Use Power BI Phishing to Install Multiple RMMs and Maintain Persistent Access
Attackers abused Microsoft Power BI to deliver unauthorized ScreenConnect remote monitoring and management (RMM) clients, using trusted Microsoft…
Claude AI Exploits SQL and Command Injection Flaws to Execute Commands on Third-Party Servers
Anthropic revealed that its Claude models had exploited SQL and command injection vulnerabilities, submitted unauthorized forms, and bypassed access…
GhostAction Hackers Compromise 500+ GitHub Accounts to Steal Cloud and AI API Credentials
A new GhostAction campaign has expanded to more than 500 compromised GitHub accounts and has injected malicious workflows into tens of thousands of…
Iranian VPN-over-DNS Activity Generates 40 Billion DNS Observations During Military Conflict
A newly disclosed unprecedented surge in suspected Iranian VPN-over-DNS activity, with one domain generating 40 billion passive DNS observations within…
DarkBlinders Hackers Use Fake Meeting App to Deploy Backdoor and Steal Government Data
DarkBlinders hackers are deploying a fake video meeting application and abusing GitHub repositories in a cyberespionage campaign targeting Israel and the…
Hackers Use AI Agents and GodPotato Exploit to Gain Windows SYSTEM Privileges
Hackers used AI agents to turn an exposed application endpoint into full administrative control of a server in under 24 hours. The intrusion involved…
Two AhsayCBS Zero-Day Vulnerabilities Actively Exploited to Take Over Backup Servers
Threat actors are exploiting two zero-day vulnerabilities in Ahsay Cloud Backup Server (AhsayCBS) to compromise exposed backup servers without…
AWS Bedrock AgentCore Flaw Allowed Attackers to Hijack AI Agents Using a Single Prompt
A newly disclosed attack chain in Amazon Bedrock AgentCore that could turn a single malicious prompt into credential theft and compromise of other AI…
React Server Components Vulnerability Lets Attackers Freeze Next.js Servers With a Single Request
A security vulnerability has been identified in React Server Components deployments using specific vulnerable releases of React 19. An attacker can…
CastleStealer Malware Bypasses Chromium ABE and Adds Remote Command Execution Capabilities
CastleStealer, a C# information stealer first publicly identified in April 2026, has expanded its capabilities beyond credential theft. New samples…