A flaw in npm’s Trusted Publishing mechanism could let attackers publish malicious updates to legitimate packages without compromising a developer’s npm…
Category: GBHackers Security | #1 Globally Trusted Cyber Security News Platform
SAP Patches Critical NetWeaver and S/4HANA Security Flaws Affecting Enterprise Systems
SAP’s Security Patch Day on October 13, 2026, addresses critical vulnerabilities found in enterprise applications, integration platforms, and developer…
Hackers Target Hundreds of French Supermarkets, Heating Refrigeration Systems to 50°C
Hundreds of French supermarkets experienced refrigeration disruptions after hackers reportedly manipulated control systems overnight, destroying fresh and…
Anthropic Warns AI Models Could Soon Self-Replicate Across Smart TVs and IoT Devices
Anthropic researchers have raised concerns that small artificial intelligence models could soon replicate autonomously across consumer Internet of Things…
New macOS Malware Uses Fake System Prompts to Steal Passwords and Deploy RAT
A newly marketed macOS malware-as-a-service platform, ICMacOS, is using fake Apple system dialogs to steal login passwords before deploying an information…
XWorm HBrowser Plugin Lets Attackers Control Authenticated Browser Sessions Without Credentials
XWorm’s HBrowser plugin gives attackers interactive control of authenticated browser sessions on infected endpoints, allowing them to operate accounts…
Hackers Exploit Citrix NetScaler Zero-Days to Deploy Modified Platypus Backdoor
Threat actors are exploiting two critical zero-day vulnerabilities in Citrix NetScaler to deploy a modified version of the open-source Platypus remote…
Researchers Discover 253 Security Vulnerabilities Across 343 AI Agent Tools in MCP Servers
Researchers have identified 253 verified security vulnerabilities affecting 343 AI agent tools across 118 Model Context Protocol (MCP) servers. These…
Critical Ghostscript Vulnerability Lets Malicious PDFs Trigger Remote Code Execution
A critical vulnerability in Ghostscript could allow attackers to execute code on vulnerable servers by uploading a specially crafted PDF containing a…
Amazon Fire TV Cube Security Flaws Allow Bootloader Unlocking and Permanent Root Access
A recently released exploit package lets the third-generation Amazon Fire TV Cube gain an unlocked bootloader and persistent root access on firmware…
SonicWall Fixes 4 SMA 1000 Vulnerabilities, Including Critical CVSS 10.0 SSRF Flaw
SonicWall released security updates to address four vulnerabilities in its SMA 1000 series appliances, including a critical server-side request forgery…
Critical Progress MarkLogic Server Vulnerabilities Could Enable Code Execution and Privilege Escalation
Progress has disclosed 31 vulnerabilities in MarkLogic Server that could lead to privilege escalation, server-side code execution, authentication bypass,…
Kimsuky Uses Quasar RAT to Deploy Funhouse Ransomware Through Multi-Stage Scripts
A Kimsuky campaign that delivers Funhouse ransomware through a malicious Hangul document disguised as a resume. The operation combines embedded OLE…
Critical MariaDB Vulnerabilities Could Enable Remote Code Execution and Privilege Escalation
MariaDB maintainers have disclosed ten vulnerabilities affecting database server components, Linux packaging, and Connector/C. Under specific conditions,…
Fake Web3 Accelerator Offers Claude and Gemini Credits to Spread Malware
A sophisticated campaign in which threat actors posed as a Web3 venture-capital accelerator to target cryptocurrency start-ups, developers and founders…
DDoS Attack Takes Ubuntu Websites and Security Services Offline for Over 4 Hours
Ubuntu and Canonical’s websites experienced a sustained DDoS attack, disrupting access to public websites and security information services for four hours…
New macOS Malware Clones Chrome Profiles and Browses With Victims’ Live Logins
A newly reported macOS implant tracked as GhostProfile clones browser profiles and remotely operates concealed copies of Chrome or Firefox, allowing…
Critical GitLab Vulnerability Allows Unauthenticated Attackers to Execute Remote Code
GitLab has released emergency security updates to address a critical vulnerability that could allow unauthenticated attackers to execute arbitrary code on…
Kimsuky Uses Fake Zoom Installers and Malicious LNK Files to Deploy Malware
North Korea-linked cyber espionage group Kimsuky has expanded its Operation GitPower campaign by using fake Zoom installers and malicious Windows shortcut…
Denmark Data Breach Involving 8.8 Million Records Linked to ‘123456’ Password
A significant data breach in Denmark has exposed approximately 8.8 million personal records, linked to inadequate account security at Pays ApS, a small IT…