A campaign in July 2026 using a trojanized Terraform provider to deploy cross-platform malware against developer environments. The operation delivers…
Category: GBHackers Security | #1 Globally Trusted Cyber Security News Platform
12 Best Software Supply Chain Security Tools Compared (2026): Features & Pricing
Chainguard leads the eliminate-the-problem lane with hardened zero-CVE images, Sonatype the block-at-ingestion lane, and Scribe/Lineaje the…
Hackers Target Hikvision Cameras in Ukraine With RCE Exploits Amid Russian Airstrikes
Hackers targeted Hikvision surveillance devices in Ukraine during a concentrated surge of remote command execution attempts that coincided with Russian…
FBI Disrupts Major Scam Centers in Ghana, 130+ Detained and 300+ Devices Seized
The FBI has announced another disruption of scam centers in Ghana as part of Operation Blackout, resulting in the arrest or detention of over 130…
11 Best API Security Tools Compared (2026): Features & Pricing
Salt Security and Traceable anchor dedicated discovery-plus-runtime defense, 42Crunch owns design-time contract security, and the edge giants (Akamai with…
Warden Stealer Malware Targets Claude, Codex, Grok and Cursor to Steal AI Agent Data
Warden Stealer as a rapidly growing malware-as-a-service operation targeting data stored by AI assistants and coding agents, including Claude, Codex,…
Anthropic Launches Cyber Mission to Protect Critical Infrastructure and Open-Source Software With Claude AI
Anthropic launched its Cyber Mission, a long-term initiative aimed at helping defenders secure critical infrastructure and open-source software. This…
MATCHBOIL Malware Adds Sandbox Checks, .NET Reactor Obfuscation and Persistent C2
MATCHBOIL’s evolution from a basic C# downloader into a more evasive implant supporting recurring command-and-control communication. Operated by UAC-0099,…
Critical Citrix NetScaler Vulnerability Allows Remote Code Execution Attacks – CVSS 9.5
Citrix has disclosed a critical memory overflow vulnerability in NetScaler ADC and NetScaler Gateway that could enable remote code execution or denial of…
Microsoft Pushes Enterprises to Test Post-Quantum Certificates Before Large-Scale Migration
Microsoft is urging enterprises to prepare for post-quantum authentication by testing certificate dependencies before attempting broad infrastructure…
Critical Sungrow Authentication Bypass Flaw Lets Hackers Take Control of Solar Power Plants
A critical authentication bypass vulnerability in Sungrow’s iSolarCloud management platform allowed researchers to access user and administrator accounts…
Microsoft Teams to Introduce Deepfake Detection to Identify AI-Generated Audio and Video in Meetings
Microsoft Teams will support third-party detection of synthetic audio and video, allowing organizations to identify potentially AI-generated or…
FBI Warns Chinese Hackers Use Automated Tools and Botnets to Steal Sensitive Data
The FBI and international cybersecurity agencies have warned about hackers linked to the Chinese government who use automated vulnerability scanning,…
Hackers Hijack Tensorlake Package to Spread Shai-Hulud Supply Chain Malware
A threat actor published a malicious version of the tensorlake npm package on October 8, 2026, embedding a new variant of the self-replicating Shai-Hulud…
Critical LMCache RCE Vulnerability Remains Unpatched, Public PoC Exploit Available
A critical vulnerability in LMCache allows unauthenticated attackers to execute arbitrary code against reachable multi-process deployments by exploiting…
PoC Exploit Released for Zammad Vulnerability Enabling Session Hijacking and Remote Code Execution
A proof-of-concept (PoC) exploit has been released for CVE-2026-102489, a critical vulnerability in Zammad that can expose active users’ session cookies…
16 Malicious Firefox Extensions Impersonate Crypto Wallets to Steal Seed Phrases and Private Keys
16 malicious Firefox extensions that impersonate cryptocurrency wallets to intercept recovery phrases and private keys during wallet imports. Disguised as…
wolfSSH Patches 5 Security Vulnerabilities, Including Critical SSH Authentication Bypass
wolfSSL has released wolfSSH version 1.6.0, which addresses five security vulnerabilities, including a critical flaw that could allow a man-in-the-middle…
Exposed DarkSword iOS Servers Reveal Crypto Wallet Theft From Compromised iPhones
Exposed directories on five servers have revealed an operational DarkSword/Coruna exploitation platform built to compromise iPhones and harvest…
Critical Gitea Vulnerabilities Allow Attackers to Bypass Authentication and Execute Code
Gitea has released version 28.0.0, addressing 20 vulnerabilities related to authentication bypass, unauthorized workflow execution, server-side request…