An Android remote-access Trojan, YuanKong, whose weakly protected dropper reveals more than its hidden payload: it exposes the operator account…
Category: GBHackers Security | #1 Globally Trusted Cyber Security News Platform
AI-Assisted Hackers Compromise Government Linux Servers to Deploy Backdoors and Steal Credentials
Hackers used AI-assisted scripts to compromise government Linux servers, harvest administrator credentials, and establish persistent backdoors during a…
Researchers Demonstrate iOS 27.0.1 Untethered Jailbreak on iPhone 18 Pro
Security researchers from Calif (Calif.io) demonstrated a working untethered jailbreak on iOS 27.0.1 running on an iPhone 18 Pro. They showed it live at…
Progress Warns of MOVEit Transfer Vulnerabilities Allowing Authentication Bypass and Privilege Escalation
Progress Software has released fixes for 12 vulnerabilities in MOVEit Transfer, its managed file transfer (MFT) platform. Several of the flaws allow…
MITRE ATT&CK v20 Adds New AI Attack Techniques for Prompt Injection and Data Theft
MITRE released ATT&CK v20 on October 13, 2026. It adds the first Enterprise techniques for direct and indirect prompt injection, AI-enabled exfiltration…
Google Chrome 155 Patches Critical Use-After-Free Flaw and Nine Additional Security Bugs
Google has released Chrome 155 to the Stable channel with 10 security fixes. One is rated Critical: a use-after-free in Prerender, tracked as…
BAE Systems Cybersecurity Incident Disrupts Bankruptcy Court Operations Across the U.S.
A cybersecurity incident at defense contractor BAE Systems has taken offline the systems that send bankruptcy notices for every federal bankruptcy court…
Google Android Flags 5 Million Suspected Scam Calls and Texts Monthly
Google says its Android scam-detection capabilities now flag more than 5 million suspected scam calls and text messages each month, as mobile fraud…
Researchers Uncover 20,000 Malicious Cloudflare Pages Domains Used in Tech Support Scams
More than 20,000 malicious Cloudflare Pages subdomains used by Help TDS, a longstanding traffic distribution system that funnels victims into fraudulent…
Hackers Exploit BeyondTrust Zero-Day and Erase Security Logs to Hide Their Tracks
A suspected China-nexus espionage group exploited a critical zero-day in BeyondTrust Remote Support, tracked as CVE-2026-102764. It then deleted logs to…
Hackers Use Hundreds of AI Agents to Exploit PaperCut Servers and Steal Windows Credentials
A likely Russian-speaking threat actor used hundreds of AI agents to exploit PaperCut NG/MF servers, steal Windows credentials and establish reusable…
Critical Collabora Online Flaw Lets Attackers Execute Commands on Nextcloud Servers
A critical unauthenticated OS command injection flaw in Collabora Online’s built-in CODE Server app for Nextcloud lets remote attackers run commands as…
Microsoft Disrupts CoGUI Phishing Kit Linked to Over 100 Million Malicious Emails a Month
Microsoft and international partners have disrupted infrastructure supporting CoGUI. This phishing kit Proofpoint says generates more than 100 million…
Researchers Use AI to Discover Critical Linux Kernel Flaw That Enables Virtual Machine Escape
Researchers at pwn.ai used an AI-assisted research harness to find a critical Linux kernel networking flaw, tracked as CVE-2026-99999 and nicknamed…
12 Best Mobile Application Security Testing Tools Compared (2026): Features & Pricing
NowSecure and Data Theorem mobile security lead automated mobile testing, Guardsquare owns shielding/obfuscation, and Corellium’s virtual devices changed…
12 Best CI/CD Pipeline Security Tools Compared (2026): Features & Pricing
Your CI platform’s native controls (GitHub Advanced Security, GitLab Ultimate) are the baseline, Cycode and Legit lead dedicated pipeline posture, and…
12 Best SBOM Tools Compared (2026): Features & Pricing
Anchore’s Syft SBOM generator is the free generation standard, FOSSA and Cybeats lead SBOM management, and Finite State owns the embedded/OT depth…
Hackers Target Claude, ChatGPT and Cursor Credentials Using Aoki Infostealer
The Aoki infostealer, also known as Aokigahara, has expanded its collection capabilities to steal credentials and session files from AI coding assistants,…
New Proxyjacking Campaign Exploits Network Device Flaws to Build Stealthy Proxy Infrastructure
A newly disclosed proxyjacking campaign has compromised at least 143 devices across 34 countries, exploiting vulnerabilities in network appliances and…
Google Warns Chinese Hackers Exploited Critical BeyondTrust Zero-Day to Gain Root Access
A suspected China-linked espionage group exploited a critical BeyondTrust Remote Support vulnerability as a zero-day in late August 2026 weeks before…