Microsoft Entra ID is the best cloud directory for most organizations bundle gravity plus the clearest AD-exit road while JumpCloud wins the domainless…
Category: GBHackers Security | #1 Globally Trusted Cyber Security News Platform
12 Best Secrets Management Tools Compared (2026): Features & Pricing
HashiCorp Vault remains the best dedicated secrets platform the dynamic-secrets benchmark, now under IBM while cloud-native stores win single-cloud…
Critical WatchGuard Endpoint Security Flaw Exposes Kernel and Process Memory
A critical vulnerability exists in WatchGuard endpoint security products that could allow a local, authenticated attacker to bypass driver authentication…
Atlassian CVE-2026-21589 Flaw Exposes Files in Jira and Confluence Data Center
Atlassian has announced a critical vulnerability related to arbitrary file access that affects Jira Software Data Center and Confluence Data Center. This…
Midnight Blizzard Uses Captive Portals to Deliver CornFlake RAT and Steal Traveler Credentials
Storm-2945, a Midnight Blizzard subcluster, has resumed CaptiveCrunch, an espionage campaign abusing hospitality Wi-Fi networks to infect travelers and…
ClingSTUN Malware Turns Vulnerable IoT Devices Into Persistent Remote Proxy Nodes
ClingSTUN, a Linux backdoor that exploits unpatched internet-facing devices and converts them into persistent, remotely controlled proxy nodes. The…
Weekly Cybersecurity Newsletter – Top 50 Biggest Cybersecurity Stories of the Week
Citrix NetScaler Zero-Days Exploited, OpenAI Agent Swarm Hits Hugging Face, Pentagon Breach Hits 3M, ShinyHunters Leader Arrested, Anthropic MCP Flaw &…
Researcher Infiltrates Chinese Crime Syndicate Laundering Crypto for Lazarus Group
Blockchain investigator ZachXBT has revealed that he infiltrated a Chinese organized crime syndicate believed to have laundered over $1 billion through…
New RemoveMacAI Tool Removes Apple Intelligence Models and Reclaims Mac Storage
A new open-source command-line utility called RemoveMacAI lets Apple silicon Mac users running macOS 27 disable Apple Intelligence, remove downloaded…
Apple Strengthens macOS Privacy Controls as AI Agents Become More Autonomous
Apple has announced plans to strengthen macOS controls for Full Disk Access, citing concerns that increasingly autonomous AI agents could raise privacy…
Google Gemini to Gain Full Computer Access With New Permission
Google is reportedly testing a new Gemini Desktop feature that could give its AI agent extensive control over a user’s Mac. This includes access to files,…
Critical libheif Vulnerability Could Enable Remote Code Execution Through WordPress Image Uploads
A critical heap-buffer-overflow vulnerability in libheif could allow authenticated WordPress users to achieve remote code execution by uploading a…
Japanese Police Impersonation Scam Operation Dismantled as 16 Suspects Detained in Timor-Leste
Timor-Leste investigators have dismantled a suspected cross-border telecom fraud operation in Dili, detaining 16 individuals accused of impersonating…
CISA Flags Citrix NetScaler Flaw Exploited in Ongoing Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-88779, a high-severity vulnerability affecting Citrix NetScaler ADC…
Denmark Confirms Major Security Incident Exposing 8.8 Million Citizen Records
Denmark has confirmed a serious cybersecurity incident involving unauthorized access to personal information in its Central Person Register (CPR),…
MediaTek Fixes 31 Security Flaws Affecting Modem, Video and AI Components
MediaTek has released its October 2026 Product Security Bulletin, which addresses 31 vulnerabilities across modem, video, AI processing, display, trusted…
Google Tightens Open-Source Bug Bounty Rules After Surge in AI-Generated Vulnerability Reports
Google has stopped accepting new “product vulnerability” reports through its Open Source Software Vulnerability Reward Program (OSS VRP) due to a…
AWS Fixes AI Agent Flaws Enabling Authentication Bypass and Credential Theft
AWS released security updates for three vulnerabilities in its open-source Loom platform, used for AI agent orchestration. These vulnerabilities could…
Autonomous AI Agent Chains Two Zammad Zero-Days in Machine-Speed Cyberattack
An autonomous AI agent breached the Dutch Institute for Vulnerability Disclosure (DIVD) after chaining two previously undisclosed vulnerabilities in the…
CISA Adds Zammad Vulnerabilities to KEV Following Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities in the Zammad helpdesk platform to its Known Exploited…