US critical infrastructure faces an operational technology threat that extends beyond civilian service outages. State-sponsored intrusions and direct…
Tag: GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Accenture Contractor Removed After FBI Data Breach Exposes Thousands of Employees
On October 5, the Federal Bureau of Investigation (FBI) terminated an Accenture employee’s contract after a security breach exposed sensitive information…
Meta and Microsoft Reduce Internal Use of Claude AI
Meta and Microsoft are reducing employee reliance on Anthropic’s Claude AI while promoting their own coding assistants, according to an October 5 report…
Hackers Pose as Dubai Airports Recruiters to Infect Software Engineers With ShelbyLoader V2
An Iranian state-aligned threat actor impersonated Dubai Airports recruiters to deliver weaponized coding assessments to software engineers. The operation…
Cling Botnet Spoofs Google STUN Traffic to Hide Commands Sent to Infected IoT Devices
Cling, an IoT botnet that disguises operator commands as Google STUN replies, blending malicious communications into routine NAT traversal traffic.…
AppViewX Adds Shadow AI Visibility and a Runtime Kill Switch to Agent Identity Security
New York, New York, October 6th, 2026, CyberNewswire Purpose-built for AI agents, new capabilities uncover shadow AI, stop rogue enterprise agents at…
Gentlemen Ransomware Affiliate Uses MCP as C2 Channel in Live Cyberattacks
A Russian-speaking Gentlemen ransomware affiliate used the Model Context Protocol (MCP) to execute commands during live intrusions, turning an AI coding…
Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management
Torrance, Californina, October 6th, 2026, CyberNewswire Criminal IP by AI SPERA, a cyber threat intelligence platform delivering decision-ready…
Android 17 Advanced Protection Adds Intrusion Logging, USB Security and Brute-Force Defense
Google has expanded Android Advanced Protection with six security enhancements targeting spyware investigations, malicious USB connections, accessibility…
Former Employee Sentenced for Damaging Employer’s Windows Network Infrastructure
A former infrastructure engineer has been sentenced to 32 months in federal prison for damaging his employer’s computer network and demanding a ransom in…
Apache Struts Vulnerabilities Enable Remote Code Execution, DoS and Data Disclosure
Four Apache Struts vulnerabilities outlined in recent advisories expose affected applications to risks such as remote code execution, denial of service,…
IBM Patches Multiple Langflow OSS Flaws Including Two Critical RCE Vulnerabilities
IBM has disclosed 25 vulnerabilities in Langflow OSS, affecting versions 1.0.0 through 1.12.2. Two of these are critical flaws that allow unauthenticated…
12 Best Authentication-as-a-Service (AaaS) Providers Compared (2026): Features & Pricing
Auth0 (Okta’s developer line) remains the best AaaS for most teams the ecosystem and enterprise-credibility benchmark while Entra External ID and Amazon…
12 Best Biometric Authentication Solutions Compared (2026): Features & Pricing
iProov is the best high-assurance verification vendor the deepest liveness and injection-attack science while Entrust (Onfido) and Incode lead turnkey…
11 Best Adaptive / Risk-Based Authentication Tools Compared (2026): Features & Pricing
Microsoft Conditional Access is the best adaptive engine for most workforces the deepest policy grammar at bundled cost while Duo wins pragmatic rollout,…
11 Best Cloud Directory Services Compared (2026): Features & Pricing
Microsoft Entra ID is the best cloud directory for most organizations bundle gravity plus the clearest AD-exit road while JumpCloud wins the domainless…
12 Best Secrets Management Tools Compared (2026): Features & Pricing
HashiCorp Vault remains the best dedicated secrets platform the dynamic-secrets benchmark, now under IBM while cloud-native stores win single-cloud…
Critical WatchGuard Endpoint Security Flaw Exposes Kernel and Process Memory
A critical vulnerability exists in WatchGuard endpoint security products that could allow a local, authenticated attacker to bypass driver authentication…
Atlassian CVE-2026-21589 Flaw Exposes Files in Jira and Confluence Data Center
Atlassian has announced a critical vulnerability related to arbitrary file access that affects Jira Software Data Center and Confluence Data Center. This…
Midnight Blizzard Uses Captive Portals to Deliver CornFlake RAT and Steal Traveler Credentials
Storm-2945, a Midnight Blizzard subcluster, has resumed CaptiveCrunch, an espionage campaign abusing hospitality Wi-Fi networks to infect travelers and…