GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Microsoft Defender’s new automatic device isolation capability has emerged as a decisive control against modern ransomware intrusions that abuse legitimate Windows binaries, as demonstrated in a recent incident at QNET where a multi-stage attack was stopped in just 128 seconds. The mshta.exe process reached out to attacker-controlled infrastructure, retrieved a remote second-stage payload, and began […]

The post Ransomware Attack Abuses Legitimate Windows Tool to Evade Traditional Containment appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Botnet operators are systematically probing router diagnostic interfaces for OS command injection flaws, chaining default credentials, legacy CGI endpoints, and weak command execution patterns to gain full remote control and deploy Mirai‑like payloads. Recent scan telemetry shows concentrated HTTP requests targeting a tight set of “diagnostic” URLs on internet‑exposed routers, including /apply.cgi, /cgi-bin/diagnostic.cgi, /cgi-bin/adv_ping.cgi, /DiagnosticsMsg.cgi, […]

The post Botnet Scans Router Diagnostic Tools for OS Command Injection Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A serious one-click remote code execution (RCE) vulnerability that affects Cursor, Microsoft Visual Studio Code, and Google Antigravity, an AI-assisted coding environment. This flaw could enable attackers to hide malicious commands within links embedded in commit messages, turning a routine developer action into a complete compromise of their endpoint. A victim simply needs to click […]

The post 1-Click RCE Vulnerability in Cursor, VS Code, and Google Antigravity Lets Attackers Execute Arbitrary Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A controlled proof-of-concept by Barracuda’s Red Team has demonstrated how a compromised Microsoft 365 account with Copilot access can serve as a powerful launchpad for business email compromise (BEC). This scenario ultimately enables attackers to impersonate a CEO and redirect a $247,500 wire transfer. Research published on August 4, 2026, warns that AI-enabled email accounts […]

The post Compromised Microsoft Copilot Accounts Let Hackers Impersonate CEOs and Steal $247,500 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Six newly disclosed vulnerabilities in Flowise, a popular open‑source platform for building AI agents and LLM workflows, allow unauthenticated and low‑privileged attackers to achieve remote code execution (RCE) on self‑hosted and cloud AI workflow servers running vulnerable versions. These flaws collectively expose organizations to full server compromise, data exfiltration, and AI pipeline manipulation if instances […]

The post Six Flowise Vulnerabilities Enable Remote Code Execution on AI Workflow Servers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

DarkSword’s leaked iOS exploit chain is now powering a fast‑moving server cluster that marries one‑click Safari exploitation with a convincing fake Apple ID login page, putting millions of iPhone users at risk of seamless device compromise and credential theft. Originally disclosed by Google Threat Intelligence Group, iVerify, and Lookout, the kit was later leaked to […]

The post DarkSword Server Combines iPhone Exploits With Fake Apple ID Login Page appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Fake Roblox cheat tools are once again being weaponized, with a newly observed campaign distributing a sophisticated Java-based remote access trojan (RAT) disguised as an “undetected” version of the popular Xeno script executor. Security researchers warn that the operation specifically targets gamers through Discord communities and underground forums, leveraging trust in widely used cheat utilities […]

The post Fake Xeno Roblox Cheats Deliver Java RAT That Steals Discord and Gaming Accounts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Atlanta, GA, August 4th, 2026, CyberNewswire Airlock Digital announces Agentic AI Control & Governance, extending its preventative endpoint security solution with visibility into trusted AI agent behavior and governance over what trusted agents are allowed to do on endpoints.  Airlock Digital, a leader in preventative endpoint security, today announced Agentic AI Control & Governance at […]

The post Airlock Digital Unveils Agentic AI Control & Governance to Extend Preventative Endpoint Security appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

OpenAI has shut down a coordinated network of ChatGPT accounts that powered a Cambodia-based scam factory running multi-vector fraud and trafficking-linked operations, and has shared indicators with industry peers and authorities to make the network’s reconstitution significantly harder. Earlier in 2026, OpenAI’s threat intelligence team disrupted a scam syndicate that weaponized ChatGPT to drive investment, […]

The post OpenAI Shuts Down ChatGPT Accounts Powering a Cambodia-Based Scam Factory appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Attackers have compromised the GitHub account of a Keyv maintainer, a widely used JavaScript key-value storage library, to distribute credential-stealing malware via npm packages. This ongoing supply chain attack, known as the Shai-Hulud campaign, has affected Keyv and several related caching libraries, with a combined monthly installation reach in the billions. Aikido Security reported that […]

The post Shai-Hulud Supply Chain Attack Compromises Keyv and Hundreds of npm Packages appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

OWASP has launched the Subtractive Security Top 10 project, a security engineering initiative that shifts the focus from adding more detection controls to removing the architectural conditions that enable cyberattacks. The project, led by Christopher Frenz, promotes a straightforward premise: attackers can only exploit attack paths that exist. Instead of relying primarily on monitoring, alerting, […]

The post OWASP Introduces Subtractive Security Top 10 to Eliminate Attack Paths and Reduce Cyber Risk appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-18577, an actively exploited authentication bypass vulnerability in N-able N-central, to its Known Exploited Vulnerabilities (KEV) Catalog. This vulnerability allows unauthenticated attackers to bypass authentication and potentially take over administrative accounts on vulnerable N-central servers. CISA added this flaw to the KEV Catalog on August […]

The post CISA Adds Exploited N-able N-central Flaw Enabling Remote Admin Takeover to KEV appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

An exposed server linked to a Russian‑speaking initial access broker (IAB) has revealed a sprawling operation that simultaneously fuels ransomware intrusions worldwide and supports Russian state-aligned intelligence collection against Ukrainian defense and aerospace targets. The artefacts show a mature, high‑volume access brokerage pipeline that industrialises exploitation of internet‑facing appliances, pivots to full Active Directory compromise, […]

The post Russian Access Broker Sells Network Access to Ransomware Gangs While Spying on Ukraine appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

China’s artificial intelligence ecosystem is rapidly advancing through a controversial technique known as model distillation, with mounting evidence suggesting that military-linked entities are extracting high-value capabilities from leading American AI systems. Distillation, or “knowledge distillation,” refers to training a smaller AI model using outputs generated by a more advanced “teacher” model. While widely used across […]

The post China Is Training Military AI With Knowledge Extracted From American Models appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

18 malicious npm packages have been used in a tightly coordinated software supply chain attack to deliver a cross‑platform RAT that specifically targets developers working with Alibaba’s internal Aone tooling and @ali-scoped packages. The operation came to light after researchers analyzed a seemingly simple malicious npm package, lib-mtop, which acted as a downloader and exposed […]

The post 18 Malicious npm Packages Deploy Cross-Platform RAT Against Alibaba Developers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

N-able has issued an urgent hotfix to address a critical authentication-bypass vulnerability in its N-central remote monitoring and management (RMM) platform, following confirmation of active exploitation. This vulnerability, tracked as CVE-2026-18577, affects N-central servers running earlier than version 2026.3.1.7. It allows a remote, unauthenticated attacker to take over accounts and gain administrative control of the […]

The post Critical N-able N-central Flaw Actively Exploited to Gain God-Mode Access to MSP Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A new Metasploit Framework module has been submitted for review, targeting the critical Ruby on Rails Active Storage vulnerability, tracked as CVE-2026-66066. This submission poses an increased risk to applications that utilize the Vips image-processing backend. The proposed module is named `exploit/multi/http/rails_activestorage_vips_rce` and was introduced in Rapid7 Metasploit Framework pull request #21733 by contributor jburgess-r7. […]

The post Metasploit Exploit Targets Critical Ruby on Rails Active Storage RCE Flaw appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CareCloud has reported a data security incident involving unauthorized access to its Amazon Web Services (AWS) environment that supports the CareCloud Health division. This incident disrupted one of the company’s electronic health record (EHR) systems. It may have exposed a wide range of protected health information (PHI), personally identifiable information (PII), insurance details, and, for […]

The post CareCloud Data Breach Exposes Patients’ Health, Social Security and Credit Card Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

SonicWall SMA Secure Mobile Access appliances are again at the center of a zero-day storm, with chained flaws that let attackers turn a single crafted WebSocket request into root-level control on internet-facing VPN gateways. The campaign, dissected by Volexity and other researchers, shows how a previously undocumented threat actor, tracked as UTA0533, abused SonicWall’s wsproxy […]

The post SonicWall SMA Zero-Days Let Attackers Turn One WebSocket Request Into Root Control appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Arista Networks has issued a warning about attackers actively exploiting CVE-2026-16812, a critical unauthenticated OS command injection vulnerability in on-premises VeloCloud Orchestrator (VCO) deployments. This flaw carries a CVSS v3.1 and v4.0 severity score of 10.0, allowing a remote attacker with network access to the VCO web interface to access privileged internal functions and potentially […]

The post Hackers Exploit Critical Arista VeloCloud Flaw to Execute OS Commands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.