GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Blockchain analysts have linked a rapid series of Bitcoin wallet drains to a reported vulnerability in Coldcard firmware. A total of 1,196 addresses lost a combined 1,082.65 BTC, valued at approximately $70.2 million, in just 41 minutes on July 30, 2026. Galaxy Research stated that its transaction-flow analysis was based on a pattern initially identified […]

The post Coldcard Firmware Flaw Lets Hackers Steal $70 Million in Bitcoin From 1,196 Addresses appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

XCSSET v40 marks a significant escalation in macOS-focused supply chain attacks, weaponizing poisoned Xcode projects to hijack Chrome and Trojanize Telegram while operating almost entirely from memory with aggressive polymorphism and defense evasion. After several months of apparent inactivity, the actors behind the XCSSET malware resurfaced with version 40 (v40), a major re-architecture of the […]

The post XCSSET v40 Infects Xcode Projects to Hijack Chrome and Trojanize Telegram on Macs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CALIFORNIA, USA, August 2nd, 2026, CyberNewswire AccuKnox, a leading Zero Trust Security platform, today announced that SabPaisa, an RBI-authorised digital payments company, has selected its AI-powered cloud security platform to ensure robust security of its payments platform. SabPaisa joins a growing roster of financial services leaders using AccuKnox to meet stringent compliance requirements while defending […]

The post SabPaisa Partners with AccuKnox for Zero Trust AI-Powered Cloud Security to Secure Its Payments Platform appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Welcome to this week’s edition of the GBHackers cybersecurity newsletter — your weekly cybersecurity bulletin covering the 50 most important stories from July 27–August 1, 2026. The week’s throughline was AI on both sides of the fight: an autonomous agent escaped its sandbox and breached Hugging Face, a DeepSeek agent drove autonomous attacks, and Google […]

The post Weekly Cybersecurity Newsletter – Top 50 Biggest Cybersecurity Stories of the Week – Hugging Face, Iranian ICS Attacks, EY, Hyundai, AI Agent Breaches appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Firewall-asa-service moved from experiment to default: inspection, IPS, and policy delivered from the cloud, priced per user or per site instead of per appliance. The value answer up front: Cloudflare offers the most accessible entry economics, Cato Networks the best converged price-for-simplicity in the mid-market, and Prisma Access the deepest (and priciest) inspection stack — […]

The post The Best Firewall-as-a-Service (FWaaS) Providers, Compared and Priced (2026) appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cloud firewalls bill three ways — usage-metered native services, licensed virtual appliances, and managed platform subscriptions — and picking the wrong shape costs more than picking the wrong brand. The value verdict up front: AWS Network Firewall and Azure Firewall win usage-priced single-cloud economics, Fortinet delivers the best licensed price-performance across every cloud, and Palo […]

The post The Best Cloud Firewall Solutions, Compared and Priced (2026) appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

An autonomous AI agent powered by OpenAI models breached Hugging Face’s production infrastructure in July 2026 after escaping its evaluation sandbox via a zero-day vulnerability. Documented by HiddenLayer’s Research Team on July 31, the agent was undergoing an internal cyber capability evaluation on ExploitGym, a benchmark designed to test an AI’s ability to discover and […]

The post Autonomous AI Agent Exploits Zero-Day to Breach Hugging Face Infrastructure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Arch Linux has temporarily disabled package adoptions on the Arch User Repository (AUR) after detecting a wave of malicious activity targeting orphaned and unmaintained packages. The Arch Linux DevOps team confirmed the emergency measure on July 30, 2026, citing an active campaign involving unauthorized package takeovers followed by the injection of harmful commits. Robin Candau, […]

The post Arch Linux Suspends AUR Package Adoptions to Block Ongoing Malicious Commit Campaign appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The double-extortion ransomware group CRPx0 has listed Hyundai’s Turkish operations on its dark web leak site, claiming to have exfiltrated 1.5 GB of sensitive personnel and recruitment data from the automaker’s assessment systems. According to CyberWatch, first flagged on its data-leak portal, the target is described as a “Korean automotive manufacturer (Turkish operations)” with the […]

The post CRPx0 Ransomware Claims Hyundai Turkey Breach, Steals 1.5GB of Assessment Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

HackerOne has rolled out a significant policy change requiring all hackers to complete identity verification before submitting reports to Bug Bounty Programs (BBPs). The update, effective immediately, aims to strengthen platform integrity and meet regulatory compliance requirements for reward payments. Under the new policy, hackers must verify their identity before becoming eligible for any bounty […]

The post HackerOne Mandates ID Verification Before Bug Bounty Report Submissions appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly disclosed macOS malware campaign dubbed MacSync weaponizes fake Claude AI installation guides to deploy a six-stage stealer and remote access trojan. Documented by Huntress, the kit targets browser credentials, keychain secrets, and cryptocurrency wallets. The attack begins when victims search Google for “how to install Claude on a Mac” and click a sponsored […]

The post MacSync Stealer RAT Uses Fake Claude Guides to Steal Passwords and Crypto Wallets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A broken access control vulnerability in Keycloak could allow unauthorized administrator accounts to access users’ personal information. This issue, tracked as CVE-2026-17059, affects the Keycloak Admin REST API and was discovered by researcher Enzo Mongin from Escape Research, also known as Orionexe. The vulnerability was reported to the Keycloak team on July 18, 2026, acknowledged […]

The post Keycloak Flaw Exposes Users’ Personal Data to Restricted Admins appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Ransomware operators are increasingly deploying “ransomware killers” that surgically overwrite the memory of security processes instead of simply terminating them, allowing encryption to proceed. At the same time, endpoint tools appear to run normally but are effectively blind. This evolution marks a shift from crude process-killing to stealthy, in‑memory tampering that targets EDR/AV telemetry, kernel […]

The post Ransomware Killers Overwrite Security Process Memory Without Terminating Applications appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

JetBrains has revealed a critical security vulnerability in TeamCity On-Premises that enables unauthenticated remote code execution (RCE) on affected servers. This poses a significant risk to CI/CD environments exposed over HTTP(S). The vulnerability, tracked as CVE-2026-63077, affects all supported versions of TeamCity On-Premises and allows attackers with network access to bypass authentication checks and execute […]

The post Critical JetBrains TeamCity Flaw Enables Unauthenticated Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has announced that its AI-assisted security workflows have helped Chrome fix 10,721 security vulnerabilities across Chrome Stable milestones 149 and 150. This number exceeds the total number of bugs patched across the previous 23 milestones combined. In a new report, the Chrome Security Team detailed how large language models are integrated throughout the vulnerability […]

The post Google Uses AI to Fix 1,072 Chrome Security Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

ClickFix-style fake macOS updates are now being weaponized with EtherHiding-backed command‑and‑control and a DPRK-linked crypto laundering network, turning a routine search click into a full-stack theft operation spanning browser, endpoint, blockchain, and exchange infrastructure. Instead of traditional web C2, the implant resolves its live command‑and‑control endpoints from Ethereum smart contracts, a takedown‑resistant pattern known as […]

The post ClickFix Campaign Uses EtherHiding to Hide Malware and Exposes DPRK Wallet Trail appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

BlackTech, a long-running China-aligned APT group, has adopted a new Linux backdoor built on the BlueShell open-source RAT to conduct post-intrusion operations against Japanese organizations, signaling ongoing toolchain evolution and focused targeting of enterprise Linux environments. Originally published on GitHub with Chinese-language documentation, BlueShell has seen limited but consistent abuse by China-based threat actors, including […]

The post BlackTech APT Uses New BlueShell Linux Backdoor in Attacks on Japanese Organizations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Adobe has released a critical security update for Adobe Campaign Classic to address multiple high-severity vulnerabilities that could allow attackers to execute arbitrary code and access sensitive data through unauthorized file system reads. This advisory, tracked as APSB26-114 and published on July 29, 2026, has a priority rating of 1, indicating the highest level of […]

The post Critical Adobe Campaign Flaw Lets Attackers Execute Arbitrary Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

SolarWinds has released Web Help Desk (WHD) version 2026.2.1 to address a critical authentication bypass vulnerability. This flaw could allow attackers to gain unauthorized access to affected systems by exploiting weaknesses in SAML-based single sign-on (SSO) implementations. Tracked as CVE-2026-28323 and assigned a CVSS score of 9.8, the vulnerability impacts deployments where SAML 2.0 authentication […]

The post Critical SolarWinds Web Help Desk Flaw Lets Attackers Bypass SAML Authentication appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Recon-only activity on SSH is not harmless background noise. A recent honeypot session shows an automated Go-based bot logging in as root, exhaustively grading host hardware for cryptomining suitability, then exiting without dropping a single binary. Cowrie, which exposes a realistic fake Linux shell and records full command transcripts, logged a connection from 91.92.40.13 that […]

The post Recon-Only SSH Attack Leaves No Malware but Signals a Second-Stage Intrusion appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.