GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

OpenAI introduced Daybreak Red Team and Daybreak Defense Factory at its November 12 “Cyber at the Frontier” event, expanding its cybersecurity platform with agents that investigate vulnerabilities, validate attack paths, and prepare fixes. The launch connects offensive security testing with remediation workflows while retaining human review before merging proposed code changes. OpenAI AI Cybersecurity Tools […]

The post OpenAI Launches Advanced AI Cybersecurity Tools for Automated Penetration Testing and Vulnerability Research appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Chinese-speaking attackers weaponized the open-source Cairn penetration-testing framework to conduct 25 autonomous operations against at least 19 organizations during August–September 2026. Ten organizations experienced confirmed unauthorized access or data retrieval, exposing how agentic AI can translate brief operator instructions into sustained intrusion attempts. Targets included semiconductor manufacturers, defense-policy organizations and civil-society institutions. The attribution rests […]

The post Chinese-Speaking Hackers Weaponize Cairn AI Framework to Breach Semiconductor and Defense Organizations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Midnight Blue researcher Carlo Meijer found six pre-authentication remote code execution zero-days in the Danfoss AK-SM800A refrigeration controller. He found them in under an hour of manual firmware review. All firmware versions up to and including 5.3.2 are affected. Attacks on internet-exposed Danfoss and Copeland controllers began in France on October 11. They continued in […]

The post Researchers Discover 6 Zero-Day Vulnerabilities in Danfoss Refrigeration Controllers Allowing Remote Root Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Scanning is a layered discipline pretending, in most procurement conversations, to be a single purchase. Commercial engines bring vast authenticated-check libraries; open-source scanners democratized the practice; the template-driven wave (Nuclei) changed how fast a new CVE becomes a runnable check everywhere; and intelligence feeds (Vulners) changed what “current” means. This verdict guide judges eleven scanners […]

The post 11 Vulnerability Scanners: The 2026 Buyer’s Verdict Guide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

AI governance moved from a philosophy slide to a budget line the moment the EU AI Act’s duties began taking effect and directors started asking which models the business actually operates a question most estates still can’t answer. The buying trap is treating the category as one thing: it spans policy-and-registry platforms, ML-born model monitors, […]

The post 11 AI Governance (AI TRiSM) Platforms: The 2026 Buyer’s Verdict Guide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A previously unknown espionage-focused group, tracked as StingyBasilisk, has run covert operations against a victim network since at least April 2022. The initial infection vector remains unknown, and the activity cannot yet be reliably tied to any known APT group. From February 2026, the attackers moved across the network over SMB. They dropped payloads into […]

The post StingyBasilisk APT Uses Windows Named Pipes to Control Malware and Evade Security Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Red Hat has announced a critical vulnerability in Red Hat Quay that may allow unauthenticated attackers to take over a registry’s signing key, thereby gaining control over private container images. This vulnerability is tracked as CVE-2026-123710 and has a CVSS v3 score of 9.8, which Red Hat categorizes as Critical. The advisory was published on […]

The post Critical Red Hat Quay Vulnerability Allows Hackers to Hijack Private Container Registries appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Taiwan Semiconductor Manufacturing Company (TSMC) has announced that personal information belonging to current and former employees was found on an external website without authorization. The company confirmed that the exposed information matched records stored in a cloud service provider’s systems and stated that there was no evidence of any compromise to its own systems. TSMC […]

The post TSMC Reports Data Breach After Hackers Access Employee Information Through Cloud Provider appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A Beast ransomware payload gives affiliates an interactive graphical console and the ability to override its embedded settings. It also wipes recovery options before it encrypts. AttackIQ published its analysis of the sample on October 23, 2026. Symantec and Carbon Black attribute both families to a developer they track as Hyadina. Symantec reported on July […]

The post Hackers Deploy Beast Ransomware to Disable Backup Services, Delete Shadow Copies, and Encrypt Network Drives appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

ArcticRAT, an Android remote access trojan (RAT). It started as spyware aimed at users of 11 cryptocurrency apps and has grown into a modular, AI-assisted tool for full device takeover. The most notable change is that its operators now send stolen SMS and app data to a large language model (LLM) for automated financial triage. […]

The post New ArcticRAT Malware Uses Fake VPN Connections to Evade Google Play Protect During Installation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Europol and international partners have disrupted infrastructure supporting Gootloader, CastleRAT, and StealC in the latest Operation Endgame action, targeting services that enable ransomware deployment, remote access, and credential theft. Authorities reported action against 235 servers and 257 domains, and recovered 6.4 million victim datasets from criminal infrastructure. Announced on November 12, 2026, the coordinated operation […]

The post Europol Dismantles Three Major Malware Networks, Seizes 235 Servers and 6.4 Million Stolen Records appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

AWS has disclosed a server-side request forgery (SSRF) flaw in mcp-gateway-registry, an open-source registry and gateway for Model Context Protocol (MCP) servers. Tracked as CVE-2026-125926 under bulletin 2026-180-AWS, the issue lets an authenticated user make the gateway send requests to services on a deployment’s internal network. AWS rates the bulletin “Important”, and the GitHub advisory […]

The post AWS Warns of MCP Gateway Registry Vulnerability Allowing Attackers to Access Internal Network Services appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A major Microsoft 365 outage disrupted cloud connectivity on November 12. It continued into November 13, 2026, as Microsoft worked to restore the affected infrastructure. The company confirmed that users in any region could experience connectivity problems, expanding an investigation initially focused on Exchange Online mailbox access in the Americas. Microsoft has not confirmed that […]

The post Massive Microsoft 365 Outage Disrupts Outlook, Teams, Copilot, and Defender XDR Worldwide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

San Francisco, California, USA, November 12th, 2026, CyberNewswire Four-year cybersecurity study finds all 50 types of software and devices examined vulnerable, with 46 rated Critical or High risk. nDiligence, Inc. today announced the release of Attack the Glass (ATG) research to the general public. The four-year study examines a cybersecurity vulnerability in how applications use […]

The post nDiligence Releases Four-Year Study Identifying a Critical Supply-Chain Vulnerability Across 50 Platform Types appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency has added CVE-2026-124194, an actively exploited Microsoft Outlook spoofing vulnerability, to its Known Exploited Vulnerabilities catalog. Added on November 10, 2026, the entry establishes a November 24 remediation deadline. The warning follows disclosures about Outlook authentication theft involving malicious message files and unsafe external connections. Microsoft Outlook Zero-Day Vulnerability […]

The post CISA Warns of Actively Exploited Microsoft Outlook Zero-Day Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

ESET says it has blocked more than 700,000 compromise attempts linked to Cruciferra since January 2026. Türkiye, Greece and Spain were the most affected countries. A crypter wraps a malicious payload in encryption and obfuscation so security tools cannot recognize it. Cruciferra’s distinguishing feature is its range of ciphers. Proofpoint documented more than 90 encryption […]

The post ESET Blocks Over 700,000 Cruciferra Malware Attacks Using Advanced Encryption to Evade Antivirus Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Global scam networks are using artificial intelligence, deepfakes, and cryptocurrency infrastructure to industrialize fraud, inflicting tens of billions of dollars in annual losses, the Financial Action Task Force warned in a report published November 5, 2026. The report, Combating End-to-End Illicit Financial Flows Linked to Scam Compounds, describes a criminal ecosystem that extends beyond fortified […]

The post Global Scam Networks Use AI, Deepfakes, and Crypto to Steal Billions From Victims, FATF Warns appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

MongoDB has patched a critical use-after-free flaw, tracked as CVE-2026-118383 with a CVSS score of 9.5, that unauthenticated attackers can exploit over the network. The company found the bug internally and says it knows of no exploitation attempts so far. The advisory warns that the flaw can crash the server or, under certain conditions, allow […]

The post Critical MongoDB Use-After-Free Vulnerability Allows Remote Code Execution Without Authentication appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Attackers deployed GSocket on compromised Linux servers, disguised its processes as legitimate system components, and retained access after administrators patched the original vulnerabilities. In its November 11 report, Microsoft described unrelated threat actors abusing the open source remote access tool rather than maintaining dedicated command-and-control infrastructure. Defender for Endpoint telemetry recorded a 356.2% increase in […]

The post Microsoft Finds Hackers Using GSocket to Hide Linux Backdoors as Legitimate System Processes appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A.P. Moller–Maersk has confirmed unauthorized access and data extraction affecting a local legacy IT system inherited through a previous acquisition. In its November 11 security advisory, the shipping company said investigators currently believe no sensitive information was disclosed, while emphasizing that its investigation remains ongoing. Maersk Data Breach The disclosure indicates that information was extracted; […]

The post Shipping Giant Maersk Confirms Data Breach Following Unauthorized Access to IT Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.