GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Threat actors are increasingly abusing Microsoft Defender Antivirus exclusions to keep malicious files outside the reach of endpoint scans, and a little-known policy setting can conceal those exclusions from administrators using normal management tools. Huntress researchers found that attackers can combine broad Defender exclusions with the HideExclusionsFromLocalAdmins setting, creating a stealthy defense-evasion path that leaves […]

The post Hackers Hide Microsoft Defender Exclusions From Admins to Evade Antivirus Scans appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

An active exploitation of CVE-2026-73570, a high-severity unauthenticated OS command-injection vulnerability in Zimbra Collaboration Suite. Attackers used to obtain root access, establish persistent control, and collect mailbox authentication secrets. The issue resides in Zimbra’s SNMP notification processing path. An attacker can send a specially crafted SMTP request containing shell metacharacters, allowing attacker-controlled input to reach […]

The post Zimbra Vulnerability Exploited to Gain Root Access and Steal Mailbox Authentication Secrets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

AI coding agents have inadvertently exposed over 13,000 internal developer screenshots in public GitHub repositories. These exposures potentially revealed sensitive information such as customer records, credentials, financial interfaces, and unreleased product features. The issue, referred to as “PixelLeak” by Glow Labs, affected developers across more than 300 organizations and spanned over 900 repositories. AI Agents […]

The post AI Agents Expose 13,000+ Developer Screenshots Across 900+ GitHub Repositories appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A new Windows malware loader, tracked as 2CLoader, that combines extensive anti-analysis logic, indirect system calls, API tampering, and flexible in-memory execution to deliver Vidar and Remus information stealers. Researchers also observed the loader distributing XWorm RAT, indicating that its operators can use the framework to deploy multiple payload families. Its layered design makes it […]

The post New 2CLoader Malware Uses Anti-VM and API Hooking to Deliver Vidar and Remus Stealers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Washignton, DC, USA, September 30th, 2026, CyberNewswire The Internet Society today launched the Online Trust and Safety Hub, a free global resource center in multiple languages, offering practical tools to help people stay safer and more confident online.  The Hub is a key part of the Internet Society’s Safer Internet Initiative, which works to equip […]

The post Internet Society Launches Global Online Trust and Safety Hub as Part of Its Safer Internet Initiative appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The FBI has intensified its global effort to crack down on large-scale scam operations targeting Americans. Director Kash Patel announced that Operation Blackout has seized approximately $17 billion linked to transnational fraud networks. In a post on X, Patel stated that the operation has resulted in hundreds of arrests, the rescue of thousands of trafficked […]

The post FBI’s Operation Blackout Takes Down Overseas Scammers Targeting Americans appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Russian state-linked threat actor Star Blizzard has expanded its cyberespionage operations in 2026 with a phishing and malware-delivery technique tracked by Microsoft as RedFlick. Microsoft Threat Intelligence reported that the group, which CISA attributes to Russia’s Federal Security Service (FSB) Center 18, conducted at least 13 phishing campaigns between January and August 2026. The activity […]

The post RedFlick Uses Scheduled Tasks and Password-Protected Archives to Deploy CosmicPulse Backdoor appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical Docker vulnerability tracked as CVE-2026-17106, also known as CopyEscape, could allow a malicious container to overwrite files on the host machine when a user runs the `docker cp` command. This vulnerability affects copy-out operations, where Docker retrieves data from a container and extracts it onto the system running the Docker Command Line Interface […]

The post Docker CopyEscape CVE-2026-17106 Lets Malicious Containers Overwrite Host Files appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A large-scale scraping cluster dubbed PaperPhone, exposing how one operator can manufacture the appearance of tens of thousands of legitimate mobile users across dozens of countries. The operation used roughly 75,000 IP addresses across 230 address blocks in 43 countries. However, browser-fingerprinting and network-analysis signals pointed to a centrally coordinated infrastructure rather than a genuinely […]

The post PaperPhone Cluster Shows How One Bot Operator Can Look Like Thousands of Mobile Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Anthropic has enhanced enterprise security visibility for its AI assistant, Claude, with the Compliance API. This feature lets organizations extract data on activity, conversations, files, projects, and agent sessions into their existing governance and security operations platforms. The Compliance API is available to both Claude Enterprise and Claude Platform customers, although the breadth of accessible […]

The post Claude Compliance API Lets Security Teams Monitor Chats, Files and Agent Activity appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability in MikroTik RouterOS could allow unauthenticated remote attackers to execute code on vulnerable devices or trigger a denial-of-service condition. This vulnerability, tracked as CVE-2026-84411, affects MikroTik RouterOS versions earlier than 7.24 and carries a CVSS v3 severity score of 9.8. The Cybersecurity and Infrastructure Security Agency (CISA) disclosed this issue on September […]

The post Critical MikroTik RouterOS Vulnerability Exposes Devices to Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Software supply chain attacks are increasingly evolving into cloud identity breaches, as attackers weaponize trusted packages to steal credentials from developer workstations and CI/CD environments before an application is ever executed. The result is a dangerous pivot: a routine dependency installation can give threat actors access to cloud accounts, source-code repositories, container platforms, secrets-management systems, […]

The post Attackers Target Developer Credentials to Expand Supply Chain Intrusions Beyond Source Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Identity governance and administration has become essential as organizations manage employees, contractors, service accounts, machine identities, and AI agents across increasingly complex environments. The best IGA tools help security teams answer three critical questions: Who has access? Why do they have it? Should they continue to have it? Modern IGA platforms go beyond periodic access […]

The post 12 Best IGA Tools in 2026: The Ranked Buyer’s Guide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has released Chrome version 154 for desktop platforms, addressing 32 security vulnerabilities, including a critical buffer overflow flaw in the ANGLE graphics translation layer. This update is being rolled out as version 154.0.8037.92/.93 for Windows and macOS, and version 154.0.8037.92 for Linux. Google Chrome 154 Update The most severe issue, tracked as CVE-2026-102331, is […]

The post Google Chrome 154 Update Fixes 32 Security Flaws Including Critical ANGLE Bug appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The phishing campaigns that weaponize legitimate remote monitoring and management software to establish persistent access and support credential theft on Windows systems. The campaign demonstrates a recurring operational trend: rather than exploit a vulnerability or deploy obvious custom malware, attackers are abusing trusted administrative platforms already designed to execute commands, transfer files, deploy applications, and […]

The post Hackers Abuse MSP360 and ScreenConnect RMM Tools for Persistent Access and Credential Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors are actively exploiting a critical zero-day vulnerability in Citrix NetScaler, identified as CVE-2026-88772, to gain unauthenticated root-level access to vulnerable Application Delivery Controller (ADC) and Gateway appliances. After the initial compromise, they deploy custom PHP web shells and tools to tunnel within the internal network. Mandiant Consulting and the Google Threat Intelligence Group […]

The post Hackers Exploit Citrix NetScaler Zero-Day to Gain Root Access and Deploy Web Shells appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

OpenAI has canceled the planned October release of GPT-6.1 Astra after internal testing revealed that the next-generation model did not meet the company’s safety and alignment standards. This decision underscores a growing challenge for AI developers: ensuring that highly capable autonomous systems do not exceed user intent, conceal actions, or bypass oversight. The model was […]

The post OpenAI Cancels GPT-6.1 Astra Release Over Internal Safety Concerns appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers have disclosed a high-severity vulnerability in Anthropic’s Model Context Protocol (MCP) Python SDK. This flaw could allow a malicious MCP server to steal OAuth credentials, potentially taking over user accounts. The vulnerability affects MCP client deployments that use HTTP transport and includes vulnerable SDK releases from versions 1.9.1 to 2.1.1. Research from Cycode […]

The post Anthropic MCP Python SDK Flaw Enables OAuth Credential Theft and Account Takeover appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Octopus Deploy has announced a high-severity vulnerability in Octopus Server that could allow authenticated users with project or environment editing permissions to execute arbitrary code within the Octopus Server process. Tracked as CVE-2026-101169, this issue stems from insecure JSON deserialization and affects multiple Octopus Server releases running on both Linux and Microsoft Windows. Organizations using […]

The post Octopus Server Flaw Lets Authenticated Attackers Execute Arbitrary Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors behind the OpenSUpdater malware family are concealing a reflective loader inside recompiled 7-Zip self-extracting archive components, allowing malicious code to blend into otherwise legitimate-looking installers and evade conventional triage. Rather than relying solely on a malicious embedded executable, the operators modify the decompression stub itself the code responsible for unpacking an embedded archive, […]

The post OpenSUpdater Malware Hides Inside 7-Zip Installers to Evade Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.