GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Microsoft SharePoint Server administrators are being urged to patch two vulnerabilities that could be combined to allow unauthenticated remote code execution on exposed on-premises servers. The flaws, tracked as CVE-2026-55040 and CVE-2026-63520, affect SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016. Microsoft SharePoint Flaws The urgency has increased after Defused reported […]

The post Microsoft SharePoint Flaws Let Unauthenticated Attackers Execute Remote Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A large-scale internet scan has uncovered 28,000 publicly accessible .git repositories exposing credentials for AWS, OpenAI, Stripe, GitHub, and other services, illustrating how a basic web server misconfiguration can turn source code history into an immediate cloud access risk. The research, published by attack-surface management firm Intruder, examined 3.5 million live HTTP hosts selected from […]

The post 28,000 Exposed .git Repositories Leak Active AWS, OpenAI, Stripe and GitHub Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Linux has now reached 35 years old, serving as a reminder of the modern world’s reliance on an open-source kernel. On August 25, 1991, a 21-year-old student at the University of Helsinki, Linus Torvalds, announced his work on the comp.os newsgroup.minix Usenet group. He introduced a free operating system for 386/486 AT clones that he […]

The post Linux Turns 35 as Open-Source Kernel Powers Global Critical Infrastructure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Mexico’s financial sector is facing an industrialized phishing Balonx Sistema, a Mexico-focused Phishing-as-a-Service (PhaaS) platform that has harvested credentials and financial data from more than 1,100 banking users since at least October 2025. The service targets over 20 Mexican financial institutions and combines live phishing, Android malware, and AI-driven voice fraud in one subscription-based operation. […]

The post AI-Powered Balonx Sistema PhaaS Harvests Credentials From Over 1,100 Banking Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

OpenSSL has released security updates addressing nine vulnerabilities that could allow remote attackers to crash QUIC, DTLS, CMS, CMP, and TLS-enabled applications through malformed network packets or cryptographic messages. The advisory dated August 25, 2026, highlights three moderate-severity issues and six low-severity flaws. Most of these problems could lead to denial-of-service (DoS) conditions due to […]

The post OpenSSL Flaws Allow Remote Attackers to Crash Servers With Malformed Packets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors behind ClearFake campaigns are using a newly identified loader, WordlistLoader, to deliver the Amatera Stealer to Windows systems. The loader disguises executable shellcode as sequences of ordinary English words, helping malware evade static inspection before reconstructing and launching the final payload in memory. Microsoft previously observed ACR Stealer operators using fake verification prompts, […]

The post Hackers Hide Malware Inside Plain English Words to Infect Windows Users With Amatera Stealer appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors are increasingly using Google and Bing as phishing delivery channels, employing a cloaking technique that presents harmless pages to security scanners while serving credential-harvesting banking portals to genuine search users. The campaigns target users of major financial institutions and combine search-engine optimization abuse, recently registered lookalike domains, and referral-aware payload delivery to extend […]

The post Google and Bing Search Results Used to Deliver Hidden Banking Phishing Pages appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

North Korea-linked Kimsuky operators have targeted organizations in South Korea and Japan with spear-phishing campaigns that install and conceal AnyDesk, giving attackers persistent, interactive remote access while blending into legitimate software activity. The operation combines OneDrive-hosted lures, malicious Windows shortcut files, scheduled-task persistence, PowerShell payloads, and email theft across Thunderbird, Outlook, and Gmail. The archives […]

The post North Korean Hackers Hide AnyDesk on Victim PCs to Maintain Secret Remote Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

ReliaQuest has reported a targeted social engineering attack in which threat actors impersonated company security personnel, used a spoofed domain, and successfully persuaded one employee to approve a malicious multi-factor authentication (MFA) request. The incident, detected on August 22, 2026, resulted in the temporary exposure of a single identity session with view-only access to ReliaQuest’s […]

The post Hackers Impersonate Security Staff to Steal Credentials in ReliaQuest Social Engineering Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly discovered AI system called Ox Alpha has emerged on OpenRouter, sparking widespread speculation within the AI community regarding its origin, technical capabilities, and potential connections to major Chinese or Western model developers. Released on Thursday as a free preview model, Ox Alpha is described on OpenRouter as “a reasoning model designed for coding, […]

The post Mysterious Ox Alpha Stealth AI Model Emerges for Coding and Agentic Work appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors are actively exploiting a critical operating system command injection vulnerability in Zimbra Collaboration Suite, identified as CVE-2026-73570. This vulnerability allows unauthenticated attackers to execute arbitrary operating system commands with the privileges of the zimbra user. Zimbra Collaboration Suite Flaw The flaw specifically affects Zimbra deployments where the SNMP trap notification service is enabled […]

The post Zimbra Collaboration Suite Flaw Actively Exploited to Execute Arbitrary Commands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Open VSX has removed three extension identifiers from its malicious-extension list after the legitimate projects they impersonated began reclaiming their names. The move restores publishing access for the affected maintainers but highlights a supply-chain tracking gap: a single extension ID can represent both a removed malicious artifact and a later legitimate release. Between August 16 […]

The post Open VSX Unblocks 3 IDs Used in 77-Extension Evil-Twin Malware Campaign appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

SynkLoader, a newly identified modular malware framework that combines Python, C#, C++, PowerShell, and memory-resident payloads to evade endpoint detection. Delivered through Microsoft Teams phishing, the operation uses a convincing fake Windows lock screen to capture credentials before enabling network tunneling and interactive access to compromised enterprise environments. Compile timestamps and file metadata indicate the […]

The post New SynkLoader Malware Uses Fake Windows Lock Screen to Steal Passwords and Pivot Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

AmnesiaStealer, a multi-stage macOS infostealer written in Rust that moves beyond conventional credential theft by giving attackers covert, interactive control over a victim’s authenticated Chromium browser sessions. The malware is being distributed through a ClickFix social-engineering campaign that directs users to counterfeit GitHub download pages. Instead of delivering a legitimate application, the sites instruct visitors […]

The post New macOS Malware Clones Your Logged-In Browser and Gives Hackers Remote Control. appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft is currently investigating a compatibility issue with Windows 11, in which certain games crash, freeze, or cause unexpected system restarts on devices equipped with RGB lighting hardware and related low-level drivers. This problem was reported following the release of Windows updates on August 11, 2026, including the KB5121003 update for OS Build 26100.9168. Microsoft […]

The post Windows 11 Update Triggers Game Crashes on Systems With RGB Lighting Drivers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability has been identified in the widely used Pods WordPress plugin, which could allow unauthenticated attackers to take complete control of affected websites by escalating privileges to the administrator level. This vulnerability, tracked as CVE-2026-19598, carries a CVSS score of 9.8 and affects Pods – Custom Content Types and Fields versions up to […]

The post Critical WordPress Pods Flaw Lets Unauthenticated Attackers Gain Admin Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A Chinese-speaking threat actor has been observed using DeepSeek through the Hermes Agent framework to automate reconnaissance, vulnerability research, exploit acquisition, and attack attempts against internet-facing infrastructure. According to Unit 42, the actor tracked under the aliases knaithe and KnYuan built an AI-assisted offensive environment that combined DeepSeek’s reasoning capabilities with Hermes Agent’s terminal access, […]

The post Chinese Hacker Uses DeepSeek and Hermes Agent to Launch Autonomous Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Apollo Global Management has disclosed a cyber incident in which attackers gained unauthorized access to cloud platforms and may have acquired highly sensitive personal information. The alternative asset manager said the intrusion occurred between July 6 and July 10 after threat actors used social engineering techniques to compromise its cloud environment. The company has not […]

The post Apollo Global Management Data Breach Exposes Social Security Numbers and Personal Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly disclosed prompt-injection technique could turn a routine request to summarize a webpage in xAI’s Grok web chat into a silent data-exfiltration attack, potentially exposing a user’s name, approximate location, subscription tier, and active conversation history. Security researchers at Adversa AI have dubbed the technique “Cryptographic Context Injection.” The attack targets Grok’s ability to […]

The post Zero-Click Grok Attack Lets Hackers Steal Chat History Using Encrypted Prompt Injection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A large-scale investigation has uncovered 768 publicly exposed AWS access keys that remain active and grant full administrative privileges to corporate cloud environments, posing a serious risk of account takeover, data theft, infrastructure abuse, and cloud billing fraud. The credentials include 526 root access keys and 242 IAM user keys attached to AWS’s AdministratorAccess managed […]

The post 768 Leaked AWS Keys Still Active With Full Admin Access to Corporate Accounts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.