Posts of last few hours

REA, short for Reverse Engineer Anything, connects AI coding agents such as Claude Code and Cursor to tools that inspect software without its source code. The open-source project brings Ghidra, IDA Pro, and Hopper into an agent-driven workflow, helping researchers trace program behavior and explain findings with supporting evidence. Rather than replacing a disassembler, REA […]

The post REA Tool Connects Claude Code and Cursor to Ghidra and IDA Pro to Reverse Engineer Anything appeared first on Cyber Security News.

A newly disclosed unprecedented surge in suspected Iranian VPN-over-DNS activity, with one domain generating 40 billion passive DNS observations within days. Published October 9, 2026, the investigation documents infrastructure expanding across more than 100 domains during military conflict, while leaving its operators, transmitted content, and purpose unconfirmed. The activity began around 07:00 UTC on March […]

The post Iranian VPN-over-DNS Activity Generates 40 Billion DNS Observations During Military Conflict appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

DarkBlinders hackers are deploying a fake video meeting application and abusing GitHub repositories in a cyberespionage campaign targeting Israel and the Kurdistan Region of Iraq. Dream researchers observed the operation between August and October 2026. The investigation confirmed compromises affecting a government cloud environment in Kurdistan and a prominent Israeli individual associated with the security […]

The post DarkBlinders Hackers Use Fake Meeting App to Deploy Backdoor and Steal Government Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors are exploiting two zero-day vulnerabilities in Ahsay Cloud Backup Server (AhsayCBS) to compromise exposed backup servers without authentication and execute commands with SYSTEM privileges. Observed intrusions have deployed web shells and cryptocurrency miners, exposing weaknesses in the infrastructure that centrally manages backup operations. According to Field Effect’s October 9, 2026, report, exploitation began […]

The post Two AhsayCBS Zero-Day Vulnerabilities Actively Exploited to Take Over Backup Servers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers used AI agents to turn an exposed application endpoint into full administrative control of a server in under 24 hours. The intrusion involved hundreds of commands, credential theft, and Windows privilege escalation without new malware or a zero-day vulnerability. Researchers Austin Ritchie and Daxton Wirth assessed with high confidence that large language model-driven agents […]

The post Hackers Use AI Agents and GodPotato Exploit to Gain Windows SYSTEM Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.