Posts of last few hours

DarkBlinders hackers are deploying a fake video meeting application and abusing GitHub repositories in a cyberespionage campaign targeting Israel and the Kurdistan Region of Iraq. Dream researchers observed the operation between August and October 2026. The investigation confirmed compromises affecting a government cloud environment in Kurdistan and a prominent Israeli individual associated with the security […]

The post DarkBlinders Hackers Use Fake Meeting App to Deploy Backdoor and Steal Government Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors are exploiting two zero-day vulnerabilities in Ahsay Cloud Backup Server (AhsayCBS) to compromise exposed backup servers without authentication and execute commands with SYSTEM privileges. Observed intrusions have deployed web shells and cryptocurrency miners, exposing weaknesses in the infrastructure that centrally manages backup operations. According to Field Effect’s October 9, 2026, report, exploitation began […]

The post Two AhsayCBS Zero-Day Vulnerabilities Actively Exploited to Take Over Backup Servers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers used AI agents to turn an exposed application endpoint into full administrative control of a server in under 24 hours. The intrusion involved hundreds of commands, credential theft, and Windows privilege escalation without new malware or a zero-day vulnerability. Researchers Austin Ritchie and Daxton Wirth assessed with high confidence that large language model-driven agents […]

The post Hackers Use AI Agents and GodPotato Exploit to Gain Windows SYSTEM Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly disclosed attack chain in Amazon Bedrock AgentCore that could turn a single malicious prompt into credential theft and compromise of other AI agents within the same AWS account and region. Dubbed AgentCorruption, the research linked metadata access to an overprivileged execution role, enabling lateral movement, conversation exposure, memory poisoning, and theft of credentials […]

The post AWS Bedrock AgentCore Flaw Allowed Attackers to Hijack AI Agents Using a Single Prompt appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A single prompt sent to a public-facing AI agent could have exposed every Amazon Bedrock AgentCore agent in the same AWS account and region, according to new research from Zenity Labs. The attack chain, named AgentCorruption, gave the researchers access to private chats, source code, long-term memories, API keys, OAuth tokens, and secrets held in […]

The post One Prompt Could Hijack AWS AI Agents and Steal Cloud Credentials appeared first on Cyber Security News.