Posts of last few hours

A new GhostAction campaign has expanded to more than 500 compromised GitHub accounts and has injected malicious workflows into tens of thousands of repositories since October 7, 2026. Socket’s October 9 update describes a credential theft operation targeting GitHub Actions secrets, cloud credentials, and AI service API keys embedded in source code and repository history. […]

The post GhostAction Hackers Compromise 500+ GitHub Accounts to Steal Cloud and AI API Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

REA, short for Reverse Engineer Anything, connects AI coding agents such as Claude Code and Cursor to tools that inspect software without its source code. The open-source project brings Ghidra, IDA Pro, and Hopper into an agent-driven workflow, helping researchers trace program behavior and explain findings with supporting evidence. Rather than replacing a disassembler, REA […]

The post REA Tool Connects Claude Code and Cursor to Ghidra and IDA Pro to Reverse Engineer Anything appeared first on Cyber Security News.

A newly disclosed unprecedented surge in suspected Iranian VPN-over-DNS activity, with one domain generating 40 billion passive DNS observations within days. Published October 9, 2026, the investigation documents infrastructure expanding across more than 100 domains during military conflict, while leaving its operators, transmitted content, and purpose unconfirmed. The activity began around 07:00 UTC on March […]

The post Iranian VPN-over-DNS Activity Generates 40 Billion DNS Observations During Military Conflict appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.