GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Elastic published 14 security advisories addressing various vulnerabilities in Elasticsearch, Kibana, and Elastic Agent/Endpoint. Among these, a high-severity Kibana authorization bypass vulnerability allows for cross-tenant data interception. Other issues include information disclosure and denial-of-service weaknesses in Elasticsearch, along with a flaw in Elastic Endpoint that affects Windows protection capabilities. The advisory list consists of ten […]

The post Elastic Patches 14 Security Flaws, Including One Enabling Cross-Tenant Data Interception appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Veeam released security updates to address a critical vulnerability that lets low-privileged users execute remote code on Veeam Backup Servers. Identified as CVE-2025-64393, this flaw has a CVSS v4.0 score of 9.4 and was resolved in Veeam Backup & Replication version 12.3.2 P4, build 12.3.2.4934, released on October 6, 2026. The vulnerability affects build 12.3.2.4854 […]

The post Critical Veeam Backup & Replication Flaw Allows Low-Privileged Users to Execute Remote Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A prolonged Partisan Zmiy intrusion into a medical organization, exposing an updated malware toolkit that combined Telegram command channels, DNS tunneling, and scheduled payload execution. Investigators joined the response in December 2025 and traced the earliest evidence of compromise to early 2024, indicating approximately two years of access without observed destructive activity. The organization maintained […]

The post Partisan Zmiy Malware Campaign Uses Telegram and DNS Tunneling to Target Healthcare Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Rockstar Games’ breach history illustrates how stolen identities, trusted integrations and exposed development assets can undermine enterprise defenses without a perimeter exploit. A September 2026 Lares analysis connects the incidents, although several reconstructed attack details remain assessments rather than independently established forensic findings. In September 2022, an intrusion associated with Lapsus$ exposed approximately 90 GTA […]

The post Rockstar Games Attacks Expose MFA Fatigue, OAuth Token Theft and Dev Pipeline Security Failures appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A human-operated phishing platform impersonating AI advertising products to steal credentials and manipulate multifactor authentication workflows. The operation targets advertising professionals through convincing account-connection pages, with researchers observing hundreds of victim submissions and continued activity during their investigation. Rather than presenting an obvious password request, the attackers sell a plausible business workflow: campaign optimization, spending […]

The post Fake ChatGPT, Claude and Gemini Ads Use Browser-in-the-Browser Phishing to Steal Accounts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

ASOS is investigating unauthorized activity involving third-party customer communication platforms after some shoppers received an alarming app notification suggesting a potential data leak. The attackers claimed to have accessed the retailer’s Snowflake environment, but this allegation remains unverified. Accessing notifications alone does not confirm a database breach. ASOS Hacked The alert reportedly appeared around 10 […]

The post ASOS Hacked as Attackers Abuse Customer Notification Platform to Threaten Data Leak appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers have revealed an attack against GitHub Copilot CLI that can expose developer secrets through an attacker-controlled webpage. This technique is called Cryptographic Context Injection (CCI). It involves hiding malicious instructions in encrypted content, which then convinces the coding agent to decrypt and run them in its runtime environment. According to Adversa AI’s disclosure, […]

The post GitHub Copilot CLI Flaw Lets Attackers Steal Developer Secrets Using Encrypted Prompt Injection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

On October 6, 2026, Anthropic announced an expanded Cyber Verification Program (CVP) that gives vetted security professionals access to advanced Claude capabilities with fewer cybersecurity restrictions. This initiative integrates its existing verification program and Project Glasswing into three distinct access tiers focused on defensive analysis, authorized offensive testing, and assessments of sensitive infrastructure. According to […]

The post Anthropic Opens Claude’s Advanced Cyber Capabilities to Verified Red Teams With Reduced Restrictions appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Silver Springs, United States / Maryland, October 6th, 2026, CyberNewswire Aembit, the identity control plane for AI agents, today announced support for securing personal agents’ access to enterprise environments, available immediately to existing customers at no additional cost.  As personal agents, such as Meta Muse and OpenAI Dots, move into workplace use, they can gain […]

The post Aembit Extends Access Controls to Personal AI Agents appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Torrance, Californina, October 6th, 2026, CyberNewswire Criminal IP by AI SPERA, a cyber threat intelligence platform delivering decision-ready intelligence and attack surface visibility to security teams worldwide, will participate in GovWare 2026 in Singapore. As security operations increasingly move beyond asset discovery toward understanding, prioritizing, and responding to exposure, Criminal IP is introducing AITEM (AI-Powered […]

The post Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

New York, New York, October 6th, 2026, CyberNewswire Purpose-built for AI agents, new capabilities uncover shadow AI, stop rogue enterprise agents at runtime, and issue quantum-resilient agent identities  AppViewX, the leading identity security company built for the AI-powered and post-quantum enterprise, today expanded capabilities for Agent Identity Security, a solution enabling enterprises to discover every […]

The post AppViewX Adds Shadow AI Visibility and a Runtime Kill Switch to Agent Identity Security appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

An Iranian state-aligned threat actor impersonated Dubai Airports recruiters to deliver weaponized coding assessments to software engineers. The operation deployed ShelbyLoader V2 through a stealthy execution chain that abused legitimate Microsoft development tools and GitHub infrastructure. Tracked as CL-STA-1178, the activity includes “Blinder Tunnel,” a campaign targeting Iraqi critical infrastructure beginning in March 2026. The […]

The post Hackers Pose as Dubai Airports Recruiters to Infect Software Engineers With ShelbyLoader V2 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A Russian-speaking Gentlemen ransomware affiliate used the Model Context Protocol (MCP) to execute commands during live intrusions, turning an AI coding assistant’s tool interface into an operational command-and-control channel. CloudSEK identified the activity while investigating exposed infrastructure belonging to an operator calling himself Azazel. Azazel also operated LEAKNED, an independent leak site that allegedly diverted […]

The post Gentlemen Ransomware Affiliate Uses MCP as C2 Channel in Live Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A new open-source command-line utility called RemoveMacAI lets Apple silicon Mac users running macOS 27 disable Apple Intelligence, remove downloaded on-device AI models, and prevent the operating system from automatically downloading them again. Developed by Om Lahore and released under the MIT license, RemoveMacAI addresses storage and manageability concerns for users who have disabled Apple […]

The post New RemoveMacAI Tool Removes Apple Intelligence Models and Reclaims Mac Storage appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Apple has announced plans to strengthen macOS controls for Full Disk Access, citing concerns that increasingly autonomous AI agents could raise privacy and security risks by giving applications extensive access to users’ devices. In a developer update on October 2, Apple stated it will introduce additional controls for macOS Full Disk Access, a powerful permission […]

The post Apple Strengthens macOS Privacy Controls as AI Agents Become More Autonomous appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google is reportedly testing a new Gemini Desktop feature that could give its AI agent extensive control over a user’s Mac. This includes access to files, interaction with installed applications, and network communication, all with fewer prompts requiring user approval for each action. Currently, Google has not publicly released this capability, and it has not […]

The post Google Gemini to Gain Full Computer Access With New Permission appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical heap-buffer-overflow vulnerability in libheif could allow authenticated WordPress users to achieve remote code execution by uploading a specially crafted HEIC image through the standard Media Library workflow. The issue, tracked as GHSA-x8r2-mggj-j6wr, affects the library’s uncompressed-image (unci) decoder and has been fixed in libheif 1.23.3. In affected WordPress deployments, uploaded HEIC files can […]

The post Critical libheif Vulnerability Could Enable Remote Code Execution Through WordPress Image Uploads appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Timor-Leste investigators have dismantled a suspected cross-border telecom fraud operation in Dili, detaining 16 individuals accused of impersonating Japanese police officers to defraud victims in Japan. The raid exposed a professionally staged social-engineering setup that included counterfeit law-enforcement props, Japanese-language call scripts and infrastructure designed to lend credibility to “digital arrest” scams. Authorities said the […]

The post Japanese Police Impersonation Scam Operation Dismantled as 16 Suspects Detained in Timor-Leste appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Denmark has confirmed a serious cybersecurity incident involving unauthorized access to personal information in its Central Person Register (CPR), affecting about 8.8 million registered individuals. The exposed records include names, residential addresses, CPR numbers, and potentially other information held in the country’s national civil registration system. The breach’s impact exceeds Denmark’s current population because the […]

The post Denmark Confirms Major Security Incident Exposing 8.8 Million Citizen Records appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-88779, a high-severity vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway appliances, to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation. Tracked as CVE-2026-88779, this vulnerability involves an improper restriction of operations within the bounds of a memory buffer, also referred […]

The post CISA Flags Citrix NetScaler Flaw Exploited in Ongoing Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.