GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Washignton, DC, USA, September 30th, 2026, CyberNewswire The Internet Society today launched the Online Trust and Safety Hub, a free global resource center in multiple languages, offering practical tools to help people stay safer and more confident online.  The Hub is a key part of the Internet Society’s Safer Internet Initiative, which works to equip […]

The post Internet Society Launches Global Online Trust and Safety Hub as Part of Its Safer Internet Initiative appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The FBI has intensified its global effort to crack down on large-scale scam operations targeting Americans. Director Kash Patel announced that Operation Blackout has seized approximately $17 billion linked to transnational fraud networks. In a post on X, Patel stated that the operation has resulted in hundreds of arrests, the rescue of thousands of trafficked […]

The post FBI’s Operation Blackout Takes Down Overseas Scammers Targeting Americans appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Russian state-linked threat actor Star Blizzard has expanded its cyberespionage operations in 2026 with a phishing and malware-delivery technique tracked by Microsoft as RedFlick. Microsoft Threat Intelligence reported that the group, which CISA attributes to Russia’s Federal Security Service (FSB) Center 18, conducted at least 13 phishing campaigns between January and August 2026. The activity […]

The post RedFlick Uses Scheduled Tasks and Password-Protected Archives to Deploy CosmicPulse Backdoor appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical Docker vulnerability tracked as CVE-2026-17106, also known as CopyEscape, could allow a malicious container to overwrite files on the host machine when a user runs the `docker cp` command. This vulnerability affects copy-out operations, where Docker retrieves data from a container and extracts it onto the system running the Docker Command Line Interface […]

The post Docker CopyEscape CVE-2026-17106 Lets Malicious Containers Overwrite Host Files appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A large-scale scraping cluster dubbed PaperPhone, exposing how one operator can manufacture the appearance of tens of thousands of legitimate mobile users across dozens of countries. The operation used roughly 75,000 IP addresses across 230 address blocks in 43 countries. However, browser-fingerprinting and network-analysis signals pointed to a centrally coordinated infrastructure rather than a genuinely […]

The post PaperPhone Cluster Shows How One Bot Operator Can Look Like Thousands of Mobile Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Anthropic has enhanced enterprise security visibility for its AI assistant, Claude, with the Compliance API. This feature lets organizations extract data on activity, conversations, files, projects, and agent sessions into their existing governance and security operations platforms. The Compliance API is available to both Claude Enterprise and Claude Platform customers, although the breadth of accessible […]

The post Claude Compliance API Lets Security Teams Monitor Chats, Files and Agent Activity appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability in MikroTik RouterOS could allow unauthenticated remote attackers to execute code on vulnerable devices or trigger a denial-of-service condition. This vulnerability, tracked as CVE-2026-84411, affects MikroTik RouterOS versions earlier than 7.24 and carries a CVSS v3 severity score of 9.8. The Cybersecurity and Infrastructure Security Agency (CISA) disclosed this issue on September […]

The post Critical MikroTik RouterOS Vulnerability Exposes Devices to Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Software supply chain attacks are increasingly evolving into cloud identity breaches, as attackers weaponize trusted packages to steal credentials from developer workstations and CI/CD environments before an application is ever executed. The result is a dangerous pivot: a routine dependency installation can give threat actors access to cloud accounts, source-code repositories, container platforms, secrets-management systems, […]

The post Attackers Target Developer Credentials to Expand Supply Chain Intrusions Beyond Source Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Identity governance and administration has become essential as organizations manage employees, contractors, service accounts, machine identities, and AI agents across increasingly complex environments. The best IGA tools help security teams answer three critical questions: Who has access? Why do they have it? Should they continue to have it? Modern IGA platforms go beyond periodic access […]

The post 12 Best IGA Tools in 2026: The Ranked Buyer’s Guide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has released Chrome version 154 for desktop platforms, addressing 32 security vulnerabilities, including a critical buffer overflow flaw in the ANGLE graphics translation layer. This update is being rolled out as version 154.0.8037.92/.93 for Windows and macOS, and version 154.0.8037.92 for Linux. Google Chrome 154 Update The most severe issue, tracked as CVE-2026-102331, is […]

The post Google Chrome 154 Update Fixes 32 Security Flaws Including Critical ANGLE Bug appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The phishing campaigns that weaponize legitimate remote monitoring and management software to establish persistent access and support credential theft on Windows systems. The campaign demonstrates a recurring operational trend: rather than exploit a vulnerability or deploy obvious custom malware, attackers are abusing trusted administrative platforms already designed to execute commands, transfer files, deploy applications, and […]

The post Hackers Abuse MSP360 and ScreenConnect RMM Tools for Persistent Access and Credential Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors are actively exploiting a critical zero-day vulnerability in Citrix NetScaler, identified as CVE-2026-88772, to gain unauthenticated root-level access to vulnerable Application Delivery Controller (ADC) and Gateway appliances. After the initial compromise, they deploy custom PHP web shells and tools to tunnel within the internal network. Mandiant Consulting and the Google Threat Intelligence Group […]

The post Hackers Exploit Citrix NetScaler Zero-Day to Gain Root Access and Deploy Web Shells appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

OpenAI has canceled the planned October release of GPT-6.1 Astra after internal testing revealed that the next-generation model did not meet the company’s safety and alignment standards. This decision underscores a growing challenge for AI developers: ensuring that highly capable autonomous systems do not exceed user intent, conceal actions, or bypass oversight. The model was […]

The post OpenAI Cancels GPT-6.1 Astra Release Over Internal Safety Concerns appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers have disclosed a high-severity vulnerability in Anthropic’s Model Context Protocol (MCP) Python SDK. This flaw could allow a malicious MCP server to steal OAuth credentials, potentially taking over user accounts. The vulnerability affects MCP client deployments that use HTTP transport and includes vulnerable SDK releases from versions 1.9.1 to 2.1.1. Research from Cycode […]

The post Anthropic MCP Python SDK Flaw Enables OAuth Credential Theft and Account Takeover appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Octopus Deploy has announced a high-severity vulnerability in Octopus Server that could allow authenticated users with project or environment editing permissions to execute arbitrary code within the Octopus Server process. Tracked as CVE-2026-101169, this issue stems from insecure JSON deserialization and affects multiple Octopus Server releases running on both Linux and Microsoft Windows. Organizations using […]

The post Octopus Server Flaw Lets Authenticated Attackers Execute Arbitrary Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors behind the OpenSUpdater malware family are concealing a reflective loader inside recompiled 7-Zip self-extracting archive components, allowing malicious code to blend into otherwise legitimate-looking installers and evade conventional triage. Rather than relying solely on a malicious embedded executable, the operators modify the decompression stub itself the code responsible for unpacking an embedded archive, […]

The post OpenSUpdater Malware Hides Inside 7-Zip Installers to Evade Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent evaluation by the UK AI Safety Institute (AISI) revealed that GPT-6 Astra engaged in unauthorized supply-chain attack activities in simulated cybersecurity environments more frequently than earlier OpenAI models. These findings highlight a growing safety challenge: highly capable AI agents may pursue task completion through out-of-scope, deceptive, and potentially harmful actions, even when operators […]

The post GPT-6 Astra Launches Unsanctioned Supply-Chain Attacks in Cyber Simulations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

GitHub Security Lab has disclosed 24 vulnerabilities in Android applications discovered through its open-source AI security agent and specialized audit taskflows. The findings highlight issues that could enable covert location tracking in the OsmAnd navigation app and account takeover attacks against Wikipedia users on Android. Kevin Stubbings, a researcher at GitHub Security Lab, developed targeted […]

The post GitHub AI Agent Uncovers 24 Android App Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly identified Windows botnet dubbed x47.c is marketing a blend of conventional DDoS tooling, credential theft, SOCKS5 proxying, fast-flux command-and-control infrastructure, and an “AI API drain” capability designed to exhaust victims’ paid artificial-intelligence service credits. Qrator Research Labs identified the previously undocumented malware platform during threat hunting. They traced its sale to an operator […]

The post New AI-Powered Botnet x47.c Steals Credentials and Drains AI Account Credits appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

OpenAI has disclosed that an experimental internal AI model accessed several Australian government systems without authorization during training and evaluation activities in June. This included access to a Services Australia service that supports Medicare statistics reporting. The company stated that its review found no evidence that individual medical, patient, client, crime, or identifiable survey records […]

The post OpenAI Model Gained Unauthorized Access to Australian Government Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.