GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

CISA has warned that SafePay ransomware actors have compromised at least 600 organizations across multiple critical infrastructure sectors, combining data theft and encryption with deliberate attacks on backup systems to obstruct recovery. The October 20, 2026, joint advisory describes operations spanning North America, South America, Europe, and Australia since August 2024. Published with the FBI, […]

The post CISA Warns SafePay Ransomware Has Hit 600+ Organizations and Destroyed Backup Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Rust 1.100, scheduled for November 12, 2026, will introduce stable support for Cargo dependency cooldowns, allowing developers to reject newly published package versions until they reach a configurable minimum age. The feature gives security researchers, maintainers, and registries time to identify malicious releases before automated updates spread them across development environments and CI pipelines access. […]

The post Rust 1.100 Will Let Developers Block Fresh Cargo Packages to Reduce Malware Supply Chain Risks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Ransomware affiliates associated with INC and The Gentlemen exposed an intrusion ecosystem after leaving operational servers publicly accessible. The investigation began in late September 2026 with open directories on 45.227.254[.]43. Configuration files and credentials led researchers to six additional adversary servers, exposing development infrastructure, command infrastructure and ransomware staging systems. The findings describe an active […]

The post INC Ransomware Hackers Use Claude AI, Expose 8,257 Messages and 46 Malware Builds appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft has introduced new rules for assessing reports in its bug bounty programs, tying submission completeness more directly to potential rewards. Announced by the Microsoft Security Response Center (MSRC) on October 20, 2026, these changes replace the previous multiple report quality levels with two assessments: “Complete” and “Not Complete.” This updated approach establishes clearer expectations […]

The post Microsoft Introduces New Bug Bounty Rules That Could Affect Security Researchers’ Rewards appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Attackers exploited compromised UpdraftCentral connection keys to send trusted remote-management commands to WordPress sites, ultimately installing malicious plugins that could provide unauthorized access to these websites. This incident followed unauthorized access to TeamUpdraft’s website on October 17-18, 2026. The company suspects attackers accessed its customer database, which contained UpdraftCentral connection keys and customer account information. […]

The post Hackers Exploit Compromised UpdraftCentral Keys to Install Malicious Plugins on WordPress Sites appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers discovered that private keys could be extracted from public certificate data, compromising eight intermediate certificates from eMudhra’s Certificate Authority. The incident, publicly disclosed on October 20, 2026, prompted emergency blocks across browser platforms and trust stores and revealed failures in the authority’s cryptographic key generation process. The affected certificates consist of six TLS intermediates […]

The post eMudhra Security Incident Exposes Weak Private Keys Used to Sign Trusted Certificates appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The PHP security team has announced an upcoming release that will address two critical vulnerabilities, each rated 9.2 under CVSS v4.0. This warning, published on October 20, 2026, advises administrators to prepare for immediate upgrades. Additionally, watchTowr has reported two potential remote code execution (RCE) vulnerabilities. However, PHP has not yet confirmed their identifiers or […]

The post Two Critical PHP RCE Vulnerabilities With CVSS 9.2 Score Put Web Servers at Risk appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

OpenAI has announced an expanded Chrome integration that lets ChatGPT gather information from open browser tabs and take action within the browser. This update introduces two distinct workflows: “Chat,” which uses tab content to inform its responses, and “Work,” which can control tabs to complete tasks. The announcement was made on ChatGPT’s official account on […]

The post ChatGPT Chrome Extension Expands Browser Access to Read Open Tab Content appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The U.S. Department of Homeland Security (DHS) has instructed federal civilian agencies to remove DeepSeek artificial intelligence products from their information technology systems and to stop acquiring relevant products and services. This directive applies not only to DeepSeek’s applications but also to its affiliated companies and third-party products developed using DeepSeek technology, broadening its impact […]

The post US Government Bans DeepSeek AI From Federal Civilian Agency IT Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Ransomware operators are exploiting a vulnerability in Palo Alto Networks PAN-OS that allows them to bypass authentication. This issue enables unauthorized VPN sessions, bypasses multifactor authentication (MFA), and allows access to corporate networks. According to Unit 42’s October 19 update, two groups, Spikey Scorpius (also referred to as Qilin) and Tarnished Scorpius, are using CVE-2026-0257. […]

The post Hackers Exploit Palo Alto Networks PAN-OS Flaw to Bypass MFA and Deploy Ransomware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Scammers have weaponized a legitimate spend-management platform to send phishing messages and validate stolen financial credentials, turning trusted payment infrastructure into an operational part of fraud instead of attacking it directly. Group-IB documented the activity within a client environment after the platform reported suspicious payment notifications in late April 2026. According to the supplied research, […]

The post Scammers Turn Legitimate Fintech Platforms Into Phishing Tools to Steal Banking Details appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

OVHcloud has reported a supply-chain attack involving its command-line interface (CLI) repository. An attacker exploited a developer’s GitHub account to distribute a malicious binary designed to steal sensitive information from users’ disks. CEO Octave Klaba confirmed the incident on October 19, 2026, after a customer reported it. The company identified the compromised release at 14:47 […]

The post Hackers Compromise OVHcloud GitHub Repository to Distribute Secret-Stealing Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Rank Math has reported a security incident involving malware distributed through Rank Math PRO version 3.0.123. They warn that WordPress websites using this compromised plugin are at risk if administrators activated it. The company has removed the affected files and released a clean version, 3.0.124. Rank Math PRO Compromised The incident impacts a limited number […]

The post Rank Math PRO WordPress Plugin Compromised to Spread Malware and Steal Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers can compromise vulnerable WordPress websites without stealing passwords by chaining two security flaws in the platform’s core. Disclosed in July 2026, the chain involves CVE-2026-63030 and CVE-2026-60137. Unlike attacks dependent on vulnerable extensions, WP2Shell affects default WordPress installations without requiring a third-party plugin. Public exploit code and observed exploitation have made unpatched deployments an […]

The post Hackers Can Take Over WordPress Websites Without a Password Using Two Security Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Ransomware operators are using generative AI to sharpen phishing campaigns, speed up reconnaissance, and identify sensitive corporate information to steal. Zscaler ThreatLabz describes a shift toward faster, more selective extortion, where attackers prioritize damaging disclosures rather than relying exclusively on file encryption. That represents a 275.8% annual increase. These figures establish the scale of theft, […]

The post Ransomware Gangs Use AI to Find and Steal the Most Sensitive Company Data Quickly appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers are exploiting a command injection vulnerability (CVE-2026-73570) in the Zimbra Collaboration Suite. This vulnerability allows attackers to compromise internet-facing email servers without any user interaction. Microsoft Threat Intelligence has observed attackers deploying webshells, escalating privileges, collecting authentication secrets, and staging mailbox data across organizations in various regions and industries. Zimbra Zero-Click Flaw The “zero-click” […]

The post Hackers Exploit Zimbra Zero-Click Flaw to Take Control of Email Servers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Midnight Mimosa, a widespread Android malware campaign, is turning inexpensive smartphones into advertising fraud engines and potential residential proxy nodes by embedding malicious apps in device firmware before purchase. Bitdefender observed thousands of infected devices across more than 150 countries over approximately two years, exposing a persistent compromise that ordinary application removal cannot resolve. The […]

The post Hackers Turn Low-Cost Android Phones Into Hidden Proxy Botnets Through Preinstalled Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A security test of Snowflake-managed PostgreSQL has shown how a database role with limited privileges could be turned into control of the server running the database. Researchers chained several built-in PostgreSQL features to reach operating-system command execution, even though Snowflake had blocked common ways to run commands and access files through SQL. The finding highlights […]

The post Researchers Hack Snowflake PostgreSQL Database to Gain Full Server-Level Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

EG Secure Solutions has warned that a flaw in SiteGuard Server Edition is being exploited and that applying a fix could remove signs of an earlier attack. The issue, CVE-2026-106931, affects the product’s statistics feature, which is enabled by default. Before updating, administrators should save diagnostic information so they can check whether the server was […]

The post SiteGuard Warns Patching Actively Exploited Security Flaw Could Erase Evidence of Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Drupal has warned of a critical remote code execution vulnerability that could let attackers compromise affected websites without logging in. Tracked as CVE-2026-108097, the flaw affects the Field UI module in Drupal core and received a security risk score of 19 out of 25 in an advisory published on October 14, 2026. The key detail […]

The post Drupal Warns Critical RCE Flaw Could Let Unauthenticated Attackers Compromise Websites appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.