Posts of last few hours

North Korean-linked WaterPlum operators have turned job hunting into a route for theft. By posing as recruiters, they persuaded software developers to run harmful files during apparently normal online interviews. The campaign, also known as Contagious Interview, reached at least 30,000 computers in more than 100 countries between December 2025 and July 2026. The attackers […]

The post North Korean WaterPlum Hackers Infect 30,000 PCs via Fake Job Interviews, Steal $10.7M Crypto appeared first on Cyber Security News.

A newly identified Android banking Trojan called RatHat uses phone features for account theft. The malware can guide itself through an infected device, capture banking logins, intercept verification codes and reconstruct a victim’s screen-lock PIN or pattern. The campaign begins with deception rather than a software flaw. Victims receive SMS phishing messages or see malicious […]

The post New Android Malware Uses AI to Steal Bank Logins and Reconstruct Your PIN appeared first on Cyber Security News.

Push-bombing, real-time phishing kits, and helpdesk social engineering broke “any MFA is fine.” The 2026 question is which MFA survives an attacker who can relay codes and spam approvals so we scored ten leading solutions against a weighted rubric that puts phishing resistance first. Microsoft Entra MFA takes #1 on the strength of bundled economics […]

The post Top 10 Best Multi-Factor Authentication (MFA) Solutions in 2026 [Ranked & Scored] appeared first on Cyber Security News.

“HEIF Heist,” a broad class of image-processing attack paths that could allow threat actors to turn malicious HEIF, HEIC, and AVIF uploads into remote code execution, sensitive-data exposure, and account compromise across major technology and enterprise platforms. The research, published by Hacktron, highlights a familiar but increasingly dangerous supply-chain weakness: applications often trust native image-decoding […]

The post HEIF Heist Image Flaws Let Attackers Gain RCE Across Meta, Slack and GitHub Enterprise appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Quick Answer: Microsoft Entra ID is the bundled default for M365 estates; Okta leads neutral catalog breadth; Ping Identity owns complex enterprise; JumpCloud wins SMB directory+SSO (free tier); Cisco Duo pairs SSO with best-in-class MFA. Ownership note: Auth0 belongs to Okta it’s the developer/customer-login product line, not a separate vendor. Single sign-on is the front […]

The post Top 10 Best Single Sign-On (SSO) Solutions in 2026 appeared first on Cyber Security News.

Quick Answer: SailPoint remains the IGA benchmark with AI-driven certifications; Saviynt leads cloud-native converged governance; Microsoft Entra ID Governance wins bundled economics in M365 estates; Omada owns the configurable mid-enterprise; One Identity rules AD-heavy shops. IGA answers the question auditors always ask: who should have access and can you prove it? Access reviews done in […]

The post Top 10 Best Identity Governance & Administration (IGA) Tools in 2026 appeared first on Cyber Security News.

OpenAI Codex recently faced two significant security vulnerabilities that allowed malicious repositories to potentially execute commands on a developer’s local system. These vulnerabilities, identified as Overpatch and Heapjack, were reported to OpenAI on August 12, 2026, and were addressed in under a week. The more critical issue, Heapjack, emerged when a developer accessed an attacker-controlled […]

The post OpenAI Codex Sandbox Flaws Let Malicious Repositories Execute Commands on Host Systems appeared first on Cyber Security News.