Posts of last few hours

Siemens has confirmed that the CVE-2026-110936 vulnerability, a DLL side-loading flaw in Siemens Software Center, is being actively exploited. Attackers are using this vulnerability to execute malicious code through a legitimate, digitally signed application. Siemens published advisory SSA-580366 on October 15 and has addressed the issue in version 4.0.9.8. According to the campaign report, attackers […]

The post Hackers Exploit Siemens Software Center Vulnerability to Execute Malicious Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

North Korea-linked Lazarus Group used post-quantum cryptography in a cyberespionage campaign targeting South Korean organizations, concealing malware communications and payloads behind a multi-stage infection chain. Dubbed Operation FlashHole, the campaign combined spear-phishing, malicious websites, abuse of financial security software and modular malware that largely operated in memory. The campaign followed Operation SyncHole, a Lazarus operation […]

The post North Korean Hackers Use Post-Quantum Encryption to Conceal Malware in New Cyberespionage Campaign appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers gained unauthorized access to Onamae.com Desktop Cloud. They installed malicious programs in customer server environments, prompting the Japanese provider to suspend services across all plans. The company identified 26,739 potentially affected servers and warned that information stored on those systems may have been viewed GMO Internet, which operates Onamae.com, confirmed the malicious installations on […]

The post Hackers Plant Malware on Onamae.com Cloud Servers, 26,739 Systems Potentially Affected appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A Chinese-speaking threat operator combined ARTEX, Claude Code, Codex, and configurations requesting DeepSeek, GLM, and Grok models to coordinate attacks against organizations worldwide. The investigation expands earlier reporting on South Korean financial institutions, exposing a workflow built around shared instructions, persistent project records, and automated handoffs between AI sessions. Recovered prompts, dated August 4 through […]

The post Hackers Combine Claude Code, Codex, Grok, and DeepSeek to Automate Attacks Worldwide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability in Signal’s RingRTC calling library could let a malicious call participant keep receiving audio after another user tries to hang up. This vulnerability, tracked as CVE-2026-113380, affects versions of RingRTC before 2.72.0 and carries a CVSS v4.0 score of 9.3. While video tracks could also remain active, the official vulnerability description does […]

The post Signal Vulnerability Could Keep Microphone Active Even After Users Hang Up appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Node.js Project released security updates on October 21, 2026, addressing 10 vulnerabilities across its 26.x, 24.x, and 22.x release lines. The updates fix a critical Brotli decoder flaw that allows remote code execution, as well as weaknesses in DNS resolution, TLS certificate validation, cryptographic randomness, and filesystem permissions. The release addresses four high-severity, three […]

The post Node.js Patches 10 Security Vulnerabilities, Including High-Severity RCE Flaw appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

LiteLLM version 1.107.0 was compromised in a supply chain attack that distributed credential-stealing malware through PyPI wheels and container images. On October 21, 2026, researchers at Socket reported that malicious Python startup hooks could activate even if applications didn’t import LiteLLM, potentially exposing cloud credentials, developer secrets, and AI authentication files. Socket flagged seven malicious […]

The post LiteLLM Supply Chain Compromise Exposes AI Developer Credentials to Malware Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

PHP released emergency security updates to address two critical vulnerabilities that could allow unauthenticated attackers to execute code on vulnerable servers. These vulnerabilities are tracked as CVE-2026-109618 and CVE-2026-109619, and both have a CVSS v4.0 score of 9.2. The fixes are included in PHP versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Administrators should update immediately, as […]

The post PHP Fixes Two Critical RCE Vulnerabilities Allowing Unauthenticated Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The detected exploitation attempts targeting two critical PHP vulnerabilities on October 17, 2026, four days before their public disclosure and security updates. Tracked as CVE-2026-109618 and CVE-2026-109619, the vulnerabilities are collectively called PHP2Shell and can enable unauthenticated remote code execution on vulnerable web servers. Both carry CVSS v4.0 scores of 9.2. The earliest attempt reached […]

The post Critical PHP Vulnerabilities Were Under Attack Days Before Security Updates Were Released appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

GoDaddy has revoked 404,607 SSL/TLS certificates after discovering that certain subscriber certificates were issued outside the defined profiles in its Certification Practice Statement (CPS) and Certificate Policy (CP). The revocation took effect on October 21, 2026, requiring affected customers to obtain and install replacement certificates to avoid browser security warnings and potential website outages. This […]

The post GoDaddy Revokes 404,607 SSL Certificates Following Certificate Issuance Error appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.