Posts of last few hours

AvisLoader, a newly observed Windows malware loader designed to maintain operator access even when conventional command-and-control infrastructure is disrupted. Instead of relying on a fixed domain, IP address, or centralized server, the malware uses the encrypted Tox peer-to-peer messaging network to receive commands and deliver follow-on payloads. The discovery highlights a growing challenge for defenders: […]

The post New Windows Malware Built to Survive Takedowns With a Hidden P2P Command Network appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Galago is a new ransomware operation drawing attention because it claims a partnership with the Panzer group. That matters, but its reach is uncertain: researchers have not confirmed a Galago intrusion or seen any victims published on its own leak site. The danger is what it may do next, not a verified attack wave. The […]

The post New Galago Ransomware Operation Emerges With Links to Panzer Group appeared first on Cyber Security News.

An autonomous OpenAI agent breached an Australian government Medicare statistics portal after a research task escalated into unauthorized system access, marking a reported world-first rogue AI intrusion into a government service. Prime Minister Anthony Albanese said the incident occurred on June 18, 2026, and raised Australia’s “extreme concern” with OpenAI CEO Sam Altman. The agent […]

The post OpenAI Agent Hacked Australian Government Medicare Portal in World’s First Rogue AI Breach appeared first on Cyber Security News.

An Integrated Security Operations Center (ISOC) in Microsoft Defender, unifying security information and event management (SIEM) and threat-protection capabilities in a platform designed for AI-assisted, continuous defense. The company’s premise is direct: traditional SOC architectures cannot match adversaries that use AI agents to automate reconnaissance, intrusion execution, lateral movement, and operational decision-making at machine speed. […]

The post Microsoft Rebuilds the SOC With AI Agents to Fight Machine-Speed Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical security issue affecting Roundcube Webmail is now being exploited in the wild, prompting administrators to update exposed installations urgently. The Canadian Center for Cyber Security said open-source reporting confirmed active exploitation of CVE-2026-48842, an SQL injection vulnerability affecting Roundcube Webmail deployments running vulnerable versions. Roundcube published security advisories on May 24, 2026, addressing […]

The post Roundcube Webmail SQL Injection Vulnerability Exploited in the Wild appeared first on Cyber Security News.

Check Point has warned that attackers are actively exploiting two critical vulnerabilities in its VPN and management products, allowing unauthenticated remote access and possible remote code execution. Both flaws carry a CVSS severity score of 9.8, and the company has released fixes that affected organizations should apply immediately. The first issue, tracked as CVE-2026-85102, affects […]

The post Hackers Exploit Critical Check Point VPN Flaws to Gain Remote Access Without Login appeared first on Cyber Security News.

A newly uncovered Android banking trojan dubbed RemControl is targeting customers of more than 30 financial institutions across Europe, the Middle East, and Canada. The malware combines fake Google Play pages, Android Accessibility Service abuse, credential-stealing overlays, real-time screen streaming, and remote-control functions to compromise mobile banking sessions. The company tracks the operator behind the […]

The post RemControl Android Malware Targets 30+ Banking Apps to Steal PINs and Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A Firefox add-on posing as a tool for opening protected PDF documents can quietly turn a signed-in browser into a route to Google account theft. It waits until installation to obtain the instructions that make it dangerous, leaving little suspicious code for store reviewers. The extension appeared in the Firefox Add-ons store on September 3, […]

The post Malicious Firefox Extension Disguised as PDF Tool Steals Google Account Sessions appeared first on Cyber Security News.