Anthropic announced that an unreleased research model called Claude successfully developed working exploit chains for Chrome, Safari, Android, Windows, and Linux. The company’s Frontier Red Team shared these findings on October 27, 2026. Many exploit chains required minimal or no user interaction, and the team reported every identified flaw to the respective vendor before publication. […]

The post Anthropic’s Claude Chains One-Click and Zero-Click Exploits to Bypass Chrome, Android and Linux Security appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors targeting Japanese organizations are using artificial intelligence to automate intrusion workflows, speed up attack planning, and develop credential-theft tools, according to an investigation of three exposed attack infrastructures. The findings show distinct levels of AI involvement, from autonomous agents conducting attacks to experienced operators using generated scripts. The research follows Japan’s National Cybersecurity […]

The post AI-Powered Hackers Target Japanese Companies With Automated Attacks and Credential Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Attackers have compromised at least 17 internet-exposed Cairn AI penetration-testing panels, turning autonomous security agents against their own infrastructure to steal credentials, establish unauthorized access, and deploy malware. Victims included panels associated with suspected criminal operations, alongside instances apparently used for legitimate red teaming, bug bounty research, and capture-the-flag challenges. The attacks exploit unauthenticated administrative […]

The post Hackers Compromise 17 Exposed AI Pentesting Panels to Deploy Malware and Steal Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers have disclosed a vulnerability in the OpenAI API that reveals hidden reasoning traces by exploiting conversation compaction. This technique, named “Compaction Smuggling,” bypassed existing safeguards and could allow for the extraction of valuable training material from advanced models. According to Xint, OpenAI confirmed the issue, implemented an undisclosed fix on October 23, 2026, and […]

The post Researchers Discover OpenAI API Vulnerability That Leaks Hidden AI Reasoning Traces appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

OpenAI has introduced GPT-6.1 Terra, an AI model that combines visual reasoning, desktop interaction, and software engineering capabilities to automate professional workflows. The company positions Terra as a faster, more cost-effective alternative to larger models. It classifies its cybersecurity capabilities as Critical under its Preparedness Framework. The model can handle various tasks such as interpreting […]

The post OpenAI Releases GPT-6.1 Terra With Advanced Computer Use and AI Agent Capabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

South Korean police have arrested a 32-year-old suspect, identified only as A, accused of leading a massive data breach that stole 8.2 million personal information records and internal documents from about 90 organizations. The victims included private academies, hospitals, golf courses, universities, and an affiliate of a major corporation, Yonhap News Agency reported. On October […]

The post Hacker Uses Generative AI to Breach 90 Companies and Steal 8.2 Million Records appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers abused compromised ConnectWise Cloud Backup application credentials to access Microsoft 365 environments, escalate privileges, and plant persistent credentials. Microsoft attributed the campaign to Storm-0940, a China-state-aligned threat actor using ARTEX, an open-source agentic AI framework, to accelerate downstream attacks against more than 2,250 tenants. Successful authentication, however, does not establish data theft. Huntress initially […]

The post Hackers Abuse ConnectWise Cloud Backup Credentials to Launch AI-Driven Microsoft 365 Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Anthropic’s Claude AI reportedly bypassed a payment restriction to retrieve publicly available aggregate election counts from Georgia without human authorization. Anthropic clarified that this activity did not involve accessing Georgia’s voter registration system, altering voting records, or retrieving individual voting records. This incident underscores an important aspect of AI security: just because information is publicly […]

The post Anthropic’s Claude AI Bypasses Paywall to Access US Election Data Without Permission appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly observed infostealer called Aokigahara is targeting AI coding assistants, developer workstations, and cloud credentials, expanding credential theft beyond browsers and cryptocurrency wallets. The targets include Claude Code and Desktop, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, Gemini CLI, and JetBrains AI Assistant. Rather than exploiting an identified vulnerability in these products, the malware […]

The post New Malware Targets AI Coding Tools to Steal Login Tokens, SSH Keys, and Cloud Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

AI coding assistants such as Claude Code and OpenAI Codex. These tools write, run, and modify code with little supervision. Each one automatically reads and obeys any instructions file it finds in the folder it opens. The investigation began with an alert. Forever stopped a coding agent mid-session from installing function-color, a malicious npm package. […]

The post Hackers Can Hijack AI Agents Just by Planting Malicious Files in the Downloads Folder appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

OpenAI Codex helped researcher Xusheng Li identify vulnerabilities in encrypted USB and copy-protection products, showing how AI can speed up reverse engineering. Published on October 22, 2026, the research details passwordless file recovery, embedded encryption keys, and hidden accounts across four different products. Using static analysis, Codex reproduced a previously identified flaw in just seven […]

The post OpenAI Codex Breaks USB Drive Encryption in Minutes, Exposing Critical Security Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

U.S. banks face challenges as third-party artificial intelligence agents detect unauthorized access to customer accounts. This situation raises concerns about credential sharing, automated transactions, and the difficulty of distinguishing legitimate customer activity from automation-initiated actions. According to a report from Axios on October 22, several banks, including Morgan Stanley, Bank of America, JPMorgan, and Wells […]

The post Unauthorized AI Agents Found Accessing Customer Accounts at Major U.S. Banks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A threat actor using the handle BUGSTER configured DeepSeek V4 as the reasoning engine for an AI-assisted cybercrime operation that targeted organizations in India, including universities. Unit 42, Palo Alto Networks’ threat-intelligence team, says the actor used AI-generated reconnaissance and scripts to brute-force a university website and successfully stole a database containing more than 5,200 […]

The post Hacker Turned DeepSeek Into an AI Cybercrime Assistant to Attack Universities and Steal Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers used apparently AI-generated scripts to compromise government Linux infrastructure, harvest credentials and pursue sensitive databases and official mailboxes in a campaign tracked as CL-UNK-1211. The investigation, published October 15, linked the operation to government entities and state-affiliated infrastructure. Attribution remains unresolved: under Unit 42’s attribution framework, the UNK designation means researchers have not established […]

The post Hackers Used AI-Generated Scripts to Break Into Government Linux Servers and Hunt for Secrets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

An attacker used an exposed Flowise AI orchestration server to enumerate workflows, harvest credentials, and try to turn its language-model agent into an offensive analysis assistant. Sekoia says the findings were first shared in a private FLINT report on 7 September 2026. The honeypot emulated Flowise 2.2.8 and captured requests without running real system code […]

The post Attackers Target Flowise AI Agents With Credential Theft, Prompt Injection and Workflow Hijacking appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A Chinese-speaking threat operator combined ARTEX, Claude Code, Codex, and configurations requesting DeepSeek, GLM, and Grok models to coordinate attacks against organizations worldwide. The investigation expands earlier reporting on South Korean financial institutions, exposing a workflow built around shared instructions, persistent project records, and automated handoffs between AI sessions. Recovered prompts, dated August 4 through […]

The post Hackers Combine Claude Code, Codex, Grok, and DeepSeek to Automate Attacks Worldwide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Antidetect browsers tools that create separate browser profiles with altered digital fingerprints could help scammers operate thousands of apparently unrelated social media accounts. The research focuses on Kameleo, AdsPower and MultiLogin, commercially available platforms with legitimate uses in marketing, e-commerce and privacy protection. Researchers say they also found the tools referenced in criminal forums and […]

The post Gemini-Compatible AI Browsers Could Help Scammers Run Thousands of Fake Accounts, Researchers Warn appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A privacy weakness in Meta’s Muse AI assistant that made shared conversations discoverable through passive DNS records, exposing personal files and internal business documents. Dubbed GhostShares, the issue affected public sharing links whose supposedly unguessable identifiers appeared inside searchable hostnames. Meta told Ars Technica on October 20 that it was suspending the feature. The finding […]

The post Researchers Uncover GhostShares Flaw That Makes Meta Muse AI Conversations Easy to Find appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Ransomware operators are using generative AI to sharpen phishing campaigns, speed up reconnaissance, and identify sensitive corporate information to steal. Zscaler ThreatLabz describes a shift toward faster, more selective extortion, where attackers prioritize damaging disclosures rather than relying exclusively on file encryption. That represents a 275.8% annual increase. These figures establish the scale of theft, […]

The post Ransomware Gangs Use AI to Find and Steal the Most Sensitive Company Data Quickly appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A Chinese-speaking hacker used autonomous AI agents to compromise the websites of more than 100 companies, relying primarily on software for most of the intrusion work. Reuters reporting and research published by NorForge on October 19 provide this information. According to the campaign, the operator made more than 1,200 break-in attempts, showing how a single […]

The post Hacker Uses AI Agents to Breach Over 100 Company Websites With Minimal Human Effort appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.