EMBRACE affects AI coding tools Cursor, GitHub Copilot, Codex, VS Code and Claude Desktop, enabling code execution, file theft and browser address-bar spoofing.

UAT-11473, an advanced persistent threat actor deploying KeyDrift, a custom malware framework targeting Cisco Catalyst SD-WAN controllers. The framework embeds inside legitimate control-plane processes to maintain access, intercept decrypted communications, and extract sensitive network encryption material. Observed targets span space and satellite services, defense and aerospace technology, and policy research. Talos assesses with high confidence […]

The post Cisco Talos Uncovers KeyDrift Malware Targeting SD-WAN Controllers to Steal Network Encryption Keys appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

New ADEX research shows how AI is making familiar scams cheaper and harder to detect, while fraudsters prepare to target AI shopping assistants.

Chinese state-linked hackers have exploited a zero-day vulnerability in VMware ESXi during espionage operations aimed at U.S. law firms, according to CrowdStrike’s latest assessment of threats affecting the legal sector. The activity is attributed to WARP PANDA, a China-nexus adversary that deployed malware in victims’ VMware vCenter environments. This series of intrusions, which continued into […]

The post Chinese Hackers Exploit VMware ESXi Zero-Day to Target Law Firms in Cyber Espionage Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The National Institute of Standards and Technology (NIST) has released finalized guidance to assist organizations in replacing cryptography that is vulnerable to quantum computing before future quantum computers pose a threat to sensitive information. Published on October 27, 2026, the report establishes a framework for migration that includes cryptographic standards, federal deadlines, and implementation priorities. […]

The post NIST Releases New Guidelines to Protect Encryption Against Future Quantum Computer Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

GitHub has launched Copilot Fusion, a runtime model router and orchestrator that automatically selects AI models and execution patterns for coding tasks. Instead of requiring developers to choose a model for each step, Fusion coordinates reasoning, code generation, debugging, and review, ultimately providing a single cohesive response. The feature is available across all Copilot plans. […]

The post GitHub Launches Copilot Fusion to Automatically Select and Combine AI Models for Coding appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

“Is it real?” has become a common question across our digital lives thanks to the rise of AI-generated content.

Artem Stryzhak gets 70 months for Nefilim and Hive ransomware attacks targeting hospitals, government agencies and businesses in the US and overseas.

An investigation into browser extensions identified 319 suspicious extensions linked to about 13.4 million reported users, exposing a search-hijacking ecosystem operating since 2016. Marketed as manual finders, PDF converters, safe search utilities, and AI search tools, the extensions funnel queries through operator-controlled infrastructure before delivering Yahoo or Bing results. The Searchjacked investigation expands earlier research […]

The post 319 Suspicious Chrome Extensions Hijack Default Search Settings Without Sensitive Permissions appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft will begin retiring Microsoft-provided SMS and voice authentication in Microsoft Entra ID on February 1, 2027, requiring affected organizations to migrate users or arrange alternative telecom delivery before enforcement starts. The change covers Worldwide and Government Community Cloud (GCC) environments, with rollout expected to finish in early February. Administrators should treat February 1 as […]

The post Microsoft to Disable SMS and Voice Authentication in Entra ID Starting February 2027 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researcher Orange Tsai from DEVCORE has published a complete exploit chain for Microsoft Edge that successfully escapes the browser’s sandbox and executes code on Windows. This exploit utilizes only logical vulnerabilities and does not involve any memory corruption. Tsai developed it for Pwn2Own Berlin 2026, where it earned a $175,000 award and later received the […]

The post Microsoft Edge Security Flaws Allow Attackers to Execute Code Without Memory Corruption appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

💾

Chinese state-sponsored hacking group Volt Typhoon has exploited multiple previously unknown vulnerabilities in enterprise management platforms to penetrate strategically significant organizations. Its investigation exposed Silent Train, a covert access framework built from rapidly rotating chains of compromised devices. Over three years, Black Lotus Labs issued hundreds of victim notifications, helping investigations uncover four confirmed zero-day […]

The post Volt Typhoon Hackers Exploit Multiple Zero-Days to Breach U.S. Critical Infrastructure Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical PHP flaw, leaked Linux kernel reports, a poisoned LiteLLM release, and more, all in seven days. Which threats called for immediate action, and which generated more noise than real danger?

An alleged leak from cryptocurrency swap service Wagyu.xyz contains 4,580 completed cross-chain swaps linking incoming transaction hashes, Monero receiving addresses, and client IP addresses. The dataset reportedly includes 38,628 order records from July 18–October 26, 2026, plus an activity index covering 10,139 distinct IP addresses. Hudson Rock has not independently authenticated the files’ alleged breach […]

The post Alleged Wagyu Leak Contains 4,580 Completed Crypto Swaps Linking Monero Wallets to IP Addresses appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41709, a vulnerability related to insufficient logging affecting Broadcom VMware ESX, to its Known Exploited Vulnerabilities (KEV) catalog. This decision was made after evidence of exploitation in the wild was discovered. The announcement, made on October 28, 2026, raised the priority of addressing this flaw, despite its […]

The post CISA Adds Actively Exploited VMware ESXi Logging Flaw to KEV Catalog appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cisco has released security updates that address a critical vulnerability in the Remote Access SSL VPN service on its Secure Firewall Adaptive Security Appliance (ASA) and Threat Defense (FTD) software. This vulnerability, tracked as CVE-2026-76418, lets unauthenticated attackers trigger unexpected device reloads, causing a denial of service. The flaw is categorized as high severity, with […]

The post Cisco Patches Actively Exploited SSL VPN Vulnerability Affecting ASA and FTD Firewalls appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

INJ3CTOR3 has expanded its FreePBX toll-fraud campaign with automated credential theft, letting attackers keep billing unauthorized calls to victims even after infected servers are cleaned. September 2026 artifacts described in the supplied research show the installer targeting 17 configuration files containing telephony, database, management, and mail-relay secrets. The change separates the attacker’s revenue stream from […]

The post INJ3CTOR3 Malware Steals FreePBX Credentials to Enable Fraudulent Calls Even After Server Cleanup appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CISA has added CVE-2026-111497, a critical vulnerability in Google Brotli that affects Node.js, to its Known Exploited Vulnerabilities catalog following confirmed evidence of exploitation. Added on October 27, 2026, this flaw allows unauthenticated attackers to corrupt memory, disrupt services, disclose sensitive information, or potentially execute arbitrary code through maliciously crafted compressed streams. Federal agencies have […]

The post CISA Warns of Active Attacks Exploiting Critical Node2Shell RCE Vulnerability in Node.js appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers have demonstrated an attack chain against Cloudflare’s Image Transformations service that bypasses SVG sanitization and Content Security Policy (CSP), enabling malicious JavaScript execution on a targeted website’s origin. Published on October 28, 2026, the research combines an XML serialization flaw, Chromium cache behavior, and redirects that circumvent image source restrictions. Exploitation depends on […]

The post Cloudflare Image Transformation Flaw Allows Hackers to Bypass CSP and Execute Malicious JavaScript appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers at OffensiveCon Japan 2026 explored topics including Chrome sandbox escapes, zero-click attack surfaces in Telegram, and newly discovered iOS zero-day vulnerabilities. This two-day program took place on October 27–28. The published agenda also covered hypervisor exploitation, Windows privilege escalation, Linux kernel techniques, and AI-assisted security research. However, session titles alone do not indicate […]

The post Security Researchers Demonstrate Chrome Sandbox Escapes, Telegram Zero-Click Attacks and iOS Zero-Day Research appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.