OpenAI models escaped from a controlled cyber test, exploited zero-day flaws and breached Hugging Face while searching its production database for test answers.

Craneware plc, a UK-based provider of healthcare financial performance software, has disclosed that it experienced a cyberattack in which an unauthorized party accessed and extracted data from a portion of its systems. The company revealed that the incident involved employee information and records related to certain customers and partners, including organizations in the US healthcare […]

The post Craneware Cyberattack Exposes Employee and US Healthcare Customer Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Abbott has disclosed a cybersecurity incident involving unauthorized access to a limited number of internal systems used by its Cancer Diagnostics business. Upon discovering the activity, the company acted swiftly by launching an investigation, engaging external cybersecurity experts, and coordinating with law enforcement agencies. Abbott Confirms Cyberattack According to Abbott’s statement released on July 16, […]

The post Abbott Confirms Cyberattack After Unauthorized Access to Cancer Diagnostics Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

An AI-led cyberattack breached limited Hugging Face datasets and service credentials, while public models, Spaces and published packages showed no signs of tampering.

Hackers have disabled Kenyan President William Ruto’s official website, replaced its homepage and demanded a ransom of 5 Bitcoin. According to a report, the Kenyan government opened an investigation after attackers took control of president.go.ke on July 18 and posted…

U.S. federal prosecutors have unsealed a sweeping indictment charging three Russian nationals and two St. Petersburg–based companies for operating a global “bulletproof hosting” infrastructure. That enabled widespread cyberattacks against critical sectors, causing losses exceeding $62 million across at least 21 U.S. states and multiple countries. The defendants Alexander Alexandrovich Volosovik, 43, Kirill Andreevich Zatolokin, 34, […]

The post U.S. Charges Three Russian Nationals Over International Cyberattacks Costing Victims More Than $62 Million appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Kaspersky has exposed OkoBot, a year-old malware operation that uses roughly 20 modules to steal crypto wallet recovery phrases and has affected users across at least five countries. Kaspersky researchers discovered that the malware has remained active for more than…

A TrustedVolumes attacker has returned 1,122 ETH worth about $2 million while keeping another $2 million as a self-declared bounty. According to Com Feed monitoring, the Ethereum transfer represents a partial recovery from the May exploit, which initially drained about…

An email that appears to contain a shipping document, payment request, or business proposal can infect a Windows…

Nearly two years after a cyberattack disrupted Transport for London’s (TfL) online services and exposed customer data, two…

Group-IB says scammers are targeting Céline Dion fans through Facebook, duplicate digital tickets and fake websites impersonating Ticketmaster, AXS and the venue site.

Microsoft’s July 2026 Patch Tuesday fixes 622 CVEs, including exploited AD FS and SharePoint flaws, plus the disclosed BitLocker bypass requiring urgent action.

Three Russian nationals and two St. Petersburg-based companies have been indicted in the United States for allegedly operating a bulletproof hosting network that facilitated ransomware, malware, phishing, and other cyberattacks, resulting in over $62 million in losses for victims. The indictment, which was unsealed on July 14 in the Northern District of Ohio, charges Alexander […]

The post 3 Russian Nationals Indicted for Running Bulletproof Hosting Network Behind $62 Million Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Upwind links compromised AsyncAPI npm packages to a coordinated supply chain attack spanning repositories, publishing pipelines, and developer systems at risk.

Proofpoint details how attackers spoof OAuth client IDs to probe Microsoft Entra accounts, test credentials and bypass common sign-in detections at cloud scale.

Security researchers have disclosed two access-control vulnerabilities in RabbitMQ, the open-source message broker used in an estimated 8% of all containers running today, that could allow attackers to seize full administrative control of a broker or silently map out sensitive queue data across shared tenants. Both flaws were discovered by Miggo Security’s autonomous research system, […]

The post Hackers Can Exploit RabbitMQ OAuth Flaw to Access Every Message, Queue, and User appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Former ransomware negotiator Angelo Martino gets 70 months in prison for helping BlackCat extort US victims and misuse confidential client data in cyberattacks.

Darktrace says a LiteLLM AI gateway linked to Amazon Bedrock was compromised for cryptomining after signs of exposed SSH activity.

Kaspersky details how the newly named Armored Likho APT uses BusySnake Stealer, AI-generated loaders, and phishing to target government and energy organizations.

China-linked UNK_MassTraction targets US and Canadian universities through Roundcube flaws, stealing sessions and opening access to research mail servers.