A security test of Snowflake-managed PostgreSQL has shown how a database role with limited privileges could be turned into control of the server running the database. Researchers chained several built-in PostgreSQL features to reach operating-system command execution, even though Snowflake had blocked common ways to run commands and access files through SQL. The finding highlights […]

The post Researchers Hack Snowflake PostgreSQL Database to Gain Full Server-Level Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

EG Secure Solutions has warned that a flaw in SiteGuard Server Edition is being exploited and that applying a fix could remove signs of an earlier attack. The issue, CVE-2026-106931, affects the product’s statistics feature, which is enabled by default. Before updating, administrators should save diagnostic information so they can check whether the server was […]

The post SiteGuard Warns Patching Actively Exploited Security Flaw Could Erase Evidence of Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Drupal has warned of a critical remote code execution vulnerability that could let attackers compromise affected websites without logging in. Tracked as CVE-2026-108097, the flaw affects the Field UI module in Drupal core and received a security risk score of 19 out of 25 in an advisory published on October 14, 2026. The key detail […]

The post Drupal Warns Critical RCE Flaw Could Let Unauthenticated Attackers Compromise Websites appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A flaw in Broadcom’s Wi-Fi software can let someone within wireless range take control of vulnerable routers without knowing the Wi-Fi password. The issue affects the company’s implementation of Wi-Fi Protected Setup (WPS), a feature designed to help devices join a wireless network. Researcher Quentin Kaiser showed that the flaw could be used to read […]

The post Researchers Hack Broadcom Wi-Fi Routers Without Passwords and Gain Full Root Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft awarded security researcher Sam Chen US$4,000 for reporting a flaw in Visual Studio Code that could let an attacker bypass Workspace Trust protections. The issue, tracked as CVE-2026-81376, affects VS Code versions earlier than 1.136.2 and has a critical CVSS score of 9.6. Microsoft has fixed the flaw; users should update to version 1.136.2 […]

The post Microsoft Pays Researcher $4,000 for Discovering Critical VS Code Security Bypass Flaw appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

U.S. agencies have warned that advanced AI agents could exploit security flaws, break out of their assigned limits, and leave hidden backdoors behind. New guidance from NIST, the National Security Agency, and CISA urges AI developers to prepare for incidents in which agents take harmful actions without being told to do so. Released on October […]

The post U.S. Agencies Warn AI Agents Could Exploit Security Flaws and Establish Hidden Backdoors appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers linked to attacks on South Korean banks used Claude Code, DeepSeek, Grok, and Zhipu AI alongside ARTEX, an open-source AI penetration testing framework. The campaign shows how attackers can combine AI services with familiar hacking tools to search for weaknesses across different systems, while leaving evidence that helps investigators trace their work. Public reporting […]

The post Hackers Use Claude, DeepSeek and Grok in AI-Assisted Attacks on South Korean Banks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.