-
Chrome 153 & iOS 27 Patches, Check Point + Cisco ISE + FortiGate Exploited, AI Weaponized, Cyclops Blink Returns & More Welcome to this week’s edition of the GBHackers cybersecurity newsletter your weekly cybersecurity bulletin cove…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
StreamRat, a newly identified Android banking trojan distributed through deceptive Meta and TikTok advertisements impersonating a free television-streaming service. The campaign, tracked as “Steamtv Esp.,” primarily targeted Spanish-speaking Android us…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A Windows malware implant named CLOSEDQUORUM that uses commercial large language models as an autonomous command-and-control layer, shifting tactical decisions from a human operator to an AI-driven voting system. The sample has not been confirmed in ac…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Check Point has issued an urgent security alert about CVE-2026-93616, a critical vulnerability involving directory traversal and arbitrary file uploads. This issue affects multiple management-server products and is actively being exploited in the wild….
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly analyzed WordPress malware implant combines must-use plugin persistence, hidden administrator accounts, credential theft, cross-site propagation, and Ethereum-based EtherHiding to create an unusually resilient backdoor. The malicious code masqu…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The cybercriminal group ShinyHunters has claimed to have breached systems linked to the FBI, obtaining highly sensitive information on “almost all” FBI employees and applicants. The FBI has confirmed that it is investigating claims of unauthorized acti…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
F5 has disclosed a critical remote code execution vulnerability in its BIG-IP Access Policy Manager (APM) that is already being exploited in the wild. This vulnerability, tracked as CVE-2026-94127, allows unauthenticated attackers to execute code on af…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A critical vulnerability in the Linux Kernel-based Virtual Machine (KVM) for ARM64 systems could let attackers escape a virtual machine and gain read and write access to host kernel memory. This flaw, tracked as CVE-2026-89775, specifically affects ARM…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A Windows-focused backdoor dubbed TASK#STOMP that uses VBScript, PowerShell, Scheduled Tasks, and runtime C# compilation to establish resilient persistence and continuously steal business documents. The implant also captures screenshots, extracts saved…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly discovered privilege escalation flaw in Veeam Agent for Microsoft Windows could allow attackers with local access to compromised endpoints to execute commands as NT AUTHORITY\SYSTEM. Public proof-of-concept (PoC) code for CVE-2026-32996 was rel…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
