• The University of Copenhagen has confirmed a data breach affecting about 525,000 individuals after hackers accessed a test environment that contained personal information. The intrusion was detected on October 20 and publicly disclosed on October 23. Investigators are working to determine the full extent of the exposure. The compromised database included full names, Danish national […]

    The post University of Copenhagen Confirms Data Breach Affecting 525,000 People appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • More than 400 incidents in which attackers abused Microsoft Teams external chats to impersonate IT support, obtain remote access, and deliver malware. Researchers identified recurring tenant names, deceptive display names, remote administration tools, and payload infrastructure across incidents. Teams federation, enabled by default, allows communication between organizations when both tenants permit external access. Attackers exploit […]

    The post Fake Microsoft Teams IT Support Messages Lead to Remote Access and Malware Infections appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • OpenAI has introduced GPT-6.1 Terra, an AI model that combines visual reasoning, desktop interaction, and software engineering capabilities to automate professional workflows. The company positions Terra as a faster, more cost-effective alternative to larger models. It classifies its cybersecurity capabilities as Critical under its Preparedness Framework. The model can handle various tasks such as interpreting […]

    The post OpenAI Releases GPT-6.1 Terra With Advanced Computer Use and AI Agent Capabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • South Korean police have arrested a 32-year-old suspect, identified only as A, accused of leading a massive data breach that stole 8.2 million personal information records and internal documents from about 90 organizations. The victims included private academies, hospitals, golf courses, universities, and an affiliate of a major corporation, Yonhap News Agency reported. On October […]

    The post Hacker Uses Generative AI to Breach 90 Companies and Steal 8.2 Million Records appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers accessed Microsoft 365 environments at 79 organizations by replaying stolen sign-in sessions, letting them enter business accounts without victims’ passwords. Huntress recorded 497 successful sign-ins and more than 200,000 failed attempts during the ten-week campaign, which ran from July 14 through September 22, 2026. Use of the provider’s network does not establish its involvement […]

    The post Microsoft 365 Token Replay Attacks Let Hackers Access Business Emails Without Passwords appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. “Cases of compromising IP cameras and DVRs with access to the video stream, changing the device configuration and creating third-party accounts have been recorded,” the State Special Communications Service of Ukraine (SSSCIP)

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybercriminal groups are using malicious Instagram advertisements, abandoned analytics tags, and compromised websites to deliver Coruna and DarkSword exploit kits to vulnerable iPhones. The investigation exposes a scalable spyware distribution model in which attackers exploit advertising infrastructure to reach victims during ordinary browsing. Researchers describe these as “half-click” attacks: users must encounter an infected webpage […]

    The post Hackers Use Instagram Ads to Deploy Coruna and DarkSword Spyware on iPhones appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hackers abused compromised ConnectWise Cloud Backup application credentials to access Microsoft 365 environments, escalate privileges, and plant persistent credentials. Microsoft attributed the campaign to Storm-0940, a China-state-aligned threat actor using ARTEX, an open-source agentic AI framework, to accelerate downstream attacks against more than 2,250 tenants. Successful authentication, however, does not establish data theft. Huntress initially […]

    The post Hackers Abuse ConnectWise Cloud Backup Credentials to Launch AI-Driven Microsoft 365 Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog. The PHP vulnerabilities, both rated 9.2 on the CVSS scoring system, facilitate unauthenticated remote code execution on affected deployments – CVE-2026-109618 – An out-of-memory

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • WASHINGTON—After years of frustration, Army leaders are starting to see progress on  upgraded networks designed to make it easier to communicate with allies and partners in the Pacific in the event of a conflict with China. 

    “When I arrived at [U.S. Army Pacific Command], we had an exercise in Japan—and I'd only been in command a month. It was a trilateral exercise between the U.S., Japan, and Australia. And we literally couldn't pass voice data to each other. We couldn't create a common operating picture without physically putting icons into this system,” Gen. Ronald Clark, commander of U.S. Army Pacific, told reporters earlier this month. 

    “It was so frustrating to me because I just left working in the Pentagon where I had literally attended both the signing ceremonies for AUKUS…sharing our most sensitive defense technology. But we are using basically a swivel chair to have a conversation with regard to land forces.”

    In recent years, the Army has been building and testing the telecommunications pipelines that allies and partner militaries would rely on in a war with China. U.S. Indo-Pacific Command has a broader Pacific Mission Network, previously known as the INDOPACOM Mission Network, which is used on a more strategic or operational level. 

    Earlier this year, the U.S., Australia, and Japan used the Pacific Mission Network during the large-scale Balikatan exercise to get a “real-time picture of participating forces across the entire training area,” an Army spokesperson told Defense One.

    Months later, the nations reconvened for Yama Sakura 91, an annual military exercise with Japan and Australia that ended Sept. 10.

    “Yama Sakura 91 demonstrated the live sharing of simulated information in a command post exercise, while Balikatan 26 demonstrated the live sharing of real-time information across a physical training environment and multiple echelons,” the Army said.

    That network, which connects dozens of nations, was the linchpin for USARPAC to test whether it could share and see the same information as allies and partners.

    “The [mission partner] enclaves work, so we're able to pass and share data in a way that we had not been before,” Clark said, at the Association of the U.S. Army’s annual conference, calling the network an “important and critical innovation” that addressed years of frustrations. 

    That means commanders can more easily send “target-quality data” and share a “common operational picture” without needing to swivel between workstations.

    For example, Maj. Gen. Bernard Harrington, who leads the Army’s Multi-Domain Command-Pacific and 7th Infantry Division, can gather information on “land-based long-range precision fires, sensors, space capability, [electronic warfare], cyber” and then share it with Pacific Fleet Commander Adm. Stephen Koehler, who led the exercise, and “can then integrate that [data] into a joint context in the fight,” Clark said.

    The progress on the Pacific Mission Network comes as the Army looks to add more tech and sources of data—mostly drones—to its forces. That means being able to see, control, and learn from devices and the information they collect will become increasingly important on the battlefield. 

    Seventh ID recently finished an exercise called Bayonet Quest near Lake Huron, Mich., in which it was able to coordinate high-altitude balloons, and aerial and maritime drones, using a shared data connection, Harrington told reporters. 

    “We used multiple [unmanned aerial systems], multiple [unmanned surface vessels], long-range, one-way attack, and a high-altitude balloon,” he said. The division also collected and analyzed data from all of those systems using a single data layer. 

    During the exercise, which ended Oct. 6, the Army was also able to orchestrate the drones and coordinate simulated attacks with an “adaptive and agentic” command-and-control system. 

    “We were able to pull in a vast amount of data, make sense of it quickly, and then task those systems through a large language model, reducing the need for soldiers on individual ground control stations,” Harrington said in a statement to Defense One.

    The exercise showed how unmanned systems could be used in the Pacific, particularly from different locations, which could help keep soldiers safe, he said.

    The exercise wrapped earlier this month, but the division plans to keep training with the concept and employ it in future exercises with allies and partners. 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶