• A critical pre-authentication SQL injection vulnerability, identified as CVE-2026-42208, has been discovered in the popular LiteLLM gateway, allowing attackers to access databases without credentials. Cybercriminals have already been observed exploiting this flaw to target high-value secrets such as API keys and provider credentials. Overview of the Vulnerability CVE-2026-42208 is a critical flaw in LiteLLM, an […]

    The post Critical LiteLLM Flaw Enables Database Attacks Through SQL Injection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • APT-C-49 (OilRig), an Iranian state-sponsored advanced persistent threat group also known as APT34 and Helix Kitten, has deployed a sophisticated new attack campaign that conceals command-and-control configurations inside Google Drive images using LSB steganography. The group, which has been active since at least 2014, primarily targets government, energy, telecommunications, and financial sectors across the Middle […]

    The post OilRig Hides C2 Config in Google Drive Image via LSB Steganography appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • An administrative role meant for artificial intelligence (AI) agents within Microsoft Entra ID could enable privilege escalation and identity takeover attacks, according to new findings from Silverfort. Agent ID Administrator is a privileged built-in role introduced by Microsoft as part of its agent identity platform to handle all aspects of an AI agent’s identity lifecycle operations in a

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A major security flaw in the popular productivity platform ClickUp has exposed sensitive data, including 959 email addresses tied to Fortune 500 companies and government agencies. The primary vulnerability stems from a hardcoded Split.io SDK token left inside ClickUp’s production JavaScript bundle. This script loads automatically whenever a user visits the platform’s content delivery network. […]

    The post ClickUp Security Flaw Exposes 959 Emails Linked to Major Fortune 500 Firms appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft on Monday revised its advisory for a now-patched, high-severity security flaw impacting Windows Shell to acknowledge that it has been actively exploited in the wild. The vulnerability in question is CVE-2026-32202 (CVSS score: 4.3), a spoofing vulnerability that could allow an attacker to access sensitive information. It was addressed as part of its Patch Tuesday update for this

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A new Android malware campaign is masquerading as a “Banking KYC” verification app and spreading via WhatsApp messages to target banking users in India. The malware is delivered as an APK shared over WhatsApp, posing as an urgent bank KYC or account verification update similar to previously reported Indian banking fraud campaigns. Victims are told […]

    The post Fake KYC Android Malware Spreads via WhatsApp to Hijack Bank Accounts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A new string injection vulnerability, tracked as CVE-2026-3008, has been discovered in Notepad++ version 8.9.3. This critical flaw allows attackers to crash the application or to instantly and secretly extract sensitive memory information. The Cybersecurity Agency of Singapore (CSA) has issued an urgent advisory urging all users to immediately upgrade to version 8.9.4 to secure […]

    The post Notepad++ Vulnerability Lets Attackers Crash App and Expose Memory Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A Claude Opus 4.6-powered AI coding agent operating through the Cursor editor autonomously deleted the production database and backups of SaaS startup PocketOS in just nine seconds. The incident highlights critical security failures in AI guardrails and infrastructure access controls. The Nine-Second Data Breach Jer Crane, founder of automotive software platform PocketOS, reported that the […]

    The post Claude Opus 4.6-Powered AI Coding Agent Wipes Production Database in 9 Seconds appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A newly discovered malicious Android application masquerading as a document reader was found on the Google Play Store, infecting users with the notorious Anatsa banking trojan. The app, which had already surpassed 10,000 downloads before its removal, highlights the ongoing threat of malware slipping through official app marketplaces. The malicious app was hosted on the […]

    The post Fake Document Reader App Hits 10K Downloads, Spreads Anatsa Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Trump administration is facing new calls to halt U.S. exports of advanced AI chips to China after the White House warned last week that Beijing is attempting to copy components of American AI systems to build similar models of its own.

    Americans for Responsible Innovation, an AI policy advocacy group, told White House Office of Science and Technology Policy Director Michael Kratsios that the administration should bar exports of advanced chips that could help China use U.S. AI systems to develop similar capabilities, according to a letter sent Monday that was first seen by Nextgov/FCW.

    It comes after OSTP last Thursday accused China and other foreign nations of engaging in “deliberate, industrial-scale campaigns to distill U.S. frontier AI systems,” and said the Trump administration will be taking steps to safeguard domestic AI systems. Distillation campaigns involve sending large volumes of queries to an AI model to train a competing version.

    The push comes as exports of advanced chips, such as Nvidia’s H200, remain in limbo. The Trump administration approved limited H200 sales earlier this year, but none have reached China. Commerce Secretary Howard Lutnick said last week that “we have not sold them chips as of yet” and that Beijing has not allowed domestic firms to purchase the hardware.

    The letter argues that China cannot effectively replicate capabilities derived from U.S. AI tools if it doesn’t have access to cutting-edge chips.

    “If we are serious about preventing adversaries from appropriating the capabilities of U.S. frontier models, we must be equally serious about restricting their access to the computational infrastructure that enables adversarial distillation, as well as the training and deployment of models built on data obtained through such malicious activity,” said the letter, which is signed by ARI executive director Eric Gastfriend.

    Nextgov/FCW has asked OSTP and the Commerce Department for comment.

    Hardware like Nvidia’s H200 underpins the computing power needed to train and run powerful AI models, including the large-scale querying required for distillation campaigns. Limiting access to those chips could slow China’s ability to develop and deploy competing models, though it likely wouldn’t halt those efforts altogether.

    “Nation-state level AI competition is very, very real, and has been going on for some time, and it continues to increase in its intensity and sophistication,” Peter Kant, CEO of Enabled Intelligence, said in an interview. Distillation efforts are “a whole new attack vector and domain that will only increase over time. I don’t see this [White House memo] as a one-off at all,” he added.

    Anthropic in February accused three Chinese-based AI companies — DeepSeek, Moonshot AI and MiniMax — of overwhelming its Claude model with 16 million exchanges from roughly 24,000 fraudulent accounts. 

    The same month, OpenAI sent a letter to members of the House China Select Committee that said it had seen evidence “indicative of ongoing attempts by DeepSeek to distill frontier models of OpenAI and other US frontier labs, including through new, obfuscated methods.”

    Last week’s White House warning about China-based distillation campaigns marks the latest escalation in the U.S.-China race for AI dominance. It comes as major American firms are deploying increasingly advanced models with cybersecurity capabilities that could pose national security risks if they fall into the wrong hands.

    A small group of unauthorized users has accessed Anthropic’s new Mythos AI model, which the company previously said has identified thousands of vulnerabilities and is powerful enough to enable dangerous cyberattacks, Bloomberg News reported last week.

    “This is just the early days,” Lonny Anderson, president of BlueVoyant Government Solutions and former chief technology officer of the NSA, told Nextgov/FCW. “This is only gonna get faster and it’s gonna get more dramatic.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶