ADMIN.FOUNDATION – Page 37 – cybersecurity / defense / intelligence

Capcom Confirms Data Breach Exposing 11.7 Million CAPCOM ID Records

·

cyber security, Cyber Security News, Data Breach

Capcom has confirmed a data breach that affects 11,774,247 CAPCOM ID records worldwide. An unauthorized third party accessed customer information linked to its online membership service. This incident, disclosed on October 22, 2026, exposed email addresses and account metadata. A smaller subset of records also included personal profile information and unauthorized password changes. CAPCOM ID […]

The post Capcom Confirms Data Breach Exposing 11.7 Million CAPCOM ID Records appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Quest Diagnostics Confirms Cyberattack Exposing Patient Records in Quanum System

·

Cyber Attack, cyber security, Cyber Security News

Quest Diagnostics disclosed unauthorized access to its Quanum LSM system, confirming that an unidentified party may have accessed certain patient records. The company became aware of the incident on October 21, 2026, as stated in a Form 8-K disclosure. The Quanum LSM system enables specific healthcare clients to place laboratory test orders, receive results, and […]

The post Quest Diagnostics Confirms Cyberattack Exposing Patient Records in Quanum System appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Unauthorized AI Agents Found Accessing Customer Accounts at Major U.S. Banks

·

AI, cyber security, Cyber Security News

U.S. banks face challenges as third-party artificial intelligence agents detect unauthorized access to customer accounts. This situation raises concerns about credential sharing, automated transactions, and the difficulty of distinguishing legitimate customer activity from automation-initiated actions. According to a report from Axios on October 22, several banks, including Morgan Stanley, Bank of America, JPMorgan, and Wells […]

The post Unauthorized AI Agents Found Accessing Customer Accounts at Major U.S. Banks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
URGENT – PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches

·

PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web applications configured in an unusual way, and PHP considers it an unlikely risk. The project is not issuing an emergency fix for it. Instead, it recommends turning off a feature called

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack

·

The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company last year. According to ESET, the attack involved UAC-0099 (aka Earth Sirrush) obtaining initial access to the target on July 16, 2025, via a spear-phishing email bearing a malware-laced attachment that led to the deployment of

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
SBI Notifies Customers Affected by Recent Cybersecurity Incident

·

cyber security, Cyber Security News

The State Bank of India (SBI) has individually notified customers whose data was involved in a recent cybersecurity incident. In an update focused on customer safety, the bank confirmed it contacted affected individuals via email and/or WhatsApp. They reassured customers that their account balances and funds are safe. This announcement follows an earlier communication about […]

The post SBI Notifies Customers Affected by Recent Cybersecurity Incident appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
PoC Exploit Released for Two Critical PHP RCE Vulnerabilities as Hackers Launch Attacks

·

cyber security, Cyber Security News, Vulnerabilities

Public proof-of-concept exploit code targeting two critical PHP vulnerabilities has surfaced as attackers scan exposed servers and attempt exploitation. Tracked as CVE-2026-109618 and CVE-2026-109619, the vulnerabilities are collectively called PHP2Shell and carry CVSS v4.0 scores of 9.2, potentially allowing unauthenticated remote code execution with web server privileges. However, Sophos has corrected an earlier report of […]

The post PoC Exploit Released for Two Critical PHP RCE Vulnerabilities as Hackers Launch Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

·

Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open. The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which it opens by passing the file’s name to Ghostscript, a separate program it runs to turn the image into pixels, without checking the name first.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Suspected Chinese APT41 Hackers Use BlackX Bootkit to Bypass Windows Secure Boot

·

cyber security, Cyber Security News

Suspected Chinese APT41 hackers have deployed BlackX, a UEFI bootkit, against diplomatic organizations in Tajikistan, Uzbekistan, and Turkmenistan. Researchers attribute the operation to APT41 with medium confidence. BlackX closely resembles BlackLotus, the bootkit advertised on underground forums for $5,000 in October 2022. ESET confirmed its capabilities in March 2023, demonstrating exploitation of Baton Drop, tracked […]

The post Suspected Chinese APT41 Hackers Use BlackX Bootkit to Bypass Windows Secure Boot appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances

·

AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security firm V12 said on October 22. The cause was the SDKs’ default client, which set no spending limit until releases on August 18 added one. The risk was limited to agents who automatically signed payments and whose apps set

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶