-
An attacker used a contributor’s GitHub account to replace the download archives on five existing releases of OVHcloud’s command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build designed to steal secrets stored on the disk of any machine that runs it, the cloud provider says. They were live on GitHub for up to 94 minutes, from 12:47 to 14:21 UTC,
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Midnight Mimosa, a widespread Android malware campaign, is turning inexpensive smartphones into advertising fraud engines and potential residential proxy nodes by embedding malicious apps in device firmware before purchase. Bitdefender observed thousands of infected devices across more than 150 countries over approximately two years, exposing a persistent compromise that ordinary application removal cannot resolve. The […]
The post Hackers Turn Low-Cost Android Phones Into Hidden Proxy Botnets Through Preinstalled Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks. The high-severity vulnerability, tracked as CVE-2026-110936 (CVSS v4 score: 8.4), could allow an attacker to place a specially-crafted DLL in a directory the application searches, resulting in execution of malicious code with the same privileges as the
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
GhostAction has returned with an expanded credential-theft operation, injecting malicious GitHub Actions workflows into 790 repositories by October 9, 2026. GitGuardian first documented GhostAction in 2025, when it reported 817 affected repositories and 3,325 stolen secrets. The latest wave builds on the same account-takeover approach: attackers enumerate repositories a compromised maintainer can write to, then […]
The post GhostAction Hackers Inject Malicious Security Workflows Into 790 GitHub Repositories appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A Chinese-speaking hacker used autonomous AI agents to compromise the websites of more than 100 companies, relying primarily on software for most of the intrusion work. Reuters reporting and research published by NorForge on October 19 provide this information. According to the campaign, the operator made more than 1,200 break-in attempts, showing how a single […]
The post Hacker Uses AI Agents to Breach Over 100 Company Websites With Minimal Human Effort appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
RedAgents, a cloud platform that deploys multiple AI penetration testing agents against authorized targets to discover vulnerabilities and test attack paths. Announced on October 16, 2026, the service brings Artex Pro, Cyber(YanJi), Yanxun, and CyberStrikeAI Enterprise Edition into a single environment for security operations teams. The platform addresses a limitation of automated security assessments: different […]
The post New RedAgents AI Platform Deploys Multiple Hacking Agents to Find and Exploit Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A Mac user reported that Anthropic’s Claude Code found an unauthorized XMRig cryptocurrency miner while helping develop a temperature-monitoring application. The mining process reportedly consumed approximately 1,175% CPU, equivalent to nearly 12 fully utilized processor cores, which explained the machine’s sluggish performance. Claude Detects Hidden XMRig The account, shared by Reddit user u/UntilHEX, describes an […]
The post Claude Code Detects Hidden XMRig Cryptominer Consuming 1175% CPU on Mac appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A U.S. court on Monday granted the U.S. government’s request to detain a former OpenAI engineer accused of planting a recording device in an executive conference room at the company’s San Francisco office to allegedly steal sensitive secrets. In a new court filing Sunday, prosecutors revealed that Abdulrahman Alfozan, a 35-year-old Saudi national, was “in frequent communications via WhatsApp
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
OpenCode has reported a security breach affecting 1.4% of its Console users, which it attributes to a “large-scale distillation attack.” The company said the affected accounts belong to a subset of users who had connected external providers. However, the public disclosure did not clarify if API keys were extracted or identify which specific credentials were […]
The post OpenCode Data Breach Exposes API Keys Linked to Third-Party Services appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Federal investigators examining the ShinyHunters group have uncovered potential connections between the extortion group and executives at two ransomware negotiation firms, according to a KrebsOnSecurity investigation published on October 19. Sources familiar with the inquiry revealed that an executive from an unnamed U.S. consulting company allegedly assisted in operating the group’s victim extortion website. This […]
The post FBI Uncovers Suspected Links Between Ransomware Negotiators and ShinyHunters Hackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
