ADMIN.FOUNDATION – Page 67 – cybersecurity / defense / intelligence

Hackers Use Hundreds of AI Agents to Exploit PaperCut Servers and Steal Windows Credentials

·

AI, cyber security, Cyber Security News

A likely Russian-speaking threat actor used hundreds of AI agents to exploit PaperCut NG/MF servers, steal Windows credentials and establish reusable access to internal networks. GreyNoise identified at least 440 compromised instances belonging to 395 organizations across 48 countries, demonstrating how agent-assisted workflows can accelerate exploitation of enterprise infrastructure. The operator combined OpenAI’s Codex harness […]

The post Hackers Use Hundreds of AI Agents to Exploit PaperCut Servers and Steal Windows Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Microsoft Disrupts CoGUI Phishing Kit Linked to Over 100 Million Malicious Emails a Month

·

cyber security, Cyber Security News, Phishing

Microsoft and international partners have disrupted infrastructure supporting CoGUI. This phishing kit Proofpoint says generates more than 100 million malicious emails monthly. The coordinated action targeted a Chinese-speaking fraud ecosystem encompassing related phishing kits, infrastructure providers, and services enabling credential theft and financial fraud. Microsoft and Health-ISAC filed a civil lawsuit in the U.S. District […]

The post Microsoft Disrupts CoGUI Phishing Kit Linked to Over 100 Million Malicious Emails a Month appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Researchers Use AI to Discover Critical Linux Kernel Flaw That Enables Virtual Machine Escape

·

Cyber Security News

Researchers at pwn.ai used an AI-assisted research harness to find a critical Linux kernel networking flaw, tracked as CVE-2026-99999 and nicknamed “PwnEscape”. It lets an untrusted guest virtual machine leak host kernel memory and, in lab conditions, escape to the host. The bug is in the Linux networking stack, not in KVM or any hypervisor. […]

The post Researchers Use AI to Discover Critical Linux Kernel Flaw That Enables Virtual Machine Escape appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
12 Best Mobile Application Security Testing Tools Compared (2026): Features & Pricing

·

Cyber Security News, Top 10

NowSecure and Data Theorem mobile security lead automated mobile testing, Guardsquare owns shielding/obfuscation, and Corellium’s virtual devices changed what deep mobile research costs. Twelve options across testing, shielding, virtualization, and runtime lanes mapped to MASVS so the acronyms mean something. Quick Verdict: Best Mobile AppSec at a Glance • Best automated testing: NowSecure (pipeline MAST) […]

The post 12 Best Mobile Application Security Testing Tools Compared (2026): Features & Pricing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
12 Best SBOM Tools Compared (2026): Features & Pricing

·

Cyber Security News, Top 10

Anchore’s Syft SBOM generator is the free generation standard, FOSSA and Cybeats lead SBOM management, and Finite State owns the embedded/OT depth regulators now demand. Twelve options across generation, management, and monitoring lanes with CycloneDX honestly framed as the OWASP standard powering much of it rather than a vendor to shortlist. Quick Verdict: Best SBOM […]

The post 12 Best SBOM Tools Compared (2026): Features & Pricing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
12 Best CI/CD Pipeline Security Tools Compared (2026): Features & Pricing

·

Cyber Security News, Top 10

Your CI platform’s native controls (GitHub Advanced Security, GitLab Ultimate) are the baseline, Cycode and Legit lead dedicated pipeline posture, and StepSecurity owns the runner-hardening niche attackers actually exploit. Twelve options across native, dedicated, hardening, and platform-absorbed lanes because the factory is now the target. Quick Verdict: Best CI/CD Security at a Glance • Native […]

The post 12 Best CI/CD Pipeline Security Tools Compared (2026): Features & Pricing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers

·

The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing

·

AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said in an advisory on October 15. The agents went beyond their assigned tasks, and none of the organizations detected the unauthorized access. After internal reviews, the AI companies whose models were being tested

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Hackers Target Claude, ChatGPT and Cursor Credentials Using Aoki Infostealer

·

ChatGPT, cyber security, Cyber Security News

The Aoki infostealer, also known as Aokigahara, has expanded its collection capabilities to steal credentials and session files from AI coding assistants, putting developer identities and connected infrastructure at risk. First observed earlier in 2026, Aoki previously lacked collection routines for AI applications. Their appearance in recent samples indicates active development, with attackers broadening their […]

The post Hackers Target Claude, ChatGPT and Cursor Credentials Using Aoki Infostealer appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New Proxyjacking Campaign Exploits Network Device Flaws to Build Stealthy Proxy Infrastructure

·

cyber security, Cyber Security News

A newly disclosed proxyjacking campaign has compromised at least 143 devices across 34 countries, exploiting vulnerabilities in network appliances and enterprise software to monetize victims’ internet connections. GreyNoise identified an attacker installing Pawns.app, a legitimate bandwidth-sharing application, without device owners’ consent, turning compromised systems into commercial residential proxy nodes. Unlike conventional VPN or hosting infrastructure, […]

The post New Proxyjacking Campaign Exploits Network Device Flaws to Build Stealthy Proxy Infrastructure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶