Category: GBHackers

New 'ClickFix' Malware Payload Targets Browser Cache, Warns Cybersecurity Experts
17
Feb
2026

New ‘ClickFix’ Malware Payload Targets Browser Cache, Warns Cybersecurity Experts

Threat actors on underground forums are now promoting a new “ClickFix” payload-delivery technique that hides malware in the browser cache…

Share: X : New ‘ClickFix’ Malware Payload Targets Browser Cache, Warns Cybersecurity ExpertsFacebook : New ‘ClickFix’ Malware Payload Targets Browser Cache, Warns Cybersecurity ExpertsLinkedin : New ‘ClickFix’ Malware Payload Targets Browser Cache, Warns Cybersecurity ExpertsReddit : New ‘ClickFix’ Malware Payload Targets Browser Cache, Warns Cybersecurity ExpertsTelegram : New ‘ClickFix’ Malware Payload Targets Browser Cache, Warns Cybersecurity ExpertsWhatsApp : New ‘ClickFix’ Malware Payload Targets Browser Cache, Warns Cybersecurity ExpertsEmail : New ‘ClickFix’ Malware Payload Targets Browser Cache, Warns Cybersecurity Experts
New Sophisticated 'Carding-as-a-Service' Marketplaces Fuel Surge in Credit Card Fraud
17
Feb
2026

New Sophisticated ‘Carding-as-a-Service’ Marketplaces Fuel Surge in Credit Card Fraud

Credit card fraud has matured into a service-based criminal economy where stolen cards, malware, and support are bundled and sold like commercial…

Share: X : New Sophisticated ‘Carding-as-a-Service’ Marketplaces Fuel Surge in Credit Card FraudFacebook : New Sophisticated ‘Carding-as-a-Service’ Marketplaces Fuel Surge in Credit Card FraudLinkedin : New Sophisticated ‘Carding-as-a-Service’ Marketplaces Fuel Surge in Credit Card FraudReddit : New Sophisticated ‘Carding-as-a-Service’ Marketplaces Fuel Surge in Credit Card FraudTelegram : New Sophisticated ‘Carding-as-a-Service’ Marketplaces Fuel Surge in Credit Card FraudWhatsApp : New Sophisticated ‘Carding-as-a-Service’ Marketplaces Fuel Surge in Credit Card FraudEmail : New Sophisticated ‘Carding-as-a-Service’ Marketplaces Fuel Surge in Credit Card Fraud
DigitStealer Infostealer Targets macOS, Revealing Critical Infrastructure Vulnerabilities
17
Feb
2026

DigitStealer Infostealer Targets macOS, Revealing Critical Infrastructure Vulnerabilities

DigitStealer is an increasingly active macOS‑targeting infostealer whose predictable command‑and‑control (C2) setup exposes structural weaknesses in its operators’ infrastructure decisions….

Share: X : DigitStealer Infostealer Targets macOS, Revealing Critical Infrastructure VulnerabilitiesFacebook : DigitStealer Infostealer Targets macOS, Revealing Critical Infrastructure VulnerabilitiesLinkedin : DigitStealer Infostealer Targets macOS, Revealing Critical Infrastructure VulnerabilitiesReddit : DigitStealer Infostealer Targets macOS, Revealing Critical Infrastructure VulnerabilitiesTelegram : DigitStealer Infostealer Targets macOS, Revealing Critical Infrastructure VulnerabilitiesWhatsApp : DigitStealer Infostealer Targets macOS, Revealing Critical Infrastructure VulnerabilitiesEmail : DigitStealer Infostealer Targets macOS, Revealing Critical Infrastructure Vulnerabilities
Firefox v147.0.3 Released with Critical Fix for Heap Buffer Overflow Vulnerability
17
Feb
2026

Firefox v147.0.3 Released with Critical Fix for Heap Buffer Overflow Vulnerability

Mozilla has released an emergency security update for Firefox, addressing a critical heap buffer overflow vulnerability in the libvpx library….

Share: X : Firefox v147.0.3 Released with Critical Fix for Heap Buffer Overflow VulnerabilityFacebook : Firefox v147.0.3 Released with Critical Fix for Heap Buffer Overflow VulnerabilityLinkedin : Firefox v147.0.3 Released with Critical Fix for Heap Buffer Overflow VulnerabilityReddit : Firefox v147.0.3 Released with Critical Fix for Heap Buffer Overflow VulnerabilityTelegram : Firefox v147.0.3 Released with Critical Fix for Heap Buffer Overflow VulnerabilityWhatsApp : Firefox v147.0.3 Released with Critical Fix for Heap Buffer Overflow VulnerabilityEmail : Firefox v147.0.3 Released with Critical Fix for Heap Buffer Overflow Vulnerability
Malicious Fork of Legitimate Triton App Discovered on GitHub, Exposing New Malware Threat
17
Feb
2026

Malicious Fork of Legitimate Triton App Discovered on GitHub, Exposing New Malware Threat

Attackers have weaponized a malicious fork of the legitimate Triton macOS client for omg.lol, turning a trusted open-source project into…

Share: X : Malicious Fork of Legitimate Triton App Discovered on GitHub, Exposing New Malware ThreatFacebook : Malicious Fork of Legitimate Triton App Discovered on GitHub, Exposing New Malware ThreatLinkedin : Malicious Fork of Legitimate Triton App Discovered on GitHub, Exposing New Malware ThreatReddit : Malicious Fork of Legitimate Triton App Discovered on GitHub, Exposing New Malware ThreatTelegram : Malicious Fork of Legitimate Triton App Discovered on GitHub, Exposing New Malware ThreatWhatsApp : Malicious Fork of Legitimate Triton App Discovered on GitHub, Exposing New Malware ThreatEmail : Malicious Fork of Legitimate Triton App Discovered on GitHub, Exposing New Malware Threat
Microsoft Teams Leverages AI Workflows with Microsoft 365 Copilot for Task Automation
17
Feb
2026

Microsoft Teams Leverages AI Workflows with Microsoft 365 Copilot for Task Automation

Microsoft is rolling out AI Workflows in the Teams Workflows app, bringing intelligent automation capabilities powered by Microsoft 365 Copilot…

Share: X : Microsoft Teams Leverages AI Workflows with Microsoft 365 Copilot for Task AutomationFacebook : Microsoft Teams Leverages AI Workflows with Microsoft 365 Copilot for Task AutomationLinkedin : Microsoft Teams Leverages AI Workflows with Microsoft 365 Copilot for Task AutomationReddit : Microsoft Teams Leverages AI Workflows with Microsoft 365 Copilot for Task AutomationTelegram : Microsoft Teams Leverages AI Workflows with Microsoft 365 Copilot for Task AutomationWhatsApp : Microsoft Teams Leverages AI Workflows with Microsoft 365 Copilot for Task AutomationEmail : Microsoft Teams Leverages AI Workflows with Microsoft 365 Copilot for Task Automation
Apache NiFi Vulnerabilities Expose Systems to Authorization Bypass Attacks
17
Feb
2026

Apache NiFi Vulnerabilities Expose Systems to Authorization Bypass Attacks

Apache NiFi users are being urged to upgrade after the project disclosed a high-severity authorization flaw tracked as CVE-2026-25903. The…

Share: X : Apache NiFi Vulnerabilities Expose Systems to Authorization Bypass AttacksFacebook : Apache NiFi Vulnerabilities Expose Systems to Authorization Bypass AttacksLinkedin : Apache NiFi Vulnerabilities Expose Systems to Authorization Bypass AttacksReddit : Apache NiFi Vulnerabilities Expose Systems to Authorization Bypass AttacksTelegram : Apache NiFi Vulnerabilities Expose Systems to Authorization Bypass AttacksWhatsApp : Apache NiFi Vulnerabilities Expose Systems to Authorization Bypass AttacksEmail : Apache NiFi Vulnerabilities Expose Systems to Authorization Bypass Attacks
0APT Ransomware Group Claims 200 Victims, Fails to Provide Proof
17
Feb
2026

0APT Ransomware Group Claims 200 Victims, Fails to Provide Proof

A new ransomware-as-a-service (RaaS) outfit calling itself 0APT has quickly drawn attention for all the wrong reasons, after loudly claiming to have…

Share: X : 0APT Ransomware Group Claims 200 Victims, Fails to Provide ProofFacebook : 0APT Ransomware Group Claims 200 Victims, Fails to Provide ProofLinkedin : 0APT Ransomware Group Claims 200 Victims, Fails to Provide ProofReddit : 0APT Ransomware Group Claims 200 Victims, Fails to Provide ProofTelegram : 0APT Ransomware Group Claims 200 Victims, Fails to Provide ProofWhatsApp : 0APT Ransomware Group Claims 200 Victims, Fails to Provide ProofEmail : 0APT Ransomware Group Claims 200 Victims, Fails to Provide Proof
Langchain Community SSRF Bypass Vulnerability Exposes Internal Services to Unauthorized Access
17
Feb
2026

Langchain Community SSRF Bypass Vulnerability Exposes Internal Services to Unauthorized Access

The Langchain development team has released a critical security update for the @langchain/community package to address a Server-Side Request Forgery (SSRF) vulnerability….

Share: X : Langchain Community SSRF Bypass Vulnerability Exposes Internal Services to Unauthorized AccessFacebook : Langchain Community SSRF Bypass Vulnerability Exposes Internal Services to Unauthorized AccessLinkedin : Langchain Community SSRF Bypass Vulnerability Exposes Internal Services to Unauthorized AccessReddit : Langchain Community SSRF Bypass Vulnerability Exposes Internal Services to Unauthorized AccessTelegram : Langchain Community SSRF Bypass Vulnerability Exposes Internal Services to Unauthorized AccessWhatsApp : Langchain Community SSRF Bypass Vulnerability Exposes Internal Services to Unauthorized AccessEmail : Langchain Community SSRF Bypass Vulnerability Exposes Internal Services to Unauthorized Access
25 Vulnerabilities Found in Cloud Password Managers, Exposing Users to Unauthorized Access and Changes
17
Feb
2026

25 Vulnerabilities Found in Cloud Password Managers, Exposing Users to Unauthorized Access and Changes

The three major cloud-based password managers, such as Bitwarden, LastPass, and Dashlane, collectively serve approximately 60 million users. Despite marketing…

Share: X : 25 Vulnerabilities Found in Cloud Password Managers, Exposing Users to Unauthorized Access and ChangesFacebook : 25 Vulnerabilities Found in Cloud Password Managers, Exposing Users to Unauthorized Access and ChangesLinkedin : 25 Vulnerabilities Found in Cloud Password Managers, Exposing Users to Unauthorized Access and ChangesReddit : 25 Vulnerabilities Found in Cloud Password Managers, Exposing Users to Unauthorized Access and ChangesTelegram : 25 Vulnerabilities Found in Cloud Password Managers, Exposing Users to Unauthorized Access and ChangesWhatsApp : 25 Vulnerabilities Found in Cloud Password Managers, Exposing Users to Unauthorized Access and ChangesEmail : 25 Vulnerabilities Found in Cloud Password Managers, Exposing Users to Unauthorized Access and Changes
CleanTalk Plugin for WordPress Exposes Sites to Authorization Bypass via Reverse DNS
16
Feb
2026

CleanTalk Plugin for WordPress Exposes Sites to Authorization Bypass via Reverse DNS

A critical vulnerability in the popular CleanTalk Spam Protection plugin for WordPress exposes websites to complete takeover. Tracked as CVE-2026-1490,…

Share: X : CleanTalk Plugin for WordPress Exposes Sites to Authorization Bypass via Reverse DNSFacebook : CleanTalk Plugin for WordPress Exposes Sites to Authorization Bypass via Reverse DNSLinkedin : CleanTalk Plugin for WordPress Exposes Sites to Authorization Bypass via Reverse DNSReddit : CleanTalk Plugin for WordPress Exposes Sites to Authorization Bypass via Reverse DNSTelegram : CleanTalk Plugin for WordPress Exposes Sites to Authorization Bypass via Reverse DNSWhatsApp : CleanTalk Plugin for WordPress Exposes Sites to Authorization Bypass via Reverse DNSEmail : CleanTalk Plugin for WordPress Exposes Sites to Authorization Bypass via Reverse DNS
Joomla Vulnerabilities in Novarain/Tassos Framework Expose SQL Injection Risks
16
Feb
2026

Joomla Vulnerabilities in Novarain/Tassos Framework Expose SQL Injection Risks

Joomla site owners using extensions that bundle the Novarain/Tassos Framework are being warned after a source code review identified multiple…

Share: X : Joomla Vulnerabilities in Novarain/Tassos Framework Expose SQL Injection RisksFacebook : Joomla Vulnerabilities in Novarain/Tassos Framework Expose SQL Injection RisksLinkedin : Joomla Vulnerabilities in Novarain/Tassos Framework Expose SQL Injection RisksReddit : Joomla Vulnerabilities in Novarain/Tassos Framework Expose SQL Injection RisksTelegram : Joomla Vulnerabilities in Novarain/Tassos Framework Expose SQL Injection RisksWhatsApp : Joomla Vulnerabilities in Novarain/Tassos Framework Expose SQL Injection RisksEmail : Joomla Vulnerabilities in Novarain/Tassos Framework Expose SQL Injection Risks