Category: GBHackers

New Phishing Kit Automates ClickFix Attacks to Evade Security Defenses
08
Oct
2025

New Phishing Kit Automates ClickFix Attacks to Evade Security Defenses

Cybercriminals are increasingly automating one of the most insidious social engineering exploits—forcing victims to manually execute malware under the guise…

Google Unveils CodeMender – An AI Agent That Automatically Fixes Vulnerable Code
08
Oct
2025

Google Unveils CodeMender – An AI Agent That Automatically Fixes Vulnerable Code

Google has introduced CodeMender, an AI-powered agent designed to automatically detect and patch security flaws in software. Announced on 6 October…

Nagios Vulnerability Allows Users to Retrieve Cleartext Administrative API Keys
08
Oct
2025

Nagios Vulnerability Allows Users to Retrieve Cleartext Administrative API Keys

Security researchers have identified two significant vulnerabilities in Nagios Log Server that expose critical system information and allow unauthorized service…

AWS Client VPN for macOS Hit by Critical Privilege Escalation Vulnerability
08
Oct
2025

AWS Client VPN for macOS Hit by Critical Privilege Escalation Vulnerability

Amazon Web Services (AWS) released bulletin AWS-2025-020 detailing a serious flaw in the macOS version of its Client VPN software….

ASCII Smuggling Attack in Gemini Tricks AI Agents into Revealing Smuggled Data
08
Oct
2025

ASCII Smuggling Attack in Gemini Tricks AI Agents into Revealing Smuggled Data

Enterprise AI assistants face a hidden menace when invisible control characters are used to smuggle malicious instructions into prompts. In September…

77% of Employees Share Company Secrets on ChatGPT Compromising Enterprise Policies
08
Oct
2025

77% of Employees Share Company Secrets on ChatGPT Compromising Enterprise Policies

In an era where AI and SaaS applications underpin daily workflows, organizations face an unprecedented challenge: the invisible exfiltration of…

Palo Alto Networks Login Scanner
08
Oct
2025

Massive Attacks Targeting Palo Alto PAN-OS GlobalProtect Portals from 2,200 IPs

Cybersecurity researchers at GreyNoise have identified a dramatic escalation in malicious scanning activities targeting Palo Alto Networks PAN-OS GlobalProtect login…

Hackers Exploit CSS Properties to Conceal Malicious Code in Hidden Text Salting Attacks
08
Oct
2025

Hackers Exploit CSS Properties to Conceal Malicious Code in Hidden Text Salting Attacks

with font-size:1px and line-height:0, only revealed when font size was increased to 20px. A scam email impersonating the PayPal brand….

Multiple Google Chrome Flaws Allow Attackers to Execute Arbitrary Code
08
Oct
2025

Multiple Google Chrome Flaws Allow Attackers to Execute Arbitrary Code

Google rolled out version 141.0.7390.65/.66 for Windows and Mac and 141.0.7390.65 for Linux. This update fixes three critical security flaws,…

FreePBX SQL Injection Vulnerability Leads to Database Tampering
08
Oct
2025

FreePBX SQL Injection Vulnerability Leads to Database Tampering

A critical SQL injection vulnerability in FreePBX, designated as CVE-2025-57819, has been actively exploited by attackers to modify the database and…

Crimson Collective Exploits AWS Services to Steal Sensitive Data
08
Oct
2025

Crimson Collective Exploits AWS Services to Steal Sensitive Data

A newly identified threat group called Crimson Collective has emerged as a significant security concern for organizations using Amazon Web Services (AWS),…

BK Technologies Data Breach, IT Systems Compromised, Data Stolen
08
Oct
2025

BK Technologies Data Breach, IT Systems Compromised, Data Stolen

BK Technologies Corporation, a Florida-based communications equipment manufacturer, disclosed a significant cybersecurity incident that compromised its IT systems and potentially…