GBHackers Security | #1 Globally Trusted Cyber Security News Platform

AI-Assisted ToxNetV2 Linux Botnet Uses LLM to Generate Shell and SSH Commands

Mayura Kathir — Tue, 25 Aug 2026 13:27:54 +0000

ToxNetV2, an AArch64 Linux peer-to-peer botnet, integrates a large language model into its controller workflow to turn botnet and host telemetry into proposed operational actions. The implementation connects NVIDIA NIM-hosted z-ai/glm-5.2 model output to controller-side functions including local shell execution, file writes, remote SSH commands, persistent state changes, and cross-compilation. Analysis published by Joe Reverser […]

The post AI-Assisted ToxNetV2 Linux Botnet Uses LLM to Generate Shell and SSH Commands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Multi-Agent AI Framework Compromises Government Systems and Steals Thousands of Records

Divya — Tue, 25 Aug 2026 12:47:23 +0000

A multi-agent AI framework, utilizing Hermes and OpenClaw agents, was employed to compromise government entities in Asia, stealing thousands of personnel records, cracking employee credentials, and establishing persistent access to state infrastructure, according to Dream Research Labs. Researchers discovered a 160 MB operational archive containing 1,395 files generated over about 4 days of activity, from […]

The post Multi-Agent AI Framework Compromises Government Systems and Steals Thousands of Records appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Scammers Impersonate Microsoft to Push Fake Security Scans and Refund Fraud

Mayura Kathir — Tue, 25 Aug 2026 11:57:02 +0000

A cluster of fraudulent websites impersonating Microsoft is using fake “security scans” to pressure victims into uninstalling antivirus products, disclosing personal and banking information, and granting remote access to their computers. The sites, branded as SysScan, claim to assess whether an antivirus product is functioning properly. Their conclusion is predetermined: the victim’s computer is allegedly […]

The post Scammers Impersonate Microsoft to Push Fake Security Scans and Refund Fraud appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

ASOS Warns Customers of Data Breach Following Credential-Based Account Takeovers

Divya — Tue, 25 Aug 2026 11:27:12 +0000

ASOS has started notifying affected customers in the U.S. after detecting unauthorized access to accounts linked to login credentials obtained from outside its systems. According to a breach notification issued by ASOS US Sales LLC, unusual activity was detected in certain ASOS accounts on July 28, 2026. An investigation conducted the following day revealed that […]

The post ASOS Warns Customers of Data Breach Following Credential-Based Account Takeovers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Multiple Zscaler Client Connector Flaws Enable Remote Code Execution

Divya — Tue, 25 Aug 2026 11:13:03 +0000

Zscaler has addressed several vulnerabilities in its Client Connector endpoint application that could allow an unauthenticated, unprivileged attacker to execute arbitrary code within the product’s context. This vulnerability, tracked as CVE-2026-59568, is rated as Critical, with a CVSS v3.1 score of 9.1. The attack vector is network-accessible and requires no privileges or user interaction. Multiple […]

The post Multiple Zscaler Client Connector Flaws Enable Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

91 Spring CVEs Impact Over 209,000 Software Components Across the Supply Chain

Divya — Tue, 25 Aug 2026 10:06:45 +0000

Broadcom has disclosed 91 Common Vulnerabilities and Exposures (CVEs) affecting the Spring Framework and related projects, triggering a software supply chain remediation event that Sonatype estimates impacts 209,569 software components. The advisory issued on August 20 highlights the widening gap between AI-accelerated vulnerability discovery and organizations’ ability to identify, fix, rebuild, and deploy affected software. […]

The post 91 Spring CVEs Impact Over 209,000 Software Components Across the Supply Chain appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

PavinLoader Uses ClickFix and Fake Downloads to Deploy Amatera Stealer via Blockchain C2

Mayura Kathir — Tue, 25 Aug 2026 09:48:32 +0000

PavinLoader, a multi-stage .NET malware loader, operating across ClickFix, fake software-download, and malicious game campaigns. The activity shows how attackers are moving beyond a single delivery vector. A victim may be lured to a fake Cloudflare or Google verification page and instructed to paste a command, persuaded to install apparently legitimate software, or tricked into […]

The post PavinLoader Uses ClickFix and Fake Downloads to Deploy Amatera Stealer via Blockchain C2 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Anthropic Expands Claude MCP Security With Enterprise-Managed Identity Controls

Divya — Tue, 25 Aug 2026 08:47:48 +0000

Anthropic has expanded Claude Enterprise’s Model Context Protocol (MCP) security capabilities with enterprise-managed authorization, allowing organizations to centrally provision and govern connector access through their identity provider (IdP). The feature, now generally available, removes the need for individual users to authorize each MCP connector after an administrator enables it. Instead, administrators can authorize a connector […]

The post Anthropic Expands Claude MCP Security With Enterprise-Managed Identity Controls appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Critical miniOrange SAML SSO Flaws Let Attackers Take Over WordPress Admin Accounts

Divya — Tue, 25 Aug 2026 08:36:37 +0000

Two critical vulnerabilities have been identified in the miniOrange SAML 2.0 Single Sign-On WordPress plugin, which could allow unauthenticated attackers to forge SAML assertions and log in as any existing user, including site administrators. These vulnerabilities, tracked as CVE-2026-61979 and CVE-2026-15981, carry a CVSS score of 9.8. Research conducted by DigitalOcean’s security team and later […]

The post Critical miniOrange SAML SSO Flaws Let Attackers Take Over WordPress Admin Accounts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Critical Red Hat Keycloak Password Reset Flaw Enables Unauthenticated Account Takeover

Divya — Tue, 25 Aug 2026 08:23:26 +0000

Red Hat has disclosed a critical vulnerability in the Red Hat Build of Keycloak that allows an unauthenticated remote attacker to bypass a key safeguard in the password reset process and seize control of arbitrary user accounts. Tracked as CVE-2026-18963, the flaw affects the keycloak-services component, the core identity and access management engine behind the […]

The post Critical Red Hat Keycloak Password Reset Flaw Enables Unauthenticated Account Takeover appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.