GBHackers Security | #1 Globally Trusted Cyber Security News Platform

BlackNevas Ransomware Attacks VMware ESXi Servers, Destroying Virtual Machines and Backup Infrastructure

Eswar — Sat, 14 Nov 2026 07:47:10 +0000

A newly disclosed intrusion in which the BlackNevas group destroyed an organization’s entire virtualization estate over 10 days. Kaspersky’s Global Emergency Response Team (GERT) documented the attackers wiped four ESXi hosts, every virtual machine on them, both vCenter Server Appliances (VCSA) and all connected backup infrastructure. They exploited no hypervisor flaw, guest-to-host escape, or memory […]

The post BlackNevas Ransomware Attacks VMware ESXi Servers, Destroying Virtual Machines and Backup Infrastructure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CISA Warns of Actively Exploited Check Point Zero-Day Vulnerability Allowing Attackers to Gain Root Access

Eswar — Sat, 14 Nov 2026 07:27:07 +0000

CISA has reportedly added CVE-2026-123039, a Check Point Gaia OS permission flaw, to its Known Exploited Vulnerabilities catalog following active exploitation. The entry supplied for this report lists November 13, 2026, as the addition date and November 16 as the remediation deadline. Check Point exploitation reporting nevertheless identifies compromised customers and a practical route from […]

The post CISA Warns of Actively Exploited Check Point Zero-Day Vulnerability Allowing Attackers to Gain Root Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers Use Stolen LLM API Keys to Power ARTEX AI Agents and Continue Credential Theft

Eswar — Sat, 14 Nov 2026 07:19:13 +0000

Chinese-nexus threat actors used ARTEX, an open-source agentic penetration-testing framework, to steal large language model API credentials and feed them back into infrastructure powering further attacks. Amazon Threat Intelligence uncovered the financially motivated campaigns after its MadPot decoy network captured requests containing the agents’ operational memory between October 3 and November 5, 2026. Sensors impersonating […]

The post Hackers Use Stolen LLM API Keys to Power ARTEX AI Agents and Continue Credential Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

FBI Warns Hackers Are Weaponizing ARTEX AI Framework to Launch Autonomous Cyberattacks Worldwide

Eswar — Sat, 14 Nov 2026 07:07:54 +0000

The FBI has issued FLASH-20261113-001, warning that hackers are weaponizing ARTEX, an autonomous penetration testing framework, to accelerate cyberattacks worldwide. Published November 13, the advisory describes operations observed since August 2026, spanning reconnaissance, exploitation, privilege escalation, and data exfiltration. Some intrusions progressed from initial targeting to privileged access in under three hours. Victims span financial […]

The post FBI Warns Hackers Are Weaponizing ARTEX AI Framework to Launch Autonomous Cyberattacks Worldwide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers Use Falcon C2 Framework to Hijack Browsers and Steal Credentials From Government Agencies

Eswar — Sat, 14 Nov 2026 06:54:02 +0000

Hackers deployed Falcon, a Node.js command-and-control framework tracked as XG or Xiàng Gē, against government entities in one Middle Eastern country and four Southeast Asian countries between March and May 2026. Unit 42 identified targets spanning foreign affairs, defense, interior, and law enforcement organizations, indicating strategic intelligence collection. The framework executes malicious JavaScript inside compromised […]

The post Hackers Use Falcon C2 Framework to Hijack Browsers and Steal Credentials From Government Agencies appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Japan Hit by Record Cyberattack Surge as Hackers Use AI to Exploit Security Vulnerabilities

Eswar — Sat, 14 Nov 2026 06:48:05 +0000

Japan recorded 233 publicly disclosed security incidents in October 2026, approximately 2.4 times its previous monthly peak, as researchers uncovered AI-assisted exploitation targeting application backends. MM Research Institute estimated that incidents disclosed during October exposed or potentially exposed 185 million personal information records, nearly four times the total reported throughout 2025. Thirty incidents involved at […]

The post Japan Hit by Record Cyberattack Surge as Hackers Use AI to Exploit Security Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Uber Hacked – Hackers Steal Drivers’ License Personal Data

Balaji — Sat, 14 Nov 2026 05:47:51 +0000

Thousands of Uber drivers in the United States are being told that their personal and driver’s license information was stolen. The data was taken in an October breach at Fireworks AI, a third-party technology provider that held Uber records. Uber disclosed the incident in breach notices filed with several state attorneys general, including California. According […]

The post Uber Hacked – Hackers Steal Drivers’ License Personal Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers Manipulate NVIDIA GPU Monitoring to Conceal Cryptocurrency Mining on Compromised Linux Servers

Mayura Kathir — Fri, 13 Nov 2026 13:03:07 +0000

A Linux cryptomining intrusion in which attackers falsified NVIDIA GPU telemetry, concealed mining processes with a kernel rootkit, and maintained separate command channels through Tor and Ethereum. Tracked as REF3364, the operation deployed a coordinated toolkit across three Linux GPU hosts after abusing an internet-exposed Ray job agent. Its layered concealment targets both operating-system visibility […]

The post Hackers Manipulate NVIDIA GPU Monitoring to Conceal Cryptocurrency Mining on Compromised Linux Servers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

FBI Disrupts North Korean FaceStealer Attacks Linked to $400 Million in Crypto Theft

Divya — Fri, 13 Nov 2026 12:14:32 +0000

The U.S. Justice Department and the FBI have seized the cloud infrastructure behind “FaceStealer,” a North Korean social engineering scheme connected to over $400 million in cryptocurrency theft in the past 18 months. Announced on November 12, 2026, this action also addresses the separate theft of approximately $6 billion from Binance, which the FBI attributes […]

The post FBI Disrupts North Korean FaceStealer Attacks Linked to $400 Million in Crypto Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers Exploit ChatGPT and Claude Website Typos to Deliver Malware and Hijack Browsers

Mayura Kathir — Fri, 13 Nov 2026 12:05:34 +0000

Oleg Zaytsev traced 186 lookalike domains across 27 AI brands, including Claude, ChatGPT, DeepSeek, Perplexity, Midjourney, ElevenLabs and Cursor. He named the delivery pattern TypoPrompting. Ordinary typing errors led visitors to ClickFix lures, browser-hijacking malware and search-hijacking extensions. ChatGPT drew the most lookalikes with 25, followed by Claude with 18 and DeepSeek with 16. The […]

The post Hackers Exploit ChatGPT and Claude Website Typos to Deliver Malware and Hijack Browsers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.