GBHackers Security | #1 Globally Trusted Cyber Security News Platform https://gbhackers.com/ GBhackers Offering Exclusive Cyber Security News Coverage, New Research papers & Technology Updates. Sat, 26 Sep 2026 08:15:12 +0000 en-US hourly 1 https://gbhackers.com/wp-content/uploads/2024/09/cropped-gbh-32x32.png GBHackers Security | #1 Globally Trusted Cyber Security News Platform https://gbhackers.com/ 32 32 236592110 Red Heron Exploits Critical Gitea Flaw to Steal Repositories and Deploy Linux Rootkit https://gbhackers.com/red-heron-exploits-critical-gitea-flaw/ https://gbhackers.com/red-heron-exploits-critical-gitea-flaw/#respond Sat, 26 Sep 2026 08:15:11 +0000 https://gbhackers.com/?p=201089 A threat actor tracked as Red Heron has exploited the critical Gitea remote code execution vulnerability CVE-2026-60004 to steal source-code repositories, establish persistent access, and deploy a covert Linux toolset consisting of the JITTERLY implant and SIXZUT LD_PRELOAD rootkit. Acronis reported that the actor rapidly weaponized the flaw against internet-exposed Gitea environments, turning initial access […]

The post Red Heron Exploits Critical Gitea Flaw to Steal Repositories and Deploy Linux Rootkit appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

]]> https://gbhackers.com/red-heron-exploits-critical-gitea-flaw/feed/ 0 201089 Windows 11 Update Causes Black Screen and Desktop Loading Issues After Sign-In https://gbhackers.com/windows-11-update-causes-black-screen/ https://gbhackers.com/windows-11-update-causes-black-screen/#respond Sat, 26 Sep 2026 08:02:06 +0000 https://gbhackers.com/?p=201083 Microsoft has confirmed a Windows 11 issue that can leave users with a black screen after sign-in or prevent the desktop from loading automatically. The problem affects devices that installed the August 2026 non-security preview updates and potentially later cumulative updates, with Azure Virtual Desktop environments using FSLogix profile containers most frequently affected. The issue […]

The post Windows 11 Update Causes Black Screen and Desktop Loading Issues After Sign-In appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

]]> https://gbhackers.com/windows-11-update-causes-black-screen/feed/ 0 201083 Kiteworks Warns Users to Take Systems Offline Amid Suspected Zero-Day Threat https://gbhackers.com/kiteworks-systems-offline-amid-suspected-zero-day/ https://gbhackers.com/kiteworks-systems-offline-amid-suspected-zero-day/#respond Sat, 26 Sep 2026 07:45:21 +0000 https://gbhackers.com/?p=201079 Kiteworks has urged customers worldwide to temporarily shut down their servers after receiving credible law-enforcement intelligence that a threat actor may target Kiteworks deployments over the weekend. The emergency advisory is preventive, but the company said the potential activity may involve an unknown zero-day vulnerability. The secure file-sharing and managed content communications provider asked organizations […]

The post Kiteworks Warns Users to Take Systems Offline Amid Suspected Zero-Day Threat appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

]]> https://gbhackers.com/kiteworks-systems-offline-amid-suspected-zero-day/feed/ 0 201079 Uncensored Local AI Model Bypasses EDR to Dump Windows LSASS Credentials https://gbhackers.com/uncensored-local-ai-model-bypasses-edr/ https://gbhackers.com/uncensored-local-ai-model-bypasses-edr/#respond Sat, 26 Sep 2026 07:28:09 +0000 https://gbhackers.com/?p=201071 A new demonstration shows how a locally hosted, uncensored AI model can help generate a Windows LSASS credential-dumping utility that reportedly evaded endpoint detection and response products during laboratory testing. The finding highlights how accessible local models can reduce the time and expertise needed to adapt offensive tooling after an attacker gains administrative access. Eddie […]

The post Uncensored Local AI Model Bypasses EDR to Dump Windows LSASS Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

]]> https://gbhackers.com/uncensored-local-ai-model-bypasses-edr/feed/ 0 201071 Storm-3168 Hackers Abuse Compromised Service Principals to Destroy Azure Cloud Resources https://gbhackers.com/storm-3168-hackers-abuse-compromised-service-principals/ https://gbhackers.com/storm-3168-hackers-abuse-compromised-service-principals/#respond Sat, 26 Sep 2026 07:09:54 +0000 https://gbhackers.com/?p=201063 Microsoft has uncovered a destructive Azure campaign linked to Storm-3168, also known as JADEPUFFER, in which attackers abused compromised service principals to map cloud environments, delete critical resources, target recovery safeguards, and obtain storage-account credentials. The activity shows how a single exposed workload identity can give attackers the automation and permissions needed to cause rapid […]

The post Storm-3168 Hackers Abuse Compromised Service Principals to Destroy Azure Cloud Resources appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

]]> https://gbhackers.com/storm-3168-hackers-abuse-compromised-service-principals/feed/ 0 201063 OpenAI Says Misaligned AI Agents Hacked Hugging Face and Bypassed Security Controls https://gbhackers.com/openai-says-misaligned-ai-agents-hacked-hugging-face/ https://gbhackers.com/openai-says-misaligned-ai-agents-hacked-hugging-face/#respond Sat, 26 Sep 2026 06:54:16 +0000 https://gbhackers.com/?p=201059 OpenAI has disclosed that autonomous AI agents compromised portions of Hugging Face’s infrastructure during internal cybersecurity evaluations after pursuing misaligned strategies to complete difficult tasks. The company said the event was not simply a platform-security failure, but its most severe identified example of model-driven cyber activity and a warning that advanced agents can pursue objectives […]

The post OpenAI Says Misaligned AI Agents Hacked Hugging Face and Bypassed Security Controls appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

]]> https://gbhackers.com/openai-says-misaligned-ai-agents-hacked-hugging-face/feed/ 0 201059 Salmon Introduces Execution Verification Infrastructure (EVI) for Securing AI Agents and Autonomous Systems https://gbhackers.com/salmon-introduces-execution-verification-infrastructure-evi-for-securing-ai-agents-and-autonomous-systems/ https://gbhackers.com/salmon-introduces-execution-verification-infrastructure-evi-for-securing-ai-agents-and-autonomous-systems/#respond Fri, 25 Sep 2026 13:37:32 +0000 https://gbhackers.com/?p=201015 San Francisco, USA, September 25th, 2026, CyberNewswire Archipelo today announced Salmon, Execution Verification Infrastructure (EVI) for AI agents and autonomous systems, powered by a cryptographic protocol designed to make execution history verifiable. Salmon establishes verifiable execution history and state lineage across humans, AI agents, and automation. The launch follows the OpenAI–Hugging Face incident, in which […]

The post Salmon Introduces Execution Verification Infrastructure (EVI) for Securing AI Agents and Autonomous Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

]]> https://gbhackers.com/salmon-introduces-execution-verification-infrastructure-evi-for-securing-ai-agents-and-autonomous-systems/feed/ 0 201015 14-Year-Old Linux Kernel Vulnerability Enables Root Access and Docker Escape https://gbhackers.com/14-year-old-linux-kernel-vulnerability/ https://gbhackers.com/14-year-old-linux-kernel-vulnerability/#respond Fri, 25 Sep 2026 12:48:13 +0000 https://gbhackers.com/?p=201011 A vulnerability in the Linux kernel’s AF_ALG cryptographic interface, which has existed for 14 years, can let an unprivileged local attacker gain root access and escape a Docker container by exploiting a race condition in concurrent socket writes. This flaw, tracked as CVE-2025-39964, was discovered in 2025 by STAR Labs researcher Muhammad Alifa Ramdhan, with […]

The post 14-Year-Old Linux Kernel Vulnerability Enables Root Access and Docker Escape appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

]]> https://gbhackers.com/14-year-old-linux-kernel-vulnerability/feed/ 0 201011 ServiceNow Security Flaws Allow Attackers to Execute SQL and Modify Instance Data https://gbhackers.com/servicenow-security-flaws/ https://gbhackers.com/servicenow-security-flaws/#respond Fri, 25 Sep 2026 10:58:04 +0000 https://gbhackers.com/?p=200997 ServiceNow has disclosed five vulnerabilities affecting its AI Platform, including two critical flaws that could allow unauthenticated attackers to execute arbitrary SQL commands, extract sensitive instance data, modify records, and escalate privileges. The security advisory, published in September 2026 and tracked as KB3159623 on September 24, details the following vulnerabilities: CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, CVE-2026-86859, and […]

The post ServiceNow Security Flaws Allow Attackers to Execute SQL and Modify Instance Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

]]> https://gbhackers.com/servicenow-security-flaws/feed/ 0 200997 Rogue AI Agents Tried to Hack Public Websites After Data Retrieval Failed https://gbhackers.com/rogue-ai-agents-tried-to-hack-public-websites/ https://gbhackers.com/rogue-ai-agents-tried-to-hack-public-websites/#respond Fri, 25 Sep 2026 10:41:35 +0000 https://gbhackers.com/?p=200993 Research from Transluce shows that autonomous AI agents shifted from standard web data collection to probing for vulnerabilities in three public-facing services after traditional data retrieval methods failed. This activity targeted an Australian government health data platform, Data USA, and the University of New Mexico’s digital library. Rogue AI Tried to Hack Public Websites Transluce […]

The post Rogue AI Agents Tried to Hack Public Websites After Data Retrieval Failed appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

]]> https://gbhackers.com/rogue-ai-agents-tried-to-hack-public-websites/feed/ 0 200993