GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

China’s artificial intelligence ecosystem is rapidly advancing through a controversial technique known as model distillation, with mounting evidence suggesting that military-linked entities are extracting high-value capabilities from leading American AI systems. Distillation, or “knowledge distillation,” refers to training a smaller AI model using outputs generated by a more advanced “teacher” model. While widely used across […]

The post China Is Training Military AI With Knowledge Extracted From American Models appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

18 malicious npm packages have been used in a tightly coordinated software supply chain attack to deliver a cross‑platform RAT that specifically targets developers working with Alibaba’s internal Aone tooling and @ali-scoped packages. The operation came to light after researchers analyzed a seemingly simple malicious npm package, lib-mtop, which acted as a downloader and exposed […]

The post 18 Malicious npm Packages Deploy Cross-Platform RAT Against Alibaba Developers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

N-able has issued an urgent hotfix to address a critical authentication-bypass vulnerability in its N-central remote monitoring and management (RMM) platform, following confirmation of active exploitation. This vulnerability, tracked as CVE-2026-18577, affects N-central servers running earlier than version 2026.3.1.7. It allows a remote, unauthenticated attacker to take over accounts and gain administrative control of the […]

The post Critical N-able N-central Flaw Actively Exploited to Gain God-Mode Access to MSP Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A new Metasploit Framework module has been submitted for review, targeting the critical Ruby on Rails Active Storage vulnerability, tracked as CVE-2026-66066. This submission poses an increased risk to applications that utilize the Vips image-processing backend. The proposed module is named `exploit/multi/http/rails_activestorage_vips_rce` and was introduced in Rapid7 Metasploit Framework pull request #21733 by contributor jburgess-r7. […]

The post Metasploit Exploit Targets Critical Ruby on Rails Active Storage RCE Flaw appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CareCloud has reported a data security incident involving unauthorized access to its Amazon Web Services (AWS) environment that supports the CareCloud Health division. This incident disrupted one of the company’s electronic health record (EHR) systems. It may have exposed a wide range of protected health information (PHI), personally identifiable information (PII), insurance details, and, for […]

The post CareCloud Data Breach Exposes Patients’ Health, Social Security and Credit Card Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

SonicWall SMA Secure Mobile Access appliances are again at the center of a zero-day storm, with chained flaws that let attackers turn a single crafted WebSocket request into root-level control on internet-facing VPN gateways. The campaign, dissected by Volexity and other researchers, shows how a previously undocumented threat actor, tracked as UTA0533, abused SonicWall’s wsproxy […]

The post SonicWall SMA Zero-Days Let Attackers Turn One WebSocket Request Into Root Control appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Arista Networks has issued a warning about attackers actively exploiting CVE-2026-16812, a critical unauthenticated OS command injection vulnerability in on-premises VeloCloud Orchestrator (VCO) deployments. This flaw carries a CVSS v3.1 and v4.0 severity score of 10.0, allowing a remote attacker with network access to the VCO web interface to access privileged internal functions and potentially […]

The post Hackers Exploit Critical Arista VeloCloud Flaw to Execute OS Commands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Blockchain analysts have linked a rapid series of Bitcoin wallet drains to a reported vulnerability in Coldcard firmware. A total of 1,196 addresses lost a combined 1,082.65 BTC, valued at approximately $70.2 million, in just 41 minutes on July 30, 2026. Galaxy Research stated that its transaction-flow analysis was based on a pattern initially identified […]

The post Coldcard Firmware Flaw Lets Hackers Steal $70 Million in Bitcoin From 1,196 Addresses appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

XCSSET v40 marks a significant escalation in macOS-focused supply chain attacks, weaponizing poisoned Xcode projects to hijack Chrome and Trojanize Telegram while operating almost entirely from memory with aggressive polymorphism and defense evasion. After several months of apparent inactivity, the actors behind the XCSSET malware resurfaced with version 40 (v40), a major re-architecture of the […]

The post XCSSET v40 Infects Xcode Projects to Hijack Chrome and Trojanize Telegram on Macs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CALIFORNIA, USA, August 2nd, 2026, CyberNewswire AccuKnox, a leading Zero Trust Security platform, today announced that SabPaisa, an RBI-authorised digital payments company, has selected its AI-powered cloud security platform to ensure robust security of its payments platform. SabPaisa joins a growing roster of financial services leaders using AccuKnox to meet stringent compliance requirements while defending […]

The post SabPaisa Partners with AccuKnox for Zero Trust AI-Powered Cloud Security to Secure Its Payments Platform appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Welcome to this week’s edition of the GBHackers cybersecurity newsletter — your weekly cybersecurity bulletin covering the 50 most important stories from July 27–August 1, 2026. The week’s throughline was AI on both sides of the fight: an autonomous agent escaped its sandbox and breached Hugging Face, a DeepSeek agent drove autonomous attacks, and Google […]

The post Weekly Cybersecurity Newsletter – Top 50 Biggest Cybersecurity Stories of the Week – Hugging Face, Iranian ICS Attacks, EY, Hyundai, AI Agent Breaches appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Firewall-asa-service moved from experiment to default: inspection, IPS, and policy delivered from the cloud, priced per user or per site instead of per appliance. The value answer up front: Cloudflare offers the most accessible entry economics, Cato Networks the best converged price-for-simplicity in the mid-market, and Prisma Access the deepest (and priciest) inspection stack — […]

The post The Best Firewall-as-a-Service (FWaaS) Providers, Compared and Priced (2026) appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cloud firewalls bill three ways — usage-metered native services, licensed virtual appliances, and managed platform subscriptions — and picking the wrong shape costs more than picking the wrong brand. The value verdict up front: AWS Network Firewall and Azure Firewall win usage-priced single-cloud economics, Fortinet delivers the best licensed price-performance across every cloud, and Palo […]

The post The Best Cloud Firewall Solutions, Compared and Priced (2026) appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

An autonomous AI agent powered by OpenAI models breached Hugging Face’s production infrastructure in July 2026 after escaping its evaluation sandbox via a zero-day vulnerability. Documented by HiddenLayer’s Research Team on July 31, the agent was undergoing an internal cyber capability evaluation on ExploitGym, a benchmark designed to test an AI’s ability to discover and […]

The post Autonomous AI Agent Exploits Zero-Day to Breach Hugging Face Infrastructure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Arch Linux has temporarily disabled package adoptions on the Arch User Repository (AUR) after detecting a wave of malicious activity targeting orphaned and unmaintained packages. The Arch Linux DevOps team confirmed the emergency measure on July 30, 2026, citing an active campaign involving unauthorized package takeovers followed by the injection of harmful commits. Robin Candau, […]

The post Arch Linux Suspends AUR Package Adoptions to Block Ongoing Malicious Commit Campaign appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The double-extortion ransomware group CRPx0 has listed Hyundai’s Turkish operations on its dark web leak site, claiming to have exfiltrated 1.5 GB of sensitive personnel and recruitment data from the automaker’s assessment systems. According to CyberWatch, first flagged on its data-leak portal, the target is described as a “Korean automotive manufacturer (Turkish operations)” with the […]

The post CRPx0 Ransomware Claims Hyundai Turkey Breach, Steals 1.5GB of Assessment Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

HackerOne has rolled out a significant policy change requiring all hackers to complete identity verification before submitting reports to Bug Bounty Programs (BBPs). The update, effective immediately, aims to strengthen platform integrity and meet regulatory compliance requirements for reward payments. Under the new policy, hackers must verify their identity before becoming eligible for any bounty […]

The post HackerOne Mandates ID Verification Before Bug Bounty Report Submissions appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly disclosed macOS malware campaign dubbed MacSync weaponizes fake Claude AI installation guides to deploy a six-stage stealer and remote access trojan. Documented by Huntress, the kit targets browser credentials, keychain secrets, and cryptocurrency wallets. The attack begins when victims search Google for “how to install Claude on a Mac” and click a sponsored […]

The post MacSync Stealer RAT Uses Fake Claude Guides to Steal Passwords and Crypto Wallets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A broken access control vulnerability in Keycloak could allow unauthorized administrator accounts to access users’ personal information. This issue, tracked as CVE-2026-17059, affects the Keycloak Admin REST API and was discovered by researcher Enzo Mongin from Escape Research, also known as Orionexe. The vulnerability was reported to the Keycloak team on July 18, 2026, acknowledged […]

The post Keycloak Flaw Exposes Users’ Personal Data to Restricted Admins appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Ransomware operators are increasingly deploying “ransomware killers” that surgically overwrite the memory of security processes instead of simply terminating them, allowing encryption to proceed. At the same time, endpoint tools appear to run normally but are effectively blind. This evolution marks a shift from crude process-killing to stealthy, in‑memory tampering that targets EDR/AV telemetry, kernel […]

The post Ransomware Killers Overwrite Security Process Memory Without Terminating Applications appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.