Aggregator

Sophos report warns that the rapid adoption of AI by businesses is leaving them vulnerable to a new source of cyber threats

Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised GitHub repositories into distributed attack infrastructure designed to target cPanel and WebHost Manager (WHM) instances. The activity involves malicious Packagist development versions spanning 10 packages associated with a legitimate PHP and DevOps developer, dinushchathurya, between July 12 and 13,

Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised Git

A car alarm vendor’s coding mistake has left millions of vehicles vulnerable to theft and loc

HermeticReader is the name given to a recently disclosed vulnerability in the Adobe Acrobat P

A critical heap buffer overflow vulnerability in FreeRDP’s Windows client could allow a malicious Remote Desktop Protocol (RDP) server to corrupt memory and potentially execute arbitrary code on a connecting client. This flaw specifically affects the Clipboard Redirection (CLIPRDR) virtual channel in wfreerdp, where an attacker-controlled response can exceed the size that the client originally […]

The post Critical FreeRDP Clipboard Flaw Could Let Malicious RDP Servers Execute Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

昨天下午，中国科研团队发布一款新型脑电信号采集装置，在全球范围内首次实现跨地域上千人同步脑电信号采集，使得神经大模型训练与脑机接口通用技术研发迈出关键一步。研发团队介绍，实现千人级跨地域同步采集，核心

Core issues that slowed down adoption of secure data vaults are being resolved by technology, but artificial intelligence poses new ones. Experts have some answers.

Hackers are abusing compromised GitHub repositories and GitHub Actions workflows to build a de facto global botnet that scans and exploits web hosting servers, with a primary focus on cPanel and WHM deployments. The campaign first surfaced when malicious development versions were discovered across ten Packagist PHP packages tied to a legitimate PHP and DevOps […]

The post Hackers Turn GitHub Actions Into a Global Botnet for Attacking Web Hosting Servers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A high-severity directory traversal vulnerability has been discovered in the Exim mail transfer agent. This flaw allows local attackers to access files outside the intended mail spool directory and potentially escalate their privileges. It is tracked as EXIM-Security-2026-06-22.1 and assigned GCVE-25-2026-07-45-1. The vulnerability affects Exim versions 4.88 through 4.99.4 and was announced on July 22, […]

The post Exim Vulnerability Lets Attackers Access Files Outside the Mail Spool appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability described as critical has been identified in Google Chrome. Impacted is an unknown function of the component SurfaceCapture. Such manipulation leads to use after free. This vulnerability is traded as CVE-2026-9961. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability classified as critical has been found in Google Chrome. The affected element is an unknown function of the component WebRTC. Performing a manipulation results in use after free. This vulnerability is known as CVE-2026-9962. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Google Chrome on iOS. The impacted element is an unknown function. Executing a manipulation can lead to use of uninitialized variable. This vulnerability is handled as CVE-2026-9963. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in Google Chrome on Windows. This affects an unknown function of the component XML. The manipulation leads to external control of assumed-immutable web parameter. This vulnerability is uniquely identified as CVE-2026-9966. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Google Chrome. This impacts an unknown function of the component ANGLE. The manipulation results in out-of-bounds write. This vulnerability was named CVE-2026-9965. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.

A vulnerability has been found in Google Chrome and classified as critical. Affected is an unknown function of the component GPU. This manipulation causes out-of-bounds write. The identification of this vulnerability is CVE-2026-9967. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability was found in Google Chrome and classified as critical. Affected by this vulnerability is an unknown functionality of the component V8. Such manipulation leads to external control of assumed-immutable web parameter. This vulnerability is referenced as CVE-2026-9968. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability was found in Google Chrome. It has been classified as critical. Affected by this issue is some unknown functionality of the component ANGLE. Performing a manipulation results in improper input validation. This vulnerability is identified as CVE-2026-9969. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Google Chrome. It has been declared as critical. This affects an unknown part of the component WebGL. Executing a manipulation can lead to use after free. This vulnerability is tracked as CVE-2026-9970. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability was found in Google Chrome on macOS. It has been rated as critical. This vulnerability affects unknown code of the component Gamepad. The manipulation leads to use of uninitialized variable. This vulnerability is listed as CVE-2026-9972. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.