Search: “hijacking”

9 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1250 Vulnerability 921 Ransomware 571 Threat actor 413 Exploit / PoC 411 Data breach 360 Phishing & fraud 354 Policy & legal 169 Industry 86 AI safety & security 56 Research 35 Advisory 22 AI tools & infra 5 AI industry 4

SeverityAll critical 1452 high 1509 medium 1287 low 369 info 47

Weekly Cybersecurity Newsletter – Top 50 Biggest Cybersecurity Stories of the Week

GBHackers weekly digest rounds up 50 stories including Microsoft's 973-CVE patch drop, exploited Cisco FMC flaws, and Claude agent attacks.

GBHackers' September 7-12, 2026 newsletter summarizes the 50 biggest cybersecurity stories of the week. Highlights include Microsoft patching a record 973 CVEs with two exploited zero-days, active exploitation of Cisco FMC, Check Point VPN and Ivanti flaws, China-linked crews chaining Chrome and Windows zero-days, AI agents mass-exploiting PaperCut to compromise 440 servers, and the emergence of Panzer cross-platform ransomware. It also covers Anthropic and OpenAI agentic AI incidents and CrowdStrike's SafeMind launch.

GBHackersSep 15, 11:44 UTC · 1d agoIndustry in the wild

ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories

A weekly bulletin aggregating short security updates, including the City-Forum data-theft campaign, a ShipMonk breach, a Cursor CLI flaw, and GhostJacking AI attacks.

The Hacker News ThreatsDay Bulletin bundles roughly 20 short updates across cloud services, AI tools, malware, breaches, and scams. Highlights include the City-Forum campaign pulling data from unauthenticated guest access in Salesforce Experience Cloud and ServiceNow Service Portals since March 2025, and a ShipMonk breach exposing Trezor customer order data for orders in seven countries between May 10 and August 8, 2026. Other items cover a patched Cursor CLI flaw that let cloned repositories run commands before the workspace-trust prompt, Okta's analysis of the Work Panel vishing console used by actors like UNC6671, and GhostJacking AI agent hijacking via a patched Claude Desktop sandbox escape. Meta also launched an on-device WhatsApp Scam Alert machine learning model that keeps message content on the device.

The Hacker NewsAug 18, 16:30 UTC · 29d agoIndustry1

Security Affairs newsletter Round 594 by Pierluigi Paganini – INTERNATIONAL EDITION

Weekly Security Affairs newsletter aggregates top stories including Cisco FMC exploitation, Qilin ransomware, Chrome zero-days, and Berlin leak.

Pierluigi Paganini's Security Affairs newsletter Round 594 (International Edition) rounds up the week's security headlines. Topics include attackers exploiting a critical Cisco FMC flaw to deploy Qilin ransomware, SonicWall mass exploitation linked to a UK council attack, multiple CISA KEV additions, Chrome zero-days used by four nation-state actors, a $320 million Liquid Network theft, and a Berlin ransomware data leak. It also covers AI security items such as agent sandbox failures and distillation campaigns by Chinese AI firms.

Security AffairsSep 13, 14:23 UTC · 3d agoIndustry in the wildCVE-2026-42016 CVE-2026-42018 CVE-2026-82329+1 CVEs1

The 12 Best Antivirus Software for Mac, Compared and Priced

GBHackers ranks 12 Mac antivirus products, naming Bitdefender best overall and noting Gen Digital owns Norton, Avast, and Avira.

GBHackers scored twelve Mac antivirus products, ranking Bitdefender first at 8.8/10, followed by Intego, Malwarebytes, and ESET. The piece highlights that Gen Digital owns Norton, Avast, and Avira following the NortonLifeLock-Avast merger, so three of the twelve options share one corporate owner. It advises comparing year-two renewal prices rather than discounted first-year pricing and notes macOS already ships XProtect, Gatekeeper, and automatic malware removal. The 2026 Mac threat model described is infostealers harvesting passwords, cookies, and wallets via cracked software, fake installers, and malicious search ads.

GBHackersSep 9, 07:39 UTC · 8d agoIndustry 2 sources

Cyberthreats are moving faster than SMBs: Readiness must accelerate

ESET's SMB Cyber Readiness Index 2026 finds 73% of SMBs adopting AI while 40% lack AI policy, and reports 3,000+ malicious AI agent skills.

ESET argues AI is accelerating cyberthreats while expanding the attack surface: its SMB Cyber Readiness Index 2026 found 73% of SMBs integrating AI and 40% of businesses lacking a proper AI policy. ESET analyzed 900,000 AI agent skills across popular repositories between March and May 2026, finding over 25,000 suspicious and more than 3,000 malicious skills that exfiltrate data, execute malware, or abuse prompt injection. The piece also cites AI-assisted reconnaissance, exploit development, and social engineering, plus PromptSpy, an Android spyware abusing Google Gemini at runtime for persistence.

ESET WeLiveSecuritySep 16, 09:00 UTC · 1d agoIndustry

SpyCloud 2026 Identity Threat Report Finds Non-Human Identities Are Now the Leading Path into the Enterprise

SpyCloud's 2026 survey of 750 security leaders finds compromised non-human identities are the top enterprise entry point, yet only 36% monitor them.

SpyCloud's Identity Threat Report, based on a survey of 750 cybersecurity leaders at organizations with 500+ employees, found compromised non-human identities (31%) were nearly twice as likely as phishing (17%) to be the primary attacker entry point. 68% of organizations reported identity-based events averaging eight each, while 95% believe they have visibility into AI and NHI exposures but only 36% actually monitor them. The report also found 91% use AI tools with internal access but only 56% have formal governance, and introduces an Identity Threat Protection Maturity Model.

CSO OnlineSep 9, 12:00 UTC · 7d agoIndustry

The 12 Best Antivirus (Endpoint Protection) Software for Business, Compared and Priced

GBHackers compares 12 business antivirus products on detection, EDR depth, pricing, and platform coverage, ranking CrowdStrike and Bitdefender joint top at 8.8.

The roundup scores 12 enterprise endpoint protection vendors across detection, EDR depth, management, pricing transparency, and platform coverage. CrowdStrike and Bitdefender tie at 8.8, with Microsoft Defender for Endpoint scoring 8.5 and noted as effectively free for Microsoft 365 E5 licensees. The piece also flags that Kaspersky cannot legally be sold in the US and that Panda and Webroot now sit under WatchGuard and OpenText respectively.

GBHackersSep 8, 10:24 UTC · 8d agoIndustry 2 sources1

Security Affairs newsletter Round 590 by Pierluigi Paganini

Weekly Security Affairs newsletter roundup aggregating top cybercrime, malware, APT and AI security stories including ExfilSquad, Kimwolf v7 and Kimsuky AI use.

This is the Round 590 weekly newsletter from Security Affairs, linking to the week's major stories rather than reporting a single incident. Headlines include ExfilSquad extortion, a 7.3M chess.com record leak, Kimwolf botnet v7, SharePoint exploitation after a public PoC, Kimsuky integrating AI, and China-linked autonomous-style attacks. It is a digest and promotional item with no standalone technical details.

Security AffairsAug 16, 08:31 UTC · Aug 16, 2026Industry

Week in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-day

Weekly digest: exploited Metabase zero-day breached Framework; Salesforce/ServiceNow portals read for 17 months; Microsoft patched 400+ flaws.

Help Net Security's week in review aggregates top stories: a 'City-Forum' campaign tracked by Reco has been pulling records from Salesforce and ServiceNow portals worldwide for 17 months, and Framework suffered a breach via an exploited Metabase zero-day exposing customer contact and IP data. It also covers Microsoft's August 2026 Patch Tuesday fixing 400+ flaws including exploited zero-day CVE-2026-68820, Cisco's fix for exploited firewall DoS bug CVE-2026-20349 (added to CISA KEV), and a second N-able N-central hotfix for actively exploited CVE-2026-18577. Other items include GitHub expanding Dependabot malware alerts to eight package ecosystems and EU AI Act enforcement beginning on 2 August 2026.

Help Net SecurityAug 16, 00:00 UTC · Aug 16, 2026Industry in the wildCVE-2026-18577 CVE-2026-68820 CVE-2026-203491