A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices

Thanks to a lucky break, flawed code in a tainted Claude extension prevented the attacker from fully worming their way into some 5,000 developer machines.

North Korean Hackers Steal $6.36 Billion From Binance in Largest Crypto Hack Ever

North Korea’s TraderTraitor group drained about $6.36 billion from Binance wallets across ten blockchains on October 29, 2026. TRM Labs, which published the findings, calls it the largest crypto theft on record. TRM Labs says the total is about four times the $1.5 billion Bybit heist of February 2025. North Korean hackers Binance theft According […] The post North Korean Hackers Steal $6.36 Billion From Binance in Largest Crypto Hack Ever appeared first on GBHackers Security | #1 Globally Truste

Japan Faces Growing Cyberattack Crisis as AI Tools Help Hackers Target Businesses and Government

Japan is dealing with an intense wave of AI-assisted intrusions that has exposed weaknesses in its corporate and public-sector defenses. Dozens of incidents, from brokerages to delivery firms, have made data leaks routine. Japan AI cyberattacks According to reporting published by Bloomberg, on October 28, Japan’s Ministry of Economy, Trade and Industry (METI) disclosed unauthorized […] The post Japan Faces Growing Cyberattack Crisis as AI Tools Help Hackers Target Businesses and Government appea

Hackers Target Asian Governments With New NetamLoader Malware Hidden in Windows Update Files

Kaspersky researchers have uncovered NetamLoader, a .NET loading framework built on XAML markup. It appears to be a supply-chain attack on a customized Windows build used only by Asian government bodies. No known APT group has been linked to it. NetamLoader malware Kaspersky Security Network flagged a .config file that used AppDomainManager injection to load […] The post Hackers Target Asian Governments With New NetamLoader Malware Hidden in Windows Update Files appeared first on GBHackers Secur

What AI Cybercrime Exercises Reveal About Collective Defense

Fortinet’s Derek Manky shares lessons from three CLTC tabletop exercises on AI-enabled cybercrime and what they reveal about decision-making in collective defense and previews the next step in the collaboration.

Hackers Use Cursor and Claude AI to Automate Attacks in Aur0ra Ransomware Operations

The GOLD OGRE cybercrime group is using AI coding agents, including Cursor and Anthropic’s Claude, to automate intrusions for Aur0ra ransomware (Aurora). Sophos researchers say the agents moved from credential access to domain administrator with little human involvement. Aur0ra ransomware AI attacks In May 2026, Sophos Counter Threat Unit (CTU) researchers reported an AI-assisted post-exploitation […] The post Hackers Use Cursor and Claude AI to Automate Attacks in Aur0ra Ransomware Operations a

Assad regime hacker who caused $136 billion market drop sentenced to 42 months

A Syrian man who used a hijacked news agency Twitter account to post a fake report of explosions at the White House has been sentenced to 42 months in prison, the US Department of Justice has announced. Ahmad Umar Agha, also known as “Th3Pr0”, was sentenced on Thursday by a federal court in the Eastern District of Virginia for his central role in a hacking conspiracy organized and led by members of former Syrian President … More → The post Assad regime hacker who caused $136 billion market drop

CISA Confirms Active Exploitation of GitLab Vulnerability CVE-2026-97229

The Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that CVE-2026-97229, a critical vulnerability affecting both GitLab Community Edition and Enterprise Edition, is actively being exploited. On October 29, 2026, CISA added this flaw to its Known Exploited Vulnerabilities catalog, increasing the urgency for organizations running affected servers to take action. This vulnerability allows unauthenticated […] The post CISA Confirms Active Exploitation of GitLab Vulnerability CV

Microsoft Releases Emergency Fix for Windows 11 Remote Desktop Connection Failures

Microsoft has resolved an issue in Windows 11 that prevented non-administrator users from connecting to devices with Administrator protection enabled. This fix was included in KB5127936, released on October 28, 2026, and is part of subsequent updates. While this issue is urgent for affected organizations, Microsoft has categorized the release as a preview update rather […] The post Microsoft Releases Emergency Fix for Windows 11 Remote Desktop Connection Failures appeared first on GBHackers Secu

Hackers Exploit Ivanti Connect Secure Zero-Day Vulnerabilities to Gain Root Access and Steal Credentials

Hackers exploited a chain of zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances, allowing them to execute commands with root access, steal credentials, and probe internal networks. Volexity has identified the unknown attacker as UTA0576 and traced the exploitation back to October 3, 2026, targeting an appliance that was fully patched at the time. […] The post Hackers Exploit Ivanti Connect Secure Zero-Day Vulnerabilities to Gain Root Access and Steal Credentials appeared firs

Fake Polymarket Scam Network Claims Nearly $11 Million in Cryptocurrency Deposits

Russian-language “traffer” teams are selling ready-made fake prediction-market platforms to affiliates. One of them, AtlasCore, claims about $10.97 million in victim deposits. Recorded Future’s Insikt Group tracked the campaigns, which impersonate sites like Polymarket and Kalshi. The deposit figures come from the threat actors themselves and are unverified. Fake Polymarket scam Since spring 2026, AtlasCore, […] The post Fake Polymarket Scam Network Claims Nearly $11 Million in Cryptocurrency De

Claude Code extension poisoned with persistent SSH backdoor

A tampered build of Anthropic’s Claude Code extension for VS Code-compatible editors planted an SSH backdoor on developers’ machines, researchers at macOS security firm Phorion have found. The malicious package, version 2.1.313, was published on Open VSX, an open-source marketplace for VS Code extensions run by the Eclipse Foundation. VS Code’s default extension store is Microsoft’s Visual Studio Marketplace, which never carried the compromised extension. Its terms of use limit it to Microsoft’s

New Kairos DDoS Botnet Hijacks Linux Devices to Overwhelm Servers With Thousands of TCP Connections

Nozomi Networks Labs has documented Kairos, a previously undocumented Go-based DDoS bot for Linux. It turns compromised Linux devices into attack nodes that exhaust a victim’s connection capacity with thousands of idle TCP sessions. Kairos DDoS botnet Honeypot telemetry captured three Kairos builds. They differ only in the hard-coded C2 address and the Go compiler […] The post New Kairos DDoS Botnet Hijacks Linux Devices to Overwhelm Servers With Thousands of TCP Connections appeared first on GB

New AI-Powered NIK C2 Malware Uses OpenAI API to Help Hackers Steal Data and Control Windows PCs

Cisco Talos has uncovered NIK C2, a Go-based, 64-bit Windows remote access tool that embeds a working OpenAI client. Operators can send prompts through an infected machine and read the model’s replies in their C2 panel. NIK C2 malware According to technical research published by Cisco Talos, the implant talks to its server over TLS-secured […] The post New AI-Powered NIK C2 Malware Uses OpenAI API to Help Hackers Steal Data and Control Windows PCs appeared first on GBHackers Security | #1 Global

Open-weight AI model GLM-5.3 cheated its way to correct answers

Irregular evaluated Zhipu AI’s open-weight model GLM-5.3 across 13 offensive cyber scenarios using CyScenarioBench, the company’s framework for measuring an LLM’s ability to plan and execute multistage attacks under realistic constraints. The model refused none of the tasks and completed three scenarios at least once each, carrying attacks through dependent stages to reach objectives in simulated networks. Irregular said this was the strongest result it had recorded for an open-weight model. Off

Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record

About $6.3 billion in cryptocurrency was stolen from Binance in what might be the biggest crypto hack in history. “Binance’s initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions,” the exchange said in a security update published early on October 30. The company found no evidence of a wallet private key leak and plans … More → The

12 Digital Forensics & Incident Response (DFIR) Companies: The 2026 Buyer’s Verdict Guide

You retain a DFIR firm for the breach you’ll actually have nation-state intrusions want attribution benches, ransomware wants negotiation-density operators, insurance-routed incidents want panel firms and 2026’s roster carries one acquisition flag buyers must know: Coveware now operates under Veeam. This verdict guide matches twelve companies to breach lanes, with telemetry advantages, panel realities, and […] The post 12 Digital Forensics & Incident Response (DFIR) Companies: The 2026 Buyer’s V

12 Managed SIEM Services: The 2026 Buyer’s Verdict Guide

Managed SIEM’s quiet failure is dependency: two years in, the detections and parsers live in the provider’s head, and leaving means starting over. This verdict guide judges twelve services on content ownership, tuning evidence, and delivery dialect vendor-run platforms, co-managed operations in your tenant, Microsoft-practice specialists, and the SMB-to-enterprise spectrum with merger-era notes where platforms […] The post 12 Managed SIEM Services: The 2026 Buyer’s Verdict Guide appeared first o

11 SOC-as-a-Service Providers: The 2026 Buyer’s Verdict Guide

SOCaaS is bought on the 3 a.m. question what may the provider do without waking you, and how fast does a human touch your alert? This verdict guide judges eleven providers (our sheet’s twelfth, Blackpoint Cyber, is excluded under this publication’s standing editorial policy) across the operating dialects that actually differ: concierge squads, transparent co-management, […] The post 11 SOC-as-a-Service Providers: The 2026 Buyer’s Verdict Guide appeared first on GBHackers Security | #1 Globally T

12 Managed Security Service Providers (MSSP): The 2026 Buyer’s Verdict Guide

Choosing an MSSP is choosing a relationship model pure-play SOC specialists, telecom-scale operators, consulting houses attaching run to transform, and the outsourcing giants folding security into contracts you already hold and 2026 adds ownership homework (Secureworks now answers to Sophos). This verdict guide judges twelve providers on delivery truth, contract shape, and the governance disciplines […] The post 12 Managed Security Service Providers (MSSP): The 2026 Buyer’s Verdict Guide appeare