China-aligned advanced persistent threat group FamousSparrow has replaced its long-running SparrowDoor implant with a new modular C++ backdoor, SparroWocky, in a sustained cyberespionage campaign against government entities across Latin America. ESET says the malware has been active in the region since at least August 2025, following a sharp shift in the group’s victim targeting that […]

The post FamousSparrow Deploys New SparroWocky Backdoor Against Latin American Governments appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has urged organizations to deploy cyber decoys, which include fake credentials, systems, data, and services. This strategy aims to expose attackers sooner and enhance post-compromise detection. In new guidance titled “Using Cyber Decoys to Strengthen Detection and Response,” published on September 16, 2026, CISA outlined how defenders […]

The post CISA Urges Organizations to Deploy Cyber Decoys to Detect Hackers Inside Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A post-exploitation technique that lets attackers with root-level access to a Kubernetes node steal workload identities issued through SPIFFE/SPIRE and impersonate legitimate applications running on the same host. The technique undermines the node-trust assumption behind cloud-native machine identity systems, potentially enabling attackers to access services protected by mutual TLS and identity-based authorization. Palo Alto Networks […]

The post Kubernetes Attack Lets Hackers Steal SPIFFE Workload Identities and Impersonate Applications appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.