• In a groundbreaking analysis, cybersecurity firm KELA reveals striking parallels in operational style, target selection, and online presence that suggest a possible connection between two Yemen-linked threat actors: the recently surfaced Belsen Group and the long-standing ZeroSevenGroup. Who Is the Belsen Group? The Belsen Group made its debut in early January 2025 via a post […]

    The post Researchers Reveal Connection Between Belsen and ZeroSeven Cybercrime Groups appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cloudflare experienced a significant outage on September 12, 2025, affecting its Tenant Service API, multiple APIs, and the Cloudflare Dashboard. The company has confirmed that the incident was primarily triggered by a React programming bug that caused excessive API calls, overwhelming critical infrastructure components. Technical Root Cause Identified The outage originated from a coding error […]

    The post Cloudflare Confirms API Outage Caused by React useEffect Overload Issue appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft has announced a significant upgrade to Windows 11 Notepad, introducing powerful artificial intelligence features that will revolutionize how users create and edit text. The update brings AI-powered writing assistance directly to the classic text editor, offering capabilities previously available only in premium applications. Windows 11 Notepad now features AI-powered options like write, rewrite, and summarize accessible […]

    The post Windows 11 Notepad to Receive AI Upgrade for Free Text Writing and Summarizing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A sophisticated new attack tool targeting jailbroken iOS devices has emerged, representing a significant escalation in digital identity fraud capabilities. 

    The discovery by iProov’s threat intelligence team reveals a highly specialized tool designed to perform advanced video injection attacks on iOS 15 and later devices, specifically engineered to bypass weak biometric verification systems and exploit identity verification processes lacking proper biometric safeguards.

    This breakthrough represents a troubling shift toward more programmatic and scalable attack approaches, with the tool’s suspected Chinese origins adding geopolitical relevance amidst rising concerns about technical sovereignty and digital supply chain security. 

    The tool’s emergence underscores the critical need for robust biometric verification systems capable of detecting sophisticated deepfake and injection attacks.

    Biometric Verification with Jailbroken iPhones

    The newly discovered tool operates through a multi-stage process that leverages the compromised security architecture of jailbroken iOS devices. 

    The attack begins with a prerequisite jailbroken iOS 15 or later device, where native Apple security restrictions have been removed to allow deep system modifications. 

    Attackers establish a connection using a Remote Presentation Transfer Mechanism (RPTM) server, creating a bridge between their computer and the compromised iOS device.

    The core attack involves injecting sophisticated deepfakes directly into the device’s video stream, completely bypassing the physical camera hardware. 

    Deepfakes can take the form of face swaps, in which a victim’s face is placed on another video, or motion re-enactments, in which static visuals are animated using the actions of another person. 

    The injected synthetic media tricks applications into believing the fraudulent video represents a live, real-time feed, enabling potential impersonation of legitimate users or creation of synthetic identities.

    “The discovery of this iOS tool marks a significant breakthrough in identity fraud and confirms the trend of industrialized attacks. The tool’s suspected origin is especially concerning and proves that it is essential to use a liveness detection capability that can rapidly adapt”, researchers said.

    The emergence of video injection attacks renders traditional identity verification methods insufficient, necessitating comprehensive multi-layered defense approaches. 

    Organizations must implement verification systems that simultaneously confirm the right person through identity matching to official documents and databases, verify a real person using embedded imagery and metadata analysis to detect malicious media, and ensure real-time authentication through unique passive challenge-response interactions, preventing replay attacks.

    The tool’s discovery coincides with alarming trends documented in iProov’s 2025 Threat Intelligence report, including a 2,665% increase in native virtual camera attacks and a 300% rise in face swap deepfake attacks. 

    With security experts tracking over 120 different face swap tools, threat actors are rapidly adopting new technologies to bypass verification systems, making robust liveness detection capabilities essential for organizational security.

    This multi-layered approach increases the complexity for attackers seeking to spoof identity verification systems, as advanced attacks struggle to bypass all security measures while retaining the natural traits of actual human contact.

    Find this Story Interesting! Follow us on Google News, LinkedIn, and X to Get More Instant Updates.

    The post New iOS Video Injection Tool Bypasses Biometric Verification with Jailbroken iPhones appeared first on Cyber Security News.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • SystemBC, a resilient socks5 malware network first spotted in 2019, has dramatically evolved its proxy infrastructure by compromising an average of 1,500 virtual private servers (VPS) each day. This shift from residential devices to large-scale VPS nodes grants threat actors unprecedented bandwidth and longevity for malicious traffic, enabling sustained distributed denial-of-service (DDoS) and brute-force operations […]

    The post SystemBC Botnet Compromises 1,500 VPS Every Day to Rent Out for DDoS Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Security researchers have uncovered a sophisticated new malware loader called “CountLoader” that leverages weaponized PDF files to deliver ransomware payloads to victims across multiple regions, with particular focus on Ukrainian targets. CountLoader represents a significant escalation in malware delivery techniques, operating through three distinct versions: .NET, PowerShell, and JScript implementations. The malware loader has been […]

    The post New Loader “CountLoader” Uses PDFs to Launch Ransomware Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Researchers have discovered a critical zero-click vulnerability in ChatGPT’s Deep Research agent that allows attackers to silently steal sensitive Gmail data without any user interaction. This sophisticated attack leverages service-side exfiltration techniques, making it invisible to traditional security defenses and representing a significant escalation in AI agent security threats. The Silent Data Theft Mechanism As per a report, the […]

    The post 0-Click ChatGPT Agent Flaw Exposes Gmail Data to Attackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • SolarWinds Corporation has released an official security advisory in response to a significant data breach involving Salesforce systems. This resulted in unauthorized access to sensitive customer information through compromised OAuth tokens linked to the Salesloft Drift integration. Understanding the Breach Impact Illustration of a data breach concept featuring a glowing red lock symbol and digital […]

    The post SolarWinds Issues Advisory Following Salesloft Drift Security Breach appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Ten years ago, if you said artificial intelligence might surpass human-level intelligence by the year 2029, no one in Washington would have taken you seriously. A Wednesday hearing showed how dramatically that has changed.

    During the hearing, dubbed “Shaping Tomorrow: The Future of Artificial Intelligence,” the House Oversight Committee and its witnesses grappled with several trends: the rapid advance of AI, Beijing’s determination to dominate the field, and China’s increasingly threatening posture toward Taiwan.

    “Current trend lines suggest” that Ray Kurzweil—inventor, author, and current Google executive—”was dead on” when he predicted human-level AI by 2029, Samuel Hammond, chief economist at the Foundation for American Innovation, said at the hearing. 

    Kurzweil’s projection for the arrival of artificial general intelligence, or AGI, has been a staple of Silicon Valley cocktail parties for more than two decades, at least in the experience of this reporter, an impression shared by writers such as Max Chafkin and Jonathan Taplin. 

    The prediction is not universally endorsed by technologists; dissenters include Meta’s Yann LeCun and Google Brain founder Andrew Ng. But fans of AGI-by-2029 include Elon Musk and Google DeepMind creator Demis Hassabis—and increasingly, state-run Chinese media.

    Technologists have typically discussed it with a sort of gleeful fascination. But the hearing was anything but optimistic, especially when the subject focused on the AI race with China.

    If China’s government, which has already dedicated the country to ambitious AI goals, expects AGI within four years, the country’s increasing harassment of Taiwan takes on an even more menacing dimension.

    At the hearing, Hammond said a Chinese takeover of Taiwan would spark a “global depression,” because Beijing would choke off the flow of advanced computer chips from the island. That echoes warnings from former Biden Commerce Secretary Gina Raimondo, the conservative Heritage Foundation, and others. Chips made in Taiwan, particularly by world leader TSMC, are key to the world’s manufacturing and economic activity—and will only grow more so in an era dominated by advanced artificial intelligence.

    Hammond made the connection: “Over the last 40 years … we’ve shifted all our industries into services, entertainment, law, finance, all things that are about to be deflated by AI. So there’s a world where we build artificial general intelligence, but China is the one that puts it in factories and has the growth benefits.” 

    He suggested the U.S. redouble its efforts to improve its domestic chip manufacturing with a “CHIPS Act 2.0,” referring to the 2022 law that laid out $52 billion in incentives (including tax breaks) to encourage chip manufacturing in the United States.

    He also wants the U.S. government to work harder to keep advanced chips from China. Hammond pointed to the proposed GAIN Act, which would require chipmakers—those in the United States and those selling to the United States—to offer chips to U.S. companies before selling them to China. The language was dropped from the House version of the 2026 defense policy bill, but the Senate is considering adding it to theirs, which means its fate would turn on negotiations and the U.S. president. 

    Hammond called the act “the least we could do.”

    Unmentioned in the hearing were recent moves by the Trump administration to keep chips flowing to China. In July, the White House allowed chipmaker Nvidia to sell its advanced H20 chips, useful in AI work, to China. More recently, the administration has pushed to scuttle the GAIN Act. 

    Taken together, all of those indicators suggest a Chinese takeover of Taiwan would also yield China a near-permanent advantage in developing and deploying AI. A possible global depression is a price they might be willing to pay, if they emerge far stronger from it. 

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday released details of two sets of malware that were discovered in an unnamed organization’s network following the exploitation of security flaws in Ivanti Endpoint Manager Mobile (EPMM). “Each set contains loaders for malicious listeners that enable cyber threat actors to run arbitrary code on the compromised server,”

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶