-
Microsoft addressed 1,413 security vulnerabilities in its October 2026 Patch Tuesday update, making it the company’s largest monthly…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Docker disclosed a critical vulnerability in Docker Hub that let attackers impersonate other users at the container registry level. This flaw, tracked as CVE-2026-105445 and dubbed GhostPat, exploited how Docker handled personal access tokens during account conversions. Depending on token permissions, it could enable unauthorized image downloads, malicious image uploads, and repository image deletions. Docker […]
The post Critical Docker Hub Vulnerability Lets Attackers Impersonate Users and Tamper With Container Images appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Meta removed more than 3.7 million Facebook and Instagram accounts, Pages, and Groups during an international crackdown on West African scam networks that resulted in 28 arrests and the rescue of 117 trafficking victims. Announced October 13, the operation combined platform enforcement, financial tracing, and physical raids against fraud infrastructure targeting victims worldwide. Meta and […]
The post Meta Removes 3.7 Million Scam Accounts as 28 Arrested in Global Crackdown appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A flaw in Linux’s vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host’s memory and hijack the program that runs the virtual machine. The bug is tracked as CVE-2026-74580 and named Vghost. Tencent Zhuque Lab, which found the
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A search for PuTTY can lead to more than a fake download. In a campaign reported on October 12, attackers used search-engine optimization (SEO) poisoning to steer users to a counterfeit PuTTY site and deliver a trojanized Windows installer. The campaign targets people searching Google for “PuTTY” or “PuTTY download.” A high-ranking result leads to […]
The post Hackers Target PuTTY Users With SEO Poisoning and Ethereum-Powered Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft has addressed a vulnerability in Windows Shell that attackers are actively exploiting, allowing them to bypass the Mark of the Web (MOTW) security protections. Designated CVE-2026-96951, the flaw was disclosed on October 13, 2026, during the company’s monthly security update. Microsoft classifies the vulnerability as Important, giving it a CVSS v3.1 base score of […]
The post Windows Shell Zero-Day Lets Attackers Bypass Mark of the Web Security Protections appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
TFG London has confirmed a cybersecurity incident affecting the IT systems that support its brands Hobbs, Whistles, and Phase Eight. Several of these systems remain unavailable. The parent company, The Foschini Group, disclosed the incident in a stock exchange announcement on October 13, 2026, after its UK business identified the security disruption on October 11. […]
The post TFG London Confirms Cyberattack Affecting Hobbs, Whistles, and Phase Eight appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over. The protected area is a VBS enclave, an isolated slice of memory the operating system uses to guard secrets, and the one they broke into handles passwords for a Windows anti-phishing feature. The work was done in a lab as a proof of
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The FBI and CrowdStrike have disrupted U.S. laptop farms supporting FAMOUS CHOLLIMA, a North Korean operation that places fraudulent remote IT workers inside American companies. The infrastructure enabled workers abroad to collect salaries, conceal their locations, and maintain access to corporate environments. Victims identified by CrowdStrike spanned aerospace, energy, financial services, healthcare, cybersecurity, defense engineering, […]
The post North Korean IT Worker Scheme Targets Dozens of Organizations Across Critical U.S. Sectors appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
An OpenAI engineer has been arrested for allegedly concealing an audio recording device in an executive conference room at the company’s San Francisco offices. According to a Justice Department announcement, Abdulrahman Alfozan, 35, a Saudi national, was taken into custody on October 9 and appeared in federal court on October 13, 2026. OpenAI Engineer Arrested […]
The post OpenAI Engineer Arrested for Allegedly Installing Secret Recording Device to Spy on Executive Meetings appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
