Mozilla has rotated a GPG signing subkey used to authenticate release artifacts for Firefox and Thunderbird after an unencrypted copy of the previous subkey was unintentionally committed to a private GitHub repository. The affected signing infrastructure includes selected release files, such as Linux tarballs, RPM packages, and checksum files. Mozilla’s investigation into available audit logs […]

The post Mozilla Rotates Firefox and Thunderbird GPG Signing Key After Private GitHub Exposure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers have disclosed “GhostJacking,” a new class of attacks that exploits trusted observability and security platforms to manipulate AI agents into making unauthorized infrastructure changes, executing attacker-controlled commands, and exposing cloud credentials. GhostJacking Attacks This research, presented at DEF CON 34, describes how malicious content embedded in logs, alerts, or issue reports can serve […]

The post GhostJacking Attacks Let Hackers Hijack AI Agents and Steal Cloud Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors used a private cellular access-point-name (APN) network to pivot from a compromised wind farm into the operational technology environment. A Polish combined heat and power plant, where they disrupted Siemens programmable logic controllers and briefly interrupted cogeneration operations. The December 29, 2025 intrusion affected a CHP facility serving approximately 50,000 residents, forcing a […]

The post Hackers Pivot Through Private APN to Sabotage Siemens PLCs at Polish Power Plant appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.