• Bank of Baroda has confirmed a cybersecurity incident involving the compromise of an employee’s email account, which allowed unauthorized access to certain data. This disclosure follows social media posts over the weekend, alleging that a significant cache of Bank of Baroda records had been exposed and was being offered on a dark web forum. While […]

    The post Bank of Baroda Confirms Data Breach After Employee Email Account Compromised appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Source code for the Flying Eagle Android remote access trojan (RAT) framework is circulating through criminal Telegram channels. Hunt.io and independent researcher NetAskari traced matching control panels and certificates to 170 internet servers. They linked the framework to a fake “公安一网通办” Public Security service application targeting Android users in China. The kit supports payment-password

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Multiple zero-day vulnerabilities in self-hosted Artifactory after OpenAI’s frontier models autonomously exploited them to escape a sandboxed research environment and reach Hugging Face’s production infrastructure. The incident marks one of the clearest real‑world previews of AI-driven, machine‑speed exploitation chaining across software supply chains. During an internal evaluation of “frontier cyber capabilities,” OpenAI ran advanced models […]

    The post JFrog Patches Artifactory Zero-Days After OpenAI Models Escape Sandbox appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • OpenAI on Tuesday revealed the rogue artificial intelligence (AI) agent that escaped its sealed evaluation environment and broke into Hugging Face’s production environment also hacked multiple third-party accounts and services as part of the attack. The latest disclosure shows that the security incident, which stemmed from an internal security test, was more extensive in scope than previously

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Attackers have been observed distributing a modular Remote Access Trojan (RAT) through the npm ecosystem by deliberately splitting malicious functionality across multiple seemingly benign packages, enabling the campaign to evade traditional code review and detection mechanisms for over three months. The activity was uncovered during analysis of a compromised npm package, lib-mtop, which contained a […]

    The post Attackers Split RAT Components Across npm Packages to Evade Isolated Code Reviews appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybercriminals are rapidly operationalizing adversarial prompt injection techniques to evade AI-powered security controls, signaling a shift toward targeting machine-driven defenses rather than end users directly. AI’s expanding role in detection, filtering, and automation has made it an attractive attack surface. While adversaries continue to rely heavily on human-centric techniques such as phishing, researchers from Proofpoint […]

    The post Cybercriminals Use Adversarial Prompt Injection to Evade AI-Powered Security Tools appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A new tech-sharing agreement allowing Ukrainians to make a British-designed radar jammer called Stone Cloak may soon help Ukraine accelerate drone strikes on Russian targets. 

    Ukraine has been using British-built versions of the digital jammer—about the size of a computer tablet—on long-range strike drones already this year. But the agreement allows the country to mass-produce it themselves so it can be more rapidly scaled across their drone forces.

    The British government announced the existence of Stone Cloak for the first time on Saturday as Ukrainian President Volodymyr Zelenskyy met with the new prime minister at a naval base in Portsmouth. The occasion is the annual Sea Breeze joint exercise. Ukrainian, U.S. and British sailors paid “special attention” to countering Russian air defenses during this year’s Sea Breeze according to Ukraine’s national news agency.

    “At this point, we don't know the full details of Stone Cloak, but suffice it to say, the system will likely increase mission effectiveness against some of the Russian air defenses,” Jeffrey Fischer, a retired U.S. Air Force officer, told Defense One via email. 

    Ukraine uses a variety of electronic warfare systems as part of its drone operations. But the ones provided by partners like the U.K. are often backed by larger research budgets. Operators and developers can also test them in a more controlled environment than the Ukrainian battlefield. But they can emulate the unique electronic warfare aspects of such places–so long as Ukrainian operators are allowed to participate, such as the Hedgehog 2025 exercise in Estonia in which the participating Ukrainian team exposed large gaps in NATO drone warfare concepts. That’s why new technology emerging from joint Ukrainian-allied exercises is a big deal. But the actual sharing of intellectual property related to that technology is more rare.

    British Prime Minister Andy Burnham on Monday described Stone Cloak as “the best of homegrown British innovation, and proven on the frontline” of Russia’s war on Ukraine. That frontline has moved back toward Moscow, thanks in small part to British-donated Storm Shadow missiles, which Ukraine has been using to hit targets in occupied territory going back to 2023. However, the United Kingdom never transferred the actual design technology to Ukraine, just the missiles themselves.

    The new announcement shows how quickly technology sharing between the two countries has evolved in just three years, as well as the speed of Ukrainian weapons development and manufacturing compared to some NATO counterparts. 

    The United Kingdom spent six years developing and deploying Storm Shadow. Manufacturing relied on specialized European supply chains. French and Italian partners were involved, which made a tech transfer bureaucratically difficult. And the missiles were expensive gifts, averaging $2 million apiece.

    These and other factors compelled the U.K. and Ukraine to enter into a joint agreement to develop a new long-range strike drone with streamlined and simplified requirements—a 2024 effort called Breakstop that British officials say will deliver missiles for frontline use later this year. That timeline—less than 24 months from concept to full deployment—is far faster than Storm Shadow and much less expensive. Meanwhile, Ukraine also announced its own long-range strike missile, the Flamingo, or FP-5, which is also capable of striking Russia but costs much less than the Storm Shadow.

     Fischer said that the contrast in innovation speeds helps explain how such intellectual-sharing partnerships help the United Kingdom as much as they do Ukraine. “One critical but often overlooked lesson from the Ukraine war is the extremely rapid adaptation cycle Ukraine is able to implement. In some cases, battlefield lessons are implemented in less than 10 days to new systems. In my seven combat deployments, NOTHING has ever come close to that.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • OpenAI has open-sourced Codex Security, a command-line interface and TypeScript SDK designed to help engineering and security teams identify, validate, and remediate vulnerabilities across code repositories. The project is published under the Apache-2.0 license. It supports various features, including repository-wide assessments, targeted path reviews, pull-request diff scanning, scan history, CI integration, and structured output for […]

    The post OpenAI Open-Sources Codex Security CLI to Find, Validate, and Fix Code Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Hugging Face has reported a sophisticated intrusion that occurred in July 2026. In this incident, an autonomous AI agent escaped from its evaluation sandbox, compromised third-party infrastructure, and later breached production systems by exploiting vulnerabilities in its dataset-processing pipeline. The details of this event were published on July 27, 2026, and highlight how advanced AI […]

    The post Autonomous AI Agent Escapes Sandbox and Breaches Hugging Face Production Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Beta release versions of two npm packages in the @joyfill namespace have been compromised to deliver a remote access trojan (RAT) associated with the DEV#POPPER malware family. The list of affected packages is as follows – @joyfill/layouts@0.1.2-2773.beta.0 @joyfill/components@4.0.0-rc24-2773-beta.4 The two packages “contain an import-time JavaScript implant that resolves encrypted code

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶