A trio of coordinated campaigns a JetBrains fake AI assistant campaign, the GlassWorm self‑propagating worm, and the compromised Nx Console Visual Studio Code extension made clear that IDE plugin ecosystems are now a primary attack surface for AI credential theft. Attackers have shifted from opportunistic phishing to targeted supply‑chain techniques that exploit the broad privileges […]

The post GlassWorm Uses Blockchain-Based C2 and Invisible Unicode to Steal Developer Secrets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Texas Cyber Command has disclosed a massive third-party data breach affecting the Texas Parks and Wildlife Department (TPWD), exposing the personal records of exactly 3,087,721 individuals. An unauthorized actor breached this vendor’s network infrastructure, resulting in a severe supply chain security incident. The specific identity of the third-party service provider currently remains undisclosed pending further […]

The post Texas TPWD Vendor Breach Exposes 3 Million Customer Records appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated evasion technique developed by Vidar infostealer operators successfully bypasses Google Chrome’s Application-Bound Encryption (ABE). Introduced in 2024, ABE was designed to protect browser-stored cookies and sensitive credentials. According to recent findings by Gen Threat Labs, the latest iterations of Vidar are now dropping weekly updates that utilize a complex chain of process forking, […]

The post Vidar Infostealer Bypasses Google Chrome’s ABE Encryption via APC Injection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

An analysis of the Gentlemen ransomware-as-a-service (RaaS) operation has revealed a sophisticated, centralized approach to neutralizing endpoint detection and response (EDR) solutions. This unified defense evasion framework sets the group apart in an increasingly crowded ransomware landscape, significantly lowering the technical barrier for affiliates and driving the gang into the top five most active operations […]

The post Gentlemen RaaS Unifies HexKiller, ThrottleBlood, and HavocKiller in New Evasion Suite appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical exploit chain dubbed AutoJack that allows a single malicious web page to hijack Microsoft’s AutoGen Studio browsing agent and silently execute arbitrary code on the host machine, requiring no user interaction beyond submitting a URL. AutoJack targets AutoGen Studio, Microsoft Research’s open-source prototyping UI for multi-agent AI systems. The technique weaponizes the agent’s built-in web-browsing capabilities […]

The post AutoJack Exploit Chain Hits Microsoft AutoGen Studio With Zero-Click RCE Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.