A newly identified IoT botnet, Cling, disguises its command-and-control communications as legitimate STUN traffic, including packets that appear to originate from Google’s public STUN infrastructure. The technique enables attackers to manage compromised internet-facing devices while blending activity into routine NAT-traversal traffic used by real-time communications platforms. Nozomi Networks Labs discovered the campaign while investigating a […]

The post Cling Malware Masquerades as Google STUN Traffic to Control Compromised IoT Devices appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft Threat Intelligence has identified a ClickFix campaign in which compromised websites use fake CAPTCHA-style verification prompts to trick Windows users into executing malicious commands. The operation stages its payload inside the browser cache before the victim runs the command, helping attackers evade conventional download-based detection and work around Windows Run dialog character limits. The […]

The post Microsoft Warns ClickFix Attacks Use Fake CAPTCHA Lures to Execute Malicious Commands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

GitLab has issued emergency security updates for a critical vulnerability in its Self-Hosted AI Gateway that could allow authenticated attackers to execute arbitrary commands on vulnerable AI Gateway deployments. The flaw, tracked as CVE-2026-90970, carries a CVSS severity score of 9.9 out of 10. The company released GitLab AI Gateway versions 19.2.4, 19.3.2, and 19.4.1 […]

The post Critical GitLab AI Gateway Flaw Lets Attackers Execute Arbitrary Commands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

AWS has released security fixes for four vulnerabilities affecting its open-source Loom AI agent orchestration platform and Amazon SageMaker Unified Studio. The flaws could allow attackers to bypass authentication, steal OAuth2 tokens and temporary cloud credentials, access internal services, and execute arbitrary code in another user’s SageMaker environment. AWS disclosed the issues in security bulletins […]

The post AWS AI Agent Vulnerabilities Let Attackers Bypass Authentication and Steal Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Citrix NetScaler administrators report repeated appliance crashes and forced reboots after deploying emergency updates for recently disclosed zero-day vulnerabilities, with the disruption now linked to a newly observed issue affecting SAML authentication deployments. The reports involve internet-facing NetScaler ADC and Gateway systems running patched releases, including version 14.1-73.37, which Citrix previously designated as a fixed […]

The post Citrix NetScaler Appliances Reboot Repeatedly After 0-Day Security Update appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly released PlayStation 5 jailbreak chain, called Relapse, targets PS5 and PS5 Pro consoles running firmware versions 7.00 through 13.60. This jailbreak combines a browser-based JavaScriptCore memory corruption technique with a kernel use-after-free race condition. The project’s source code and documentation outline a two-stage chain that ultimately provides kernel read/write access, allowing affected systems […]

The post Sony PS5 Relapse Jailbreak Exploit Uses JSC Memory Corruption and Kernel UAF appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.