The phishing campaigns that weaponize legitimate remote monitoring and management software to establish persistent access and support credential theft on Windows systems. The campaign demonstrates a recurring operational trend: rather than exploit a vulnerability or deploy obvious custom malware, attackers are abusing trusted administrative platforms already designed to execute commands, transfer files, deploy applications, and […]

The post Hackers Abuse MSP360 and ScreenConnect RMM Tools for Persistent Access and Credential Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

RSA has launched RSA Agent ID, an identity security platform that discovers, secures, and governs AI agents and Model Context Protocol (MCP) servers in highly regulated environments. The company states that this offering addresses a growing “agentic identity” gap by applying workforce-style identity governance, authorization controls, and auditability to non-human AI actors. Announced at The […]

The post RSA Agent ID Secures AI Agents and MCP Servers With Identity-Based Access Controls appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors exploited a chained pair of PaperCut MF zero-day vulnerabilities to compromise an education-sector environment, steal a domain-privileged service account token, and reach a domain controller before attempting to extract the Active Directory database. The campaign abused CVE-2026-81578, an authentication-bypass vulnerability in PaperCut MF and NG’s web management interface, together with CVE-2026-82078, a critical […]

The post Attackers Use PaperCut RCE Chain to Steal Tokens and Access Domain Controller appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

OperTraitor, an open-source, LLM-powered engine that identifies Kubernetes operators whose RBAC (Role-Based Access Control) privileges exceed their documented operational requirements. Research indicates that over 5% of assessed operators requested excessive permissions, including cluster-wide access to secrets and potential pathways to cluster-admin-level control. Kubernetes operators automate application deployment, configuration, and lifecycle management through Custom Resource Definitions […]

The post OperTraitor Finds Kubernetes Operators With Cluster-Wide Secret Access and Admin Paths appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.