• Microsoft will turn off SMS as a primary sign-in method for Microsoft Entra ID workforce tenants on February 1, 2027, accelerating its transition to phishing-resistant authentication. This change affects workers who currently use a registered phone number and a one-time SMS code as their initial sign-in credential, a passwordless flow utilized by frontline organizations. Microsoft […]

    The post Microsoft to Disable SMS as Primary Entra ID Sign-In Method in 2027 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A new flaw in WordPress core let an anonymous visitor leave a comment that planted a hidden script on the page. If a logged-in administrator later opened that page, the script could run code on the site’s server. WordPress fixed the flaw, tracked as CVE-2026-93485 and dubbed “Comment2Shell,” on September 17 in version 7.1.1 and told site owners to update right away. There is

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Vidar information stealer has introduced a lightweight custom virtual machine and per-build stream-cipher variations to conceal its embedded strings, raising the cost of static detection and automated reverse engineering. First observed in 2018, Vidar remains a widely tracked credential-stealing malware family. Its operators continually alter internal protections without necessarily changing the malware’s broader operational purpose: […]

    The post Vidar Uses Custom Bytecode Interpreter and ARX Stream Ciphers for Per-Build String Obfuscation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched security flaw impacting Zyxel GS1900 series switches to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-7273 (CVSS score: 8.8), is a stack-based buffer overflow vulnerability that could result in arbitrary operating

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • AWS can automatically quarantine exposed Identity and Access Management (IAM) access keys that appear in public GitHub repositories. This process involves applying a restrictive managed policy within seconds to reduce the risk of cloud abuse. Researchers from Palo Alto Networks’ Unit 42 documented this response mechanism, showing that AWS employs the AWSCompromisedKeyQuarantine managed policy to […]

    The post AWS Detects and Quarantines Exposed IAM Credentials in Public GitHub Repositories appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A single stolen Active Directory database can turn a limited Windows intrusion into a domain-wide credential compromise. Threat actors that obtain the NTDS.dIT file from a domain controller, along with its corresponding SYSTEM registry hive, can extract password hashes, Kerberos keys, and password-history data for domain identities offline. While attackers may rotate payloads, loaders, command-and-control […]

    The post One Stolen Active Directory File Can Expose Credentials for an Entire Windows Domain appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Ireland’s Data Protection Commission (DPC) has imposed a €403 million administrative fine on Google Ireland Limited for breaching the EU General Data Protection Regulation (GDPR) by processing users’ location data. This decision follows an inquiry initiated in February 2020 after complaints from European consumer rights organizations, including BEUC. The investigation examined Google’s practices from May […]

    The post Google Fined €403 Million for GDPR Violations Over Location Data Processing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A recent proof-of-concept (PoC) developed by security researcher Patrick Wardle reveals a local zero-day vulnerability in the Muse application. This vulnerability allows malware running under the logged-in user’s account to redirect dictation traffic to a server controlled by an attacker. Meta’s Muse AI 0-Day The issue is documented in Wardle’s “not-a-mused” research repository. It focuses […]

    The post Meta’s Muse AI 0-Day Lets Hackers Hijack Dictation Traffic and Inject Malicious Prompts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • President Donald Trump said over the weekend that he plans to create an "AI Force" and appoint a czar to boost artificial-intelligence companies.

    "We will not in any way hinder or stifle the Growth of this incredible Industry. Rather, we will cherish it, help it, and watch over it, as it grows! However, we will also be looking for BAD, and we can do that, very easily, with our already existing Criminal and Civil Justice System. For this purpose, I am forming the AI Force, much like I did Space Force, which has been a tremendous SUCCESS, in my First Term. To that end, I will be announcing, in the near future, the AI 'Czar' — Only High I.Q. individuals need apply!" Trump wrote in a Truth Social post on Saturday morning. 

    Trump blamed “Radical Left Dumocrats” for widespread concerns about data centers and the potential dangers of unchecked AI development. 

    The president’s announcement comes after weeks of high-profile warnings from leading tech executives about the potential harms that advanced AI models could cause unless officials step in to regulate the industry. Congressional lawmakers and state leaders have also floated proposals to institute so-called ‘kill switches’ to disable AI systems that go rogue. But Trump and others have pushed back on calls for across-the-board development slowdowns. 

    David Sacks, who served as the Trump administration's AI and crypto czar until March, shared Trump’s post on X and agreed that a pause on AI development “would not make America safer” and “would hand the frontier to China.”

    Trump’s newest proposal is light on details about what role the AI Force would have in overseeing advanced models, or what additional responsibilities it would be handed. The White House did not respond to a request for comment about the role of the AI Force or its primary mission.

    Michael Kratsios, who heads the White House Office of Science and Technology Policy, appeared on Fox News Sunday and said that Trump’s post describes “how important it is that we as an administration coordinate in order to make sure that this great technological innovation that’s transforming the country, that’s driving economic growth, continues to do so.”

    He added that “these implications of AI spread across so many different agencies, so being able to have someone at the White House to be able to work on all those issues across the agencies is really critical.”

    But stakeholders in the space have expressed confusion surrounding what, exactly, the AI Force would do. 

    “Poll after poll shows the American public is alarmed by recent warnings from AI developers and whistleblowers as well as the rogue AI incidents that took place this summer,” said a spokesperson for AI safety advocacy group Americans for Responsible Innovation. ”There’s pressure on the President to do something, and that’s what this announcement could be designed to address.”

    Earlier this month, the Institute for Security and Technology released a survey of current and former national security officials, one-third of whom believe that an AI model will operate outside human control within the next decade.

    Philip Reiner, the think tank’s CEO and co-founder, said Trump’s description of the AI Force being like Space Force was “the shape of an answer, but without the substance.”

    The service branch, which was established during Trump’s first term and aims to maintain and protect U.S. interests in space, was created through action by Congress, which directed its creation as part of the 2020 National Defense Authorization Act.

    “Space Force works because Congress can give it a doctrine, a budget, a personnel system, but there's no equivalent for AI,” Reiner said. “It's a capability that cuts across every domain.”

    He said that the AI Force might be akin to Space Force in terms of Pentagon oversight, saying that “this is more of an actual [Defense Department] lane, is the sense that you get.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Paybis offers crypto on-ramp and off-ramp services with cards, bank transfers and wallets. Learn about its fees, verification, security and regional availability.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶