GBHackers

ID: 57db9278-026e-5389-b875-0a7aa44bc51f

STIX ID: identity--57db9278-026e-5389-b875-0a7aa44bc51f

Feed Type: rss

Earliest post: 2024-01-02

Latest post: 2026-07-13

Cybersecurity tutorials, hacking techniques, threat research, and practical defensive guidance — all aimed at helping security professionals stay sharp and informed.

Exclude posts that do not describe a security incident

Classification

Min Pub Date

01/01/2020

Max Pub Date

07/14/2026

Title	Date Published ↓	Describes Incident	Author	Visible
Jscrambler npm Supply Chain Attack Steals Cloud Credentials and Crypto Wallet Secrets	2026-07-13	True	Divya	True
Exposed Server Unmasks Evilginx Operators Stealing Microsoft 365 Sessions and OAuth Tokens	2026-07-13	True	Mayura Kathir	True
Operation Capsule Vault Uses Malicious ISO Files and Process Injection to Deliver RokRAT	2026-07-13	True	Mayura Kathir	True
New GhostCommit Technique Hides Exploits in Images to Evade AI Code Reviewers	2026-07-13	True	Divya	True
Windows Device ID Helped Authorities Track Scattered Spider Hacking Group Member	2026-07-07	True	Divya	True
Critical BeyondTrust Authentication Flaws Expose Remote Support Appliances to Attacks	2026-07-07	True	Divya	True
Google Gemini Live API Flaw Allows RCE via Unconstrained Ephemeral Tokens	2026-07-07	True	Divya	True
Cavern Manticore Malware Uses Low-Detection .NET Modules for Reconnaissance and Lateral Movement	2026-07-07	True	Mayura Kathir	True
Microsoft Edge High-Severity Vulnerability Allows Remote Code Execution	2026-07-07	True	Divya	True
Hackers Use Trusted Microsoft Domain and One-Time Codes to Hijack Corporate Accounts	2026-07-06	True	Mayura Kathir	True
Veeam Backup BinaryFormatter Flaw Enables Remote Code Execution	2026-07-06	True	Divya	True
Go-Based Gentlemen Ransomware Uses PsExec, WMIC, and PowerShell Remoting for Network Propagation	2026-07-06	True	Mayura Kathir	True
SilverFox Campaign Turns ValleyRAT Into Multi-Stage Malware With Rootkit Capabilities	2026-07-06	True	Mayura Kathir	True
FIFA World Cup Phishing Scam Uses Fake Reward Pages to Steal Credit Card Data	2026-07-06	True	Mayura Kathir	True
Microsoft Warns Windows 11 Enterprise Devices May Boot to Black Screen After Updates	2026-07-06	True	Divya	True
IBM WebSphere Application Server Hit by Critical XSS and Path Traversal Vulnerabilities	2026-07-06	True	Divya	True
SSH Attackers Use Single Exec Commands to Bypass Interactive Honeypot Analysis	2026-07-06	True	Divya	True
Armored Likho APT Deploys BusySnake Stealer Against Government and Power Sector Targets	2026-07-04	True	Mayura Kathir	True
Avalon Malware Uses Legal Document Lure to Deliver CrownX Ransomware Capabilities	2026-07-04	True	Mayura Kathir	True
Verified X Sponsored Ad Spreads Mac Malware While ConsentFix Hijacks Microsoft 365 Accounts	2026-07-04	True	Mayura Kathir	True
Fake Google Play Store Pages Use Trusted Brand Names to Push Gambling PWAs	2026-07-03	True	Mayura Kathir	True
Fake Google and Cloudflare Verification Pages Spread StealC, HijackLoader, and NetSupport Malware	2026-07-03	True	Divya	True
Microsoft Exchange SSRF Vulnerability Lets Low-Privileged Attackers Read Arbitrary Files	2026-07-03	True	Divya	True
Hackers Use Fake API Documentation to Trick AI Agents Into Sending Crypto Payments	2026-07-03	True	Mayura Kathir	True
FBI Says TeamPCP Uses Trojanized Updates to Steal Cloud Tokens, SSH Keys, and Kubernetes Secrets	2026-07-03	True	Mayura Kathir	True
ChatGPT Guardrail Bypass Vulnerability Exposes LFI Risk Through Download Flow	2026-07-03	True	Divya	True
Hackers Use Compromised Websites and transcript.pdf.js Lure to Deliver PureLog Stealer	2026-07-03	True	Mayura Kathir	True
CitrixBleed Vulnerability Exploitation Within 24 Hours of Disclosure	2026-07-03	True	Divya	True
Hackers Compromise GitHub Maintainer Accounts to Publish PolinRider-Infected Package Versions	2026-07-03	True	Mayura Kathir	True
Phishing Campaign Uses Fake Invoice PDF to Drop AsyncRAT, VenomRAT, and XWorm	2026-07-02	True	Mayura Kathir	True
950 Oracle E-Business Suite Instances Exposed as CVE-2026-46817 Attacks Observed in the Wild	2026-07-02	True	Divya	True
EvilTokens-Linked ARToken Panel Exposes 80+ APIs for Microsoft 365 Token Theft	2026-07-02	True	Mayura Kathir	True
CISA Adds Actively Exploited Microsoft SharePoint Vulnerability to KEV Catalog	2026-07-02	True	Divya	True
Hackers Use Geofenced Webpages to Deliver Ousaban Banking Trojan in Spain and Portugal	2026-07-02	True	Mayura Kathir	True
JetBrains Patches Critical Hub Authentication Bypass and Account Takeover Vulnerabilities	2026-07-02	True	Divya	True
ValleyRAT Uses RC4 Encryption, Donut Shellcode, and rundll32 Injection for Stealth	2026-07-02	True	Mayura Kathir	True
Apple Hide My Email Vulnerability Lets Attackers Reveal Users’ Real Email Addresses	2026-07-02	True	Divya	True
Scattered Spider Hacker Arrested in Finland and Extradited to U.S. Over Cyber Intrusion Charges	2026-07-02	True	Divya	True
Malicious Google Notes Extension Swaps Crypto Wallet Addresses During Transactions	2026-07-01	True	Mayura Kathir	True
MacSync Stealer Hijacks macOS via Fake Claude Code Google Ads – Full Attack Chain Exposed	2026-07-01	True	Divya	True
ToddyCat Uses Shadow Token via Remote Debug to Compromise Gmail Accounts	2026-07-01	True	Mayura Kathir	True
FCC Bans Chinese-Produced Network Equipment Linked to Cyber and Espionage Risks	2026-07-01	True	Divya	True
CISA Adds Actively Exploited SimpleHelp Vulnerability to KEV Catalog	2026-07-01	True	Divya	True
The Gentlemen Ransomware Targets Large Corporations and Critical Infrastructure Worldwide	2026-07-01	True	Mayura Kathir	True
Critical Linux Kernel Flaw Allows Unprivileged Users to Gain Full Root Access	2026-06-27	True	Eswar	True
Cloud Bucket Hijacking Lets Attackers Silently Exfiltrate AWS, Google Cloud Data	2026-06-27	True	Eswar	True
Linux Kernel DirtyClone Vulnerability Lets Local Attackers Gain Root Privileges	2026-06-27	True	Eswar	True
Amazon Q Developer Vulnerability Allows Code Execution via Malicious Repositories	2026-06-27	True	Eswar	True
Water and Wastewater Systems Become Strategic Targets for Russia, China, and Iran	2026-06-26	True	Mayura Kathir	True
China-Linked Malware Found in Counterfeit USB Drives Used on Japan Defense Force Classified Networks	2026-06-26	True	Divya	True