Blahalla

GigaWiper Uses OneDrive Update Scheduled Task for Persistent Destructive Access

gbhackers.com · 12 days ago

A sophisticated Golang-based backdoor family now tracked as GigaWiper that fuses extensive C2 controls with multiple destructive payloads. What makes GigaWiper noteworthy is not merely its destructive capacity but how it packages several formerly separate wipers and extortion tools into a single modular implant.

Hackers Compromise AWS AI Gateway Connected to Amazon Bedrock to Deploy XMRig Cryptominer

gbhackers.com · 12 days ago

A compromise of an AI gateway linked to Amazon Bedrock, highlighting how generative AI infrastructure has become a new target within the enterprise attack landscape.

Ransomware Negotiator Jailed for Leaking Victim Secrets to BlackCat Hackers

gbhackers.com · 12 days ago

Angelo Martino, a former ransomware negotiator from Florida, has been sentenced to 70,707 months in federal prison for conspiring with ALPHV/BlackCat ransomware operators to extort victims whom he was supposed to help during incident-response engagements. The U.S.

OpenAI Launches GPT-5.6 With Multi-Agent Cybersecurity and Vulnerability-Exploitation Capabilities

gbhackers.com · 12 days ago

OpenAI has introduced the GPT-5.6 family, comprising Sol, Terra, and Luna, positioning it as a multi-agent platform tailored for advanced cybersecurity workflows, vulnerability research, and exploit development. The company claims that these models offer better performance per dollar compared to previous frontier models. The flagship model, GPT-5.

Malicious Braintree.Net Typosquat Steals PAN, CVV, and Payment Gateway Credentials

gbhackers.com · 12 days ago

A malicious NuGet package masquerading as the official Braintree.NET client on July 3, 2026 and Socket’s automation labeled it potential malware within ten minutes. The package, published under the misleading name Braintree.Net, is a carefully crafted typosquat that mirrors PayPal Braintree’s legitimate SDK API while containing a multi-stage.

Multiple U-Boot Vulnerabilities Enable Pre-Authentication Code Execution and Device DoS Attacks

gbhackers.com · 12 days ago

Six critical vulnerabilities in the widely used U-Boot bootloader, which can be exploited through malicious Flattened Image Tree (FIT) images, allowing attackers to achieve pre-authentication arbitrary code execution or crash devices during the early boot process.

Microsoft Uses AI-Powered Agentic Scanning to Find Windows Security Flaws and Accelerate Patching

gbhackers.com · 12 days ago

Microsoft is expanding its AI-driven vulnerability discovery across Windows, introducing a multi-model “agentic” scanning system designed to identify security flaws earlier and accelerate global patch deployment.

Roundcube Webmail Security Update Patches Critical Zero-Click XSS and SSRF Bypass Flaws

gbhackers.com · 12 days ago

Roundcube has released version 1.7.2, a security-focused update that addresses multiple high-impact vulnerabilities, including a zero-click stored cross-site scripting (XSS) flaw and a server-side request forgery (SSRF) bypass. This update follows responsible disclosures from various security researchers and is strongly recommended for all production deployments.

AI-Assisted Hackers Compromise AWS Cloud in 72 Hours Using Stolen Credentials

gbhackers.com · 12 days ago

An AI-assisted threat actor has demonstrated how quickly a modern AWS environment can be compromised when valid credentials, weak identity controls, and exposed secrets intersect. In about 72 hours, they achieved broad cloud control using familiar techniques executed at an unprecedented speed.

Volkswagen Is Cutting Production as Sales in China Plunge

www.nytimes.com · 12 days ago

The German automaker has struggled to compete with fast-growing Chinese companies that offer more affordable and sophisticated electric vehicles.

A Top OpenAI Executive, Fidji Simo, Steps Down

www.nytimes.com · 12 days ago

Ms. Simo, who was Sam Altman’s second in command before taking a medical leave in April, will become a part-time adviser to the company.

AI coding tool hole illustrates a big problem with human in the loop

www.csoonline.com · 12 days ago

A security hole within AI dev tools has allowed attackers to escape sandboxes by misleading the humans in the loop who were supposed to knowingly approve the tool’s actions, according to cybersecurity research firm Wiz.

OpenMandriva Linux says contributor tried to sabotage the project

www.bleepingcomputer.com · 12 days ago

The OpenMandriva Linux project announced that it was the target of an attempted act of internal sabotage after a dispute among contributors.

John Deere Farm Equipment Owners Have Right-to-Repair, F.T.C. Says

www.nytimes.com · 12 days ago

A settlement by the company with the Federal Trade Commission will allow farmers and local mechanics to make their own fixes, instead of relying on authorized dealers.

Iran's Cyber Crosshairs Focus Beyond Critical Infrastructure

www.darkreading.com · 12 days ago

Obscurity isn't a defense. If your company has any Internet-facing vulnerability, you're at risk from multiple threats.

Microsoft Reins in RoguePlanet Zero-Day Threat

www.darkreading.com · 12 days ago

The researcher known as "Nightmare-Eclipse" published a proof-of-concept (PoC) exploit for the Windows Defender vulnerability in early June after dropping several other Microsoft zero-days.

China Warns of Claude Code ‘Backdoor’ Security Risk

www.techrepublic.com · 12 days ago

China warned organizations to remove certain Claude Code versions over alleged backdoor risks, while Anthropic called the feature anti-abuse protection.

Injective SDK on npm infected with cryptocurrency wallet stealer

www.bleepingcomputer.com · 12 days ago

Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node Package Manager (npm) that stole cryptocurrency wallet private keys and mnemonic seed phrases.

OpenAI Releases GPT-5.6 Sol, Its Most Powerful AI Model Yet

www.nytimes.com · 12 days ago

The new release was delayed after the U.S. government restricted the latest artificial intelligence models over cybersecurity concerns.

AI Agents Are a New Kind of Identity & Most Organizations Aren't Ready

www.darkreading.com · 12 days ago

If you're handling them like a service account or API token, consider yourself behind. AI agents need a fundamentally different approach.

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

thehackernews.com · 12 days ago

Datadog Security Labs is warning of "several overlapping campaigns" that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API.

Meta Launches New A.I. Model as Global Technology Race Heats Up

www.nytimes.com · 12 days ago

For the first time, the company will offer a paid version of the service, a departure from its longtime philosophy of giving its A.I. away for free.

New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware

thehackernews.com · 12 days ago

Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is how it is built: not one tool but three older destructive programs bolted into one, offered as commands the operator can choose from.

Wally Funk, trailblazing aviator who waited 60 years to go to space, dies at 87

www.washingtonpost.com · 12 days ago

A veteran pilot and air safety investigator, she dreamed of space for six decades before Jeff Bezos invited her to join him on a Blue Origin rocket.

New Helix vishing group emerges in SharePoint data theft attacks

www.bleepingcomputer.com · 12 days ago

A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code phishing, and multi-factor authentication (MFA) abuse to steal data from SharePoint environments.

Microsoft expects more Windows security updates from AI-discovered flaws

www.bleepingcomputer.com · 12 days ago

Microsoft says Windows users should expect to see an increase in security updates as the company increasingly relies on artificial intelligence to discover vulnerabilities in its codebase.

npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk

thehackernews.com · 12 days ago

GitHub has officially announced the release of npm version 12 with install scripts disabled by default, along with deprecating granular access tokens (GATs) designed to bypass two-factor authentication (2FA).

How GitHub gave every repository a durable owner

github.blog · 12 days ago

GitHub had over 14,000 repositories. Fewer than half had clear ownership. Here's how we gave every active repository a validated owner in under 45 days, archived the rest, and made ownership the foundation for everything that followed.

Google’s $3 ChromeOS Flex USB Kit: What to Know Before Installing

www.techrepublic.com · 12 days ago

Google’s $3 ChromeOS Flex Kit is back after selling out. Here’s who should use it, who should skip it, and what to check first.

ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories

thehackernews.com · 12 days ago

Most security mess starts as admin work. A link gets clicked. A tool gets trusted. A bucket name gets reused. A setting stays loose because nobody wants to touch it. This week is full of that kind of damage. Not loud. Not clever. Just small gaps doing big jobs. The worst part is how normal it all looks until the bill arrives. The full ThreatsDay list is below.

QIZ Security Raises $17 Million for Cryptographic Governance Platform

www.securityweek.com · 12 days ago

The Israeli company has developed a cryptographic posture and post-quantum cryptography management platform.

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

www.microsoft.com · 12 days ago

GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational platform. This blog analyzes how the malware incorporates code from several previously separate malware families and provides guidance to help defenders detect and defend against similar threats.

OpenAI launches new system the Trump administration initially put on a leash

www.washingtonpost.com · 12 days ago

The company says the government raised no objections to Thursday’s launch, which opens the model to any company or individual.

New York Times and Other Publishers Ask Court to Penalize OpenAI

www.nytimes.com · 12 days ago

The Times, The New York Daily News and other media organizations accused OpenAI of withholding evidence in a lawsuit.

New Forg365 phishing platform uses AI to target Microsoft 365 accounts

www.bleepingcomputer.com · 12 days ago

A new phishing-as-a-service (PhaaS) operation called Forg365 focuses on stealing Microsoft 365 accounts by combining adversary-in-the-middle (AiTM) and device code methods with AI-assisted lure generation.

As Global Conflicts Go Digital, Businesses Need Wartime Gameplans

www.darkreading.com · 12 days ago

The fate of a Ukrainian tax software company shows how modern cyberwarfare can claim casualties far beyond the battlefield, and how businesses across the ocean still need to protect themselves.

UK Government Rolls Out Agentic AI Defense Plan Alongside Industry Pledge

www.securityweek.com · 12 days ago

Two announcements on July 7, 2026, demonstrate the government’s determination to improve the level of cybersecurity within the UK.

AssuranceAmerica Data Breach: 6.9M Driver’s License Numbers Exposed

www.techrepublic.com · 12 days ago

AssuranceAmerica says hackers accessed the driver's license data of 6.9 million customers, exposing personal information and raising concerns about identity theft.

Discord Bug Wrongly Banned 8,000 Users Over Harmless Images

www.techrepublic.com · 12 days ago

Discord says a moderation bug wrongly banned more than 8,000 users after harmless images triggered its automated safety system.

The Hidden Security Risks of Reduced Summer IT Coverage

www.bleepingcomputer.com · 12 days ago

Security operations don't slow down when IT teams take vacation, but staffing levels often do. Kaseya explains how AI-driven automation can help organizations maintain consistent security operations and reduce reliance on manual processes year-round.

Palo Alto Networks Patches 13 Vulnerabilities

www.securityweek.com · 12 days ago

Buffer overflow, DoS, command injection, SSRF, authentication bypass, and other types of vulnerabilities have been found in PAN-OS software.

UK Cyber Resilience Pledge Sets 90-Day Test for Security Leaders

www.techrepublic.com · 12 days ago

The UK Cyber Resilience Pledge gives organizations a 30/60/90-day checklist for NCSC alerts, supplier Cyber Essentials checks and board-level cyber governance.

DuckDuckGo Now Blocks Most Video Ads on Windows, Mac, iPhone

www.techrepublic.com · 12 days ago

DuckDuckGo’s web browser, often referred to as the DuckDuckGo Privacy Browser, can now block video ads, including in-video ads on YouTube.

GodDamn Ransomware Attack Uses PsExec Lateral Movement and NirSoft Toolkit for Credential Theft

gbhackers.com · 12 days ago

A targeted GodDamn ransomware incident shows the payload is not entirely new but the latest rebrand of a long-running family. Analysis reveals strong code overlap with Beast (the 2024 rebrand of Monster), and the operational playbook mirrors earlier Hyadina campaigns.

Invited to a “job interview” with Netflix or OpenAI? Beware! Your Google password could be at risk

www.bitdefender.com · 12 days ago

Have you received an email from a recruiter at Adobe, Netflix, or OpenAI offering you an exciting new marketing role? Well, before you start brushing up your interview technique, take a closer look at who is really behind it. Read more in my article on the Hot for Security blog.

AI Gateways Offer Attackers the Keys to the Kingdom

www.darkreading.com · 12 days ago

A cryptomining incident highlights how AI gateways can provide access to AI models, cloud infrastructure, and identity and access management (IAM) data.

Attack on Amazon Bedrock-linked AI gateway highlights new cloud security risk

www.csoonline.com · 12 days ago

A cloud intrusion that ended with the deployment of cryptomining malware has exposed a bigger risk for enterprises: AI gateways that concentrate access to cloud identities, permissions, and foundation models in a single, highly privileged system.

UK cyber agency unveils AI-powered Cyber Shield to counter attacks at machine speed

www.csoonline.com · 12 days ago

The UK’s National Cyber Security Centre (NCSC) wants to deploy autonomous AI agents capable of finding and neutralizing cyberattacks on national networks in real time, marking Britain’s push toward a sovereign, machine-speed cyber defense system. The blueprint, called Cyber Shield, was developed jointly with the Department for Science, Innovation and Technology (DSIT).

AI Attacks Move in Minutes. Join This Webinar on Building a Defense That Keeps Up

thehackernews.com · 12 days ago

AI has changed how fast attacks move. Work that once took an attacker days now takes minutes. Using models like Mythos, attackers write tailored bait, pick targets, test what lands, and jump to the next host before your team clears the first alert. That is the gap, and it is not your fault. The tools and runbooks most teams run on were built for attackers who work at human speed.

12 Million Impacted by Data Breach at Japanese Telco KDDI

www.securityweek.com · 12 days ago

Hackers exploited a zero-day vulnerability in a third-party system to access a KDDI email system for ISPs.