While signing in with Google is a handy shortcut on new sites, that convenience comes with a catch that most people don't consider until it's too late.

A high-severity vulnerability in Microsoft Authenticator for Android could let a malicious app, without any Android permissions, impersonate trusted Microsoft apps and steal authentication tokens for a victim’s signed-in work account. This vulnerability is tracked as CVE-2026-80097 and affects Microsoft Authenticator versions earlier than 6.2606.4246. Microsoft has since issued a patch. Microsoft Authenticator Flaw Security […]

The post Microsoft Authenticator Flaw Allows Android Apps With Zero Permissions to Steal Authentication Tokens appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up to allow port forwarding, and an attacker who already controls one device that the network's access rules permit to connect to the target. The findings were

Microsoft released emergency out-of-band security updates addressing four vulnerabilities across .NET, including a Brotli buffer overflow and incomplete fixes from an earlier October release. The updates apply to .NET 8, .NET 9, .NET 10, and .NET 11 Release Candidate 3. Microsoft recommends updating as soon as possible. .NET Security Updates CVE-2026-111497 affects .NET’s implementation of […]

The post Microsoft Issues Emergency .NET Security Updates to Fix Four Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild. [...]

Criminals are exploiting established customer accounts and familiar brands to steal money and personal information, according to TransUnion’s Fraud in the Age of Continuous Trust report. Eighty-one percent of suspected digital fraud in its network during the first half of 2026 occurred during account logins and financial transactions, highlighting risks that persist throughout a customer relationship. Verifying someone’s identity does not establish whether every subsequent interaction can be trusted. Scammers can manipulate legitimate customers into … More →

The post Synthetic identities leave US lenders with $2.4 billion in fraud exposure appeared first on Help Net Security.