A new OphimCMS supply chain attack in which six Packagist themes ship trojanized jQuery and other JavaScript to compromise site visitors rather than servers.​ Researchers found six malicious Composer packages under the “ophimcms” namespace on Packagist that pretend to be legitimate themes for OphimCMS, a Vietnamese-language Laravel CMS used for movie streaming sites. These packages […]

The post Packagist Themes Deliver Trojanized jQuery in OphimCMS Supply Chain Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The UK Companies House recently disclosed a significant security vulnerability in its WebFiling service that exposed sensitive director information for several months. Chief Executive Andy King confirmed that the flaw was initially introduced during a system update in October 2025. This vulnerability allowed authenticated users to potentially view and alter the private details of other […]

The post WebFiling Flaw at UK Companies House Exposed Director Data for Months appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors were already abusing URL rewriting mechanisms in phishing campaigns to mask malicious domains. URL rewriting is designed to protect users by replacing original links with security-vendor URLs that scan destinations at click time. These rewritten links route traffic through the provider’s infrastructure so they can analyze the page in real time, block known […]

The post Hackers Leverage Safe Links and URL Rewriting to Evade Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Malicious npm packages are delivering the North Korean–linked PylangGhost remote access trojan (RAT) in a new software supply chain campaign that targets developers across Windows, Linux, and macOS systems. The first malicious versions appeared in late February 2026 (@jaime9008/math-service 1.0.1–1.0.2), followed by react-refresh-update 1.0.1–1.0.4 published on March 1, 2026. Earlier 1.0.0 versions in both families were benign, a […]

The post Malicious NPM Packages Spread PylangGhost RAT in Supply Chain Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.