GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

SambaSpy Attacking Windows Users With Weaponized PDF FilesResearchers discovered a targeted cybercrime campaign in May 2024 that exclusively focused on Italian victims, which was unusual as attackers typically aim for broader targets to increase profits.  However, this campaign implemented checks at different stages of the infection chain to ensure only Italian users were affected, which […]

The post SambaSpy Using Weaponized PDF Files to Attack Windows Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The anonymity of the Tor network has been scrutinized in a recent investigation by German law enforcement agencies. Despite these revelations, the Tor Project maintains that its network remains secure for users. This article delves into the details of the investigation, its implications for Tor, and the response from various stakeholders. Tor stands as the […]

The post Tor Claims Network is Safe Following Enforcement Infiltration to Expose Criminals appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A threat actor on a well-known dark web forum has allegedly claimed responsibility for a significant data breach involving the Indian financial institution, Federal Bank. The breach reportedly exposes sensitive information of hundreds of thousands of customers, raising serious concerns about data security and privacy. The claim was first reported by a ThreatMon, who shared the […]

The post Threat Actor Allegedly Claims Breach of Federal Bank Customer Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A proof-of-concept (PoC) exploit has been released for a critical zero-day vulnerability identified as CVE-2024-7965, affecting Google’s Chrome browser. This vulnerability explicitly targets the V8 JavaScript engine and is exclusive to ARM64 architectures. The release of this PoC has raised concerns within the cybersecurity community, highlighting a potential avenue for exploitation in widely used devices. […]

The post PoC Exploit Released for CVE-2024-7965 Zero-Day Chrome Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A new method of attack has emerged that leverages WebDAV technology to host malicious files. This approach, which facilitates the distribution of the Emmenhtal loader—also known as PeakLight—has been under scrutiny since December 2023. The loader is notorious for its stealthy, memory-only execution and its role in distributing various infostealers worldwide. This article delves into […]

The post Webdav Malicious File Hosting Powering Stealthy Malware Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aembit, the non-human identity and access management (IAM) company, today released its 2024 Non-Human Identity Security Report, a definitive survey highlighting how organizations currently manage and protect non-human identities (NHIs) – such as applications, scripts, and service accounts. The report reveals a stunning, widespread reliance on outdated methods and manual practices that fail to provide […]

The post Aembit Unveils 2024 Survey Report Highlighting Major Gaps in Securing Non-Human Identities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Authorities have successfully dismantled “Ghost,” an encrypted communication platform allegedly used by cybercriminals worldwide. The operation, led by the Australian Federal Police (AFP) and involving international law enforcement agencies, marks a major victory in the ongoing battle against transnational crime networks. Operation Kraken The takedown of Ghost was part of “Operation Kraken,” a meticulously planned […]

The post Authorities Seized Ghost Communication Platform Used by Cyber Criminals appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding two critical vulnerabilities affecting Microsoft Windows MSHTML and Progress WhatsUp Gold. These vulnerabilities, identified as CVE-2024-43461 and CVE-2024-6670, are reportedly being exploited widely, posing significant risks to users and organizations worldwide. CVE-2024-43461: Microsoft Windows MSHTML Platform Spoofing Vulnerability The first vulnerability, CVE-2024-43461, […]

The post CISA Warns of Windows MSHTML & Progress WhatsUp Gold Flaw Exploited Widely appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Two campaigns targeting Selenium Grid’s default lack of authentication are underway, as threat actors are exploiting this vulnerability to deploy malicious payloads, including exploit kits, cryptominers, and proxyjackers. Selenium Grid’s widespread use among developers, coupled with its default lack of security, makes it an attractive target for attackers seeking to compromise systems and gain unauthorized […]

The post Hackers Exploiting Selenium Grid Tool To Deploy Exploit Kit & Proxyjacker appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

North Korean hackers have been identified as targeting LinkedIn users to deliver sophisticated malware known as RustDoor. This cyber threat underscores the evolving tactics of state-sponsored hacking groups, mainly from North Korea, which have increasingly turned to social engineering on professional networking platforms to achieve their objectives. The Social Engineering Tactics North Korean hackers are […]

The post North Korean Hackers Attacking LinkedIn Users to Deliver RustDoor Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Honeypots, decoy systems, detect and analyze malicious activity by coming in various forms and can be deployed on cloud platforms to provide insights into attacker behavior, enhancing security. The study proposes to create an interactive honeypot system using a Large Language Model (LLM) to mimic Linux server behavior. By fine-tuning the LLM with a dataset […]

The post Creating An AI Honeypot To Engage With Attackers Sophisticatedly appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Russian ransomware group Key Group, active since early 2023, is targeting organizations globally, as their modus operandi involves encrypting files and stealing data before demanding ransom via Telegram. The group utilizes the .NET-based Chaos ransomware builder to create their malware, which poses a significant risk to organizations worldwide due to the potential for data […]

The post Key Russian Hacker Group Attacking Users With .NET Built Ransomware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Song Wu, a Chinese national, has been indicted on charges of wire fraud and aggravated identity theft. The charges stem from his alleged involvement in a sophisticated spear-phishing campaign targeting sensitive U.S. research and technology. This case highlights ongoing concerns about cybersecurity and protecting valuable intellectual property. Decoding Compliance: What CISOs Need to Know – Join […]

The post Chinese Hackers Charged for Multi-Year Spear-Phishing Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Analysis of millions of real-world NHI secrets by Entro Security Labs reveals widespread, significant risks, emphasizes need for improved Secrets Management security practices    Entro Security, pioneer of the award-winning Non-Human Identity (NHI) and Secrets Management platform, today released its research report, “2025 State of Non-Human Identities and Secrets in Cybersecurity.” The Entro Security Lab found […]

The post Entro Security Labs Releases Non-Human Identities Research Security Advisory appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Millions of D-Link routers are at risk due to several critical vulnerabilities. Security researcher Raymond identified these vulnerabilities, which have been assigned multiple CVE IDs and pose severe threats to users worldwide. D-Link has issued urgent firmware updates to mitigate these risks. Users are strongly advised to update their devices immediately to protect against potential […]

The post Critical Vulnerabilities Impact Million of D-Link Routers, Patch Now! appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Adobe released eight security updates in September 2024, addressing 28 vulnerabilities in various products, as ColdFusion received a critical patch to mitigate a code execution flaw rated at CVSS 9.8.  Other critical vulnerabilities were found in Photoshop, Illustrator, Premier Pro, After Effects, Audition, and Media Encoder. Adobe prioritizes these updates for deployment due to their […]

The post Windows MSHTML Zero-Day Vulnerability Exploited In The Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability in Azure API Management (APIM) has been identified. It allows attackers to escalate privileges and access sensitive information. This issue arises from a flaw in the Azure Resource Manager (ARM) API, which permits unauthorized access to critical resources. This article delves into the specifics of the vulnerability, its implications, and the steps taken […]

The post Azure API Management Vulnerability Let Attackers Escalate Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Medusa, a relatively new ransomware group, has gained notoriety for its dual-pronged online presence. Unlike its peers, Medusa maintains a visible profile on the surface web alongside its traditional dark web operations.  This unusual strategy has amplified its impact, with frequent updates on its blog and Telegram channel showcasing its rapid pace of attacks and […]

The post Medusa Ransomware Exploiting Fortinet Flaw For Sophisticated Ransomware Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly discovered vulnerability in the Spring Framework has been identified, potentially allowing attackers to access any file on the system. This vulnerability tracked as CVE-2024-38816, affects applications using the functional web frameworks WebMvc.fn or WebFlux.fn. It is classified as a path traversal vulnerability and poses a high risk to affected systems. CVE-2024-38816-The Vulnerability The […]

The post Spring Framework Vulnerability Let Attackers obtain Any Files from the System appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has called upon federal agencies and organizations to take immediate action concerning a critical vulnerability affecting Ivanti Cloud Services Appliance (CSA) 4.6. The vulnerability, CVE-2024-8190, poses a significant threat as it allows cyber threat actors to execute OS command injections, potentially gaining control over affected systems. CVE-2024-8190: A […]

The post CISA Urges Agencies to Upgrade or Remove End-of-Life Ivanti Appliance appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.