GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Researchers discovered flaws in the Autel MaxiCharger EV charger that make it potential to execute arbitrary code on the device by just placing it within Bluetooth range. The vulnerabilities tracked as CVE-2024-23958, CVE-2024-23959, and CVE-2024-23967 were identified during Pwn2Own Automotive 2024 in Tokyo. The Autel MaxiCharger has significantly the most extensive hardware feature set, including […]

The post Researchers Hacked Car EV Chargers To Execute Arbitrary Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Siemens ProductCERT has disclosed a critical vulnerability in its Industrial Edge Management systems. The vulnerability, identified as CVE-2024-45032, poses a significant risk by allowing unauthenticated remote attackers to impersonate other devices within the system. This flaw has been rated with a maximum CVSS score of 10.0, indicating its severe potential impact. CVE Details The vulnerability […]

The post Siemens Industrial Edge Management Vulnerable to Authorization Bypass Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

RansomHub has recently employed a novel attack method utilizing TDSSKiller and LaZagne, where TDSSKiller, traditionally used to disable EDR systems, was deployed to compromise network defenses.  Subsequently, LaZagne was used to harvest credentials from compromised systems, which is unprecedented in RansomHub’s operations and was not documented in CISA’s recent advisory.  The attack sequence began with […]

The post New RansomHub Attack Killing Kaspersky’s TDSSKiller To Disable EDR appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Recent research has revealed a new Android malware targeting mnemonic keys, a crucial component for cryptocurrency wallet recovery. Disguised as legitimate apps, this malware scans devices for images containing mnemonic phrases. Once installed, it covertly steals personal data like text messages, contacts, and images.  The research has identified over 280 such malicious apps targeting Korean […]

The post New Android Spyware As TV Streaming App Steals Sensitive Data From Devices appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Adobe has issued a crucial security update for its Acrobat and Reader software on Windows and macOS platforms. This update, identified as APSB24-70, addresses multiple vulnerabilities that could allow attackers to execute arbitrary code on affected systems. The update was published on September 10, 2024, and carries a priority rating of 3, indicating the importance […]

The post Adobe Security Update, Multiple Vulnerabilities Patched appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Opus’ innovative engine integrates AI-driven intelligence, contextual data and automated decision-making to drive precise, efficient vulnerability remediation.  Opus Security, the leader in unified cloud-native remediation, today announced the launch of its Advanced Multi-Layered Prioritization Engine, designed to revolutionize how organizations manage, prioritize and remediate security vulnerabilities. Leveraging AI-driven intelligence, deep contextual data and automated decision-making […]

The post Opus Security Elevates Vulnerability Management With its AI-Powered Multi-Layered Prioritization Engine appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Three Chinese state-backed threat groups, APT10, GALLIUM, and Stately Taurus, have repeatedly employed a modified version of the open-source network scanning tool NBTscan over the past decade.  NBTscan, designed for network discovery and forensics, sends NetBIOS status queries to IP addresses within a specified range.  By analyzing the responses, it extracts valuable information like IP […]

The post Chinese Hackers Using Open Source Tools To Launch Cyber Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

As cyber threats grow, small to medium-sized businesses (SMBs) are disproportionately targeted. According to the recent Hiscox annual cyber readiness report, 41% of SMBs in the US fell victim to a cyberattack in 2023, a figure that has nearly doubled since 2021. INE Security, a global leader in cybersecurity training and certifications, recognizes this as […]

The post Small Business, Big Threats: INE Security Launches Initiative to Train SMBs to Close a Critical Skills Gap appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The air-gap data protection method isolates local networks from the internet to mitigate cyber threats and protect sensitive data, which is commonly used by organizations dealing with confidential information such as personal, financial, medical, legal, and biometric data.  By eliminating internet connectivity, air-gap networks provide a high level of security against external attacks, ensuring compliance […]

The post Researchers Details Attacks On Air-Gaps Computers To Steal Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In August 2024, researchers detected a malicious Google Chrome browser infection that led to the distribution of LummaC2 stealer malware that utilized a drive-by download of a ZIP archive containing an MSI app packaging file, which, when executed, installed the malicious software on the victim’s system. A MSI file communicates with a remote server to […]

The post Beware Of Malicious Chrome Extension That Delivers Weaponized ZIP Archive appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about three critical vulnerabilities currently being exploited in the wild. These vulnerabilities affect a range of widely used software and systems, posing significant risks to organizations and individuals alike. CISA advises immediate action to mitigate these threats. CVE-2016-3714: ImageMagick Improper Input Validation Vulnerability […]

The post CISA Issues Warning About Three Actively Exploited Vulnerabilities in the Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Charles Darwin School in Biggin Hill, London, has been forced to close its doors following a sophisticated ransomware attack temporarily. The incident has left students and parents uncertain as the school works to restore its systems and secure sensitive data. The Cyber Attack: What Happened? The ransomware attack was first detected last week when staff […]

The post High School in London Forced to Sends Students Home Following Ransomware Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Zengo X Research Team has uncovered a critical flaw in WhatsApp’s “View Once” feature, designed to enhance user privacy by allowing media to be viewed only once before disappearing. This flaw, now exploited in the wild, raises significant concerns about the security of the world’s most popular instant messaging app. Discovery and Disclosure The […]

The post WhatsApp’s “View Once” Feature Flaw Exploited in the Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors have allegedly leaked sensitive data from Capgemini, a global leader in consulting, technology services, and digital transformation. The claims surfaced on the dark web, raising alarms about the potential impact on the company’s operations and client confidentiality. According to a post by DarkWebInformer on X (formerly Twitter), threat actors have taken responsibility for […]

The post Threat Actors Allegedly Claiming Leak of Capgemini Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Groundbreaking technology integrates Post-Quantum Cryptography and SSL security for the next generation of Face-based eID solutions and Face-protected Digital Public Key Infrastructure (DPKI) Seventh Sense, a pioneer in advanced cybersecurity solutions, announces the launch of SenseCrypt, a revolutionary new platform that sets a new standard in secure, privacy-preserving identity verification. SenseCrypt introduces a first-of-its-kind face-based […]

The post Seventh Sense Unveils Revolutionary Privacy-Preserving Face-Based Public Key Infrastructure and eID Solution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

SonicWall disclosed a critical remote code execution vulnerability (CVE-2024-40766) in SonicOS on August 22nd, 2024. While no active exploitation was initially confirmed, the advisory was updated on September 6th to indicate potential active attacks.  The vulnerability, affecting both management access and local SSLVPN accounts, allows attackers to execute arbitrary code on vulnerable devices, which could […]

The post Akira Ransomware Actively Exploiting SonicWall firewall RCE Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

As the new school year begins, students are gearing up for new classes and friendships and diving back into the digital world of video games. However, this virtual playground is not as safe as it seems. Cybercriminals are increasingly targeting young gamers, exploiting their enthusiasm for popular games. This article explores the games most under […]

The post Young Gamers Under Attack, Here is the List of Games Targeted appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Critical vulnerabilities have been identified, potentially exposing systems to arbitrary command execution. These vulnerabilities, cataloged under the Common Vulnerabilities and Exposures (CVE) system, highlight significant security risks that demand immediate attention. Overview of Vulnerabilities IBM’s webMethods Integration Server, a widely used platform for integrating various applications and services, is affected by three significant vulnerabilities. These […]

The post IBM webMethods Integration Server Vulnerabilities Exposes Systems to Arbitrary Command Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

IBM has issued a security bulletin addressing critical vulnerabilities in its MQ Operator and Queue Manager container images. These vulnerabilities, including denial of service and privilege escalation, could allow attackers to bypass security restrictions and disrupt operations. Summary of Vulnerabilities The bulletin highlights several vulnerabilities affecting the IBM MQ Operator and Queue Manager container images. […]

The post Vulnerabilities in IBM Products Let Attackers Exploit & Launch DOS Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybercriminals in Latin America have increased their use of phishing scams targeting business transactions and judicial-related matters.  By leveraging trust and fear, respectively, these attacks often involve malicious links or file attachments that lead to malware infections, which include common tactics like embedded links in emails directing users to fake websites and malicious PDF and […]

The post BBTok Abuses Legitimate Windows Utility Command Tool to Stay Undetected appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.