GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Ransomware affiliates are forming alliances to recoup losses from unreliable partners. A prominent example involves ALPHV extorting $22 million from Change Healthcare but withholding funds from its data exfiltration affiliate.  To remedy this, the affiliate has reportedly partnered with RansomHub to demand additional payment from Change Healthcare for data deletion, showcasing a new tactic in […]

The post DISPOSSESSOR And RADAR Ransomware Emerging With RaaS Model appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

MongoDB has disclosed a critical vulnerability that could allow attackers to escalate privileges on systems running certain versions of MongoDB. This vulnerability, CVE-2024-7553, affects multiple versions of MongoDB Server, C Driver, and PHP Driver. The flaw stems from incorrect validation of files loaded from a local untrusted directory, particularly impacting systems running on Windows. CVE-2024-7553 […]

The post MongoDB Vulnerabilities Let Attackers Escalate Privileges appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Authorities have dismantled a “laptop farm” in Nashville, Tennessee, allegedly used to support the Democratic People’s Republic of Korea’s (DPRK) weapons program. Matthew Isaac Knoot, 38, has been charged with multiple offenses, including conspiracy to cause damage to protected computers and money laundering. The Scheme Unveiled According to court documents, Knoot participated in a complex […]

The post Authorities Dismantled North Korean Remote IT Worker Laptop Farm appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated threat activity cluster, STAC6451, has been identified targeting Microsoft SQL servers. This cluster, primarily observed by Sophos Managed Detection and Response (MDR) teams, has compromised organizations by exploiting SQL server vulnerabilities. The attackers have been using a combination of brute-force attacks, command execution, and lateral movement techniques to infiltrate and compromise networks. This […]

The post STAC6451 Hacker Hijacking Microsoft SQL Servers to Compromise Organizations appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A record-breaking Distributed Denial of Service (DDoS) attack unleashed 419 terabytes of malicious traffic over 24 hours. This unprecedented event, which began at 8:05 UTC on July 15, 2024, targeted a financial services company in Israel, showcasing the evolving threat landscape of cyber warfare. A Sustained Assault The attack commenced with a small probing attempt, […]

The post Record Breaking DDoS Attack 419 TB of Malicious Traffic Within 24-Hours appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Cisco has issued a security advisory warning users of its Small Business SPA300 and SPA500 Series IP Phones about multiple critical vulnerabilities that could allow remote attackers to execute arbitrary commands or cause denial of service (DoS) conditions. These vulnerabilities affect all software releases for the mentioned series, and no software updates or workarounds are […]

The post Critical Cisco Small Business IP Phone Flaws Exposes Users to Remote Attacks appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The Tor Project has announced the release of Tor Browser 13.5.2, now available for download from the Tor Browser download page and the distribution directory. This latest version brings crucial security updates and several enhancements to improve user experience and security. Key Security Updates One of the most significant updates in Tor Browser 13.5.2 is […]

The post Tor Browser 13.5.2 Released: What’s New! appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Deep learning models analyzing API sequences for Windows malware detection face challenges due to evolving malware variants. A group of researchers recently proposed the MME framework, which enhances the existing detectors by leveraging API knowledge graphs and system resource encodings.  Utilizing contrastive learning, MME captures similar malicious semantics in evolved malware samples.  MME Framework Experimental […]

The post Researchers Proposed MME Framework To Enhance API Sequence-Based Malware Detection appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Amazon’s e-commerce platforms and cloud services form a digital ecosystem requiring a strong cybersecurity framework. Amazon, which has a vast online presence covering multiple domains and services, is at great risk of being attacked by advanced cyber threats. For this reason, Amazon uses an innovative mixture of the latest technologies and old security measures to […]

The post AWS Launches Mithra To Detect Malicious Domains Across Systems appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability in Microsoft 365 (formerly Office 365) has been found that allows malicious actors to bypass anti-phishing measures. One of the anti-phishing features available in Exchange Online Protection (EOP) and Microsoft Defender to Office 365 enterprises is the ‘First Contact Safety Tip.’ In the first contact safety tip, users are cautioned when they get […]

The post Microsoft 365 Vulnerability Let Hackers Bypass Anti-phishing Feature appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Apple has announced changes to its macOS Gatekeeper security feature with the release of macOS Sequoia. These changes aim to bolster user security by making it more challenging to run potentially harmful software. Stricter Gatekeeper Policies In macOS Sequoia, Apple has eliminated the ability for users to override Gatekeeper by Control-clicking on software that isn’t […]

The post Apple Tightens macOS Gatekeeper Controls in macOS Sequoia appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Seemingly new ransomware, Zola, is the newest version of the Proton family that appeared in March 2023.  This rebranding highlights the unbroken trend of ransomware’s evolution.  Cybersecurity researchers at Acronis identified and warned of the new Zola ransomware, which was found using multiple tools to disable Windows Defender. Zola Ransomware During a cyber attack investigation, […]

The post New Zola Ransomware Using Multiple Tools to Disable Windows Defender appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The notorious threat actor group XDSpy has been reported to target organizations in Russia and Moldova. The sophisticated phishing malware campaign aims to steal sensitive data through well-coordinated attack chains. Spear-phishing emails as the Initial Vector According to the Broadcom report, the attack begins with spear-phishing emails sent to unsuspecting victims. These emails typically contain […]

The post XDSpy Hackers Attacking Users to Steal Sensitive Data appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Google has announced a critical security update for its Chrome browser, addressing several vulnerabilities that malicious actors could exploit. The Stable channel has been updated to version 127.0.6533.99/.100 for Windows and Mac and 127.0.6533.99 for Linux. This update will be rolled out over the coming days and weeks. Security Fixes and Rewards The latest Chrome […]

The post Chrome Security Update: Patch for Multiple Vulnerabilities appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Researchers have identified a new Chameleon campaign targeting hospitality employees, where the attackers employed a deceptive tactic, disguising malicious software as a CRM app.  File names uploaded to VirusTotal revealed evidence of targeted attacks, including a reference to a prominent international restaurant chain. This suggests a tailored approach to compromising specific organizations within the hospitality […]

The post Chameleon Device-Takeover Malware Attacking IT Employees appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

North Korean state-sponsored hacking groups, including Kimsuky (APT43) and Andariel (APT45), have significantly increased cyberattacks on South Korean construction and machinery sectors.  This surge aligns with Kim Jong-un’s “Local Development 20×10 Policy,” aimed at modernizing industrial facilities across North Korea.  In response, South Korea’s National Cyber Security Center (NCSC) and intelligence agencies have issued a […]

The post North Korean Hackers Exploit VPN Update Flaw To Breach Networks appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

An attacker, identified as Yawixooo, leveraged a publicly accessible Jupyter Notebook honeypot as an initial access vector. The honeypot’s exposure to the internet-enabled Yawixooo to exploit it without requiring complex techniques.  Once gaining a foothold on the system, the attacker downloaded a new zip file (MD5: 42989a405c8d7c9cb68c323ae9a9a318) from filebin.net, which was only flagged as malicious […]

The post Panamorfi TCP flood DDoS Attack Targeting Jupyter Notebooks appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Ransomware has infiltrated the IT systems of 40 French museums, including the renowned Louvre. The incident, which occurred on the night of August 3-4, 2024, was first detected by the director of information systems at the Grand Palais site. The director noticed unusual activity in the computer systems and promptly raised the alarm, signaling the […]

The post 40 French Museums IT Systems Hit by Ransomware Attack appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

 Mobile Guardian, a leading Mobile Device Management (MDM) vendor, experienced unauthorized access to its platform on August 4th. The incident has impacted iOS and ChromeOS devices enrolled globally in the Mobile Guardian system. What Happened On August 4th at 2 PM GMT, Mobile Guardian detected suspicious activity on its platform. The security team immediately responded […]

The post Mobile Device Management Vendor Mobile Guardian Hacked appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Singapore authorities have successfully intercepted and reclaimed over USD 40 million defrauded in a sophisticated business email compromise (BEC) scam. The operation, facilitated by INTERPOL’s Global Rapid Intervention of Payments (I-GRIP) mechanism, marks the largest-ever recovery of fraudulently obtained funds in Singapore’s history. The Scam Unveiled On 23 July 2024, a commodity firm based in […]

The post Authorities have Uncovered USD 40 Million from Hackers appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.