GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Several of Australia’s largest superannuation funds have been targeted in a coordinated cyberattack, leading to unauthorized access to customer accounts and financial losses for some members. Among those affected are major funds such as REST, Hostplus, AustralianSuper, Australian Retirement Trust, and Insignia Financial’s MLC Expand. Scope of the Cyberattack AustralianSuper, the nation’s largest super fund, […]

The post Australian Pension Funds Hacked: Members Face Financial Losses appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a significant update to the popular dynamic instrumentation toolkit Frida, developers have introduced powerful new APIs for advanced threat monitoring and software analysis. These enhancements, released on April 4, 2025, offer security researchers and penetration testers unprecedented capabilities in tracking thread activity, module loading, and performance profiling. Thread Observation Made Easy One of the […]

The post Frida Penetration Testing Toolkit Updated with Advanced Threat Monitoring APIs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

OpenVPN, a widely-used open-source virtual private network (VPN) software, has recently patched a security vulnerability that could allow attackers to crash servers and potentially execute remote code under certain conditions. The flaw, identified as CVE-2025-2704, affects OpenVPN servers using specific configurations and has been addressed in the newly released version OpenVPN 2.6.14. CVE-2025-2704: Overview The vulnerability is […]

The post OpenVPN Flaw Allows Attackers Crash Servers and Run Remote Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability has been discovered in Apache Traffic Server (ATS), an open-source caching proxy server. Identified as CVE-2024-53868, this flaw enables attackers to exploit request smuggling via malformed chunked messages. Users of Apache Traffic Server are urged to upgrade to secure versions of the software immediately to mitigate potential risks. CVE-2024-53868 Details The vulnerability was […]

The post Apache Traffic Server Flaw Allows Request Smuggling Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Secure Ideas, a premier provider of penetration testing and security consulting services, proudly announces its recent achievements of CREST accreditation and CMMC Level 1 compliance, reinforcing its commitment to delivering the highest standards of security assessment and regulatory compliance for its clients. With these certifications, Secure Ideas strengthens its ability to deliver globally recognized, standards-based […]

The post Secure Ideas Achieves CREST Accreditation and CMMC Level 1 Compliance appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Symantec has recently identified a sophisticated phishing campaign targeting users of Monex Securities (マネックス証券), a prominent online securities company in Japan formed through the merger of Monex, Inc. and Nikko Beans, Inc. The company provides individual investors with a range of financial services, making it an attractive target for cybercriminals. The phishing operation involves the […]

The post New Phishing Campaign Targets Investors to Steal Login Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a concerning development, CERT-UA, Ukraine’s Computer Emergency Response Team, has reported a series of cyberattacks attributed to the hacker group identified as UAC-0219. These attacks, which have been ongoing since the fall of 2024, utilize an advanced PowerShell-based malware tool named WRECKSTEEL to infiltrate computers and extract sensitive data. The primary targets include government […]

The post UAC-0219 Hackers Leverage WRECKSTEEL PowerShell Stealer to Extract Data from Computers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hunters International, a ransomware group suspected to be a rebrand of the infamous Hive ransomware, has been linked to widespread attacks targeting Windows, Linux, FreeBSD, SunOS, and ESXi systems. Emerging in October 2023, the group has gained notoriety for its sophisticated techniques in data exfiltration and extortion. Cybersecurity researchers have noted similarities between Hunters International’s […]

The post Hunters International Linked to Hive Ransomware in Attacks on Windows, Linux, and ESXi Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a recent cyberattack attributed to the Qilin ransomware group, threat actors successfully compromised a Managed Service Provider (MSP) by mimicking the login page of ScreenConnect, a popular Remote Monitoring and Management (RMM) tool. The attack, which occurred in January 2025, highlights the growing sophistication of phishing campaigns targeting MSPs to exploit downstream customers. Sophos’ […]

The post Qilin Operators Imitate ScreenConnect Login Page to Deploy Ransomware and Gain Admin Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly uncovered cyber-espionage campaign, dubbed Operation HollowQuill, has been identified as targeting academic, governmental, and defense-related networks in Russia using weaponized PDF documents. The operation, tracked by SEQRITE Labs APT-Team, leverages decoy research invitations to infiltrate systems associated with the Baltic State Technical University (BSTU “VOENMEKH”), a key institution for defense and aerospace research […]

The post Operation HollowQuill Uses Malicious PDFs to Target Academic and Government Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cisco has disclosed a significant vulnerability in its AnyConnect VPN Server for Meraki MX and Z Series devices, allowing authenticated attackers to trigger denial-of-service (DoS) conditions. The flaw (CVE-2025-20212) stems from an uninitialized variable during SSL VPN session establishment and affects over 20 hardware models across enterprise networks. Vulnerability Overview Exploiting this bug requires valid VPN credentials. Attackers can […]

The post Cisco AnyConnect VPN Server Vulnerability Allows Attackers to Trigger DoS appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Kaspersky Lab has uncovered a new version of the Triada Trojan, a sophisticated malware targeting Android devices. This variant has been found pre-installed in the firmware of counterfeit smartphones mimicking popular models, often sold at discounted prices through unauthorized online stores. The malware poses significant risks to users, with more than 2,600 cases reported globally, […]

The post New Trinda Malware Targets Android Devices by Replacing Phone Numbers During Calls appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent cyberattack campaign leveraging the DarkCloud stealer has been identified, targeting Spanish companies and local offices of international organizations across various industries. The attackers are spoofing a legitimate Spanish company specializing in mountain and skiing equipment to deliver malicious payloads via email. The emails, which use billing-themed social engineering tactics, feature subjects such as […]

The post DarkCloud Stealer Uses Weaponized .TAR Archives to Target Organizations and Steal Passwords appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers from Bishop Fox have successfully exploited CVE-2024-53704, an authentication bypass vulnerability that affects SonicWall firewalls. This critical flaw allows remote attackers to hijack active SSL VPN sessions, enabling unauthorized network access without requiring user credentials. If left unpatched, the vulnerability poses significant risks to organizations relying on SonicWall devices for their network security. CVE-2024-53704: The […]

The post SonicWall Firewall Vulnerability Enables Unauthorized Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Seashell Blizzard, also known as APT44, Sandworm, and Voodoo Bear, has emerged as a sophisticated adversary targeting critical sectors worldwide. Associated with Russia’s Military Intelligence Unit 74455 (GRU), this group has been active since at least 2009, focusing on sectors such as energy, telecommunications, government, military, manufacturing, and retail. Their operations often involve long-term access […]

The post Russian Seashell Blizzard Targets Organizations Using Custom-Built Hacking Tools appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

EvilCorp, a sanctioned Russia-based cybercriminal enterprise, has been observed collaborating with RansomHub, one of the most active ransomware-as-a-service (RaaS) operations. This partnership has heightened the threat landscape, as both entities leverage advanced tools and techniques to target organizations across the globe. EvilCorp: A History of Cybercrime EvilCorp, led by Maksim Yakubets, has long been notorious […]

The post EvilCorp and RansomHub Collaborate to Launch Worldwide Attacks on Organizations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Web applications are facing a growing challenge from “gray bots,” a category of automated programs that exploit generative AI to scrape vast amounts of data. Unlike traditional malicious bots, gray bots occupy a middle ground, engaging in activities that, while not overtly harmful, often raise ethical and operational concerns. Recent research highlights the scale of […]

The post AI-Powered Gray Bots Target Web Applications with Over 17,000 Requests Per Hour appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated web-skimming campaign has been discovered, leveraging a deprecated Stripe API to validate stolen credit card data before exfiltration. This novel strategy ensures that only valid and usable card details are exfiltrated, making the operation highly efficient and harder to detect. Detailed insights into the attack have revealed alarming trends and vulnerabilities affecting numerous […]

The post New Web Skimming Attack Exploits Legacy Stripe API to Validate Stolen Card Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly discovered attack campaign has exposed vulnerabilities in Apache Tomcat servers, allowing hackers to hijack resources and steal SSH credentials. Researchers from Aqua Nautilus revealed that these attacks, which weaponized botnets within 30 hours of discovery, employ encrypted payloads and advanced persistence mechanisms to infiltrate systems running both Windows and Linux platforms. The attackers […]

The post Hackers Exploit Apache Tomcat Flaw to Hijack Servers and Steal SSH Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Recent cybersecurity findings reveal an alarming increase in malicious activity targeting Juniper’s Session Smart Networking Platform (SSR). According to SANS tech reports, Attackers are focusing their efforts on exploiting devices using the default credentials, “t128” as the username and “128tRoutes” as the password, which are remnants from Juniper’s acquisition of 128 Technologies. The surge in […]

The post Hackers Actively Scanning for Juniper Smart Routers Using Default Passwords appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.