GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

A new method of attack has emerged that leverages WebDAV technology to host malicious files. This approach, which facilitates the distribution of the Emmenhtal loader—also known as PeakLight—has been under scrutiny since December 2023. The loader is notorious for its stealthy, memory-only execution and its role in distributing various infostealers worldwide. This article delves into […]

The post Webdav Malicious File Hosting Powering Stealthy Malware Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aembit, the non-human identity and access management (IAM) company, today released its 2024 Non-Human Identity Security Report, a definitive survey highlighting how organizations currently manage and protect non-human identities (NHIs) – such as applications, scripts, and service accounts. The report reveals a stunning, widespread reliance on outdated methods and manual practices that fail to provide […]

The post Aembit Unveils 2024 Survey Report Highlighting Major Gaps in Securing Non-Human Identities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Authorities have successfully dismantled “Ghost,” an encrypted communication platform allegedly used by cybercriminals worldwide. The operation, led by the Australian Federal Police (AFP) and involving international law enforcement agencies, marks a major victory in the ongoing battle against transnational crime networks. Operation Kraken The takedown of Ghost was part of “Operation Kraken,” a meticulously planned […]

The post Authorities Seized Ghost Communication Platform Used by Cyber Criminals appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding two critical vulnerabilities affecting Microsoft Windows MSHTML and Progress WhatsUp Gold. These vulnerabilities, identified as CVE-2024-43461 and CVE-2024-6670, are reportedly being exploited widely, posing significant risks to users and organizations worldwide. CVE-2024-43461: Microsoft Windows MSHTML Platform Spoofing Vulnerability The first vulnerability, CVE-2024-43461, […]

The post CISA Warns of Windows MSHTML & Progress WhatsUp Gold Flaw Exploited Widely appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Two campaigns targeting Selenium Grid’s default lack of authentication are underway, as threat actors are exploiting this vulnerability to deploy malicious payloads, including exploit kits, cryptominers, and proxyjackers. Selenium Grid’s widespread use among developers, coupled with its default lack of security, makes it an attractive target for attackers seeking to compromise systems and gain unauthorized […]

The post Hackers Exploiting Selenium Grid Tool To Deploy Exploit Kit & Proxyjacker appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

North Korean hackers have been identified as targeting LinkedIn users to deliver sophisticated malware known as RustDoor. This cyber threat underscores the evolving tactics of state-sponsored hacking groups, mainly from North Korea, which have increasingly turned to social engineering on professional networking platforms to achieve their objectives. The Social Engineering Tactics North Korean hackers are […]

The post North Korean Hackers Attacking LinkedIn Users to Deliver RustDoor Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Honeypots, decoy systems, detect and analyze malicious activity by coming in various forms and can be deployed on cloud platforms to provide insights into attacker behavior, enhancing security. The study proposes to create an interactive honeypot system using a Large Language Model (LLM) to mimic Linux server behavior. By fine-tuning the LLM with a dataset […]

The post Creating An AI Honeypot To Engage With Attackers Sophisticatedly appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Russian ransomware group Key Group, active since early 2023, is targeting organizations globally, as their modus operandi involves encrypting files and stealing data before demanding ransom via Telegram. The group utilizes the .NET-based Chaos ransomware builder to create their malware, which poses a significant risk to organizations worldwide due to the potential for data […]

The post Key Russian Hacker Group Attacking Users With .NET Built Ransomware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Song Wu, a Chinese national, has been indicted on charges of wire fraud and aggravated identity theft. The charges stem from his alleged involvement in a sophisticated spear-phishing campaign targeting sensitive U.S. research and technology. This case highlights ongoing concerns about cybersecurity and protecting valuable intellectual property. Decoding Compliance: What CISOs Need to Know – Join […]

The post Chinese Hackers Charged for Multi-Year Spear-Phishing Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Analysis of millions of real-world NHI secrets by Entro Security Labs reveals widespread, significant risks, emphasizes need for improved Secrets Management security practices    Entro Security, pioneer of the award-winning Non-Human Identity (NHI) and Secrets Management platform, today released its research report, “2025 State of Non-Human Identities and Secrets in Cybersecurity.” The Entro Security Lab found […]

The post Entro Security Labs Releases Non-Human Identities Research Security Advisory appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Millions of D-Link routers are at risk due to several critical vulnerabilities. Security researcher Raymond identified these vulnerabilities, which have been assigned multiple CVE IDs and pose severe threats to users worldwide. D-Link has issued urgent firmware updates to mitigate these risks. Users are strongly advised to update their devices immediately to protect against potential […]

The post Critical Vulnerabilities Impact Million of D-Link Routers, Patch Now! appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Adobe released eight security updates in September 2024, addressing 28 vulnerabilities in various products, as ColdFusion received a critical patch to mitigate a code execution flaw rated at CVSS 9.8.  Other critical vulnerabilities were found in Photoshop, Illustrator, Premier Pro, After Effects, Audition, and Media Encoder. Adobe prioritizes these updates for deployment due to their […]

The post Windows MSHTML Zero-Day Vulnerability Exploited In The Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability in Azure API Management (APIM) has been identified. It allows attackers to escalate privileges and access sensitive information. This issue arises from a flaw in the Azure Resource Manager (ARM) API, which permits unauthorized access to critical resources. This article delves into the specifics of the vulnerability, its implications, and the steps taken […]

The post Azure API Management Vulnerability Let Attackers Escalate Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Medusa, a relatively new ransomware group, has gained notoriety for its dual-pronged online presence. Unlike its peers, Medusa maintains a visible profile on the surface web alongside its traditional dark web operations.  This unusual strategy has amplified its impact, with frequent updates on its blog and Telegram channel showcasing its rapid pace of attacks and […]

The post Medusa Ransomware Exploiting Fortinet Flaw For Sophisticated Ransomware Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly discovered vulnerability in the Spring Framework has been identified, potentially allowing attackers to access any file on the system. This vulnerability tracked as CVE-2024-38816, affects applications using the functional web frameworks WebMvc.fn or WebFlux.fn. It is classified as a path traversal vulnerability and poses a high risk to affected systems. CVE-2024-38816-The Vulnerability The […]

The post Spring Framework Vulnerability Let Attackers obtain Any Files from the System appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has called upon federal agencies and organizations to take immediate action concerning a critical vulnerability affecting Ivanti Cloud Services Appliance (CSA) 4.6. The vulnerability, CVE-2024-8190, poses a significant threat as it allows cyber threat actors to execute OS command injections, potentially gaining control over affected systems. CVE-2024-8190: A […]

The post CISA Urges Agencies to Upgrade or Remove End-of-Life Ivanti Appliance appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cluster Bravo, despite its brief initial activity, subsequently targeted 11 organizations in the same region, as researchers found that these attackers used compromised environments within the same vertical for malware staging.  Cluster Charlie, after being disrupted, returned with new techniques, including using the HUI loader to inject Cobalt Strike beacons into mstsc.exe.  They employed open-source […]

The post Crimson Palace Returns With New Hacking Tolls And Tactics appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Kali Linux 2024.3, the most recent iteration of Offensive Security’s highly regarded Debian-based distribution designed for ethical hacking and penetration testing, has been released. This new release is a major update that includes 11 new hacking tools and focuses on behind-the-scenes updates and optimizations. According to the Kali Linux team, there have been a few […]

The post Kali Linux 2024.3 Released With New Hacking Tools appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A hacker known as Amadon has reportedly managed to bypass the safety protocols of ChatGPT, a popular AI chatbot developed by OpenAI, to generate instructions for creating homemade explosives. This incident raises significant questions about generative AI technologies’ security and ethical implications. How It Happened Amadon employed a technique known as “jailbreaking” to manipulate ChatGPT […]

The post Hacker Tricks ChatGPT to Get Details for Making Homemade Bombs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Citrix released a security bulletin (CTX691485) detailing two critical vulnerabilities in the Citrix Workspace app for Windows. These vulnerabilities, identified as CVE-2024-7889 and CVE-2024-7890, pose significant security risks. They allow local privilege escalation that could enable attackers to gain SYSTEM-level access. The severity of these vulnerabilities has been classified as high, prompting urgent attention from […]

The post Citrix Workspace App Vulnerable to Privilege Escalation Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.