GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Cluster Bravo, despite its brief initial activity, subsequently targeted 11 organizations in the same region, as researchers found that these attackers used compromised environments within the same vertical for malware staging.  Cluster Charlie, after being disrupted, returned with new techniques, including using the HUI loader to inject Cobalt Strike beacons into mstsc.exe.  They employed open-source […]

The post Crimson Palace Returns With New Hacking Tolls And Tactics appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Kali Linux 2024.3, the most recent iteration of Offensive Security’s highly regarded Debian-based distribution designed for ethical hacking and penetration testing, has been released. This new release is a major update that includes 11 new hacking tools and focuses on behind-the-scenes updates and optimizations. According to the Kali Linux team, there have been a few […]

The post Kali Linux 2024.3 Released With New Hacking Tools appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A hacker known as Amadon has reportedly managed to bypass the safety protocols of ChatGPT, a popular AI chatbot developed by OpenAI, to generate instructions for creating homemade explosives. This incident raises significant questions about generative AI technologies’ security and ethical implications. How It Happened Amadon employed a technique known as “jailbreaking” to manipulate ChatGPT […]

The post Hacker Tricks ChatGPT to Get Details for Making Homemade Bombs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Citrix released a security bulletin (CTX691485) detailing two critical vulnerabilities in the Citrix Workspace app for Windows. These vulnerabilities, identified as CVE-2024-7889 and CVE-2024-7890, pose significant security risks. They allow local privilege escalation that could enable attackers to gain SYSTEM-level access. The severity of these vulnerabilities has been classified as high, prompting urgent attention from […]

The post Citrix Workspace App Vulnerable to Privilege Escalation Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent advanced malware campaign leverages a phishing attack to deliver a seemingly benign Excel file that exploits CVE-2017-0199. By exploiting this vulnerability in Microsoft Office, attackers are able to embed malicious code within the file using OLE objects.  It utilizes encryption and obfuscation techniques to conceal the malicious payload. Upon opening the file, the […]

The post Beware Of Weaponized Excel Document That Delivers Fileless Remcos RAT appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability in the Apache OFBiz framework has been actively exploited by hackers. The flaw designated CVE-2024-45195, allows for unauthenticated remote code execution (RCE), posing a threat to organizations relying on OFBiz for their operations. CVE-2024-45195 – Vulnerability Details The CVE-2024-45195 vulnerability arises from missing view authorization checks in the web application. This enables […]

The post Hackers Exploiting Apache OFBiz RCE Vulnerability in the Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Docker has addressed critical vulnerabilities in Docker Desktop that could allow attackers to execute remote code. These vulnerabilities, identified as CVE-2024-8695 and CVE-2024-8696, highlight the ongoing risks associated with software extensions and the importance of timely updates. CVE-2024-8695: Crafted Extension Description Vulnerability The first vulnerability, CVE-2024-8695, involves a flaw in handling crafted extension descriptions or […]

The post Docker Desktop Vulnerabilities Let Attackers Execute Remote Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Fortinet, a leading cybersecurity firm, has confirmed a data breach involving a third-party cloud service after a hacker, known by the alias “Fortibitch,” claimed to have stolen 440GB of data. The breach primarily affects a small number of Fortinet’s Asia-Pacific customers. The compromised data is reportedly stored on a cloud-based shared file drive. The hacker […]

The post Fortinet Confirms Data Breach Following Hacker’s Claim of 440GB Data Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

SquareX has been named a winner of the prestigious Rising Star category in CybersecAsia Readers’ Choice Awards 2024 Awards, due to its outstanding achievements in its innovative browser security solutions. For the past 5 years, this award has been honouring cybersecurity organizations that are making a significant impact and delivering ground breaking solutions to help […]

The post SquareX, Awarded Rising Star Category in CybersecAsia Readers’ Choice Awards 2024 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a strategic move to bolster its cybersecurity capabilities, Mastercard has announced an agreement to acquire Recorded Future, a leading global threat intelligence company, for $2.65 billion. This acquisition, from Insight Partners, aims to enhance Mastercard’s existing suite of services focused on cyber resilience and trust within the digital economy. Recorded Future, renowned as the […]

The post Mastercard to Acquire Threat Intel Firm Recorded Future for $2.65 Billion appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Exploiting memory corruption vulnerabilities in server-side software often requires knowledge of the binary and environment, which limits the attack surface, especially for unknown binaries and load-balanced environments.  Successful exploitation is challenging due to the difficulty of preparing the heap and deploying ROP chains without this information.  Researchers discovered vulnerabilities in the Kakadu JPEG 2000 library, […]

The post Critical Vulnerabilities in JPEG 2000 Library Let Attackers Execute Remote Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

RCE attacks on WhatsUp Gold exploited the Active Monitor PowerShell Script to execute malicious code, as the vulnerabilities CVE-2024-6670 and CVE-2024-6671, patched on August 16, were leveraged to execute remote access tools and gain persistence. Despite the availability of patches, many organizations were slow to apply them, leading to widespread attacks. The attackers abused NmPoller.exe […]

The post Hackers Exploiting Progress WhatsUp RCE Vulnerability In The Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The investment will drive the company’s advancement of scalable workload access management for enterprises Aembit, the leading non-human identity and access management (IAM) company, has secured $25 million in Series A funding, bringing its total capital raised to nearly $45 million. Acrew Capital led the round, with participation from existing investors Ballistic Ventures, Ten Eleven […]

The post Aembit Raises $25 Million in Series A Funding for Non-Human Identity and Access Management appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cody Thomas developed Apfell, an open-source macOS post-exploitation framework, in 2018 and evolved into Mythic, a cross-platform framework that addresses the limitations of existing tools.  Mythic provides a unified interface for managing agents written in various languages for different platforms, which allows for flexibility and customization, enabling the creation of agents with specific functionalities.  Currently, […]

The post New Loki Backdoor Attacking macOS Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CosmicBeetle, a threat actor specializing in ransomware, has recently replaced its old ransomware, Scarab, with ScRansom, a custom-built ransomware that continues to evolve.  The threat actor has been actively targeting SMBs worldwide, exploiting vulnerabilities to gain access to their systems and experimenting with the leaked LockBit builder, attempting to leverage its reputation by impersonating the […]

The post CosmicBeetle Exploiting Old Vulnerabilities To Attacks SMBs All Over The World appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Iranian threat actor APT34, also known as GreenBug, has recently launched a new campaign targeting Iraqi government entities by employing a custom toolset, including a novel IIS backdoor and DNS tunneling protocol.  The malware used in this campaign shares similarities with previously reported APT34 malware families, such as Karkoff, Saitama, and IIS Group 2.  […]

The post Threat Actors Using New Malware Toolkit That Involves IIS Backdoor, DNS Tunneling appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

SCATTERED SPIDER, a ransomware group, leverages cloud infrastructure and social engineering to target insurance and financial institutions by using stolen credentials, SIM swaps, and cloud-native tools to gain and maintain access, impersonating employees to deceive victims.  Their partnership with BlackCat has enhanced their ability to target Western organizations due to their understanding of Western business […]

The post New Developer-As-A-Service In Hacking Forums Empowering Phishing And Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Phishing remains a significant concern for both individuals and organizations. Recent findings from ThreatLabz have highlighted the alarming prevalence of phishing attacks targeting major brands, with Google, Microsoft, and Amazon emerging as the top three most impersonated companies. This article explores the intricacies of these phishing tactics, the role of certificate authorities and domain registrars, […]

The post Hackers Mimic Google, Microsoft & Amazon Domains for Phishing Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Criminal IP, a distinguished leader in Cyber Threat Intelligence (CTI) search engine developed by AI SPERA, announced that it has successfully integrated its IP address-related risk detection data with IPLocation.io, one of the most visited IP analysis and lookup tools on the internet. Through the integration, IPLocation.io, a prominent IP address geolocation tracker platform with […]

The post Criminal IP Teams Up with IPLocation.io to Deliver Unmatched IP Solutions to Global Audiences appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CAMO, or Commercial Applications, Malicious Operations, highlights attackers’ increasing reliance on legitimate IT tools to bypass security defenses, which can be used for various malicious activities like ransomware distribution, network scanning, lateral movement, and C2 establishment. It can mislead security personnel during investigations, leading to successful compromises. Organizations should use GreyMatter Hunt packages to establish […]

The post Threat Actors Exploiting Legitimate Software For Stealthy Cyber Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.