GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Multiple vulnerabilities have been discovered in the Realtek SD card reader driver, RtsPer.sys, affecting a wide range of laptops from major manufacturers like Dell and Lenovo. These vulnerabilities have been present for years, allowing non-privileged users to exploit the system by leaking kernel memory and reading and writing physical memory via Direct Memory Access (DMA). […]

The post Vulnerabilities in Realtek SD Card Reader Driver Impacts Dell, Lenovo, & Others Laptops appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

GitLab has announced the release of critical security updates for its Community Edition (CE) and Enterprise Edition (EE). The updates address a high-severity HTML injection vulnerability that could lead to cross-site scripting (XSS) attacks. The patched versions, 17.5.1, 17.4.3, and 17.3.6, are now available for immediate upgrade.  The vulnerability, CVE-2024-8312, affects all GitLab CE/EE versions […]

The post GitLab Patches HTML Injection Flaw Leads to XSS Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Multiple Xerox printer models, including EC80xx, AltaLink, VersaLink, and WorkCentre, have been identified as vulnerable to an authenticated remote code execution (RCE) attack. This vulnerability tracked as CVE-2024-6333, poses a significant risk, fully allowing attackers with administrative web credentials to compromise affected devices with root privileges.  Timo Longin from SEC Consult’s Vienna office and Tamas […]

The post Xerox Printers Vulnerable to Remote Code Execution Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cisco has issued a critical security advisory regarding a vulnerability in its Adaptive Security Appliance (ASA) Software. The vulnerability could allow remote attackers to execute commands with root-level privileges. The flaw, CVE-2024-20329, affects devices running a vulnerable release of Cisco ASA Software with the CiscoSSH stack enabled. Vulnerability Details – CVE-2024-20329 The vulnerability arises from […]

The post Cisco ASA Devices Vulnerable to SSH Remote Command Injection Flaw appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has released several security patches for its Chrome browser, addressing critical vulnerabilities that malicious actors could exploit. The update is now available on the Stable channel, with version 130.0.6723.69/.70 for Windows and Mac and version 130.0.6723.69 for Linux. The rollout is expected to reach users over the coming days and weeks.  The Extended Stable […]

The post Google Patches Multiple Chrome Security Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Grayscale Investments, a prominent crypto asset manager, has reportedly suffered a data breach affecting 693,635 user records. The breach was first reported on a hacking forum and has raised significant alarm among users and cybersecurity experts. According to the post on X by user H4ckManac, the breach occurred in October 2024 and involved the theft […]

The post Grayscale Investments Data Breach Exposes 693K User Records Reportedly Affected appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A database containing over 1,000 email accounts associated with the National Health Service (NHS) has reportedly been leaked and is being sold on a dark web forum. This breach, which includes sensitive information such as passwords and personal details, has raised significant privacy and security concerns across the United Kingdom. Dark Web Intelligence, which monitors […]

The post Threat Actors Allegedly Selling Database of 1,000 NHS Email Accounts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers from Avast have uncovered a vulnerability in the cryptographic schema of the Mallox ransomware, a particularly active variant between 2023 and early 2024. This flaw allows victims of this specific Mallox variant to decrypt their files without paying a ransom. However, this window of opportunity is limited. The ransomware developers rectified the flaw in […]

The post Mallox Ransomware Vulnerability Lets Victims Decrypt Files appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recently discovered vulnerability in Red Hat’s NetworkManager, CVE-2024-8260, has raised concerns in the cybersecurity community because it could allow unauthorized users to gain root access. This security flaw, publicly disclosed on August 30, 2024, and last modified on September 19, 2024, has been classified as moderately severe and assigned a Common Vulnerability Scoring System […]

The post Red Hat NetworkManager Flaw Allows Hackers to Gain Root Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Tor Browser 14.0 has been officially launched. It brings significant updates and new features to enhance user privacy and browsing experience. This release is built on Firefox ESR 128, integrating a year’s worth of updates and improvements from Firefox while also addressing over 200 issues identified during the annual ESR transition audit. New Features for […]

The post Tor Browser 14.0 Released With New Android Circuit Options appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

INE Security offers essential advice to protect digital assets and enhance security. As small businesses increasingly depend on digital technologies to operate and grow, the risks associated with cyber threats also escalate. INE Security, a leading provider of cybersecurity training and certifications, today shared its cybersecurity training for cyber hygiene practices for small businesses, underscoring […]

The post INE Security Launches New Training Solutions to Enhance Cyber Hygiene for SMBs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Callback phishing is a two-step attack involving phishing emails and phone calls. Victims are lured into calling a bogus number in the email, where attackers impersonate legitimate entities and trick victims into divulging sensitive information or downloading malware. The BazarCall scheme employed a text-based phishing email to lure victims into calling a malicious phone number. […]

The post Beware Of Callback Phishing Attacks Google Groups That Steal Login Details appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Recent campaigns targeting victims through social engineering tactics utilize LUMMA STEALER with GHOSTPULSE as its loader. By tricking victims into executing a series of Windows keyboard shortcuts, malicious JavaScript is executed, leading to the execution of a PowerShell script.  The script downloads and executes a GHOSTPULSE payload, which is now a single executable file containing […]

The post GHOSTPULSE Hides Within PNG File Pixel Structure To Evade Detections appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Vulnhuntr, a static code analyzer using large language models (LLMs), discovered over a dozen zero-day vulnerabilities in popular open-source AI projects on Github (over 10,000 stars) within hours.  These vulnerabilities include Local File Inclusion (LFI), Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), Remote Code Execution (RCE), Insecure Direct Object Reference (IDOR), and Arbitrary File Overwrite […]

The post New AI Tool To Discover 0-Days At Large Scale With A Click Of A Button appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

IcePeony, a China-nexus APT group, has been active since 2023, targeting India, Mauritius, and Vietnam by exploiting SQL injection vulnerabilities to compromise systems using webshells and backdoors, leveraging a custom IIS malware called IceCache. The attackers accidentally exposed a server containing sensitive data, including a zsh_history file that revealed their detailed attack timeline and techniques. […]

The post IcePeony Hackers Exploiting Public Web Servers To Inject Webshells appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Federal Bureau of Investigation (FBI) has apprehended Eric Council Jr., a 25-year-old resident of Athens, Alabama, for his alleged involvement in the unauthorized takeover of the U.S. Securities and Exchange Commission’s (SEC) X account in January 2024. The incident caused a brief but substantial fluctuation in Bitcoin’s value, highlighting the potential impact of social […]

The post FBI Arrested Hacker Behind the Takeover of the U.S. SEC X account appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated malware loader known as Bumblebee has resurfaced, posing a significant threat to corporate networks worldwide. Cybersecurity researchers at Netskope Threat Labs have uncovered a new infection chain linked to Bumblebee. This marks its first appearance since Operation Endgame, a major Europol-led crackdown on malware botnets in May 2024. Bumblebee, first identified by Google’s […]

The post Hackers Use Bumblebee Malware to Gain Access to Corporate Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers impersonated the cybersecurity firm ESET to distribute destructive wiper malware. The campaign, which began on October 8, 2024, utilized phishing emails that appeared to originate from ESET’s legitimate domain. The malicious emails, purportedly from “ESET’s Advanced Threat Defense Team,” warned recipients that state-backed attackers were targeting their devices. The emails offered a download link […]

The post Hackers Mimic as ESET to Deliver Wiper Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A 43-year-old Italian-Australian man, one of the FBI’s most wanted hackers, was apprehended at Milan’s Malpensa Airport after evading capture for over three years. The arrest, carried out by Milan State Police officers, marks a significant victory in the global fight against cybercrime. The suspect, whose identity remains undisclosed, is alleged to be a key […]

The post FBI’s Most Wanted Hacker Arrested in Malpensa appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Fair Vote Canada has disclosed a data leak affecting approximately 34,000 email addresses. While the organization assures that no financial information was compromised, the incident has raised concerns about data security practices. Fair Vote Canada revealed that the breach involved data from 2020, which inadvertently became publicly accessible via an external website. The exposed information […]

The post Fair Vote Canada Data Leak: 34k Email Addresses Leaked appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.