GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

The sophisticated ransomware group Dark Angels, active since 2022, targets large companies for substantial ransom payments by employing third-party ransomware payloads like Babuk, RTM Locker, and RagnarLocker to encrypt files on Windows and Linux systems.  It employs ransomware in a strategic manner, taking into account the potential impact of file encryption, in order to minimize […]

The post Dark Angels Ransomware Attacking Windows And Linux/ESXi Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers have infiltrated the Japan Aerospace Exploration Agency (JAXA), compromising the accounts of several high-ranking officials, including President Hiroshi Yamakawa. This alarming incident is part of a series of cyberattacks targeting JAXA since June 2023, raising concerns about the security of sensitive information related to space exploration and national security. Multiple Attacks Target High-Level Officials […]

The post Hackers Breached Japan Aerospace Company’s President Account appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has rolled out a new update for its Chrome browser, addressing several high-severity security vulnerabilities. The Stable channel has been updated to version 129.0.6668.100/.101 for Windows and Mac and 129.0.6668.100 for Linux. Users will be able to access this update over the coming days and weeks. Security Fixes and Rewards The latest Chrome update […]

The post Chrome Security Update, Patched for High-Severity Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

As hurricanes and other natural disasters feel their presence, the Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning urging individuals to be on high alert for potential malicious cyber activities. The agency highlights the increased risk of fraudulent emails and social media messages that often follow in the wake of major natural disasters. […]

The post CISA Alerted Users to Remain Vigil on Natural Disasters Scam appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has warned regarding two critical zero-day vulnerabilities affecting Microsoft Windows products. These vulnerabilities, identified as CVE-2024-43572 and CVE-2024-43573, pose significant security risks and have been reportedly exploited in the wild. CVE-2024-43572: Microsoft Windows Management Console Remote Code Execution Vulnerability The first vulnerability, CVE-2024-43572, affects the Microsoft Windows Management […]

The post CISA Warns of Microsoft Zero-Day Vulnerabilities Exploited in the Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Partnership aims to help businesses eliminate vulnerable attack surfaces and provide a more streamlined user experience. Badge Inc., the award-winning privacy company enabling Identity without Secrets™, today announced a partnership with CyberArk and the public release of its integration in the CyberArk Marketplace. According to the CyberArk website: The Badge CyberArk Identity integration allows specified […]

The post Badge and CyberArk Announce Partnership to Redefine Privacy in PAM and Secrets Management appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The attackers exploited the EternalBlue vulnerability to gain initial access to the observatory farm, creating a hidden administrative share and executing a malicious batch file named p.bat.  This batch file performed various malicious actions like creating and executing malicious executables, opening firewall ports, setting up port forwarding, and scheduling tasks for persistence.  It also included […]

The post LemonDuck Malware Exploiting SMB Vulnerabilities To Attack Windwos Servers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Recent discoveries in the automotive cybersecurity landscape have unveiled a series of critical zero-day vulnerabilities that could allow attackers to gain full control over vehicle systems. These vulnerabilities, highlighted in a presentation by security researcher Amit Geynis of PlaxidityX, underscore the urgent need for robust cybersecurity measures in the automotive industry. Series of Vulnerabilities The […]

The post Critical Automative 0-Day Flaws Let Attackers Gain Full Control Over Cars appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Awaken Likho APT group launched a new campaign in June of 2024 with the intention of targeting Russian government agencies and businesses by targeting them. The group has abandoned its previous use of the UltraVNC module for remote access and adopted the MeshCentral agent instead, which highlights its adaptability and continuous efforts to evade […]

The post Likho Hackers Using MeshCentral For Remotely Managing Victim Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Casio Computer Co., Ltd. has confirmed that a third party illegally accessed its network on October 5th, leading to significant disruptions in its services. The company disclosed the breach after conducting an internal investigation. The investigation revealed that the unauthorized access resulted in a system failure, affecting the availability of some services. Investigation Underway In […]

The post Hackers Gained Unauthorized Network Access to Casio Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A new open-source scanner has been released to detect a critical vulnerability in the Common Unix Printing System (CUPS), explicitly targeting CVE-2024-47176. This vulnerability and others in the chain pose significant risks as it can allow remote code execution on UNIX and UNIX-like systems. The scanner aims to help system administrators identify and mitigate these […]

The post Open-Source Scanner Released to Detect CUPS Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Comcast Cable Communications LLC has reported that over 237,000 users’ data has been compromised. The breach, which occurred on February 14, 2024, was discovered on July 17, 2024, and has raised concerns about the company’s cybersecurity measures. Details of the Breach The breach was identified by office of the Maine Attorney General, as an external […]

The post Comcast Cyber Attack Impacts 237,000+ Users Personal Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

American Water Works Company, Inc., a leading provider of water and wastewater services, announced that it had detected unauthorized activity within its computer networks. The company confirmed that this activity was the result of a cybersecurity incident. Upon discovery, American Water Works promptly activated its incident response protocols. The company engaged third-party cybersecurity experts to […]

The post American Water Works Cyber Attack Impacts IT Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has launched a pilot program to block malicious sideloading apps. This initiative is part of Google’s ongoing efforts to protect users from financial fraud and cybercrime, which have risen globally, particularly in India. Cybercrime continues to be a significant concern in India, with consumers losing substantial amounts of money to fraudulent activities. According to […]

The post Google Blocked Malicious Sideloading Apps for Indian Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Criminal IP, a renowned Cyber Threat Intelligence (CTI) search engine developed by AI SPERA, has partnered with Hybrid Analysis, a platform that provides advanced malware analysis and threat intelligence, to enhance threat research. This collaboration integrates Criminal IP’s advanced domain scanning capabilities into the Hybrid Analysis platform, providing security professionals with deeper insights and more […]

The post Hybrid Analysis Utilizes Criminal IP’s Robust Domain Data for Better Malware Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The researcher investigated the potential security risks associated with debugging dump files in Visual Studio by focusing on vulnerabilities that could be exploited without relying on memory corruption or specific PDB file components.  After analyzing various libraries used during debug sessions, they discovered a method to execute arbitrary code when debugging managed dump files, which […]

The post RCE Vulnerability (CVE-2024-30052) Allow Attackers To Exploit Visual Studio via Dump Files appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical security vulnerability has been identified in the Cacti network monitoring tool that could allow attackers to execute remote code on affected systems. The vulnerability, detailed in the recent release of Cacti version 1.2.28, highlights the need for system administrators to pay immediate attention to this popular open-source software. Remote Code Execution via Log […]

The post Cacti Network Monitoring Tool Vulnerability Let Attackers Execute Remote Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft and the U.S. Department of Justice (DOJ) have disrupted the operations of Star Blizzard, a notorious Russian hacking group. This collaborative effort marks a significant step in safeguarding global democratic processes from cyber threats. Unsealing the Operation The United States District Court for the District of Columbia recently unsealed a civil action brought by […]

The post Microsoft & DOJ Dismantles Hundreds of Websites Used by Russian Hackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Chinese hackers have infiltrated the networks of major U.S. broadband providers, gaining access to systems used for court-authorized wiretapping. According to a Reuters report, the attack targeted the networks of Verizon Communications, AT&T, and Lumen Technologies. The breach raises severe concerns about the security of sensitive communications data handled by these companies. Prolonged Access and […]

The post Chinese Group Hacked US Court Wiretap Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability in Zimbra’s postjournal service, identified as CVE-2024-45519, has left over 19,600 public Zimbra installations exposed to remote code execution attacks. This vulnerability, with a CVSS score of 9.8, allows unauthenticated attackers to execute arbitrary commands on affected Zimbra installations, posing a significant threat to the security and integrity of these systems. Scans […]

The post 19.6K+ Public Zimbra Installations Vulnerable to Code Execution Attacks – CVE-2024-45519 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.