GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

A significant leap forward in cybersecurity was announced with the introduction of new threat intelligence (TI) capabilities in Security Copilot, aimed at giving organizations a comprehensive ‘360-degree’ view of attacker tools and methodologies. These innovations promise to provide defenders with deeper insights into potential threats, making it easier than ever to detect and neutralize adversaries before […]

The post Microsoft Ignite New 360-Degree Details Attackers Tools & Methods appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Trend Micro has released a critical update addressing a remote code execution (RCE) vulnerability (CVE-2024-51503) in its Trend Micro Deep Security 20 Agent. This vulnerability, identified as a manual scan command injection flaw, allows attackers to execute arbitrary code on affected machines, potentially leading to privilege escalation across the domain. This vulnerability affects the manual […]

The post Trend Micro Deep Security Vulnerable to Command Injection Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent security advisory warning organizations about an active exploitation of a critical vulnerability in Progress Kemp LoadMaster, a popular load balancing and application delivery solution. Designated as CVE-2024-1212, the vulnerability allows remote, unauthenticated attackers to execute arbitrary commands on affected systems, posing a severe threat to organizations […]

The post CISA Warns Kemp LoadMaster OS Command Injection Vulnerability Exploited in Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The U.S. Department of Justice unsealed criminal charges today against Evgenii Ptitsyn, a 42-year-old Russian national accused of being a key figure in the notorious Phobos ransomware syndicate. Ptitsyn was extradited from South Korea and made his initial appearance in the U.S. District Court for the District of Maryland on November 4. Phobos ransomware has been […]

The post Phobos Ransomware Admin as Part of International Hacking Operation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Sonatype, the company behind the popular Nexus Repository Manager, has issued security advisories addressing two critical vulnerabilities affecting Nexus Repository 2.x OSS/Pro versions. These vulnerabilities, identified as CVE-2024-5082 and CVE-2024-5083, could potentially allow attackers to exploit the system through remote code execution (RCE) and cross-site scripting (XSS) attacks. All previous versions up to and including 2.15.1 are affected, […]

The post Sonatype Nexus Repository Manager Hit by RCE & XSS Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity researchers have detected the active exploitation of a zero-day vulnerability in GeoVision devices, which the manufacturer no longer supports. The vulnerability, now designated as CVE-2024-11120, has been assigned a high-severity CVSS score of 9.8 and used by a sophisticated botnet. The security flaw is a pre-authentication command injection vulnerability, which allows attackers to execute arbitrary […]

The post GeoVision 0-Day Vulnerability Exploited in the Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical security flaw has been uncovered in certain TP-Link routers, potentially allowing malicious actors to remotely compromise affected devices. The vulnerability, identified as CVE-2024-11237, affects TP-Link VN020 F3v(T) routers running firmware version TT_V6.2.1021, which are primarily deployed through Tunisie Telecom and Topnet ISPs. Similar variants of the router used in Algeria and Morocco are […]

The post Critical TP-Link DHCP Vulnerability Let Attackers Execute Arbitrary Code Remotely appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

SilkSpecter, a Chinese financially motivated threat actor, launched a sophisticated phishing campaign targeting e-commerce shoppers in Europe and the USA during the Black Friday shopping season.  The campaign leveraged the legitimate payment processor Stripe to steal victims’ Cardholder Data (CHD) and Sensitive Authentication Data (SAD) while allowing legitimate transactions to proceed.  The threat actor used […]

The post Chinese SilkSpecter Hackers Attacking Black Friday Shoppers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The research revealed how threat actors exploit SEO poisoning to redirect unsuspecting users to malicious e-commerce websites, leveraging multiple SEO malware families to achieve their goal. Three distinct threat actor groups were identified, each employing a unique malware family, with one group utilizing multiple families. One malware family’s C&C servers shared limited e-commerce site sets, […]

The post Cybercriminals Launch SEO Poisoning Attack to Lure Shoppers to Fake Online Stores appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Black Basta, a prominent ransomware group, has rapidly gained notoriety since its emergence in 2022 by employing sophisticated social engineering techniques to infiltrate target networks, often leveraging advanced malware to compromise systems undetected.  Once inside, Black Basta extorts victims with ransom demands, threatening to publicly release sensitive data if payment is not made. The group’s […]

The post Black Basta Ransomware Leveraging Social Engineering For Malware Deployment appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CVE-2024-52301 is a critical vulnerability identified in Laravel, a widely used PHP framework for building web applications. The vulnerability allows unauthorized access by exploiting improperly validated inputs, potentially leading to privilege escalation, data tampering, or full system compromise. Given Laravel’s widespread adoption across industries, the discovery is a cause for concern, as it could leave […]

The post Critical Laravel Vulnerability CVE-2024-52301 Allows Unauthorized Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability has been discovered in the popular “Really Simple Security” WordPress plugin, formerly known as “Really Simple SSL,” putting over 4 million websites at risk. The flaw, identified as CVE-2024-10924, exposes websites using the plugin to potential remote attacks, enabling threat actors to gain unauthorized administrative access. Vulnerability Overview The vulnerability affects versions 9.0.0 […]

The post 4M+ WordPress Websites to Attacks, Following Plugin Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert and added two new vulnerabilities related to Palo Alto Networks to its Known Exploited Vulnerabilities Catalog. These vulnerabilities, CVE-2024-9463 and CVE-2024-9465, are reportedly actively exploited by malicious cyber actors. CISA emphasizes that both vulnerabilities pose significant risks, particularly to federal systems. CVE-2024-9463: Palo […]

The post CISA Warns of Actors Exploiting Two Palo Alto Networks Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has once again raised the bar for mobile security by introducing two new AI-powered real-time protection features for Android users. With a strong commitment to user privacy and safety, these innovative tools aim to shield users from scams, fraud, malware, and dangerous apps, all while ensuring that users remain in control of their data. […]

The post Google Unveils New Intelligent, Real-Time Protections for Android Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Daren Li, 41, a dual citizen of China and St. Kitts and Nevis, and a resident of China, Cambodia, and the United Arab Emirates, pleaded guilty today to one count of conspiracy to commit money laundering for his role in a scheme to launder millions of dollars in proceeds of cryptocurrency investment scams. “Daren Li […]

The post Chinese National Faces 20 Years of Jail Time for Laundering Millions in Crypto appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google Cloud has announced a significant step forward in its commitment to transparency and security by stating it will begin issuing Common Vulnerabilities and Exposures (CVEs) for critical vulnerabilities found in its cloud services. This move, which underscores Google’s dedication to helping enterprises and government agencies protect against potential security threats, is set to enhance […]

The post Google to Issue CVEs for Critical Cloud Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

GitLab has rolled out critical security updates to address multiple vulnerabilities in its Community Edition (CE) and Enterprise Edition (EE), fixing issues that could lead to unauthorized access to Kubernetes clusters and other potential exploits. The latest patch versions, 17.5.2, 17.4.4, and 17.3.7, are now available, and GitLab strongly urges all self-managed users to upgrade […]

The post GitLab Patches Critical Flaws Leads to Unauthorized Access to Kubernetes Cluster appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly discovered zero-day vulnerability, CVE-2024-43451, has been actively exploited in the wild, targeting Windows systems across various versions. This critical vulnerability, uncovered by the ClearSky Cyber Security team in June 2024, has been linked to attacks aimed specifically at Ukrainian organizations. The exploit allows malicious actors to gain control of a system through seemingly innocuous […]

The post Windows 0-Day Exploited in Wild with Single Right Click appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Keeping track of who has access and managing their permissions has gotten a lot more complicated because there are so many users, devices, and systems involved. Using automation for managing who can access what helps companies stay secure, work more efficiently, and follow the rules without having to do everything manually. With automation, businesses can […]

The post Automating Identity and Access Management for Modern Enterprises appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

If you’re looking to make some extra cash or to start a business, you should consider online reselling. Online reselling is growing rapidly at 11% each year- according to ThredUp.  When partaking in online reselling it is important to have access to tools that will make your business run more efficiently and smoothly. For example, […]

The post Finding The Right E-Commerce Platform – Comparing Reselling Solutions appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.