GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Criminal IP, a globally recognized Cyber Threat Intelligence (CTI) solution by AI SPERA, has launched its Criminal IP Malicious Link Detector add-in on the Microsoft Marketplace. This cutting-edge tool provides real-time phishing email detection and URL blocking for Microsoft Outlook, adding an essential layer of email security in the face of increasing cyber threats. Advances in generative […]

The post Criminal IP Launches Real-Time Phishing Detection Tool on Microsoft Marketplace appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A new and sophisticated phishing scam has been uncovered, leveraging Microsoft 365 domains to trick users into compromising their PayPal accounts. The attack exploits legitimate-looking sender addresses and URLs, making it harder for victims to recognize the phishing attempt. Security experts, including Chief Information Security Officers (CISOs), have raised alarms about the growing menace, urging […]

The post New PayPal Phishing Abusing Microsoft365 Domains for Sophisticated Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The malicious Southeast Asian APT group known as OceanLotus (APT32) has been implicated in a sophisticated attack that compromises the privacy of cybersecurity professionals. A recent investigation by the ThreatBook Research and Response Team revealed that a popular privilege escalation tool utilized by cybersecurity experts had been backdoored, leading to significant data breaches and identity […]

The post APT32 Hacker Group Attacking Cybersecurity Professionals Poisoning GitHub appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Malicious packages “solanacore,” “solana login,” and “walletcore-gen” on npmjs target Solana developers with Windows trojans and malware for keylogging and data exfiltration via Slack webhooks and ImgBB APIs. These recently discovered crypto-stealers exhibit unusual transparency, openly revealing their malicious intent within their code, which stark contrast to the typical obfuscation techniques employed by such malware […]

The post Malicious Solana Packages Attacking Devs Abusing Slack And ImgBB For Data Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A Data Leak Site (DLS) belonging to a new extortion group named Morpheus, which has stolen data from Arrotex Pharmaceuticals (Australia) on December 12th and PUS GmbH (Germany) on December 20th.  Morpheus offers stolen data for sale on the DLS, requiring buyers to create accounts. While a researcher suggests a link to Hellcat ransomware, there […]

The post New Great Morpheus Hacker Group Claims Hacking Into Arrotex Pharmaceuticals And PUS GmbH appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Green Bay Packers, Inc. has confirmed that its online merchandise store was hacked, leading to the theft of credit card data from over 8,500 customers. The incident, which occurred on September 23, 2024, was discovered nearly three months later on December 20, 2024. An official notification was sent to affected individuals on January 6, […]

The post Green Bay Packers Store Hacked – Thousands of Credit Cards Data Stolen appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

is this website safe? In this digital world, Check a website is safe is the most critical concern since there are countless malicious websites available everywhere over the Internet, and it is tough to find a trustworthy website.  We need to browse smart and ensure the site is not dangerous by using Multiple approaches. There are […]

The post Is this Website Safe: How to Check Website Safety – 2025 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

GitLab has announced the release of critical updates to its Community Edition (CE) and Enterprise Edition (EE), specifically versions 17.7.1, 17.6.3, and 17.5.5. These updates are essential for maintaining security and stability across all self-managed GitLab installations and should be implemented immediately. The company has already rolled out the patched version on GitLab.com, and GitLab […]

The post Gitlab Patches Multiple Vulnerabilities Including Resource Exhaustion & User Manipulation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A series of serious vulnerabilities have been identified in Palo Alto Networks’ Expedition migration tool, which could allow attackers to gain unauthorized access to sensitive data, including cleartext passwords and device configurations. The vulnerabilities, detailed in multiple Common Vulnerabilities and Exposures (CVE) reports, highlight significant risks for organizations using this tool for transitioning to Palo […]

The post Palo Alto Networks Expedition Tool Vulnerability Let Attackers Access Cleartext Passwords appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Ivanti released a critical security advisory addressing vulnerabilities in its Connect Secure, Policy Secure, and ZTA Gateways products. This advisory reveals the existence of two significant vulnerabilities, CVE-2025-0282 and CVE-2025-0283, which have been exploited in the wild, necessitating immediate action from users. Critical Vulnerability: CVE-2025-0282 CVE-2025-0282 is a stack-based buffer overflow vulnerability that affects Ivanti […]

The post Ivanti 0-Day Vulnerability Exploited in Wild-Patch Now appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Wireshark development team announced the release of Wireshark version 4.4.3, a critical update that brings several bug fixes and enhancements to this widely used network protocol analyzer. Renowned for its ability to troubleshoot, analyze, and educate users about network protocols, Wireshark continues to evolve, making it an indispensable tool for network professionals. Key Bug […]

The post Wireshark 4.4.3 Released: What’s New! appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Since 2013, the advanced persistent threat (APT) known as Kimsuky, which the North Korean government sponsors, has been actively conducting cyber espionage operations.  It employs advanced malware, spearphishing, and social engineering tactics to infiltrate target networks and exfiltrate sensitive data, focusing on South Korea and other countries with strategic interests in the Korean Peninsula. A […]

The post Researchers Reveal Exploitation Techniques of North Korean Kimsuky APT Group appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Gravy Analytics, a prominent player in location intelligence, has reportedly fallen victim to a significant cyberattack. Initial investigations suggest that hackers have exfiltrated sensitive data, raising concerns over consumer privacy and data security. Founded to enhance business decision-making through location-based insights, Gravy Analytics collects anonymized location data from mobile devices. This information is utilized to […]

The post Gravy Analytics Hit by Cyberattack, Hackers Allegedly Stole data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has released an update for its Chrome web browser, advancing to version 131.0.6778.264/.265 for Windows and Mac, and 131.0.6778.264 for Linux. This update addresses a series of critical security vulnerabilities and will be rolled out gradually over the coming days and weeks. Users are encouraged to update their browsers to benefit from these vital […]

The post Chrome Security Update – Patch for Multiple Security Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The distinction between nation-state actors and organized cybercriminals is becoming increasingly blurred. Both groups now leverage similar tactics, techniques, and procedures (TTP) in their cyber operations, resulting in a complex landscape where motivations and objectives often intersect. This article delves into the intricate dynamics between these two types of cyber operatives, examining their methods, motivations, […]

The post How Nation-State Actors and Organised Hackers Involving in Their Ways of Cyber Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Washington State Attorney General Bob Ferguson filed a consumer protection lawsuit against T-Mobile for its alleged failure to secure sensitive personal information of over 2 million residents. This lawsuit comes in the wake of a massive data breach that exposed the personal details of Washingtonians, putting them at heightened risk of fraud and identity theft. […]

The post Washington State Filed Lawsuit Against T-Mobile Massive Data Breach appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Stalwart is an innovative open-source mail server solution that supports JMAP, IMAP4, POP3, and SMTP, offering a comprehensive suite of features designed for security, performance, and scalability. Built with Rust, Stalwart stands out for its modern architecture that emphasizes safety and speed, making it an ideal choice for both individual users and enterprises. Features 1. […]

The post Stalwart – All-in-One Open-Source Secure Mail Server with JMAP, IMAP4, POP3, and SMTP appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A browser extension named PRIVESHIELD automatically creates isolated profiles to group websites based on browsing history and user interaction, which disrupts cross-website tracking practices by preventing cookie-matching methods used for targeted advertising.  The evaluation results show that PRIVESHIELD is more than 90% effective in preventing ad exchanges from sharing user information. In Real-time Bidding (RTB), […]

The post PriveShield – Advanced Privacy Protection with Browser Profile Isolation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent investigation revealed that the Akira and Fog ransomware groups are actively exploiting the SonicWall NSA vulnerability (CVE-2024-40766) to compromise organizations.  As of December 23, 2024, over 100 companies are suspected to have been victimized by these groups through this vulnerability. Despite the disclosure in September 2024, a significant number of devices, exceeding 48,933, […]

The post 1000’s Of SonicWall Devices Remain Vulnerable To CVE-2024-40766 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers discovered critical BIOS/UEFI vulnerabilities in the Illumina iSeq 100 DNA sequencer, where the device utilizes an outdated firmware implementation with CSM mode lacking essential security features like Secure Boot and firmware write protections.   The vulnerability window allows attackers to exploit the system, potentially overwriting the firmware to either disable the device or install malicious […]

The post Critical BIOS/UEFI Vulnerabilities Allow Attackers To Overwrite System Firmware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.