GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

SonicWall disclosed a critical remote code execution vulnerability (CVE-2024-40766) in SonicOS on August 22nd, 2024. While no active exploitation was initially confirmed, the advisory was updated on September 6th to indicate potential active attacks.  The vulnerability, affecting both management access and local SSLVPN accounts, allows attackers to execute arbitrary code on vulnerable devices, which could […]

The post Akira Ransomware Actively Exploiting SonicWall firewall RCE Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

As the new school year begins, students are gearing up for new classes and friendships and diving back into the digital world of video games. However, this virtual playground is not as safe as it seems. Cybercriminals are increasingly targeting young gamers, exploiting their enthusiasm for popular games. This article explores the games most under […]

The post Young Gamers Under Attack, Here is the List of Games Targeted appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Critical vulnerabilities have been identified, potentially exposing systems to arbitrary command execution. These vulnerabilities, cataloged under the Common Vulnerabilities and Exposures (CVE) system, highlight significant security risks that demand immediate attention. Overview of Vulnerabilities IBM’s webMethods Integration Server, a widely used platform for integrating various applications and services, is affected by three significant vulnerabilities. These […]

The post IBM webMethods Integration Server Vulnerabilities Exposes Systems to Arbitrary Command Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

IBM has issued a security bulletin addressing critical vulnerabilities in its MQ Operator and Queue Manager container images. These vulnerabilities, including denial of service and privilege escalation, could allow attackers to bypass security restrictions and disrupt operations. Summary of Vulnerabilities The bulletin highlights several vulnerabilities affecting the IBM MQ Operator and Queue Manager container images. […]

The post Vulnerabilities in IBM Products Let Attackers Exploit & Launch DOS Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybercriminals in Latin America have increased their use of phishing scams targeting business transactions and judicial-related matters.  By leveraging trust and fear, respectively, these attacks often involve malicious links or file attachments that lead to malware infections, which include common tactics like embedded links in emails directing users to fake websites and malicious PDF and […]

The post BBTok Abuses Legitimate Windows Utility Command Tool to Stay Undetected appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Recent research indicates that the Predator spyware, once thought to be inactive due to US sanctions, has resurfaced with enhanced evasion techniques.  Despite efforts to curb its use, Predator continues to be employed in countries like the DRC and Angola, targeting high-profile individuals. The spyware’s new infrastructure makes it harder to track victims, emphasizing the […]

The post Predator Spyware Exploiting “one-click” & “zero-click” Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Tropic Trooper (aka KeyBoy, Pirate Panda, and APT23) is a sophisticated cyberespionage APT group, and it has been active since 2011. This APT group primarily targets government institutions, military agencies, healthcare, transportation, and high-tech industries in Taiwan, the Philippines, and Hong Kong. Cybersecurity analysts at Kaspersky Lab recently discovered that Tropic Trooper has been actively […]

The post Tropic Trooper Attacks Government Organizations to Steal Sensitive Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

NoiseAttack is a new method of secretly attacking deep learning models. It uses triggers made from White Gaussian Noise to create several targeted classes in the model, rather than just one, like most current methods.  This approach also helps avoid being easily detected, which makes it more effective than traditional single-target attacks. The following cybersecurity […]

The post NoiseAttack is a Novel Backdoor That Uses Power Spectral Density For Evasion appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Fog Ransomware group, known for targeting education and recreation sectors, has expanded its scope to attack financial services organizations, where the attackers exploited compromised VPN credentials to deploy the ransomware, targeting both Windows and Linux endpoints.  It has detected the ransomware activity and isolated the affected machines, preventing data encryption and theft. While the […]

The post Fog Ransomware Now Targeting the Financial Sector; Adlumin Thwarts Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

SonicWall has issued an urgent advisory regarding a critical vulnerability in its SonicOS management access and SSLVPN. The flaw, identified as CVE-2024-40766, is actively exploited in the wild. It potentially allows unauthorized access to resources and, under certain conditions, causes firewalls to crash. The vulnerability affects SonicWall Gen 5 and Gen 6 devices and Gen […]

The post SonicWall Access Control Vulnerability Exploited in the Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has released a patch addressing a critical zero-day vulnerability that has been actively exploited. This vulnerability, CVE-2024-32896, is a privilege escalation flaw within the Android Framework component. The patch, part of the Android Security Bulletin for September 2024, underscores Google’s commitment to protecting its users from potential threats. Details of the Vulnerability The most […]

The post Google Patches Actively Exploited Android 0-day Privilege Escalation Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Blackwired, the leading cyber observatory for disruptive cybersecurity technologies, has announced the launch of ThirdWatch℠, a groundbreaking solution to identify direct threats facing an organization and its Third Parties. ThirdWatch℠ is a subject-directed monitoring platform that provides a comprehensive 360-degree view in 3D of existential threats that impact organizations and the associated cyber risks posed […]

The post Blackwired Launches ThirdWatch℠, A Paradigm Shift in Cybersecurity appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A new malicious software named “Fury Stealer” has been detected, posing a significant threat to online security. The malware, created by an unidentified threat actor, is designed to steal sensitive information, including login passwords, from unsuspecting victims. Cybersecurity analyst MonThreat first reported the announcement of this harmful tool on the social media platform X. What […]

The post New Fury Stealer Attacking Victims to Steal Login Passwords appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Live Webcast from Monaco will Explore the Extraordinary Opportunities in an Era of Explosive Innovation and Growth Cyber A.I. Group, Inc., a rapidly growing cybersecurity, artificial intelligence, and IT services firm, specializing in acquiring a diverse range of related service companies globally, announced today its inaugural international investor presentation set for September 12, 2024. The […]

The post Cyber A.I. Group Announces Global Presentation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The D-Link DAP-2310 Wireless Access Point (WAP) has been identified as vulnerable to remote code execution (RCE). Dark Wolf Solutions discovered this vulnerability, which seriously threatens users by allowing attackers to gain unauthorized remote access. This guide delves into the details of the vulnerability, the affected models, and the recommendations for users. Understanding the Vulnerability: […]

The post RCE Vulnerability in D-Link WAP Let Attackers Gain Remote Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The FTC has ordered Verkada to implement a comprehensive information security program to address its lax security practices that allowed a hacker to compromise customer security cameras.  Verkada will pay a $2.95 million fine for violating the CAN-SPAM Act by sending unsolicited commercial emails to prospective customers. The proposed order, which requires court approval, mandates […]

The post Verkada Pay $2.95 Million Failed To Secure Data Lead To Massive Breach appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cyble Research & Intelligence Labs has recently found information about a new type of malware-as-a-service (MaaS) called ‘ManticoraLoader’ in some underground forums. Since August 8, 2024, on forums and Telegram, this MaaS service has been offered by the threat group “DeadXInject.” These actors were also behind the development of the “AresLoader” malware and went after […]

The post New ManticoraLoader – Malware Attacking Citrix Users To Steal Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Head Mare, a Russian-focused hacktivist group, gained notoriety in 2023 by targeting organizations in Russia and Belarus as they employ phishing tactics to distribute WinRAR archives exploiting the CVE-2023-38831 vulnerability, gaining initial access to victims’ systems.  Once inside, they steal sensitive data and encrypt devices using LockBit and Babuk ransomware, whose toolset and tactics align […]

The post Head Mare Hacktivist Group Exploit WinRAR Vulnerability To Encrypt Windows And Linux appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft has identified a North Korean threat actor, Citrine Sleet, exploiting a zero-day vulnerability in Chromium (CVE-2024-7971) to gain remote code execution on cryptocurrency targets.  The threat actor deployed the FudModule rootkit, previously attributed to Diamond Sleet, suggesting potential shared use of malware between these North Korean threat actors. The V8 JavaScript engine in Chrome […]

The post North Korean Hackers Actively Exploiting Chromium RCE Zero-Day In The Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft identified a new custom multi-stage backdoor, “Tickler,” deployed by the Iranian state-sponsored threat actor Peach Sandstorm between April and July 2024.  Targeting sectors like satellite, communications equipment, oil and gas, and government, Tickler has been used to gather intelligence. Peach Sandstorm also conducted password spray attacks on educational and government sectors.  The group employed […]

The post New Custom Malware “Tickler” Attack Satellite Devices appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.