GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Jenkins, an open source automation server, has been found to have two security issues, one of which is a critical flaw that, if exploited, might lead to remote code execution (RCE). An attacker may be able to read arbitrary files from the Jenkins controller file system, which could disclose confidential data or open the door […]

The post Critical Jenkins Vulnerabilities Expose Servers To RCE Attack appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has raised alarms over malicious cyber actors’ active exploitation of the Cisco Smart Install feature. This legacy feature, originally designed to simplify the deployment of new switches, is now being leveraged by hackers to gain unauthorized access to system configuration files, posing significant security risks to organizations worldwide. […]

The post CISA Warns of Cisco Smart Install Feature Actively Exploited by Hackers appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Such is the industry, that RISC-V, an open and extensible instruction set architecture (ISA) has now invaded the CPU market, opening up many opportunities for new entrants. It has gained a lot of traction through Linux kernel support as well as being adopted by consumer devices and cloud platforms. However, RISC-V’s flexible nature has led […]

The post GhostWrite Vulnerability Let Hackers Read And Write Any Part Of The Computer’s Memory appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Every software and operating system vendor has been implementing security measures to protect their products. This is due to the fact that threat actors require a lot of time to find a zero-days but require less time to find a readily available exploit for a vulnerable software. This brought them to the thought where they […]

The post Windows Zero-day Flaw Let Hackers Downgrade Fully Updated Systems To Old Vulnerabilities appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated mobile attack vector involves a deceptive iOS update that masquerades as the legitimate iOS 18, tricking users into installing malicious code.  The persistence mechanism allows threat actors to maintain covert control over the compromised device, facilitating data exfiltration and continued device exploitation without user awareness.  Understanding the intricate workings of such attacks necessitates […]

The post Hackers Exploit iOS Settings to Trigger Fake iOS Updates on Hijacked Devices appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Ransomware affiliates are forming alliances to recoup losses from unreliable partners. A prominent example involves ALPHV extorting $22 million from Change Healthcare but withholding funds from its data exfiltration affiliate.  To remedy this, the affiliate has reportedly partnered with RansomHub to demand additional payment from Change Healthcare for data deletion, showcasing a new tactic in […]

The post DISPOSSESSOR And RADAR Ransomware Emerging With RaaS Model appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

MongoDB has disclosed a critical vulnerability that could allow attackers to escalate privileges on systems running certain versions of MongoDB. This vulnerability, CVE-2024-7553, affects multiple versions of MongoDB Server, C Driver, and PHP Driver. The flaw stems from incorrect validation of files loaded from a local untrusted directory, particularly impacting systems running on Windows. CVE-2024-7553 […]

The post MongoDB Vulnerabilities Let Attackers Escalate Privileges appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Authorities have dismantled a “laptop farm” in Nashville, Tennessee, allegedly used to support the Democratic People’s Republic of Korea’s (DPRK) weapons program. Matthew Isaac Knoot, 38, has been charged with multiple offenses, including conspiracy to cause damage to protected computers and money laundering. The Scheme Unveiled According to court documents, Knoot participated in a complex […]

The post Authorities Dismantled North Korean Remote IT Worker Laptop Farm appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated threat activity cluster, STAC6451, has been identified targeting Microsoft SQL servers. This cluster, primarily observed by Sophos Managed Detection and Response (MDR) teams, has compromised organizations by exploiting SQL server vulnerabilities. The attackers have been using a combination of brute-force attacks, command execution, and lateral movement techniques to infiltrate and compromise networks. This […]

The post STAC6451 Hacker Hijacking Microsoft SQL Servers to Compromise Organizations appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A record-breaking Distributed Denial of Service (DDoS) attack unleashed 419 terabytes of malicious traffic over 24 hours. This unprecedented event, which began at 8:05 UTC on July 15, 2024, targeted a financial services company in Israel, showcasing the evolving threat landscape of cyber warfare. A Sustained Assault The attack commenced with a small probing attempt, […]

The post Record Breaking DDoS Attack 419 TB of Malicious Traffic Within 24-Hours appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Cisco has issued a security advisory warning users of its Small Business SPA300 and SPA500 Series IP Phones about multiple critical vulnerabilities that could allow remote attackers to execute arbitrary commands or cause denial of service (DoS) conditions. These vulnerabilities affect all software releases for the mentioned series, and no software updates or workarounds are […]

The post Critical Cisco Small Business IP Phone Flaws Exposes Users to Remote Attacks appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The Tor Project has announced the release of Tor Browser 13.5.2, now available for download from the Tor Browser download page and the distribution directory. This latest version brings crucial security updates and several enhancements to improve user experience and security. Key Security Updates One of the most significant updates in Tor Browser 13.5.2 is […]

The post Tor Browser 13.5.2 Released: What’s New! appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Deep learning models analyzing API sequences for Windows malware detection face challenges due to evolving malware variants. A group of researchers recently proposed the MME framework, which enhances the existing detectors by leveraging API knowledge graphs and system resource encodings.  Utilizing contrastive learning, MME captures similar malicious semantics in evolved malware samples.  MME Framework Experimental […]

The post Researchers Proposed MME Framework To Enhance API Sequence-Based Malware Detection appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Amazon’s e-commerce platforms and cloud services form a digital ecosystem requiring a strong cybersecurity framework. Amazon, which has a vast online presence covering multiple domains and services, is at great risk of being attacked by advanced cyber threats. For this reason, Amazon uses an innovative mixture of the latest technologies and old security measures to […]

The post AWS Launches Mithra To Detect Malicious Domains Across Systems appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability in Microsoft 365 (formerly Office 365) has been found that allows malicious actors to bypass anti-phishing measures. One of the anti-phishing features available in Exchange Online Protection (EOP) and Microsoft Defender to Office 365 enterprises is the ‘First Contact Safety Tip.’ In the first contact safety tip, users are cautioned when they get […]

The post Microsoft 365 Vulnerability Let Hackers Bypass Anti-phishing Feature appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Apple has announced changes to its macOS Gatekeeper security feature with the release of macOS Sequoia. These changes aim to bolster user security by making it more challenging to run potentially harmful software. Stricter Gatekeeper Policies In macOS Sequoia, Apple has eliminated the ability for users to override Gatekeeper by Control-clicking on software that isn’t […]

The post Apple Tightens macOS Gatekeeper Controls in macOS Sequoia appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Seemingly new ransomware, Zola, is the newest version of the Proton family that appeared in March 2023.  This rebranding highlights the unbroken trend of ransomware’s evolution.  Cybersecurity researchers at Acronis identified and warned of the new Zola ransomware, which was found using multiple tools to disable Windows Defender. Zola Ransomware During a cyber attack investigation, […]

The post New Zola Ransomware Using Multiple Tools to Disable Windows Defender appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The notorious threat actor group XDSpy has been reported to target organizations in Russia and Moldova. The sophisticated phishing malware campaign aims to steal sensitive data through well-coordinated attack chains. Spear-phishing emails as the Initial Vector According to the Broadcom report, the attack begins with spear-phishing emails sent to unsuspecting victims. These emails typically contain […]

The post XDSpy Hackers Attacking Users to Steal Sensitive Data appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Google has announced a critical security update for its Chrome browser, addressing several vulnerabilities that malicious actors could exploit. The Stable channel has been updated to version 127.0.6533.99/.100 for Windows and Mac and 127.0.6533.99 for Linux. This update will be rolled out over the coming days and weeks. Security Fixes and Rewards The latest Chrome […]

The post Chrome Security Update: Patch for Multiple Vulnerabilities appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Researchers have identified a new Chameleon campaign targeting hospitality employees, where the attackers employed a deceptive tactic, disguising malicious software as a CRM app.  File names uploaded to VirusTotal revealed evidence of targeted attacks, including a reference to a prominent international restaurant chain. This suggests a tailored approach to compromising specific organizations within the hospitality […]

The post Chameleon Device-Takeover Malware Attacking IT Employees appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.