GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

The Iranian threat actor APT34, also known as GreenBug, has recently launched a new campaign targeting Iraqi government entities by employing a custom toolset, including a novel IIS backdoor and DNS tunneling protocol.  The malware used in this campaign shares similarities with previously reported APT34 malware families, such as Karkoff, Saitama, and IIS Group 2.  […]

The post Threat Actors Using New Malware Toolkit That Involves IIS Backdoor, DNS Tunneling appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

SCATTERED SPIDER, a ransomware group, leverages cloud infrastructure and social engineering to target insurance and financial institutions by using stolen credentials, SIM swaps, and cloud-native tools to gain and maintain access, impersonating employees to deceive victims.  Their partnership with BlackCat has enhanced their ability to target Western organizations due to their understanding of Western business […]

The post New Developer-As-A-Service In Hacking Forums Empowering Phishing And Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Phishing remains a significant concern for both individuals and organizations. Recent findings from ThreatLabz have highlighted the alarming prevalence of phishing attacks targeting major brands, with Google, Microsoft, and Amazon emerging as the top three most impersonated companies. This article explores the intricacies of these phishing tactics, the role of certificate authorities and domain registrars, […]

The post Hackers Mimic Google, Microsoft & Amazon Domains for Phishing Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Criminal IP, a distinguished leader in Cyber Threat Intelligence (CTI) search engine developed by AI SPERA, announced that it has successfully integrated its IP address-related risk detection data with IPLocation.io, one of the most visited IP analysis and lookup tools on the internet. Through the integration, IPLocation.io, a prominent IP address geolocation tracker platform with […]

The post Criminal IP Teams Up with IPLocation.io to Deliver Unmatched IP Solutions to Global Audiences appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CAMO, or Commercial Applications, Malicious Operations, highlights attackers’ increasing reliance on legitimate IT tools to bypass security defenses, which can be used for various malicious activities like ransomware distribution, network scanning, lateral movement, and C2 establishment. It can mislead security personnel during investigations, leading to successful compromises. Organizations should use GreyMatter Hunt packages to establish […]

The post Threat Actors Exploiting Legitimate Software For Stealthy Cyber Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers discovered flaws in the Autel MaxiCharger EV charger that make it potential to execute arbitrary code on the device by just placing it within Bluetooth range. The vulnerabilities tracked as CVE-2024-23958, CVE-2024-23959, and CVE-2024-23967 were identified during Pwn2Own Automotive 2024 in Tokyo. The Autel MaxiCharger has significantly the most extensive hardware feature set, including […]

The post Researchers Hacked Car EV Chargers To Execute Arbitrary Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Siemens ProductCERT has disclosed a critical vulnerability in its Industrial Edge Management systems. The vulnerability, identified as CVE-2024-45032, poses a significant risk by allowing unauthenticated remote attackers to impersonate other devices within the system. This flaw has been rated with a maximum CVSS score of 10.0, indicating its severe potential impact. CVE Details The vulnerability […]

The post Siemens Industrial Edge Management Vulnerable to Authorization Bypass Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

RansomHub has recently employed a novel attack method utilizing TDSSKiller and LaZagne, where TDSSKiller, traditionally used to disable EDR systems, was deployed to compromise network defenses.  Subsequently, LaZagne was used to harvest credentials from compromised systems, which is unprecedented in RansomHub’s operations and was not documented in CISA’s recent advisory.  The attack sequence began with […]

The post New RansomHub Attack Killing Kaspersky’s TDSSKiller To Disable EDR appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Recent research has revealed a new Android malware targeting mnemonic keys, a crucial component for cryptocurrency wallet recovery. Disguised as legitimate apps, this malware scans devices for images containing mnemonic phrases. Once installed, it covertly steals personal data like text messages, contacts, and images.  The research has identified over 280 such malicious apps targeting Korean […]

The post New Android Spyware As TV Streaming App Steals Sensitive Data From Devices appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Adobe has issued a crucial security update for its Acrobat and Reader software on Windows and macOS platforms. This update, identified as APSB24-70, addresses multiple vulnerabilities that could allow attackers to execute arbitrary code on affected systems. The update was published on September 10, 2024, and carries a priority rating of 3, indicating the importance […]

The post Adobe Security Update, Multiple Vulnerabilities Patched appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Opus’ innovative engine integrates AI-driven intelligence, contextual data and automated decision-making to drive precise, efficient vulnerability remediation.  Opus Security, the leader in unified cloud-native remediation, today announced the launch of its Advanced Multi-Layered Prioritization Engine, designed to revolutionize how organizations manage, prioritize and remediate security vulnerabilities. Leveraging AI-driven intelligence, deep contextual data and automated decision-making […]

The post Opus Security Elevates Vulnerability Management With its AI-Powered Multi-Layered Prioritization Engine appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Three Chinese state-backed threat groups, APT10, GALLIUM, and Stately Taurus, have repeatedly employed a modified version of the open-source network scanning tool NBTscan over the past decade.  NBTscan, designed for network discovery and forensics, sends NetBIOS status queries to IP addresses within a specified range.  By analyzing the responses, it extracts valuable information like IP […]

The post Chinese Hackers Using Open Source Tools To Launch Cyber Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

As cyber threats grow, small to medium-sized businesses (SMBs) are disproportionately targeted. According to the recent Hiscox annual cyber readiness report, 41% of SMBs in the US fell victim to a cyberattack in 2023, a figure that has nearly doubled since 2021. INE Security, a global leader in cybersecurity training and certifications, recognizes this as […]

The post Small Business, Big Threats: INE Security Launches Initiative to Train SMBs to Close a Critical Skills Gap appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The air-gap data protection method isolates local networks from the internet to mitigate cyber threats and protect sensitive data, which is commonly used by organizations dealing with confidential information such as personal, financial, medical, legal, and biometric data.  By eliminating internet connectivity, air-gap networks provide a high level of security against external attacks, ensuring compliance […]

The post Researchers Details Attacks On Air-Gaps Computers To Steal Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In August 2024, researchers detected a malicious Google Chrome browser infection that led to the distribution of LummaC2 stealer malware that utilized a drive-by download of a ZIP archive containing an MSI app packaging file, which, when executed, installed the malicious software on the victim’s system. A MSI file communicates with a remote server to […]

The post Beware Of Malicious Chrome Extension That Delivers Weaponized ZIP Archive appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about three critical vulnerabilities currently being exploited in the wild. These vulnerabilities affect a range of widely used software and systems, posing significant risks to organizations and individuals alike. CISA advises immediate action to mitigate these threats. CVE-2016-3714: ImageMagick Improper Input Validation Vulnerability […]

The post CISA Issues Warning About Three Actively Exploited Vulnerabilities in the Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Charles Darwin School in Biggin Hill, London, has been forced to close its doors following a sophisticated ransomware attack temporarily. The incident has left students and parents uncertain as the school works to restore its systems and secure sensitive data. The Cyber Attack: What Happened? The ransomware attack was first detected last week when staff […]

The post High School in London Forced to Sends Students Home Following Ransomware Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Zengo X Research Team has uncovered a critical flaw in WhatsApp’s “View Once” feature, designed to enhance user privacy by allowing media to be viewed only once before disappearing. This flaw, now exploited in the wild, raises significant concerns about the security of the world’s most popular instant messaging app. Discovery and Disclosure The […]

The post WhatsApp’s “View Once” Feature Flaw Exploited in the Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors have allegedly leaked sensitive data from Capgemini, a global leader in consulting, technology services, and digital transformation. The claims surfaced on the dark web, raising alarms about the potential impact on the company’s operations and client confidentiality. According to a post by DarkWebInformer on X (formerly Twitter), threat actors have taken responsibility for […]

The post Threat Actors Allegedly Claiming Leak of Capgemini Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Groundbreaking technology integrates Post-Quantum Cryptography and SSL security for the next generation of Face-based eID solutions and Face-protected Digital Public Key Infrastructure (DPKI) Seventh Sense, a pioneer in advanced cybersecurity solutions, announces the launch of SenseCrypt, a revolutionary new platform that sets a new standard in secure, privacy-preserving identity verification. SenseCrypt introduces a first-of-its-kind face-based […]

The post Seventh Sense Unveils Revolutionary Privacy-Preserving Face-Based Public Key Infrastructure and eID Solution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.