GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

A new and insidious threat has surfaced in the cybersecurity landscape as Darktrace’s Threat Research team uncovers PumaBot, a Go-based Linux botnet meticulously designed to exploit embedded Internet of Things (IoT) devices. Unlike conventional botnets that cast a wide net through indiscriminate internet scans, PumaBot employs a highly targeted strategy, fetching a curated list of […]

The post New Linux PumaBot Targets IoT Devices with SSH Credential Brute-Force Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A pro-Ukrainian hacktivist group known as BO Team, also operating under aliases such as Black Owl, Lifting Zmiy, and Hoody Hyena, has emerged as a formidable threat to Russian organizations in 2025. This group, which publicly declared its intentions via a Telegram channel in early 2024, has been implicated in a series of devastating cyberattacks […]

The post Russian Hacker Black Owl Targets Critical Industries to Steal Financial Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a chilling revelation for cybersecurity professionals, the Russian Market has solidified its position as the leading hub for stolen credentials, fueling a dramatic rise in credential theft attacks worldwide. According to a 2024 report by ReliaQuest’s GreyMatter Digital Risk Protection (DRP) service, over 136,000 customer alerts were raised concerning potential stolen credentials on this […]

The post Top Russian Dark Web Market Tools Drive Surge in Credential Theft Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity researchers have shed light on the often-underestimated vulnerabilities in containerized environments, emphasizing the critical role of host-based log analysis in uncovering sophisticated attacks. Containers, widely adopted for their ability to encapsulate application dependencies and ensure deployment consistency, are frequently perceived as highly isolated. However, as experts have now demonstrated, this isolation is far from […]

The post Researchers Reveal Container-Based Attacks Through Host-Based Log Analysis appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The manufacturing sector has emerged as a prime target for cyber attackers in 2024, with a staggering 71% surge in active threat actors compared to the previous year, according to a recent report by Forescout Technologies. Between 2024 and the first quarter of 2025, 29 threat actors were actively targeting this critical infrastructure sector, with […]

The post State-Sponsored Groups Intensify Attacks on Manufacturing Sector and OT Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Android Security Bulletin for June 2025, published on June 2, details a series of high-severity vulnerabilities affecting a wide range of Android devices. Security patch levels of 2025-06-05 or later address all reported issues, with source code patches set for imminent release to the Android Open Source Project (AOSP) repository. The most critical vulnerability […]

The post Android Security Update Addresses High-Severity Privilege Escalation Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aembit, the workload identity and access management (IAM) company, today announced a major expansion of its platform to support Microsoft environments. With this launch, enterprises can now enforce secure, policy-based access for software workloads and agentic AI running on Windows Server, Active Directory, Microsoft Entra ID, and Azure – while extending that same access model […]

The post Aembit Extends Workload IAM to Microsoft Ecosystem, Securing Hybrid Access for Non-Human Identities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The North Face, a prominent outdoor fashion brand under VF Outdoor, LLC, detected unusual activity on its website, thenorthface.com. Following a swift and thorough investigation, the company identified the incident as a small-scale credential stuffing attack. Unauthorized Access Incident on thenorthface.com Credential stuffing is a sophisticated cyberattack where malicious actors use stolen authentication credentials typically […]

The post North Face Fashion Brand Alerts Customers to Credential Stuffing Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A severe vulnerability in Apple’s iOS activation infrastructure has been uncovered, posing a significant risk to device security during the setup phase. This flaw, identified in the iOS Activation Backend at the endpoint https://humb.apple.com/humbug/baa, allows attackers to inject unauthenticated XML .plist payloads without any form of sender verification or signature validation. Tested on the latest […]

The post Apple iOS Activation Flaw Enables Injection of Unauthenticated XML Payloads appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical improper authentication vulnerability has been discovered in ConnectWise ScreenConnect, tracked as CVE-2025-3935 and mapped to CWE-287 (Improper Authentication). This flaw affects all ScreenConnect versions up to and including 25.2.3, exposing them to ViewState code injection attacks that could result in remote code execution (RCE) if machine keys are compromised. Technical Details: Vulnerability Summary […]

The post CISA Alerts on ConnectWise ScreenConnect Authentication Vulnerability Actively Exploited appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent wave of malicious NPM packages has emerged as a significant threat to cryptocurrency users, specifically targeting Ethereum wallet holders. Cybersecurity researchers have uncovered a sophisticated campaign where attackers leverage the widely-used Node Package Manager (NPM) ecosystem to distribute harmful code disguised as legitimate libraries. This attack vector exploits the trust developers place in […]

The post Malicious NPM Packages Exploit Ethereum Wallets with Obfuscated JavaScript appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A high-severity denial-of-service (DoS) vulnerability (CVE-2025-48866) has been identified in ModSecurity’s Apache module (mod_security2), threatening web application firewall stability. Rated 7.5/10 on the CVSS scale, this flaw enables attackers to crash servers by exploiting argument sanitization logic, with patches now available in version 2.9.10. Sanitisation Logic Flaw The vulnerability stems from ModSecurity’s sanitiseArg action, designed […]

The post New ModSecurity WAF Vulnerability Enables Attackers to Crash Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A formidable new strain of ransomware, dubbed Lyrix, has recently surfaced, posing a significant threat to Windows users worldwide. Cybersecurity researchers have identified Lyrix as a highly advanced malicious software designed to encrypt critical files and demand substantial ransoms for decryption keys. New Threat Emerges with Sophisticated Tactics Unlike typical ransomware, Lyrix incorporates cutting-edge evasion […]

The post Lyrix Ransomware Targets Windows Users with Advanced Evasion Techniques appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent post on an underground forum has brought renewed attention to the escalating arms race between cybercriminals and anti-bot security vendors. The solicitation, offering USD 1,500 for a working bypass of PerimeterX (PX) anti-fraud protections—specifically targeting the “hold CAPTCHA” on Microsoft’s signup.live.com—highlights the growing commoditization and sophistication of CAPTCHA evasion toolkits. Exploiting Anti-Bot Weaknesses […]

The post Threat Actors Target PerimeterX CAPTCHA to Automate Microsoft Account Creation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

June 3, 2025 – SolarWinds Worldwide, LLC has announced the release of Dameware 12.3.2, a critical service update focused on bug fixes, security enhancements, and library upgrades. The release, dated June 2, 2025, addresses several technical issues reported by users and security researchers, further strengthening the reliability and safety of Dameware remote support solutions. Security […]

The post SolarWinds Dameware Vulnerability Could Let Attackers Gain Elevated Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hewlett-Packard Enterprise (HPE) has issued a critical security bulletin (HPESBST04847 rev. 1) warning users of multiple high-impact vulnerabilities in its StoreOnce Software, specifically affecting versions before 4.3.11. The vulnerabilities, if exploited, could allow attackers to bypass authentication, execute arbitrary code remotely, perform server-side request forgery (SSRF), delete files, and access sensitive information via directory traversal. […]

The post Critical HPE StoreOnce Flaws Allow Remote Code Execution by Attackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity researchers have identified a sophisticated malware campaign utilizing deceptive CAPTCHA interfaces to distribute EddieStealer, a Rust-based information stealing malware that targets sensitive user data across multiple platforms. The attack employs the ClickFix technique, tricking victims into executing malicious commands through fake verification prompts, representing a significant evolution in social engineering tactics used by cybercriminals. […]

The post Threat Actors Leverage ClickFix Technique to Deploy EddieStealer Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Advanced threat actors have developed sophisticated stealth syscall execution techniques that successfully bypass modern security infrastructure, including Event Tracing for Windows (ETW), Sysmon monitoring, and Endpoint Detection and Response (EDR) systems. These techniques combine multiple evasion methods such as call stack spoofing, ETW API hooking, and encrypted syscall execution to render traditional detection mechanisms ineffective, […]

The post Stealth Syscall Technique Allows Hackers to Evade Event Tracing and EDR Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

On May 30, 2025, CERT Polska coordinated the public disclosure of three significant security vulnerabilities affecting preinstalled Android applications on smartphones from Ulefone and Krüger&Matz. These flaws, tracked as CVE-2024-13915, CVE-2024-13916, and CVE-2024-13917, expose users to risks ranging from unauthorized device resets to theft of sensitive PIN codes and privilege escalation by malicious applications. Technical […]

The post Preinstalled Android Apps Found Leaking PINs and Executing Malicious Commands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recently disclosed vulnerability in IBM InfoSphere DataStage, tracked as CVE-2025-1499, has raised concerns across the enterprise data management sector. The flaw centers on the cleartext storage of sensitive credential information, potentially exposing database authentication details to authenticated users. Below, we break down the technical aspects, impact, and available remediation for this issue. ClearText Storage […]

The post IBM DataStage Bug Exposes Database Credentials in Plain Tex appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.