GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

AI SPERA, a leading Cyber Threat Intelligence (CTI) company, has announced a strategic partnership with Hackers Central, a major cybersecurity management service provider in Mexico. The announcement marks a significant step in AI SPERA’s strategy to broaden its international footprint. Hackers Central, a prominent cybersecurity management firm in Mexico, offers comprehensive security services including vulnerability […]

The post AI SPERA and Hackers Central Partner to Expand Mexico’s Security Market with ‘Criminal IP ASM’ appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The notorious Lazarus hacker group has been identified as exploiting a zero-day vulnerability in Microsoft Windows, specifically targeting the Windows Ancillary Function Driver for WinSock (AFD.sys). This vulnerability, cataloged as CVE-2024-38193, was discovered by researchers Luigino Camastra and Milanek in early June 2024. The flaw allowed the group to gain unauthorized access to sensitive system […]

The post Lazarus Hacker Group Exploited Microsoft Windows Zero-day appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Researchers have uncovered a critical vulnerability within the Linux kernel’s dmam_free_coherent() function. This flaw, identified as CVE-2024-43856, stems from a race condition caused by the improper order of operations when freeing Direct Memory Access (DMA) allocations and managing associated resources. The vulnerability poses a significant risk, as it could allow attackers to bypass CPU protections and gain […]

The post Linux Kernal Vulnerability Let Attackers Bypass CPU & Gain Read/Write Access appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Researchers from the University of Rochester have unveiled a novel technique to defend against cache side-channel attacks, a prevalent threat in modern computing systems. The new method, named RollingCache, promises to enhance the security of shared systems by dynamically altering the cache access patterns, making it difficult for attackers to exploit cache contention. Cache Side […]

The post Researchers Found a New Technique to Defend Cache Side Channel Attacks appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Researchers uncovered a new malware campaign dubbed BeaverTail, a North Korean cyber espionage malware family primarily focusing on job seekers. Initially identified as a JavaScript-based info stealer, it has since morphed into a native macOS version that pretends to be legitimate software like the MiroTalk video call service. This malware is designed to steal confidential […]

The post BeaverTail Malware Attacking Windows Users Via Weaponized Games appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The imminent release of Cisco HyperShield this month marks a pivotal evolution in the cybersecurity landscape. As an “AI-native” security architecture, HyperShield promises to redefine traditional security protocols through its automated proactive cybersecurity measures and AI-driven security solutions. However, the effectiveness of this sophisticated technology heavily relies on the skilled deployment by IT and Information […]

The post Why Training is Critical to Implementing Cisco HyperShield appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

APT42 is an APT group that is believed to be backed by the Iranian government, and this group primarily focuses on cyber espionage. Besides this, APT42 is also well-known for other illicit activities. Apart from cyber espionage, they also conduct phishing campaigns, and data exfiltration against a wide range of entities. However, specifically, they target […]

The post Iranian APT42 Group Launch A Massive Phishing Campaign To Attack U.S. Presidential Election appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A ransomware group known as RansomHub has been found deploying a new tool designed to disable endpoint detection and response (EDR) systems. This tool, EDRKillShifter, represents a significant advancement in the tactics used by cybercriminals to bypass security measures and execute ransomware attacks. Although a recent attack using this tool was thwarted, the discovery underscores […]

The post Ransomware Group Added a New EDR Killer Tool to their arsenal appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity researchers have uncovered a sophisticated malspam campaign targeting unsuspecting users through email and phone calls. Attackers are leveraging popular platforms like AnyDesk and Microsoft Teams to gain unauthorized access to victims’ computers, raising alarms about cybercriminals’ evolving tactics. The Attack Methodology The campaign begins with an email bombardment, commonly referred to as an “email […]

The post News Malspam Attacks AnyDesk and Microsoft Teams appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The U.S. Department of Commerce’s National Institute of Standards and Technology (NIST) has taken a step in safeguarding digital security against future quantum threats. By finalizing a set of three encryption algorithms, NIST aims to protect sensitive information from the potential capabilities of quantum computers, which could break existing encryption methods. The Journey Toward Quantum-Resistant […]

The post NIST Finalizes 3 Algorithms to Combat Future Quantum Cyber Threats appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

IBM recently disclosed critical vulnerabilities affecting its QRadar Suite Software and IBM Cloud Pak for Security. These vulnerabilities, if exploited, could allow attackers to execute arbitrary code remotely, potentially leading to severe security breaches. The company has addressed these issues in its latest software release and urges users to update their systems immediately. Vulnerability Details […]

The post Critical Vulnerabilities in IBM QRadar Allow Attackers to Execute Arbitrary Code Remotely appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

In July 2022, Microsoft patched a well-known PPL bypass flaw, initially discovered by Ionescu and Forshaw.  This allowed protection circumvention without kernel code execution, and this update now broke the PPLdump PoC. SCRT Team researchers at Orange Cyberdefense recently discovered a new exploit that enables threat actors to bypass LSASS protection. This new exploit was […]

The post BYOVDLL – A New Exploit That Is Bypassing LSASS Protection appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

APT42 (aka Damselfly, UNC788, CALANQUE, Charming Kitten) is a sophisticated Iranian state-sponsored cyber espionage group.  This Advanced Persistent Threat (APT) group is known for its ability to carry out long-term and focused digital surveillance campaigns. The major targets of such actions are often government bodies, defense contractors, and critical infrastructure. Cybersecurity researchers at Cyfirma recently […]

The post Iranian APT42 Actors Conducting World Wide Surveillance Operations appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Earth Baku, an APT actor who initially focused on the Indo-Pacific region, has grown its activities extensively since late 2022. The group has increased its presence in Europe, the Middle East, and Africa (MEA), having also confirmed engagements in Italy, Germany, UAE and Qatar. Cybersecurity researchers at Trend Micro recently discovered that Earth Baku has […]

The post Earth Baku Using Customized Tools To Maintain Persistence And Steal Data appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft announced that Face Check with Microsoft Entra Verified ID is now generally accessible. It is available standalone and as part of the Microsoft Entra Suite, a comprehensive identity solution that combines network access, identity protection, governance, and identity verification features to provide Zero Trust access. Notably, earlier this year, the business provided a public […]

The post Face Check With Microsoft Entra Verified ID Is Now Generally Available, Microsoft appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Cyberattacks have highlighted vulnerabilities in GraphQL APIs, leading to significant security breaches in various organizations. GraphQL, a query language for APIs, allows clients to request specific data, making it a popular choice for developers. However, its flexibility also opens doors for potential exploitation. This article delves into the methods used by attackers to exploit GraphQL […]

The post Hackers Exploited by GraphQL Vulnerabilities to Compromise Organizations appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

NetSPI discovered that Microsoft Outlook is vulnerable to authenticated remote code execution (CVE-2024-21378) due to improper validation of synchronized form objects.  By manipulating a configuration file, attackers can automatically register and instantiate a custom form, specifying a malicious executable as the form server, which bypasses Outlook‘s faulty allow-listing mechanism, enabling remote code execution on the […]

The post 0-Click Outlook RCE Vulnerability Triggered When Email is Clicked – Technical Analysis appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Two men living a life of luxury in Florida have been charged with cyber fraud after authorities became suspicious of their extravagant spending habits. Russian national Pavel Kublitskii and Kazakhstan national Alexandr Khodyrev, who arrived in the U.S. in 2022 seeking asylum, are now facing serious charges related to their alleged involvement in dark web […]

The post Dark Web Marketplace Admins Busted Following Luxury Life appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Researchers studied the infrastructure behind clickbait PDF attacks by analyzing a large dataset of real-world PDFs to identify clickbait ones and their linked infrastructure and found that attackers use various hosting types, including object storage, website hosting, and CDNs.  The attackers exploit vulnerabilities in outdated software components to upload malicious PDFs, while researchers also investigated […]

The post Clickbait PDFs, An Entry point For Multiple Web Based Attacks appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Hackers always keep updating their tools and add new ones to adapt to evolving security measures, bypass defenses, and exploit newly discovered vulnerabilities.  Staying ahead of the cybersecurity advancements is completely important for them as doing so helps them maintain their ability to carry out successful cyber attacks. Cybersecurity researchers at The DFIR Report recently […]

The post Hackers Toolkit Unveiled, Comprehensive Tools For Various Cyber Attacks appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.