GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Zoom Video Communications has recently disclosed several critical vulnerabilities affecting its Workplace Apps, SDKs, and Rooms Clients. These vulnerabilities, identified in multiple security bulletins, pose significant risks, potentially allowing attackers to escalate privileges on affected systems. The issues impact users across various platforms, including Windows, macOS, Linux, iOS, and Android. High-Risk Vulnerabilities Identified Among the […]

The post Zoom Fixes Critical Vulnerabilities Allowing Privilege Escalation appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Scammers have exploited the popularity of former President Donald Trump and tech mogul Elon Musk to deceive unsuspecting victims. According to a recent tweet by Avast Threat Labs, the fraudulent scheme involved hijacking YouTube accounts to broadcast fake interviews, and within just a few hours, it amassed approximately $9,000. Hijacked YouTube Accounts Fuel Deception The […]

The post CryptoScam Strikes Misusing Trump & Musk Interview appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

FBI Cleveland announced a significant victory against cybercrime by disrupting “Radar/Dispossessor,” a notorious ransomware group led by the online moniker “Brain.” This operation dismantled three servers in the United States, three in the United Kingdom, and 18 in Germany. Additionally, authorities seized eight U.S.-based criminal domains and one German-based domain. The takedown was a collaborative […]

The post Authorities Seized Dispossessor Ransomware Servers appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A new Ransomware-as-a-Service (RaaS) platform known as DeathGrip has surfaced, offering sophisticated ransomware tools to aspiring cyber criminals. This service is being promoted through Telegram and various underground forums, providing a gateway for individuals with limited technical expertise to launch potent ransomware attacks. DeathGrip’s emergence underscores the growing accessibility of cybercrime tools, posing an increased […]

The post DeathGrip Ransomware Expanding Services Using RaaS Service appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability identified as CVE-2024-7348 has been discovered in PostgreSQL, enabling attackers to execute arbitrary SQL functions. This vulnerability in the pg_dump utility poses a significant security risk, especially when executed by superusers. CVE-2024-7348 – Vulnerability Details The flaw is a Time-of-check Time-of-use (TOCTOU) race condition in the pg_dump process. An attacker can exploit this by […]

The post PostgreSQL Vulnerability Allows Hackers To Execute Arbitrary SQL Functions appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A newly discovered phishing marketplace, ONNX Store, empowers cybercriminals to launch sophisticated attacks against Microsoft 365 and Office 365 environments. The platform provides tools to circumvent robust 2FA safeguards, enabling threat actors to compromise accounts with increased efficiency.  Corporate security teams must prioritize anti-phishing defenses to mitigate the risk of successful attacks, data breaches, and […]

The post Telegram Bot Selling Phishing Tools to Bypass 2FA & Hack Microsoft 365 Accounts appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Hackers attack AWS as it hosts a vast number of high-value targets, including sensitive data, business applications, and cloud resources for organizations worldwide. In February 2024, six AWS services were found to have some critical vulnerabilities. The services include CloudFormation, Glue, EMR, SageMaker, ServiceCatalog and CodeStar. Cybersecurity analysts at Aquasec identified grave dangers associated with […]

The post Critical AWS Services Vulnerability Let Attackers Execute Remote Code appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Evolution Mining Limited, a prominent global player in the gold mining industry, has reported a ransomware attack that impacted its IT systems. The company, which operates several mines across Australia and Canada, discovered the breach on August 8, 2024. This incident highlights the growing threat of cyberattacks on critical industries worldwide. Incident Details and Response […]

The post Australian Gold Mining Company Reports Ransomware Attack appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Head Mare, a hacktivist group targeting Russia and Belarus, leverages phishing campaigns distributing WinRAR archives to exploit CVE-2023-38831 for initial access. By deploying LockBit and Babuk ransomware, they encrypt victim systems and publicly disclose stolen data.  The group shares similarities with other anti-Russian hacktivists in tactics but employs more advanced access methods, as their operations, […]

The post Hackers Exploiting WinRAR Flaw To Attacks Windows & Linux(ESXi) Machines appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The UK’s National Cyber Security Centre (NCSC) recently hosted an unprecedented conference at its London headquarters, bringing together international government partners, UK government officials, and industry leaders. The focus was on exploring the potential of cyber deception technologies and techniques in bolstering cyber defense. This initiative aims to establish a comprehensive evidence base for using […]

The post NCSC to Build Nation-Scale Evidence Base for Cyber Deception appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

By reverse-engineering Quick Share’s proprietary communication protocol, researchers uncovered multiple vulnerabilities, including unauthorized file writes, forced Wi-Fi connections, directory traversal, and denial-of-service conditions.  These flaws were chained together to achieve remote code execution on Windows systems with Quick Share installed, bypass file approval dialogs and establish persistent Wi-Fi connections.  Google addressed these issues with two […]

The post Google’s Quick Share Vulnerabilities Let Attackers Execute Remote Code appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

U.S. authorities have arrested two believed administrators of the notorious WWH-Club, an online marketplace for stolen credit card information. The arrests mark a major step in the ongoing battle against cybercrime and the illicit trade of unauthorized access devices. The Arrests On August 6, 2024, Pavel Kublitskii and Alexandr Khodyrev were apprehended by law enforcement […]

The post Authorities Arrested Two Admins of WWH-Club Stolen Credit Card Marketplace appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Criminal IP, an expanding Cyber Threat Intelligence (CTI) search engine from AI SPERA, has recently completed its technology integration with Maltego, a global all-in-one investigation platform that specializes in visualized analysis of combined cyber data. This collaboration integrates Criminal IP’s comprehensive database of malicious IPs, domains, and CVEs directly into Maltego’s unified user interface and […]

The post Criminal IP and Maltego Collaborate to Broaden Threat Intelligence Data Search appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated phishing campaign targeting Windows systems leverages multiple evasion techniques, including Python obfuscation, shellcode generation, and loading, to deploy a payload of malware.  This multi-stage attack, disguised as a customer service request, delivers malicious attachments that, once opened, install XWorm, VenomRAT, AsyncRAT, and PureHVNC, which grant attackers remote system control, posing a significant threat […]

The post Threat Actors Exploiting Windows Systems To Deploy Multiple Malwares appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors often target and exploit security flaws in web browsers, as exploiting flaws in web browsers enables them to gain unauthorized access and perform several illicit activities. Not only that, threat actors also get a wide attack surface with minimal effort by exploiting the security flaws in browsers. Cybersecurity researchers at Oligo Security’s research […]

The post 0.0.0.0 Day – 18 Yr Old Vulnerability Allow Attackers to Bypass All Browser Security appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The Apache HTTP Server relies on hundreds of independently developed modules to handle client requests, sharing a complex data structure for communication.  While modularity promotes specialization, the lack of standardized interfaces, coupled with the massive scale of the system, introduces potential vulnerabilities.  As modules evolve independently with minimal understanding of each other, inconsistencies and security […]

The post Confusion Attacks Vulnerability In Apache HTTP Server Allow Attackers To Gain Root Access Remotely appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft has released a report detailing Iran’s efforts to influence the upcoming 2024 US presidential election. The report highlights the increasing activity of groups linked to the Iranian government, aiming to sway voters and create controversy, particularly in key swing states. This intelligence underscores the ongoing threat of foreign interference in American democracy. Covert News […]

The post Iranian Hackers Targeting 2024 US Election Campaigns appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Kimsuky, a North Korean APT group, employs targeted phishing campaigns, leveraging DMARC exploitation to conceal social engineering, infiltrate university networks, and steal research for the Reconnaissance General Bureau.  It aligns with North Korea’s goal of intelligence acquisition to advance its scientific capabilities, mirroring past actions of stealing nuclear, healthcare, and pharmaceutical research.  The recent exposure […]

The post North Korean Kimusky Group Attacking University Professors appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Mobile Device Management (MDM) is a device management solution for laptops, tablets, and smartphones used by organizations to enable them to control and protect their employees’ mobile devices. Moreover, MDM has been developed with various tools that administrators can use to manage these gadgets better. Main functions include installing applications from both official and unofficial […]

The post Leaked MDM Credentials Exposes Commonly Laptops And Smartphones For Hacking appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A new APT group, dubbed Actor240524, launched a spear-phishing campaign targeting Azerbaijani and Israeli diplomats on July 1, 2024, where the attackers employed a malicious Word document containing Azerbaijani-language content disguised as official documentation to lure victims.  The attack indicates a potential focus on disrupting the Azerbaijan-Israel relationship, as the group leverages new Trojan programs, […]

The post New APT Actor240524 Weaponizing Official Documents To Deliver Malware appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.