GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Hackers have been actively exploiting a critical vulnerability in the WordPress plugin 简数采集器 (Keydatas). The vulnerability, CVE-2024-6220, allows unauthenticated threat actors to upload arbitrary files to a vulnerable site, potentially leading to remote code execution and complete site takeover. This alarming development underscores the importance of maintaining updated plugins and robust security measures. Discovery and […]

The post Hackers Actively Exploiting WordPress Plugin Arbitrary File Upload Vulnerability appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Today, the National Crime Agency (NCA) revealed the successful shutdown of Russian Coms, a sophisticated fraud platform responsible for defrauding thousands of victims worldwide. Established in 2021, this platform facilitated over 1.3 million scam calls to 500,000 unique UK phone numbers, resulting in estimated financial losses in the tens of millions. The Mechanics of Russian […]

The post NCA Shuts Down Major Fraud Platform that Triggers 1.8 Million Scam Calls appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Security Risk Advisors (SRA) announces the launch of VECTR Enterprise Edition, a premium version of its widely-used VECTR platform for purple teams and adversary management program reporting and benchmarking. VECTR Enterprise is designed to support organizations that want to mature and communicate the success of their purple team exercises with benchmarking and executive reporting features. […]

The post Security Risk Advisors Announces Launch of VECTR Enterprise Edition appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A new variant of the TgRAT malware, initially discovered in 2022 targeting Windows systems, has been observed attacking Linux servers. This evolution marks a significant shift in the malware’s capabilities, broadening its potential impact on a wider range of systems. The Linux version of TgRAT was found in the wild earlier this month, raising alarms […]

The post TgRAT Malware Attacking Linux Servers with New Variant appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

In 2024, the safety of the internet has become paramount. Let’s be clear—we do not want cybercriminals to steal our private data. One of the ways to stay safe and sound online is by using a VPN.  So, what is a VPN? It’s a virtual private network that secures web browsing, including Chrome. It encompasses […]

The post Chrome: Essential Tools for Secure Browsing appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A recently discovered vulnerability in Bitdefender’s GravityZone Update Server has raised significant security concerns. Identified as CVE-2024-6980, this flaw allows attackers to execute server-side request forgery (SSRF) attacks, potentially compromising sensitive data and systems. With a CVSS score of 9.2, this vulnerability is categorized as critical. The scoring breakdown indicates that the flaw is accessible […]

The post Bitdefender Flaw Let Attackers Trigger Server-Side Request Forgery Attacks appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A forwarded Telegram video advertises heavily discounted, high-profile cryptocurrency projects, enticing viewers with links to a seemingly legitimate second-tier exchange and a concealed malicious link.  Through the use of this social engineering strategy, which is intended to lull victims into a false sense of security, users are most likely directed to a fraudulent platform to […]

The post Beware Of Malicious Crypto Management App That Drains Your Wallet appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Users use Voice Over Wi-Fi (VoWiFi) quite frequently nowadays, as it’s a technology that enables them to make voice calls over a Wi-Fi network. This technology does so without relying on traditional cellular networks.  Besides this, doing so allows the users to enhance their call quality and reliability in areas with poor network quality. But, […]

The post Voice Over Wi-Fi Vulnerability Let Attackers Eavesdrop Calls And SMS appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Delta Air Lines has enlisted the legal expertise of David Boies, chairman of Boies Schiller Flexner, to seek damages from cybersecurity firm CrowdStrike and tech giant Microsoft. This follows a catastrophic system crash on July 19 that resulted in the cancellation of thousands of flights and left millions of computers offline. Delta has suffered significant […]

The post CrowdStrike & Microsoft to Face Lawsuit from Delta Air Lines Following System Crash appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Following extensive analyses and investigations by German security authorities, the Federal Government has officially attributed responsibility for a significant cyberattack on the Federal Office of Cartography and Geodesy (BKG) at the end of 2021 to Chinese state actors. The federal government condemned the attack, which infiltrated BKG’s network for espionage purposes. According to Bmi Bund […]

The post Germany has accused China of Attack on Critical Infrastructure Since 2021 appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Cyber A.I. Group, Inc., an emerging growth global cybersecurity, A.I. and IT services company, announced today that it has executed a Letter of Intent (LOI) to acquire a prominent North American-based cybersecurity firm. The announcement was made by Walter Hughes, CEO of Cyber A.I. Group alongside A.J. Cervantes, Jr., Executive Chairman of Cyber A.I. Group […]

The post Cyber A.I. Group Announces LOI to Acquire Prominent North American Cyber Security Company appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Despite robust defenses, Cross-Site Scripting (XSS) remains a persistent web vulnerability, as its exploitation has become increasingly challenging. A recent discovery highlights how integrating OAuth, a modern authentication standard, with vulnerable websites can resurrect XSS risks.  By manipulating OAuth flows and leveraging existing XSS flaws, attackers can potentially compromise sensitive data and execute malicious actions, […]

The post OAuth Vulnerability Exposes 1 Million Websites To XSS Attacks appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The World Wide Web Consortium (W3C) has strongly opposed Google’s decision to halt the deprecation of third-party cookies. The W3C has updated its Technical Architecture Group (TAG) finding to emphasize the necessity of removing third-party cookies due to their inherent privacy issues. The consortium argues that these cookies enable tracking across multiple websites, which can […]

The post World Wide Web Consortium Opposed Google’s Decision on Third-party cookies appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity firm TrustedSec has unveiled a powerful new tool called Specula. It exploits a longstanding vulnerability in Microsoft Outlook to transform it into a Command and Control (C2) server. This revelation has sent shockwaves through the cybersecurity community, highlighting a persistent weak point in many corporate networks. The Specula Framework Specula leverages a seemingly innocuous […]

The post New Specula Tool Turning Outlook as a C2 Server by Leveraging Registry appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Texas Attorney General Ken Paxton has secured a $1.4 billion settlement with Meta Platforms Inc. (formerly known as Facebook) over the unauthorized capture and use of millions of Texans’ personal biometric data. This settlement marks the largest privacy settlement ever obtained by an Attorney General from a single state and serves as a significant warning […]

The post Meta paid a $1.4 Billion Settlement for the Unauthorized Capture of Personal Biometric Data appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Google has rolled out a new security update for its Chrome browser, addressing several critical vulnerabilities. The update on the Stable channel brings Chrome to version 127.0.6533.88/89 for Windows and Mac, and 127.0.6533.88 for Linux. The update will be distributed over the coming days and weeks. Critical Vulnerabilities Addressed According to Chrome reports, the latest […]

The post Chrome Security Update: Patch for Critical Flaw that Leads to Exploitation appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Progress, the company behind MOVEit Transfer, has issued a critical security alert addressing a newly discovered vulnerability in its MOVEit Transfer product. The flaw, CVE-2024-6576, has been classified as a high-severity issue, with a CVSS score of 7.3, indicating a significant user risk. CVE-2024-6576: Improper Authentication Leading to Privilege Escalation The vulnerability found in the […]

The post Progress Patched New MOVEit File Transfer Flaw that Allows Privilege Escalation appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The popular audiobook and podcast platform uBook has been affected by a data breach that exposed the personal information of 710,000 users. According to a tweet by ThreatMon, the breach, which occurred in July 2024, was announced by a member of a dark web forum, raising serious concerns about user privacy and data security. Details […]

The post ubook Suffered Data Breach, 710,000 Users’ Data Exposed appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Hackers use phishing emails to mislead recipients into providing personal data like usernames, passwords, credit card numbers, or social security numbers. This method exploits human emotions and trust, allowing a threat actor to compromise an account, steal an identity, or disseminate malware with little technical skill. Guardio Labs recently discovered “EchoSpoofing” which is a serious […]

The post Proofpoint’s Email Protection Let Attackers Send Millions Of Phishing Emails appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Hackers prefer ransomware attacks primarily because they offer the highest chance of financial gain. By locking victims’ information systems and asking for payment to release them, ransomware attacks lock victims’ information systems and demand payment to unlock them. Considering such a high level of risk, victims are pushed to make ransom payments as fast as […]

The post Hackers Exploiting ESXi Hypervisor Auth Bypass Flaw For Ransomware Attacks appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.