GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

The Cybersecurity and Infrastructure Security Agency (CISA) has announced the addition of a new vulnerability to its Known Exploited Vulnerabilities Catalog. This vulnerability, CVE-2024-29824, affects Ivanti Endpoint Manager (EPM) and has become a target for cybercriminals using public exploits in recent attacks on Ivanti endpoints. CVE-2024-29824: A Critical Threat Ivanti, a U.S.-based IT software company […]

The post Hackers Now Exploit Ivanti Endpoint Manager Vulnerability to Launch Cyber Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Tor Project has announced the release of Tor Browser 13.5.6, which is now available for download from its official website and distribution directory. This latest version includes significant updates that focus on enhancing security and user experience across all platforms. Key Security Updates One of the most notable updates in Tor Browser 13.5.6 is […]

The post Tor Browser 13.5.6 Released – What’s New! appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aembit, the non-human IAM company, today announced the appointment of Mario Duarte as chief information security officer (CISO). Duarte, formerly head of security at Snowflake, joins Aembit with a deep commitment to address pressing gaps in non-human identity security. Duarte’s journey in cybersecurity began with a passion for penetration testing, sparked by the 1980s cult […]

The post Mario Duarte, Former Snowflake Cybersecurity Leader, Joins Aembit as CISO to Tackle Non-Human Identities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recently discovered vulnerability in Bluetooth technology has raised significant security concerns. This flaw could allow hackers to intercept passcodes during the device pairing process, affecting a wide range of Bluetooth devices and potentially having far-reaching implications for users worldwide. The Vulnerability: CVE-2020-26558 The vulnerability, CVE-2020-26558, is found in devices supporting the Passkey Entry association […]

The post New Bluetooth Vulnerability Leak, Your Passcode to Hackers During Pairing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The need for advanced tools that can effectively simulate real-world threats is paramount. Enter GhostStrike, a sophisticated cybersecurity tool explicitly designed for Red Team operations. With its array of features aimed at evading detection and performing process hollowing on Windows systems, GhostStrike is setting new benchmarks in cybersecurity testing. Dynamic API Resolution and Obfuscation Techniques […]

The post GhostStrike – A Cyber Security Tool for Red Team to Evade Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google Workspace has announced new password policies that will impact how users and third-party apps access Google services. The changes, aimed at eliminating less secure sign-in methods, will be implemented in stages throughout 2024. Here’s what you need to know about the upcoming changes and how they will affect users and administrators. Phasing Out Less […]

The post Google Workspace Announced New Password Policies, What is Changing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has warned about four critical vulnerabilities currently being exploited in the wild. These vulnerabilities affect various products, from routers to software platforms, posing significant risks to users worldwide. The vulnerabilities have been identified in D-Link, DrayTek, Motion Spell, and SAP products. CVE-2023-25280: D-Link DIR-820 Router OS Command Injection […]

The post CISA Warns of Four Vulnerabilities that Exploited Actively in the Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Diehl Defence anti-aircraft missiles from Baden-Württemberg are successfully intercepting Russian attacks on Kyiv, according to Mayor Vitali Klitschko. The German-supplied technology has achieved a 100% hit rate in defending the Ukrainian capital. The German government plans to install Diehl missile defense systems on three new government aircraft, which will equip the aircraft with advanced capabilities […]

The post North Korean Hackers Attempted To Steal Sensitive Military Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The newly emerged Gorilla Botnet has exhibited unprecedented activity, launching over 300,000 DDoS attacks against targets in over 100 countries between September 4 and 27.  The botnet, a modified version of Mirai, supports multiple CPU architectures and employs advanced techniques to maintain long-term control over infected devices.  It leverages encryption algorithms commonly used by the […]

The post GorillaBot Emerged As King For DDoS Attacks With 300,000+ Commands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a new campaign that is aimed at users who speak Russian, the modular remote access tool (RAT) known as DCRat has been utilized.  Delivered through HTML smuggling, a technique not previously seen with DCRat, the malware leverages its typical RAT capabilities to execute shell commands, log keystrokes, exfiltrate files, and steal credentials, which marks […]

The post DCRAt Attacking Users Via HTML Smuggling To Steal Login Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Simon Kaura, a Nigerian national deported from the United Kingdom, was sentenced in a U.S. federal court for his involvement in a global conspiracy to sell stolen financial information on the dark web. The sentencing marks a crucial victory in the fight against cybercrime, shedding light on the sophisticated operations of cybercriminal networks. Five-Year Sentence […]

The post Nigeria Hackers Sentenced for Selling Financial Information on Dark Web appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity experts have uncovered a significant connection between hacktivist groups BlackJack and Twelve through overlapping tactics, techniques, and procedures (TTPs). This discovery illuminates the sophisticated methods employed by these groups and raises questions about their potential collaboration or shared objectives. The findings reveal shared tools, malware, and similar attack patterns targeting Russian organizations. This article […]

The post Hacktivist Groups Operating Together! Connection Ober TTPs Uncovered appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Israeli army reportedly hacked into the control tower of Beirut’s Rafic Hariri International Airport. The incident involved issuing threats against an Iranian civilian aircraft attempting to land, according to official sources cited by Anadolu Agency. Lebanese Response to Israeli Threats Following the hacking incident, the Lebanese Ministry of Transport swiftly instructed airport authorities to […]

The post Israeli Army Hacked Beirut Airport to Threaten Civilians appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Phishing attackers employed an HTML smuggling technique to deliver a malicious payload, as the attack chain started with a phishing email mimicking an American Express notification, leading to a series of redirects.  The final redirect pointed to a Cloudflare R2 public bucket hosting an HTML file, which loaded an external JavaScript code that contained a […]

The post Hackers Abuse HTML Smuggling Technique To Deliver Sophisticated Phishing Page appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The LummaC2 obfuscator employs a novel control flow protection scheme designed specifically for its stealer component, which is part of a broader set of transformations, making it difficult for analysts to reverse engineer the binary.  It introduces obfuscated code that is mixed with the original compiler-generated code, requiring a specialized deobfuscator for analysis. The obfuscator’s […]

The post LummaC2 Stealer Leverages Customized Control Flow Indirection For Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Conversational AI platforms, powered by chatbots, are witnessing a surge in malicious attacks, which leverage NLP and ML are increasingly being used by businesses to enhance productivity and revenue. While they offer personalized experiences and valuable data insights, they also pose significant privacy risks. The collection and retention of user data, including sensitive information, raises […]

The post Hackers Attacking AI Agents To Hijacking Customer Sessions appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybercriminals have shifted their focus to mobile devices, targeting users with a malicious crypto drainer app disguised as the legitimate WalletConnect protocol, which remained undetected for over five months and was downloaded 10,000 times, exploited the name of the well-known Web3 protocol to deceive users. Despite its removal from Google Play, the app victimized over […]

The post Malicious App On Google Play Steals Cryptocurrency From Android Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers are increasingly exploiting third-party email infrastructures to send spam emails. This tactic complicates the detection and prevention of spam and threatens the integrity of legitimate email communications. By leveraging vulnerabilities in various online platforms, cybercriminals can masquerade as legitimate users and send unsolicited emails that can bypass traditional spam filters. Exploiting Online Registration and […]

The post Hackers Abusing Third-Party Email Infrastructure to Send Spam Mails appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

INE, a global leader in networking and cybersecurity training and certifications, is proud to announce they have earned 14 awards in G2’s Fall 2024 Report, including “Fastest Implementation” and “Most Implementable,” which highlight INE’s superior performance relative to competitors.  “Best hands-on and real world scenario based curriculum,” raves small business user Satvik V. in a recent […]

The post G2 Names INE 2024 Enterprise and Small Business Leader appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity researchers have uncovered a significant vulnerability in Kia vehicles that allowed hackers to remotely control key functions using nothing more than a car’s license plate. This breach, discovered on June 11, 2024, exposed the potential for unauthorized access to personal information and vehicle control, raising serious concerns about automotive cybersecurity. The Discovery According to […]

The post Hacking Kia Cars Remotely with a License Plate appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.