Aggregator

Zimperium’s research reveals the Hook Android malware is now a hybrid threat, using ransomware and spyware to steal…

Threat actors are increasingly refining Android droppers to circumvent enhanced security measures, extending their utility beyond sophisticated banking trojans to simpler malware variants like SMS stealers and basic spyware. Historically, droppers served as innocuous entry points for payloads requiring elevated permissions, such as Accessibility Services, particularly after Android 13’s API restrictions limited direct installations. These […]

The post Threat Actors Update Android Droppers to Remain Effective with Even Simple Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding a critical vulnerability in Git (CVE-2025-48384) that enables arbitrary file writes and has already been observed in active exploitation campaigns. The flaw arises from Git’s inconsistent handling of carriage return characters (CR) in its configuration files, potentially allowing threat actors to execute […]

The post CISA Alerts on Git Arbitrary File Write Flaw Actively Exploited appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Phishing kits and stealers didn’t slow down this August, and neither did we. ANY.RUN analysts tracked some of the month’s most dangerous campaigns, from a 7-stage Tycoon2FA phishing chain to Rhadamanthys delivered via ClickFix, and the discovery of Salty2FA, a brand-new PhaaS framework linked to Storm-1575.  All were analyzed inside ANY.RUN’s Interactive Sandbox, revealing full […]

The post Major Cyber Attacks in August 2025: 7-Stage Tycoon2FA Phishing, New ClickFix Campaign, and Salty2FA appeared first on ANY.RUN's Cybersecurity Blog.

A vulnerability was found in ZoneMinder up to 1.32.3. It has been classified as problematic. The affected element is an unknown function. The manipulation leads to cross site scripting (Stored). This vulnerability is traded as CVE-2019-7338. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Config-Model up to 2.x. This affects an unknown function in the library lib/Config/Model.pm of the component INC Array Handler. This manipulation as part of Directory causes improper access controls. This vulnerability is registered as CVE-2017-0374. The attack needs to be launched locally. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability labeled as critical has been found in Freeware Advanced Audio Decoder 2.8.8. This issue affects the function ps_mix_phase of the file libfaad/ps_dec.c. The manipulation results in out-of-bounds read. This vulnerability is identified as CVE-2019-6956. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in FFmpeg 6.1. It has been rated as critical. This affects the function draw_block_rectangle of the file libavfilter/vf_codecview.c. The manipulation leads to buffer overflow. This vulnerability is documented as CVE-2024-31582. The attack can be initiated remotely. There is not any exploit available.

“双A战略”引领效率稳步提升

A vulnerability labeled as critical has been found in FFmpeg 6.1-3-g466799d4f5. This issue affects the function av_malloc of the file libavutil/mem.c. Executing manipulation can lead to buffer overflow. This vulnerability appears as CVE-2023-50008. The attack may be performed from a remote location. There is no available exploit. It is advisable to implement a patch to correct this issue.

A vulnerability, which was classified as critical, has been found in FFmpeg 6.1-3-g466799d4f5. This vulnerability affects the function theav_samples_set_silence of the file thelibavutil/samplefmt.c. The manipulation leads to buffer overflow. This vulnerability is referenced as CVE-2023-50007. Remote exploitation of the attack is possible. No exploit is available. Applying a patch is the recommended action to fix this issue.

A critical Server-Side Request Forgery (SSRF) vulnerability has been discovered in the popular PhpSpreadsheet library, allowing attackers to inject malicious HTML input when processing spreadsheet documents. The vulnerability, assigned CVE-2025-54370, affects multiple versions of the phpoffice/phpspreadsheet package and carries a high severity rating with CVSS v3.1 score of 7.5 and CVSS v4.0 score of 8.7. Vulnerability Details The security flaw was discovered by Aleksey […]

The post PhpSpreadsheet Library Vulnerability Lets Attackers Inject Malicious HTML Input appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

三位荷兰安全分析师发现欧洲无线电标准TETRA中的五个漏洞，影响摩托罗拉等公司设备。该标准自90年代起使用，因加密算法保密未被发现。2023年研究人员揭示了这些漏洞，并指出一种端到端加密实现也存在类似问题，加密密钥被压缩至56位，易遭破解。这些问题或为故意设计的后门。

关键词数据泄露总部位于英国的电信公司 Colt Technology Services 正在应对一起网络攻击，

关键词网络木马网络安全研究人员近日披露，一种名为 HOOK 的安卓银行木马出现了最新变种，其能力已经超越传统的

关键词docker近日，Docker官方披露了一个影响Windows和macOS版Docker Desktop

A critical security risk has emerged for Windows users of WhatsApp Desktop who also have Python installed. Attackers can exploit a flaw in how WhatsApp Desktop handles .pyz (Python archive) files, delivering arbitrary code execution on the victim’s machine with a single click. Researchers have discovered that a maliciously crafted .pyz file—normally used to bundle Python applications—can be disguised […]

The post Users of WhatsApp Desktop on Windows Face Code Execution Risk Via Python appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

大规模网络犯罪活动ShadowCaptcha利用超100个被黑WordPress网站将用户引导至伪造CAPTCHA页面，通过ClickFix社交工程策略传播信息窃取器、勒索软件和加密货币挖矿程序。攻击链通过恶意JavaScript重定向至假Cloudflare或Google CAPTCHA页面，并分两路执行：一路利用Windows Run对话框部署恶意软件，另一路引导用户保存并运行HTML应用以部署勒索软件。攻击者还使用反调试技术和DLL侧加载隐藏恶意行为。多数被黑网站位于澳大利亚、巴西等国，涉及技术、医疗等多个行业。建议加强用户培训和WordPress安全防护以应对威胁。