GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Google has released a new security update on the Stable channel, bringing Chrome to version 131.0.6778.204/.205 for Windows and Mac and 131.0.6778.204 for Linux. This update addresses multiple high-severity vulnerabilities, ensuring enhanced safety for users. The rollout will occur gradually over the coming days and weeks. Highlighted Security Fixes The latest Chrome release includes fixes for five vulnerabilities, of […]

The post Critical Chrome Vulnerabilities Lets Attackers Execute Arbitrary Code Remotely appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has released new best practice guidance to safeguard mobile communications amid rising concerns over cyber espionage activities linked to People’s Republic of China (PRC)-affiliated threat actors. These malicious actors have been targeting commercial telecommunications infrastructure to intercept call records and compromise the private communications of highly targeted individuals, […]

The post CISA Released Secure Mobile Communication Best Practices – 2025 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The VIPKeyLogger infostealer, exhibiting similarities to the Snake Keylogger, is actively circulating through phishing campaigns.  Delivered as attachments disguised as archives or Microsoft 365 files, it employs malicious Microsoft Office documents to spread through command-and-control (C2) infrastructure.  It targets sensitive data, including login credentials, financial information, system data, and personally identifiable information, posing a significant […]

The post New VIPKeyLogger Via Weaponized Office Documenrs Steals Login Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

INTERPOL has called for the term “romance baiting” to replace “pig butchering,” a phrase widely used to describe a manipulative scam where victims are emotionally exploited and financially defrauded. The international law enforcement organization emphasizes that the new term fosters respect for victims while squarely holding fraudsters accountable. INTERPOL Urges to End ‘Pig Butchering’ The […]

The post INTERPOL Urges to End ‘Pig Butchering’ & Replaces With “Romance Baiting” appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity experts are sounding the alarm over a new strain of malware dubbed “I2PRAT,” which leverages encrypted peer-to-peer (P2P) communication via the Invisible Internet Project (I2P) network to avoid detection. The malware, first reported on November 19 by the researcher Gi7w0rm, demonstrates a highly sophisticated infection chain and innovative evasion techniques, raising concerns among the […]

The post New I2PRAT Malware Using encrypted peer-to-peer communication to Evade Detections appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

 A new cyber campaign by the advanced persistent threat (APT) group Earth Koshchei has brought rogue Remote Desktop Protocol (RDP) attacks to the forefront of cybersecurity concerns. Leveraging a combination of RDP relays, rogue RDP servers, and custom malicious configuration files, this campaign has targeted high-profile organizations, posing a serious threat to global cybersecurity. The […]

The post Earth Koshchei Employs RDP Relay, Rogue RDP server in Server Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Recent research has linked a series of cyberattacks to The Mask group, as one notable attack targeted a Latin American organization in 2022, where attackers compromised the organization’s MDaemon email server and exploited the WorldClient webmail component to maintain persistent access.  While the initial compromise vector remains unknown, the successful exploitation of the MDaemon server […]

The post Careto – A legendary Threat Group Targets Windows By Deploy Microphone Recorder And Steal Files appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

RiseLoader, a new malware family discovered in October 2024, leverages a custom TCP-based binary protocol similar to RisePro for downloading and executing second-stage payloads.  Despite RisePro’s development discontinuation in June 2024, RiseLoader’s emergence suggests a potential connection to the threat group behind RisePro and PrivateLoader.  The malware often employs VMProtect for code obfuscation and has […]

The post RiseLoader Attack Windows By Employed A VMProtect To Drop Multiple Malware Families appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

GFI Software’s Kerio Control, a popular UTM solution, was found to be vulnerable to multiple HTTP Response Splitting vulnerabilities, which affecting versions 9.2.5 through 9.4.5, could potentially allow attackers to inject malicious code into web pages, leading to cross-site scripting (XSS) attacks and other security compromises.  The vulnerabilities, tracked as CVE-2024-52875 and KIS-2024-07, highlight the […]

The post 1-Click RCE Attack In Kerio Control UTM Allow Attackers Gain Firewall Root Access Remotely appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers have uncovered vulnerabilities in Microsoft Azure Data Factory’s integration with Apache Airflow, which could potentially allow attackers to gain unauthorized access and control over critical Azure resources.  By exploiting these vulnerabilities, attackers could compromise the integrity of the Azure environment, potentially leading to data breaches, service disruptions, and other severe consequences.  The identified vulnerabilities […]

The post Azure Data Factory And Apache Airflow Integration Flaws Let Attackers Gain Write Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

XRefer, an IDA Pro plugin, enhances binary analysis with a persistent companion view by employing Gemini-powered cluster analysis to decompose binaries into functional units, providing high-level architectural overviews akin to viewing a city’s districts.  Simultaneously, it offers a context-aware view that dynamically updates based on the analyst’s code location, which presents relevant artifacts from both […]

The post Google’s New XRefer Tool To Analyze More Complex Malware Samples appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Attackers are ingeniously exploiting Google Calendar and Google Drawings in phishing campaigns, targeting unsuspecting individuals and organizations. Leveraging the inherent trust in Google’s widely used tools, cybercriminals are successfully deceiving users into revealing sensitive information and compromising their accounts. Google Calendar: A Trusted Tool Turned Target Google Calendar, a widely used scheduling tool with over […]

The post Cybercriminals Exploit Google Calendar and Drawings in Phishing Campaigns appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Multiple vulnerabilities have been identified in SHARP routers, potentially allowing attackers to execute arbitrary code with root privileges or compromise sensitive data. Labeled under JVN#61635834, the vulnerabilities highlight significant security concerns for affected devices. Overview and Key Vulnerabilities JPCERT/CC, alongside security expert Shuto Imai of LAC Co., Ltd., has detailed several critical vulnerabilities affecting SHARP […]

The post Multiple SHARP Routers Vulnerabilities Let Attackers Execute Arbitrary Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A Proof of Concept (PoC) exploit for the critical path traversal vulnerability identified as CVE-2024-38819 in the Spring Framework has been released, shedding light on a serious security issue affecting applications that serve static resources via functional web frameworks. This vulnerability allows attackers to access unauthorized files on the server through carefully crafted HTTP requests. […]

The post Spring Framework Path Traversal Vulnerability (CVE-2024-38819) PoC Exploit Released appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The AhnLab Security Intelligence Center (ASEC) has detected a new strain of malware targeting poorly protected Linux SSH servers. This malware, named “cShell,” exploits existing Linux tools such as screen and hping3 to launch distributed denial-of-service (DDoS) attacks, highlighting a growing concern for server administrators. Initial Attack Vector ASEC’s monitoring efforts revealed that attackers are scanning for publicly exposed […]

The post Hackers Exploit Linux SSH Servers Using Screen & hping3 Tools With “cShell” Bot appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent campaign dubbed FLUX#CONSOLE has come to light, leveraging Microsoft Common Console Document (.MSC) files to infiltrate systems with backdoor malware. The campaign showcases the growing sophistication of phishing techniques and the exploitation of lesser-known Windows features. The FLUX#CONSOLE Campaign The FLUX#CONSOLE campaign has been identified as a multi-stage attack with sinister objectives. By using MSC files, threat actors […]

The post Cyber Criminals Exploit Windows Management Console to Deliver Backdoor Payloads appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Texas Tech University Health Sciences Center (TTUHSC) and Texas Tech University Health Sciences Center El Paso (TTUHSC El Paso), collectively known as the HSCs, have disclosed a significant cybersecurity breach impacting sensitive data. The breach, which occurred between September 17 and September 29, 2024, allowed unauthorized access to and possible removal of certain folders […]

The post Texas Tech Systems Breach, Hackers Accessed System Folders & Files appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Malicious actors have taken cybercrime to new heights by exploiting captcha verification pages, a typically harmless security feature, to launch large-scale malware distribution campaigns. This startling revelation uncovers how these fake captchas, interlaced with malicious advertising, are infecting users with password-stealing malware. Over the past several weeks, cybercriminals have been leveraging fake captcha pages to […]

The post Beware of Malicious Ads on Captcha Pages that Deliver Password Stealers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Critical Authentication Bypass Vulnerability Identified in Hitachi Infrastructure Analytics Advisor and Ops Center Analyzer. A severe vulnerability has been discovered in Hitachi’s Infrastructure Analytics Advisor and Ops Center Analyzer, posing a significant security risk to users of these products. The vulnerability, identified as CVE-2024-10205, has a CVSS 3.1 score of 9.4, categorized as “High.” This […]

The post Hitachi Authentication Bypass Vulnerability Allows Attackers to Hack the System Remotely appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

 The healthcare communication platform ConnectOnCall, operated by ConnectOnCall.com, LLC, has confirmed a significant data breach that compromised the personal information of 900,000 patients and healthcare providers. The platform, designed to streamline after-hours communications between patients and healthcare providers, discovered the breach in May of this year. The breach was identified on May 12, 2024, prompting an […]

The post ConnectOnCall Data Breach, 900,000 Customers Data Exposed appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.