GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Kali Linux has unveiled its final release for 2024, version Kali Linux 2024.4, packed with notable updates, including new tools and enhancements. This highly anticipated update caters to the needs of security professionals, ethical hackers, and tech enthusiasts with a mix of new tools, improved features, and expanded compatibility. Kali Linux 2024.4 Key Updates The […]

The post Kali Linux 2024.4 Released – What’s New! appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical alert, adding two significant vulnerabilities to its Known Exploited Vulnerabilities Catalog. These vulnerabilities, actively exploited by malicious actors, underscore the growing risks facing organizations. Adobe ColdFusion Access Control Weakness (CVE-2024-20767) One of the newly added vulnerabilities, CVE-2024-20767, affects Adobe ColdFusion due to improper access […]

The post CISA Warns of Adobe & Windows Kernel Driver Vulnerabilities Exploited in Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

It’s clear that a person’s reputation is increasingly influenced by their online presence, which spans platforms like LinkedIn, corporate websites, and various professional networks. In today’s digital age, having a quality photograph is essential rather than optional. In the past, obtaining professional headshots required booking a photoshoot, hiring an experienced photographer, and investing time and […]

The post The Rise of AI-Generated Professional Headshots appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers identified a threat actor leveraging Google Search ads to target graphic design professionals, as the actor has launched at least 10 malvertising campaigns hosted on two specific IP addresses: 185.11.61[.]243 and 185.147.124[.]110, where these malicious ads, when clicked, redirect users to websites that initiate malicious downloads. Two IP addresses, 185.11.61.243 and 185.147.124.110, have been […]

The post Hackers Abuse Google Ads To Attacking Graphic Design Professionals appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Recent cyberattacks targeting critical infrastructure, including fuel management systems and water treatment facilities in Israel and the US, have been attributed to the Iranian-backed CyberAv3ngers.  The attacks, leveraging a custom-built malware named IOCONTROL, exploit vulnerabilities in IoT and OT devices, such as routers, PLCs, HMIs, and firewalls.  The malware, designed to operate on various platforms, […]

The post Hackers Using New IoT/OT Malware IOCONTROL To Control IP Cameras, Routers, PLCs, HMIs And Firewalls appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers have begun exploiting a newly discovered vulnerability in Apache Struts2, a widely used open-source framework for developing Java web applications. The vulnerability, assigned the identifier CVE-2024-53677, has a critical CVSS score of 9.5, indicating its potential for severe impact if left unaddressed. Background on the Vulnerability Apache Struts2 announced the vulnerability last week, highlighting […]

The post Hackers Exploiting Apache Struts2 Vulnerability to Upload Malicious Payloads appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Recent cybersecurity research has uncovered a concerning trend where hackers are exploiting Microsoft Teams to gain remote access to victim systems. Utilizing sophisticated social engineering tactics, these malicious actors pose as legitimate employees or trusted contacts, leveraging video calls on Microsoft Teams to deceive users into downloading harmful software. The attack typically begins with an […]

The post Hackers Weaponizing Microsoft Teams to Gain Remote Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft has announced that it is currently blocking an astounding 7,000 password attacks every second, nearly double the rate from just a year ago. This surge in cyber threats underscores the urgent need for more robust authentication methods, with passkeys emerging as a promising solution. The tech giant has also reported a 146% year-over-year increase […]

The post “Password Era is Ending,” Microsoft to Delete 1 Billion Passwords appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The research identified vulnerabilities in Prometheus, including information disclosure from exposed servers, DoS risks from pprof endpoints, and potential code execution threats, which could lead to data breaches, system outages, and unauthorized access. Vulnerable Prometheus servers are exposed to internet risk exploitation by attackers, which includes a critical “RepoJacking” vulnerability, allowing malicious exporters to be […]

The post Over 300,000 Prometheus Servers Vulnerable to DoS Attacks Due to RepoJacking Exploit appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers discovered multiple vulnerabilities in Ruijie Networks’ cloud-connected devices. By exploiting these vulnerabilities, attackers can remotely compromise access points, gain unauthorized access to internal networks, and execute arbitrary code on affected devices.  The “Open Sesame” attack demonstrates a practical scenario where an attacker can leverage physical proximity to a Ruijie Reyee OS access point to […]

The post Reyee OS IoT Devices Compromised: Over-The-Air Attack Bypasses Wi-Fi Logins appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers have discovered a new Android banking trojan targeting Indian users, and this malware disguises itself as essential utility services to trick users into providing sensitive information.  The malware has already compromised 419 devices, intercepted 4,918 SMS messages, and stolen 623 banking credentials. As this active campaign continues, the number of affected devices and stolen […]

The post New Android Banking Malware Attacking Indian Banks To Steal Login Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Bulletproof hosting services, a type of dark internet service provider, offer infrastructure to cybercriminals, facilitating malicious activities like malware distribution, hacking attacks, fraudulent websites, and spam.  These services evade legal scrutiny, posing a significant challenge to global cybersecurity. Understanding and identifying bulletproof hosting networks is crucial for cybersecurity researchers, law enforcement agencies, and enterprises.  By […]

The post New Research Uncovered Dark Internet Service Providers Used For Hacking appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

United States Attorney Susan Lehr announced the extradition of Abiola Kayode, 37, from Nigeria to the District of Nebraska. The extradition follows a Conspiracy to Commit Wire Fraud indictment filed against Kayode in August 2019. This case highlights international cooperation in combating online fraud. Kayode, who was arrested by law enforcement authorities in the Republic […]

The post Nigerian National Extradited to Nebraska for Wire Fraud Charges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Dell Technologies has released a security advisory addressing multiple critical vulnerabilities that could expose affected systems to exploitation by malicious actors. Customers are strongly encouraged to review the findings and update their systems accordingly. This update includes remediation for two critical CVEs affecting several Dell products. Failure to address these vulnerabilities could result in system […]

The post Dell Security Update, Patch for Multiple Critical Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers identified FUNNULL, a Chinese CDN, as hosting malicious content, which includes fake trading apps for financial fraud, gambling sites likely used for money laundering, and phishing login pages targeting luxury brands.  The gambling sites use algorithmically generated domains and Tether cryptocurrency, possibly to bypass blocking and facilitate cross-border money flows.  FUNNULL acquired polyfill.io, a […]

The post Triad Nexus, Chinese Hackers Using 200,000 Domains For Widespread Cyber Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybercriminals exploited typosquatting to deploy a malicious npm package, `@typescript_eslinter/eslint`, targeting developers seeking the legitimate TypeScript ESLint plugin, which was designed to mimic the genuine plugin, compromised systems by monitoring keystrokes, clipboard data, and executing remote commands.  They leveraged a WebSocket server for real-time control and data exfiltration as the persistence of a secondary malicious […]

The post Malicious ESLint Package Let Attackers Steal Data And Inject Remote Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Wuhan Chinasoft Token Information Technology Co., Ltd. developed EagleMsgSpy, a surveillance tool operational since 2017, which, installed as an APK, secretly collects extensive user data, including chat messages, screen recordings, audio, call logs, contacts, SMS, location, and network activity.  Because the data is sent to a command-and-control server, there is a possibility that it could […]

The post New Chinese Surveillance Tool Attack Android Users Since 2017 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A stealthy Command-and-Control (C2) infrastructure Red Team tool named ConvoC2 showcases how cyber attackers can exploit Microsoft Teams to execute system commands on compromised hosts remotely. This innovative project, designed with Red Team operations in mind, uses Teams messages for hidden data exfiltration and command execution, demonstrating a significant security challenge for organizations relying on […]

The post ConvoC2 – A Red Teamers Tool To Execute Commands on Hacked Hosts Via Microsoft Teams appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity researchers have uncovered a sophisticated exploitation campaign involving a zero-day (0-day) vulnerability in Cleo file transfer software platforms. This campaign has been used to deliver a newly identified malware family, now dubbed “Malichus.” The threat, recently analyzed by Huntress and corroborated by other industry vendors, demonstrates significant technical complexity, raising alarms across the cybersecurity […]

The post Cleo 0-day Vulnerability Exploited to Deploy Malichus Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

GitLab announced the release of critical security patches for its Community Edition (CE) and Enterprise Edition (EE). The newly released versions 17.6.2, 17.5.4, and 17.4.6 address several high-severity vulnerabilities, and GitLab strongly recommends that all self-managed installations be upgraded immediately. It is worth noting that GitLab.com is already running the patched version, while GitLab-dedicated customers […]

The post GitLab Security Update, Patch for Critical Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.