GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Researchers discovered Celestial Stealer, a JavaScript-based MaaS infostealer targeting Windows systems that, evading detection with obfuscation and anti-analysis techniques, steals data from various browsers, applications, and cryptocurrency wallets.  It operates as an Electron or NodeJS application, injecting code into vulnerable apps and communicating with C2 servers. The malware’s FUD status is maintained through regular updates […]

The post Sophisticated Celestial Stealer Targets Browsers to Steal Login Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The open-source tech landscape continues to innovate, and the release of the CapibaraZero firmware marks another breakthrough. Designed for ESP32-S3-based hardware platforms, CapibaraZero provides a low-cost alternative to the highly popular—but expensive—Flipper Zero, a multifunctional tool for penetration testers, ethical hackers, and tech enthusiasts. With its affordable hardware requirements and flexible firmware, CapibaraZero opens up […]

The post CapibaraZero Firmware With ESP32-S3 Hardware Enables Low Cost Flipper Zero alternative appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

SonicWall has issued a critical alert regarding multiple vulnerabilities in its Secure Mobile Access (SMA) 100 series SSL-VPN appliances. These vulnerabilities could allow attackers to execute remote code, bypass authentication, or compromise system integrity. SonicWall urges users to take immediate action by updating their devices to the latest firmware to mitigate these risks. These issues […]

The post Multiple SonicWall Vulnerabilities Let Attackers Execute Remote Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

 The Django team has issued critical security updates for versions 5.1.4, 5.0.10, and 4.2.17. These updates address two vulnerabilities: a potential denial-of-service (DoS) attack in the strip_tags() method and a high-severity SQL injection risk in Oracle databases. All developers and system administrators using affected versions are strongly encouraged to update to the newly released versions to ensure […]

The post Django Security Update, Patch for DoS & SQL Injection Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Rockwell Automation has issued a critical security advisory addressing multiple remote code execution (RCE) vulnerabilities discovered in its Arena® software. These vulnerabilities, reported by the Zero Day Initiative (ZDI), expose systems to potential exploitation by adversaries looking to execute arbitrary code. With the release of updated software versions, Rockwell Automation has taken corrective action and […]

The post Rockwell Automation Warns of Multiple Code Execution Vulnerabilities in Arena appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Europol, in collaboration with law enforcement across Europe, has taken down a sophisticated cybercriminal network responsible for large-scale online fraud. Over 50 servers were seized, a trove of digital evidence was secured, and two primary suspects are now in pretrial detention, marking a significant victory in the fight against cybercrime. Discovery of a Criminal Network […]

The post Europol Dismantled 50+ Servers Used For Fake Online Shopping Websites appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has released two advisories highlighting significant security vulnerabilities in Industrial Control Systems (ICS) software and hardware. These vulnerabilities, identified in AutomationDirect’s C-More EA9 Programming Software and Planet Technology’s industrial switch WGS-804HPT, could pose serious risks to critical infrastructure if exploited by attackers. AutomationDirect C-More EA9 Programming Software The […]

The post Multiple ICS Advisories Released by CISA Detailing Exploits & Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Global Research and Analysis Team (GReAT) has announced the release of hrtng, a cutting-edge plugin for IDA Pro, one of the most prominent tools for reverse engineering. Designed specifically to enhance the efficiency of malware analysis, hrtng provides analysts with powerful features that automate and simplify the otherwise intricate tasks involved in dissecting malicious binaries. The […]

The post Researchers Released hrtng IDA Pro Plugin for Malware Analyst to Make Reverse Engineering Easy appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical zero-day vulnerability affecting all modern Windows Workstation and Server versions has been discovered. The flaw enables attackers to steal NTLM credentials with minimal user interaction, posing a significant security risk. It impacts systems from Windows 7 and Server 2008 R2 to the latest Windows 11 (v24H2) and Server 2022. The vulnerability allows attackers […]

The post Windows NTLM Zero-Day Vulnerability Exposes User Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

One Identity named Hot Company: Privileged Access Management (PAM) in 12th Cyber Defense Magazine’s Annual InfoSec Awards during CyberDefenseCon 2024. One Identity proudly announces it has been named a winner in the Hot Company: Privileged Access Management (PAM) category in the 12th annual Cyber Defense Awards by Cyber Defense Magazine (CDM), the industry’s leading information […]

The post One Identity Named Winner of the Coveted Top InfoSec Innovator Awards for 2024 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Recently identified by security researchers, a new vulnerability in HCL DevOps Deploy and HCL Launch has emerged, allowing users to embed arbitrary HTML tags within the Web UI. This vulnerability tracked as CVE-2024-42195, poses a potential risk of sensitive information disclosure to unauthorized individuals. Below, we provide a detailed analysis of the affected products and […]

The post HCL DevOps Deploy / Launch Vulnerability Let Embed arbitrary HTML tags appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued warnings about several vulnerabilities being actively exploited in the wild. The vulnerabilities affect popular software and hardware products, including Zyxel firewalls, CyberPanel, North Grid, and ProjectSend. Organizations using these products are urged to apply mitigations immediately or discontinue usage if fixes are unavailable. CVE-2024-51378: CyberPanel Incorrect […]

The post CISA Warns of Zyxel Firewalls, CyberPanel, North Grid, & ProjectSend Flaws Exploited in Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

HackSynth is an autonomous penetration testing agent that leverages Large Language Models (LLMs) to solve Capture The Flag (CTF) challenges without human intervention.  It utilizes a two-module architecture: a planner to create commands and a summarizer to understand the hacking process’s current state by employing contextual information from past commands to make future decisions and […]

The post HackSynth : Autonomous Pentesting Framework For Simulating Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Fuji Electric Indonesia has fallen victim to a ransomware attack, impacting its operations and raising concerns about data security and business continuity. The attack was publicly disclosed by Fuji Electric’s headquarters on December 2, 2024, through an official notice, which highlighted the immediate steps taken by the company to address the situation and mitigate its […]

The post Fuji Electric Indonesia Hit by Ransomware Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability identified as CVE-2024–53614 has been discovered in the Thinkware Cloud APK version 4.3.46. This vulnerability arises from the use of a hardcoded decryption key within the application. It allows malicious actors to access sensitive data and execute arbitrary commands with elevated privileges, potentially compromising the security of users’ devices and data. The […]

The post Thinkware Cloud APK Vulnerability Allows Code Execution With Elevated Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

I-O DATA DEVICE, INC. has announced that several critical vulnerabilities in their UD-LT1 and UD-LT1/EX routers are being actively exploited. These vulnerabilities pose significant risks to users, necessitating urgent attention and action. Below is a detailed look at each vulnerability, its potential impact, and the solutions provided. CVE-2024-45841: Incorrect Permission Assignment for Critical Resource This […]

The post I-O DATA Routers Command Injection Vulnerabilities Actively Exploited in Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers released a detailed report on a significant security vulnerability named CVE-2023-49785, affecting the ChatGPT Next Web, popularly known as NextChat. This vulnerability has raised concerns within the cybersecurity community due to its potential for exploitation through Server-Side Request Forgery (SSRF). NextChat is a web interface designed for large language model (LLM) services. It provides […]

The post ChatGPT Next Web Vulnerability Let Attackers Exploit Endpoint to Perform SSRF appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability has been identified in the bootloader of Cisco NX-OS Software, potentially allowing attackers to bypass image signature verification. This flaw, which affects several Cisco product lines, could enable unauthorized users to load unverified software onto affected devices. The vulnerability is attributed to insecure bootloader settings within the Cisco NX-OS Software. Exploitation of […]

The post Cisco NX-OS Vulnerability Allows Attackers to Bypass Image Signature Verification appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Brain Cipher has claimed to have breached Deloitte UK and exfiltrated over 1 terabyte of sensitive data. Emerging in June 2024, Brain Cipher has quickly established a reputation for its aggressive cyberattacks, with a notable incident involving According to statements released by Brain Cipher, they have exploited critical weaknesses within Deloitte UK’s cybersecurity infrastructure. The […]

The post Deloitte Hacked – Brain Cipher Group Claim to Have Stolen 1 TB of Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cloudflare Pages, a popular web deployment platform, is exploited by threat actors to host phishing sites, as attackers leverage Cloudflare’s trusted infrastructure, global CDN, and free hosting to quickly set up and deploy convincing phishing sites.  Automatic SSL/TLS encryption enhances the sites’ legitimacy, while custom domains and URL masking further obfuscate their malicious nature. Cloudflare’s […]

The post Cloudflare Developer Domains Abused For Cyber Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.