GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Cybersecurity researchers have uncovered the first-ever UEFI bootkit designed to target Linux systems. This discovery, named ‘Bootkitty’, marks a new chapter in UEFI threats, which have predominantly targeted Windows systems until now. The UEFI (Unified Extensible Firmware Interface) threat landscape has seen considerable evolution over the past decade. Evolution of UEFI Threats Initially, in 2012, […]

The post “Bootkitty” – A First Ever UEFI Bootkit Attack Linux Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity researchers have uncovered a widespread Distributed Denial-of-Service (DDoS) campaign attributed to a threat actor using the alias “Matrix.” This campaign, characterized by its global scale and the actor’s low technical sophistication, highlights the evolving landscape of cyber threats where readily available tools enable even relatively inexperienced attackers to perpetrate significant attacks. The Campaign Overview […]

The post Matrix, A Single Actor Orchestrate Global DDOS Attack Campaign appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a major crackdown on illegal streaming, law enforcement authorities across Europe, supported by Europol and Eurojust, have successfully dismantled one of the largest illegal streaming networks operating both within and outside the EU. The extensive operation targeted a network of 102 suspects involved in distributing movies, series, and more than 2,500 pirated television channels, […]

The post Europol Dismantled Major Illegal IPTV Streaming Network Providers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft has recently released patches addressing multiple vulnerabilities that could enable attackers to elevate privileges across various Microsoft products. The patches are part of Microsoft’s continuous efforts to enhance security and protect its users from threats. The Microsoft Security Response Center (MSRC) has been actively investigating these vulnerabilities to provide timely and effective security updates. […]

The post Microsoft Patches Multiple Vulnerabilities Allow Attackers to Elevate Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In today’s dynamic threat landscape, security leaders are under constant pressure to make informed choices about which solutions and strategies they employ to protect their organizations. The “MITRE Engenuity ATT&CK Evaluations: Enterprise” stands out as an essential resource for cybersecurity decision-makers to navigate this challenge. Unlike other independent assessments, MITRE ATT&CK Evaluations simulate real-world threats to […]

The post Why the MITRE ATT&CK Evaluation Is Essential for Security Leaders appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The xattr command in Unix-like systems allows for the embedding of hidden metadata within files, similar to Windows ADS, known as Rustyattr, which is being exploited by threat actors like Lazarus Group to stealthily conceal malicious payloads within seemingly benign files. The Lazarus Group is covertly embedding malicious data within system files using xattr, a […]

The post Lazarus Hackers Exploits macOS Extended Attributes To Evade Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

ProjectSend, an open-source file-sharing web application, has become a target of active exploitation following the recent assignment of CVE-2024-11680 on November 25, 2024. Despite the availability of a patch for more than a year, adoption rates remain alarmingly low, leaving many instances vulnerable to attack. ProjectSend Authentication Vulnerability ProjectSend is moderately popular, with nearly 1,500 […]

The post ProjectSend Authentication Vulnerability Exploited in the Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

NVIDIA has released a critical security update addressing a significant vulnerability in its Unified Fabric Manager (UFM) products. This flaw, identified as CVE-2024-0130, poses a high-severity risk to users, with a CVSS v3.1 base score of 8.8. The vulnerability could allow attackers to escalate privileges, tamper with data, and even compromise system availability. Analyze cyber threats with […]

The post NVIDIA UFM Vulnerability Leads to Privilege Escalation & Data Tampering appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Fukui Prefectural Police have indicted a 15-year-old junior high school student from Saitama Prefecture for allegedly creating and distributing malware. The young suspect, who was only 14 at the time of the incidents, faces charges under Japan’s Unauthorized Access Prevention Act for storing and deploying unauthorized electromagnetic records of instructions. According to Fukui Police Station […]

The post Junior School Student Indicted for Infecting Computers With Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

GitLab, a widely used platform for DevOps lifecycle management, has released critical security updates for its Community Edition (CE) and Enterprise Edition (EE). The updates address multiple vulnerabilities, including a high-severity issue that could allow attackers to escalate privileges via compromised tokens. The company strongly advises all self-managed GitLab installations to upgrade immediately to the […]

The post Critical Gitlab Vulnerability Let Attackers Escalate Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

SpyLoan apps, a type of PUP, are rapidly increasing, exploiting social engineering to deceive users into granting excessive permissions, where these apps, installed millions of times, exfiltrate sensitive data to C2 servers via encrypted HTTP requests.  Primarily targeting South America, Southern Asia, and Africa, these apps are often promoted through deceptive social media ads, as […]

The post Beware Of SpyLoan Apps Exploits Social Engineering To Steal User Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CyberVolk, a politically motivated hacktivist group, has leveraged readily available ransomware builders like AzzaSec, Diamond, LockBit, and Chaos to launch DDoS and ransomware attacks against targets opposing Russian interests.  The highly skilled members of the group modify and improve these tools, which results in an increase in their level of sophistication and makes it more […]

The post Researchers Detailed Tools Used By Hacktivists Fueling Ransomware Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A ransomware attack on Blue Yonder, a leading supply chain management software provider, has created ripples across global retail and manufacturing sectors, affecting major players like Starbucks and prominent UK supermarket chains. The breach, which occurred on November 21, underscores the cyber risks organizations face during the high-stakes holiday season. Blue Yonder provides critical supply […]

The post Blue Yonder Ransomware Attack Impacts Starbucks & Multiple Supermarkets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Dell Technologies has released a security update for its Wyse Management Suite (WMS) to address multiple vulnerabilities that could allow malicious users to compromise affected systems. Wyse Management Suite is a flexible hybrid cloud solution that empowers IT admin to securely manage Dell client devices from anywhere. The vulnerabilities identified in Dell Wyse Management Suite are […]

The post Dell Wyse Management Suite Vulnerabilities Let Attackers Exploit Affected Systems Remotely appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) recently detailed findings from a Red Team Assessment (RTA) conducted on a critical infrastructure organization in the United States. The assessment, carried out over three months, simulated real-world cyberattacks to evaluate the organization’s cybersecurity defenses, detection capabilities, and response readiness. This comprehensive analysis sheds light on the tactics, […]

The post CISA Details Red Team Assessment Including TTPs & Network Defense appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

IBM has issued a security bulletin warning customers about a vulnerability in its Workload Scheduler software that allows user credentials to be stored in plain text. This issue, identified as CVE-2024-49351, could enable local users to access sensitive information such as passwords, posing a significant security risk in affected systems. Details of the Vulnerability The […]

The post IBM Workload Scheduler Vulnerability Stores User Credentials in Plain Text appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Several high-severity vulnerabilities have been identified in Android and Google Pixel devices, exposing millions of users to potential security risks. These flaws, categorized under various CVEs (Common Vulnerabilities and Exposures), range from privilege escalation to data theft and unauthorized access to sensitive features. While some of these vulnerabilities have been patched, others remain a concern, […]

The post Multiple Flaws With Android & Google Pixel Devices Let Attackers Elevate Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Phishing attackers used Google Docs to deliver malicious links, bypassing security measures and redirecting victims to fake login pages hosted on Weebly, targeting telecommunications and financial sectors in late October 2024. Financially motivated threat actors exploit Weebly’s ease of use and reputation to host phishing pages, bypassing security measures and leveraging the platform’s legitimacy to […]

The post Threat Actors Exploit Google Docs And Weebly Services For Malware Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Python-based NodeStealer, a sophisticated info-stealer, has evolved to target new information and employ advanced techniques, whereas recent variants focus on stealing Facebook Ads Manager budget details, potentially enabling malicious ad campaigns.  Now they pilfer credit card information alongside browser credentials, and to bypass security measures, the malware utilizes Windows Restart Manager to unlock browser […]

The post Python NodeStealer: Targeting Facebook Business Accounts to Harvest Login Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A significant XSS vulnerability was recently uncovered in Microsoft’s Bing.com, potentially allowing attackers to execute malicious JavaScript and send crafted requests to interconnected Microsoft applications like Outlook, OneDrive, and Copilot. The exploit leveraged the trust placed in Bing’s root domain (www.bing.com) as an allowed origin across Microsoft’s ecosystem, posing a significant security risk. The Research […]

The post XSS Vulnerability in Bing.com Let Attackers Send Crafted Malicious Requests appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.