Aggregator

Astaroth is an advanced phishing kit using real-time credential and session cookie capture to compromise Gmail, Yahoo and Office 365 accounts

Het mariniersdetachement op Sint Maarten heeft gisteren ondersteuning verleend aan het Korps Politie Sint Maarten. Dat gebeurde tijdens een doorzoeking in de Penitentiaire Inrichting Point Blanche.

A subgroup of the Russian state-sponsored hacking group Seashell Blizzard, also known as Sandworm, has intensified its cyber operations through a campaign dubbed BadPilot. This multi-year initiative has targeted critical infrastructure worldwide, expanding the group’s reach beyond its traditional focus on Ukraine and Eastern Europe to include North America, Europe, and Asia-Pacific regions. Exploiting Vulnerabilities […]

The post Arbitrary File Upload Vulnerability in WordPress Plugin Let Attackers Hack 30,000 Website appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly uncovered cyber campaign, dubbed “BadPilot,” has been linked to a subgroup of the Russian state-sponsored hacking collective Seashell Blizzard, also known as Sandworm. This operation, active since at least 2021, represents a significant expansion in Russia’s cyber activities, targeting critical infrastructure globally. According to Microsoft Threat Intelligence, the campaign focuses on compromising internet-facing […]

The post BadPilot Attacking Network Devices to Expand Russian Seashell Blizzard’s Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability was found in PostgreSQL up to 13.18/14.15/15.10/16.6/17.2. It has been declared as critical. Affected by this vulnerability is the function PQescapeLiteral/PQescapeIdentifier/PQescapeString/PQescapeStringConn. The manipulation leads to improper neutralization of quoting syntax. This vulnerability is known as CVE-2025-1094. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Как борьба с пиратством парализовала испанский веб.

为了提升自己的开发能力和安全意识，我决定对这套系统的CSRF漏洞进行一次漏洞挖掘和代码审计，并将整个过程记录下来。

A subgroup of Russia’s Sandworm APT has been working to achieve initial and persistent access to the IT networks of organizations working in economic sectors Russia is interested in. “In 2022, its primary focus was Ukraine, specifically targeting the energy, retail, education, consulting, and agriculture sectors. In 2023, it globalized the scope of its compromises, leading to persistent access within numerous sectors in the United States, Europe, Central Asia, and the Middle East,” Microsoft’s researchers … More →

The post Sandworm APT’s initial access subgroup hits organizations accross the globe appeared first on Help Net Security.

Cybersecurity analysts have identified that hackers are leveraging the open-source Pyramid pentesting tool to establish stealthy command-and-control (C2) communications. Originally designed as a post-exploitation framework for penetration testers, Pyramid has become an attractive option for malicious actors due to its ability to evade detection by endpoint security tools. The tool, first released on GitHub in […]

The post Cybercriminals Exploit Pyramid Pentesting Tool for Covert C2 Communications appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability was found in Anapi Group H6Web. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-1271. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Chimpstudio WP Directorybox Manager Plugin up to 2.5 on WordPress and classified as critical. This issue affects the function wp_dp_parse_request. The manipulation leads to authentication bypass using alternate channel. The identification of this vulnerability is CVE-2024-13182. The attack may be initiated remotely. There is no exploit available.

A vulnerability has been found in Anapi Group H6Web and classified as critical. This vulnerability affects unknown code of the file /h6web/ha_datos_hermano.php. The manipulation of the argument pkrelated leads to authorization bypass. This vulnerability was named CVE-2025-1270. The attack can be initiated remotely. There is no exploit available.

#SNMP #TRP00F权限提升 #ktor-HTTP服务扫描 #Pandora Fms SQLI-RCE #RE #tar-Path劫持权限提升

A vulnerability, which was classified as problematic, was found in Keylime 7.12.0. This affects an unknown part of the component Database Entry Handler. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2025-1057. Access to the local network is required for this attack to succeed. There is no exploit available.

Ahead of Valentine’s Day, Chainalysis figures reveal 40% increase in losses to pig butchering, or romance baiting, scams

Foreign adversaries, including Russia, China, and Iran, are intensifying their efforts to manipulate public opinion and destabilize local communities across the United States. These campaigns, once primarily focused on national-level politics, have increasingly targeted state and local governments, community groups, and individuals. Leveraging advanced technologies such as generative artificial intelligence (AI), these actors aim to […]

The post Threat Actors in Russia, China, and Iran Targeting Local communities in the U.S appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Netskope Threat Labs has uncovered a sophisticated phishing campaign targeting users across various industries, including technology, manufacturing, and banking. This campaign, active since mid-2024, exploits search engine optimization (SEO) techniques to lure victims into downloading malicious PDFs hosted on the Webflow Content Delivery Network (CDN). These PDFs are embedded with fake CAPTCHA images that redirect […]

The post New Phishing Attacks Abuses Webflow CDN & CAPTCHAs to Steal Credit Card details appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.75/6.12.12/6.13.1. Affected by this issue is some unknown functionality. The manipulation leads to use after free. This vulnerability is handled as CVE-2025-21700. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.