Aggregator

FBI Seizes Domains; Dutch Police Analyzing Seized Data to Identify Admin and Users
An international law enforcement operation involving the FBI and Dutch police has shuttered VerifTools, a "key" platform for generating fake identification documents cops have tied to multiple help desk fraud, cryptocurrency theft and other cybercrime cases.

MediaTek today published a critical security bulletin addressing several vulnerabilities across its latest modem chipsets, urging device OEMs to deploy updates immediately.  The bulletin, issued two months after confidential OEM notification, confirms that no known in-the-wild exploits have been detected to date. Key Takeaways1. MediaTek patched high- and medium-severity modem and firmware bugs across 60+ […]

The post MediaTek Security Update – Patch for Multiple Vulnerabilities Across Chipsets appeared first on Cyber Security News.

A startling vulnerability in Pudu Robotics’ management APIs that allowed anyone with minimal technical skill to seize control of the company’s food delivery and service robots. The vulnerability, which went unaddressed for weeks despite repeated responsible‐disclosure attempts, could have enabled malicious actors to redirect BellaBots and other Pudu models to deliver meals to unintended recipients, […]

The post Food Delivery Robots Vulnerable to Hacks That Redirect Orders appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

F6 зафиксировали новую кампанию рассылок с Phantom Stealer.

Salesforce today unveiled its comprehensive Forensic Investigation Guide, equipping organizations with best practices, log analysis techniques, and automation workflows to detect and respond to sophisticated security breaches rapidly.  To reconstruct attack timelines and assess data exposure, the guide emphasizes three primary information sources: Activity Logs, User Permissions, and Backup Data.  Key Takeaways1. Salesforce’s new Forensic […]

The post Salesforce Releases Forensic Investigation Guide Following Chain of Attacks appeared first on Cyber Security News.

背景 2025年被称为 Agent 元年，AI 的发展逐渐来到了新的临界点，Agent 凭借其独特的自主理解、 […]

In a significant security move, Microsoft announced on August 26, 2025, that it will require mandatory multifactor authentication (MFA) for all accounts signing in to the Azure portal and related administrative centers. The policy, first introduced in 2024, aims to dramatically reduce account compromise by enforcing an additional layer of identity verification across Azure and […]

The post Microsoft Enforces MFA for Logging into Azure Portal appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

macOS has long been recognized for its robust, integrated security stack, but cybercriminals are finding ways to weaponize these very defenses.  Recent incidents show attackers exploit Keychain, SIP, TCC, Gatekeeper, File Quarantine, XProtect, and XProtect Remediator to stealthily deliver malicious payloads.  Key Takeaways1. Abuse of macOS tools (Keychain, SIP, File Quarantine) for credential theft and […]

The post Hackers Leverage Built-in MacOS Protection Features to Deploy Malware appeared first on Cyber Security News.

Currently trending CVE - Hype Score: 15 - An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges on the system. The insufficient validation allows Netskope Client to connect to any other server with Public Signed CA TLS certificates and send specially ...

Currently trending CVE - Hype Score: 7 - The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Fancy Text widget in all versions up to, and including, 6.0.3 due to insufficient input ...

A vulnerability identified as problematic has been detected in Akınsoft QR Menü up to 1.05.11. This affects an unknown function. The manipulation leads to cross-site request forgery. This vulnerability is documented as CVE-2025-0610. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability categorized as problematic has been discovered in Akinsoft QR Menu up to 1.05.11. The impacted element is an unknown function. Executing manipulation can lead to improper restriction of excessive authentication attempts. This vulnerability is registered as CVE-2025-2412. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in Akınsoft QR Menü up to 1.05.11. It has been rated as critical. The affected element is an unknown function of the component HTTP Response Handler. Performing manipulation results in certificate with host mismatch. This vulnerability is cataloged as CVE-2024-12925. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

TradingView оказался бесплатным билетом в ваш смартфон.

反编译器的好与坏~

Apple appears poised to remove the physical SIM card slot from its upcoming iPhone 17 models in more countries, with a significant rollout anticipated across the European Union. This change would mark the latest step in Apple’s long-term strategy of transitioning to the more secure and flexible eSIM technology, a move already implemented in the […]

The post Apple May Drop Physical SIM Card in iPhone 17 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability was found in Akınsoft QR Menü up to 1.05.11. It has been declared as problematic. Impacted is an unknown function. Such manipulation leads to cross site scripting. This vulnerability is listed as CVE-2024-12914. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

Cybersecurity today is less about single attacks and more about chains of small weaknesses that connect into big risks. One overlooked update, one misused account, or one hidden tool in the wrong hands can be enough to open the door. The news this week shows how attackers are mixing methods—combining stolen access, unpatched software, and clever tricks to move from small entry points to large

A vulnerability was found in Akınsoft QR Menü up to 1.05.11. It has been classified as problematic. This issue affects some unknown processing. This manipulation causes open redirect. This vulnerability is tracked as CVE-2024-12924. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in RemoteClinic 2.0 and classified as critical. This vulnerability affects unknown code of the file /staff/profile.php. The manipulation of the argument ID results in sql injection. This vulnerability is identified as CVE-2025-9802. The attack can be executed remotely. There is not any exploit available.