Aggregator

CISA and FBI Release Tactics, Techniques, and Procedures of the Scattered Spider Hacker Group

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
4 months 3 weeks ago

The joint Cybersecurity Advisory AA23-320A, collaboratively issued by agencies such as the FBI, CISA, RCMP, ASD’s ACSC, AFP, CCCS, and NCSC-UK, serves as a critical update on the Scattered Spider cybercriminal group. Originally published in November 2023 and revised multiple times, most recently on July 29, 2025 this advisory highlights the group’s persistent and adaptive […]

The post CISA and FBI Release Tactics, Techniques, and Procedures of the Scattered Spider Hacker Group appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

FBI seizes 20 BTC from Chaos Ransomware affiliate targeting Texas firms

Security Affairs
4 months 3 weeks ago
FBI Dallas seized 20 BTC from Chaos ransomware affiliate “Hors,” tied to cyberattacks on Texas firms, on April 15, 2025. The FBI division in Dallas seized about 20 Bitcoins on April 15, 2025, from a wallet belonging to a Chaos ransomware affiliate named as “Hors.” The Hors affiliate is responsible for multiple cyberattacks on Texas […]
Pierluigi Paganini

Google Launches DBSC Open Beta in Chrome and Enhances Patch Transparency via Project Zero

The Hackers News
4 months 3 weeks ago
Google has announced that it's making available a security feature called Device Bound Session Credentials (DBSC) in open beta to ensure that users are safeguarded against session cookie theft attacks. DBSC, first introduced as a prototype in April 2024, is designed to bind authentication sessions to a device so as to prevent threat actors from using stolen cookies to sign-in to victims'
The Hacker News

ChatGPT Agent Defeats Cloudflare’s ‘I Am Not a Robot’ Security Check

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
4 months 3 weeks ago

In a significant development that highlights both the advancing capabilities of AI and potential vulnerabilities in web security systems, a ChatGPT-powered agent has successfully bypassed Cloudflare’s widely-used “I am not a robot” verification system. The breakthrough, demonstrated through automated interactions with Cloudflare’s security interface, shows the AI agent completing the human verification process that millions […]

The post ChatGPT Agent Defeats Cloudflare’s ‘I Am Not a Robot’ Security Check appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

微软承认它无法保障欧洲国家的数字主权

Solidot
4 months 3 weeks ago
微软承认根据美国的 Cloud Act 法，它无法保障法国或其它欧洲国家客户的数字主权。Cloud Act 允许美国政府 访问美国科技公司的数据，即使数据存储在位于海外的服务器上。微软法国代表 Anton Carniaux 和 Pierre Lagarde 在接受法国议会咨询时表示，微软会抵制无根据的数据请求，但有法律义务遵守有效的数据请求。根据微软的透明度报告，它至今未收到美国政府要求访问储存在欧洲服务器上的信息的数据请求，但地缘政治紧张局势令欧盟国家对此感到担忧。Legrande 表示，过去三年来微软实现了一个技术环境以最大限度减少数据传输，将欧洲客户数据保存在欧盟境内。

Severe Vulnerability in AI Vibe Lets Attackers Access Private User Applications

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
4 months 3 weeks ago

A critical security vulnerability in the popular AI-powered development platform Base44 allowed unauthorized attackers to bypass authentication controls and gain access to private enterprise applications, according to a new report from Wiz Research. The flaw, which has since been patched, exposed sensitive corporate data across multiple organizations using the vibe coding platform for internal tools […]

The post Severe Vulnerability in AI Vibe Lets Attackers Access Private User Applications appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

Managed ad