GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Insikt Group has uncovered new infrastructure tied to the Israeli spyware vendor Candiru, now operating under Saito Tech Ltd., highlighting the persistent deployment of its advanced DevilsTongue malware. Utilizing Recorded Future Network Intelligence, researchers identified eight distinct operational clusters, each exhibiting variations in infrastructure design and administration. These include victim-facing components for deploying and commanding […]

The post Sophisticated DevilsTongue Spyware Tracks Windows Users Worldwide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

ClickFix, which began as a red-team simulation tool in September 2024, has quickly developed into a widespread malware delivery system that outcompetes its predecessors, such as the ClearFake phony browser update fraud. Initially demonstrated by security researcher John Hammond for educational purposes, this fake CAPTCHA technique tricks users into executing malicious PowerShell commands via clipboard […]

The post CAPTCHAgeddon: Fake CAPTCHA Used in New ClickFix Attack to Deploy Malware Payload appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

WhatsApp is rolling out enhanced security measures to combat the surge in scam messages targeting users worldwide, as criminal organizations increasingly exploit messaging platforms to defraud unsuspecting victims. The new features come as federal authorities report a dramatic spike in investment-related fraud complaints. The Federal Bureau of Investigation has documented a staggering 300 percent increase in victim […]

The post WhatsApp Adds Security Feature to Help Users Spot and Avoid Malicious Messages appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated cybercrime campaign has been discovered targeting Android users through fake antivirus applications that actually deliver LunaSpy spyware to victims’ devices. Security researchers have identified this malicious operation as an active threat that exploits users’ security concerns to gain unauthorized access to personal data and device functions. The LunaSpy malware campaign has been operating […]

The post Fake Antivirus App Delivers LunaSpy Malware to Android Devices appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Pandora, the world-renowned Danish jewelry retailer, recently suffered a major cybersecurity incident involving unauthorized access to customer information through a third-party vendor platform. The company confirmed the cyberattack was promptly identified and contained, with immediate security reinforcements implemented. Official communications sent to customers, particularly in Italy, revealed the breach involved unauthorized access to an external […]

The post Pandora Jewellery Hit by Cyberattack, Customer Data Compromised appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Rockwell Automation has disclosed three critical memory corruption vulnerabilities in its Arena Simulation software that could allow attackers to execute malicious code remotely. The vulnerabilities, discovered during routine internal testing, affect all versions of Arena Simulation 16.20.09 and earlier, potentially exposing industrial automation environments to significant security risks. Critical Security Flaws Identified The three vulnerabilities, […]

The post Rockwell Arena Simulation Flaws Allow Remote Execution of Malicious Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers have identified a sophisticated new tactic employed by Akira ransomware operators, who are exploiting legitimate Windows drivers to evade antivirus and endpoint detection systems while targeting SonicWall VPN infrastructure. This development represents a significant escalation in the group’s technical capabilities and poses serious challenges for enterprise cybersecurity defenses. Campaign Overview and Timeline From […]

The post Akira Ransomware Uses Windows Drivers to Bypass AV/EDR in SonicWall Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors leveraged SEO poisoning techniques to manipulate Bing search results, directing users querying for “ManageEngine OpManager” to a malicious domain, opmanager[.]pro. This site distributed a trojanized MSI installer named ManageEngine-OpManager.msi, which covertly deployed the Bumblebee malware loader while installing legitimate software. Bumblebee, first identified in late 2021 as an initial access tool associated with […]

The post Threat Actors Poison Bing Search Results to Distribute Bumblebee Malware via ‘ManageEngine OpManager’ Queries appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Unit 42 researchers have identified significant overlaps between Microsoft’s reported ToolShell exploit chain targeting SharePoint vulnerabilities and a tracked activity cluster dubbed CL-CRI-1040. This cluster, active since at least March 2025, deploys a custom malware suite named Project AK47, comprising multi-protocol backdoors, ransomware, and DLL side-loading loaders. Microsoft’s analysis attributes the activity to Storm-2603, a […]

The post Chinese Hackers Exploit SharePoint Flaws to Deploy Backdoors, Ransomware, and Loaders appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers have uncovered a highly advanced network of Chinese-speaking cybercriminal syndicates orchestrating smishing attacks that exploit digital wallet tokenization, potentially compromising up to 115 million payment cards in the United States alone. These operations, which evolved dramatically since August 2023, leverage phishing-as-a-service (PaaS) platforms to harvest credentials and bypass multi-factor authentication (MFA) mechanisms, transforming […]

The post Chinese Hackers Breach Exposes 115 Million U.S. Payment Cards appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Adobe has released critical security updates for Adobe Experience Manager (AEM) Forms on Java Enterprise Edition following the discovery of two severe vulnerabilities that could enable attackers to execute arbitrary code and read sensitive files from affected systems. Critical Security Flaws Discovered Security researchers Shubham Shah and Adam Kues from Assetnote identified two critical vulnerabilities […]

The post Adobe AEM Forms 0-Day Vulnerability Allows Attackers to Run Arbitrary Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security Risk Advisors (SRA), a leading cybersecurity consulting firm, today announced the launch of SCALR AI, a customizable platform designed to enable non-technical people to build and integrate agentive AI capabilities directly into their operations. SCALR AI is being showcased at Black Hat USA 2025, taking place August 6-9, 2025. SCALR AI addresses the growing […]

The post Security Risk Advisors Launches SCALR AI for Fast-Track Agentive AI Enablement appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

San Francisco, California, August 1st, 2025, CyberNewsWire Comp AI Raises $2.6M in Pre-Seed Funding to Revolutionize Enterprise Compliance with AI-Powered Automation Comp AI, an emerging player in the compliance automation space, today announced it has secured $2.6 million in pre-seed funding to accelerate its mission of transforming how companies achieve compliance with critical frameworks like SOC […]

The post Comp AI Raises $2.6M to Streamline and Disrupt the SOC 2 Market appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) has issued Notice FIN-2025-NTC1, dated August 4, 2025, warning financial institutions about the growing risks associated with convertible virtual currency (CVC) kiosks, also known as cryptocurrency automated teller machines (ATMs), in a major step to strengthen AML and countering the financing of terrorism (CFT) […]

The post U.S. Treasury Warns Crypto ATMs Are Aiding Criminal Activity appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity firm CTM360 has uncovered an ongoing malicious operation dubbed “ClickTok,” specifically targeting TikTok Shop users worldwide through a dual-pronged strategy of phishing and malware deployment. This campaign leverages deceptive replicas of TikTok’s official in-app e-commerce platform, impersonating affiliates and legitimate interfaces to ensnare both end-users (buyers) and participants in the TikTok Shop Affiliate Program. […]

The post Over 10,000 Malicious TikTok Shop Domains Target Users with Malware and Credential Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The North Korean state-sponsored group Kimsuky, also known as APT43, Thallium, and Velvet Chollima, has been accused of launching a recent cyber-espionage campaign in which the attackers used malicious Windows shortcut (LNK) files as the first point of entry to breach South Korean government agencies, defense contractors, and research institutions. The operation begins with phishing […]

The post Kimsuky APT Uses LNK Files to Deploy Reflective Malware and Evade Windows Defender appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft has unveiled the return of its groundbreaking Zero Day Quest initiative, escalating the stakes in cybersecurity research with a staggering total bounty pool of up to $5 million. Building on the success of last year’s inaugural event, which offered $4 million in awards and garnered overwhelming participation from the global security community, this year’s […]

The post Microsoft Launches Zero-Day Quest Hacking Contest with Rewards Up to $5 Million appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers discovered 28 distinct zero-day vulnerabilities, seven of which were expressly directed at artificial intelligence infrastructure, in a startling discovery made during the 2025 Pwn2Own Berlin event, which was organized by Trend Micro’s Zero Day Initiative. This inaugural AI category focused on developer toolkits, vector databases, and model management frameworks, highlighting the fragility of […]

The post Surge in Cyber Attacks Targeting AI Infrastructure as Critical Vulnerabilities Emerge appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cisco Systems has disclosed a data breach that compromised basic profile information of users registered on Cisco.com following a successful voice phishing attack targeting one of the company’s representatives. The incident resulted in unauthorized access to a third-party cloud-based Customer Relationship Management (CRM) system used by the networking giant. The breach occurred when a malicious […]

The post Cisco Discloses Data Breach Exposed User Profiles from Cisco.com appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cloudflare has publicly accused Perplexity AI of employing deceptive crawling practices that violate established web crawling protocols and deliberately circumvent website protection mechanisms. The cybersecurity company has documented evidence of Perplexity using undisclosed user agents and rotating IP addresses to access content from websites that have explicitly blocked the AI company’s declared crawlers. Stealth Crawling […]

The post Cloudflare Accuses Perplexity AI of Bypassing Firewalls with User-Agent Spoofing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.