GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

The researcher discovered a vulnerability in the Windows Update process that allowed them to downgrade critical system components, including DLLs, drivers, and the NT kernel. This enabled the attacker to bypass security measures like Secure Boot and expose previously patched vulnerabilities.  There are many ways to disable VBS, including Credential Guard and HVCI, even with […]

The post New Windows Downgrade Attack Let Hackers Downgrade Patched Systems To Exploits appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Recent cyberattacks involving Akira and Fog threat actors have targeted various industries, exploiting a vulnerability (CVE-2024-40766) in SonicWall SSL VPN devices, where these attacks, initiated early in the kill chain, leverage malicious VPN logins from VPS-hosted IP addresses.  The rapid escalation from initial access to ransomware encryption, often within the same day, highlights the urgency […]

The post Hackers Use Fog Ransomware To Attack SonicWall VPNs And Breach Corporate Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

An international coalition led by the U.S. Department of Justice has dismantled the infrastructure behind the notorious RedLine and META infostealers. These malware variants have plagued millions of computers worldwide, stealing sensitive information and facilitating further cybercriminal activities. Operation Magnus was a joint effort involving the US Department of Justice, FBI, Naval Criminal Investigative Service, […]

The post RedLine and META Infostealers Infrastructure Seized by Authorities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Canadian Centre for Cyber Security (Cyber Centre), a Communications Security Establishment Canada (CSE) division, has warned Canadian organizations about an ongoing cyber threat. The Cyber Centre reports that a sophisticated state-sponsored threat actor from the People’s Republic of China has been conducting extensive reconnaissance scanning on Canadian IT systems over several months. This activity, […]

The post Chinese Hackers Scanning Canadian IT Systems for Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Open Policy Agent (OPA) recently patched a critical vulnerability that could have exposed NTLM credentials of the OPA server’s local user account to remote attackers, which was present in both the OPA CLI and Go SDK.  By exploiting this flaw, attackers could have compromised the OPA server’s authentication mechanisms and potentially gained unauthorized access to […]

The post SMB Force-Authentication Vulnerability Impacts All OPA Versions For Windows appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Latrodectus, a new malware loader, has rapidly evolved since its discovery, potentially replacing IcedID. It includes a command to download IcedID and has undergone multiple iterations, likely to evade detection.  Extracting configurations from these versions is crucial for effective threat detection, as the Latrodectus malware has evolved over the past year, with new versions released […]

The post Latrodectus Employs New anti-Debugging And Sandbox Evasion Techniques appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Recent analysis has revealed a concerning trend in mobile app security: Many popular apps store hardcoded and unencrypted cloud service credentials directly within their codebases.  It poses a significant security risk as anyone accessing the app’s binary or source code could extract and misuse these credentials to manipulate or exfiltrate data.  Examples include Pic Stitch, […]

The post Hardcoded Creds in Popular Apps Put Millions of Android and iOS Users at Risk appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers have identified a new variant of the ClickFix fake browser update malware distributed through malicious WordPress plugins. These plugins, disguised as legitimate tools, inject malicious JavaScript code into compromised websites, tricking users into installing malware.  The malware uses blockchain technology to obtain malicious payloads, exploiting social engineering tactics to deceive victims.  Over 6,000 websites […]

The post ClickFix Malware Infect Website Visitors Via Hacked WordPress Websites appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researcher Marco Figueroa has uncovered a method to bypass the built-in safeguards of ChatGPT-4o and similar AI models, enabling them to generate exploit code. This discovery highlights a significant vulnerability in AI security measures, prompting urgent discussions about the future of AI safety. According to the 0Din reports, the newly discovered technique involves encoding malicious […]

The post New ChatGPT-4o Jailbreak Technique Enabling to Write Exploit Codes appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Nintendo has cautioned its users about a sophisticated phishing attack that involves emails mimicking official Nintendo communication. These emails, appearing to come from addresses, are being sent by third parties and are not legitimate communications from the company. Details of the Phishing Attack Nintendo has confirmed that these spoofed emails are being used to disseminate […]

The post Nintendo Warns of Phishing Attack Mimics Company Email Address appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

As the year-end approaches, it’s common for enterprises to discover they still have funds that must be utilized. Often, these L&D dollars are “use or lose,” meaning they will be returned to the general fund if not invested. Recognizing this, INE Security is launching an initiative to guide organizations in investing in technical training before […]

The post INE Launches Initiative to Optimize Year-End Training Budgets with Enhanced Cybersecurity and Networking Programs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Multiple vulnerabilities have been discovered in the Realtek SD card reader driver, RtsPer.sys, affecting a wide range of laptops from major manufacturers like Dell and Lenovo. These vulnerabilities have been present for years, allowing non-privileged users to exploit the system by leaking kernel memory and reading and writing physical memory via Direct Memory Access (DMA). […]

The post Vulnerabilities in Realtek SD Card Reader Driver Impacts Dell, Lenovo, & Others Laptops appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

GitLab has announced the release of critical security updates for its Community Edition (CE) and Enterprise Edition (EE). The updates address a high-severity HTML injection vulnerability that could lead to cross-site scripting (XSS) attacks. The patched versions, 17.5.1, 17.4.3, and 17.3.6, are now available for immediate upgrade.  The vulnerability, CVE-2024-8312, affects all GitLab CE/EE versions […]

The post GitLab Patches HTML Injection Flaw Leads to XSS Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Multiple Xerox printer models, including EC80xx, AltaLink, VersaLink, and WorkCentre, have been identified as vulnerable to an authenticated remote code execution (RCE) attack. This vulnerability tracked as CVE-2024-6333, poses a significant risk, fully allowing attackers with administrative web credentials to compromise affected devices with root privileges.  Timo Longin from SEC Consult’s Vienna office and Tamas […]

The post Xerox Printers Vulnerable to Remote Code Execution Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cisco has issued a critical security advisory regarding a vulnerability in its Adaptive Security Appliance (ASA) Software. The vulnerability could allow remote attackers to execute commands with root-level privileges. The flaw, CVE-2024-20329, affects devices running a vulnerable release of Cisco ASA Software with the CiscoSSH stack enabled. Vulnerability Details – CVE-2024-20329 The vulnerability arises from […]

The post Cisco ASA Devices Vulnerable to SSH Remote Command Injection Flaw appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has released several security patches for its Chrome browser, addressing critical vulnerabilities that malicious actors could exploit. The update is now available on the Stable channel, with version 130.0.6723.69/.70 for Windows and Mac and version 130.0.6723.69 for Linux. The rollout is expected to reach users over the coming days and weeks.  The Extended Stable […]

The post Google Patches Multiple Chrome Security Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Grayscale Investments, a prominent crypto asset manager, has reportedly suffered a data breach affecting 693,635 user records. The breach was first reported on a hacking forum and has raised significant alarm among users and cybersecurity experts. According to the post on X by user H4ckManac, the breach occurred in October 2024 and involved the theft […]

The post Grayscale Investments Data Breach Exposes 693K User Records Reportedly Affected appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A database containing over 1,000 email accounts associated with the National Health Service (NHS) has reportedly been leaked and is being sold on a dark web forum. This breach, which includes sensitive information such as passwords and personal details, has raised significant privacy and security concerns across the United Kingdom. Dark Web Intelligence, which monitors […]

The post Threat Actors Allegedly Selling Database of 1,000 NHS Email Accounts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers from Avast have uncovered a vulnerability in the cryptographic schema of the Mallox ransomware, a particularly active variant between 2023 and early 2024. This flaw allows victims of this specific Mallox variant to decrypt their files without paying a ransom. However, this window of opportunity is limited. The ransomware developers rectified the flaw in […]

The post Mallox Ransomware Vulnerability Lets Victims Decrypt Files appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recently discovered vulnerability in Red Hat’s NetworkManager, CVE-2024-8260, has raised concerns in the cybersecurity community because it could allow unauthorized users to gain root access. This security flaw, publicly disclosed on August 30, 2024, and last modified on September 19, 2024, has been classified as moderately severe and assigned a Common Vulnerability Scoring System […]

The post Red Hat NetworkManager Flaw Allows Hackers to Gain Root Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.