Aggregator

A vulnerability was found in Linux Kernel up to 6.11.6. It has been rated as critical. Affected by this issue is the function vangogh_tables_init of the component Vangogh. The manipulation leads to out-of-bounds write. This vulnerability is handled as CVE-2024-50221. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A sophisticated cyber espionage campaign linked to Chinese state-aligned threat actors has targeted organizations across 15 countries using an updated variant of the Shadowpad malware to deploy previously undocumented ransomware. The attacks, analyzed by Trend Micro’s incident response team, exploit weak passwords and multi-factor authentication (MFA) bypass techniques to infiltrate Check Point firewall VPNs. Over […]

The post Chinese Hackers Exploiting Check Point Firewall Vulnerability To Deploy Ransomware appeared first on Cyber Security News.

by Source Defense A newly discovered payment card skimming campaign has emerged exhibiting a concerning level of sophistication and leveraging unique tactics that make detection highly challenging. The attack, identified by Source Defense researchers, employs an innovative technique that exploits Stripe’s deprecated API to verify card details before exfiltration – ensuring that only valid payment

The post Sophisticated Payment Card Skimming Campaign Conceals Itself by Leveraging Stripe API appeared first on Source Defense.

The post Sophisticated Payment Card Skimming Campaign Conceals Itself by Leveraging Stripe API appeared first on Security Boulevard.

Солдат с рюкзаком против армии беспилотников: кто кого?

A vulnerability has been found in Linux Kernel up to 6.11.5 and classified as problematic. This vulnerability affects unknown code of the component pse-pd. The manipulation leads to out-of-bounds read. This vulnerability was named CVE-2024-50129. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 6.6.62/6.11.9. Affected is the function sctp_v6_available of the file net/core/dev.c. The manipulation leads to use after free. This vulnerability is traded as CVE-2024-53139. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

The Cloud Key Management Service is part of Google's new road map for implementing the new NIST-based post-quantum cryptography (PQC) standards.

Name: PascalCTF Beginners 2025 (an PascalCTF event.)
Date: March 19, 2025, 3 p.m. — 19 March 2025, 20:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.pascalctf.it/
Rating weight: 0.00
Event organizers: Paolo

Name: ThunderCipher (an ThunderCipher CTF event.)
Date: Feb. 20, 2025, 7:30 a.m. — 20 Feb. 2025, 13:30 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://thundercipher.tech/
Rating weight: 0
Event organizers: ThunderCipher

Check Point Software Technologies Ltd. has announced plans to establish its inaugural Asia-Pacific Research and Development (R&D) Centre in Bengaluru, India. This initiative, unveiled during the CPX Bangkok 2025 conference, aims to drive innovation in cybersecurity solutions while strengthening global product development and talent acquisition. The Bengaluru centre underscores Check Point’s commitment to leveraging India’s […]

The post Check Point Software to Open First Asia-Pacific R&D Centre in Bengaluru, India appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent investigation into Ivanti Endpoint Manager (EPM) has uncovered four critical vulnerabilities that could allow unauthenticated attackers to exploit machine account credentials for relay attacks, potentially leading to server compromise. These vulnerabilities, identified in the C:\Program Files\LANDesk\ManagementSuite\WSVulnerabilityCore.dll, were patched in January 2025 following their discovery in October 2024. The vulnerabilities are categorized as follows: […]

The post PoC Exploit Released for Ivanti Endpoint Manager Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

As of February 2025, ransomware remains a formidable cyber threat, evolving in complexity and scale. The ransomware ecosystem has adapted to previous law enforcement disruptions, showcasing a resilient business model that continues to attract financially motivated cybercriminals. The proliferation of Ransomware-as-a-Service (RaaS) has significantly contributed to the volume of attacks, allowing less experienced affiliates to […]

The post Ransomware Trends 2025 – What’s new appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

ESET researchers have uncovered a series of malicious activities orchestrated by a North Korea-aligned group known as DeceptiveDevelopment, active since early 20241. The cybercriminals pose as company recruiters, enticing freelance software developers with fake employment offers. As part of the elaborate ruse, targets are asked to complete coding tests, such as adding features to existing […]

The post Hackers Delivering Malware Bundled with Fake Job Interview Challenges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

92 миллиона рабочих мест исчезнут к 2030 году… и снова виноват ИИ?

Cybersecurity researchers from Palo Alto Networks’ Unit 42 disclosed the resurgence of the Bookworm malware, which has been linked to the Stately Taurus threat actor group. This malware employs a sophisticated DLL sideloading technique that enables it to infiltrate Windows systems effectively. The research highlights overlaps between the infrastructure used by Stately Taurus and the […]

The post New Bookworm Malware Using SLL Sideloading Technique To Windows appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent investigation has uncovered a malicious application, DriverEasy, masquerading as a legitimate Google Chrome update to steal user credentials. The malware leverages Dropbox’s API to exfiltrate sensitive information, including passwords, and is linked to North Korea’s cyber-espionage campaign known as “Contagious Interview.” Password Theft via Fake Prompts DriverEasy, written in Swift and Objective-C, deploys […]

The post Fake Chrome Update Delivers DriverEasy Malware by Abusing Dropbox appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability, which was classified as critical, has been found in Uniclare Student Portal up to 2. Affected by this issue is some unknown functionality of the component Forgot Password Handler. The manipulation leads to sql injection. This vulnerability is handled as CVE-2024-57401. The attack may be launched remotely. There is no exploit available.

Fake job ads target freelance developers, spreading malware via GitHub

A vulnerability classified as problematic was found in PHPJabbers Cinema Booking System 1.0. Affected by this vulnerability is an unknown functionality of the component Now Showing Menu. The manipulation of the argument date leads to cross site scripting. This vulnerability is known as CVE-2023-51330. The attack can be launched remotely. There is no exploit available.