Aggregator

Threat Actor Bribes Overseas Support Agents to Steal Coinbase Customer Data

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
3 months ago

On May 15, 2025, Coinbase, the largest U.S. cryptocurrency exchange, publicly disclosed a major security breach that exposed the sensitive personal data of 69,461 users—less than 1% of its monthly transacting base, but a significant figure given the depth of information compromised. This incident was not a typical crypto hack exploiting blockchain vulnerabilities; instead, it […]

The post Threat Actor Bribes Overseas Support Agents to Steal Coinbase Customer Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Anupriya

CVE-2025-20988 | Samsung Devices Fingerprint Trustlet out-of-bounds (EUVD-2025-16832)

Vuldb Updates
3 months ago
A vulnerability, which was classified as problematic, has been found in Samsung Devices. Affected by this issue is some unknown functionality of the component Fingerprint Trustlet. The manipulation leads to out-of-bounds read. This vulnerability is handled as CVE-2025-20988. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-24015 | denoland deno up to 2.1.6 Authentication Tag set_aad signature verification (GHSA-2x3r-hwv5-p32x / EUVD-2025-16794)

Vuldb Updates
3 months ago
A vulnerability, which was classified as problematic, has been found in denoland deno up to 2.1.6. This issue affects the function set_aad of the component Authentication Tag Handler. The manipulation leads to improper verification of cryptographic signature. The identification of this vulnerability is CVE-2025-24015. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-4580 | File Provider Plugin up to 1.2.3 on WordPress Setting cross-site request forgery (EUVD-2025-16841)

Vuldb Updates
3 months ago
A vulnerability has been found in File Provider Plugin up to 1.2.3 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Setting Handler. The manipulation leads to cross-site request forgery. This vulnerability is known as CVE-2025-4580. The attack can be launched remotely. There is no exploit available.
vuldb.com

Threat Actors Abuse ‘Prove You Are Human’ System to Distribute Malware

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
3 months ago

Threat actors have been found exploiting the ubiquitous “Prove You Are Human” verification systems to distribute malicious software. Specifically, this campaign leverages spoofed websites mimicking legitimate platforms like Gitcodes and DocuSign to deceive users into executing harmful PowerShell scripts on their Windows systems. Deceptive CAPTCHA Tactics These scripts initiate a multi-stage attack that ultimately installs […]

The post Threat Actors Abuse ‘Prove You Are Human’ System to Distribute Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

Managed ad