2024-04-24 08:53
Law enforcement operations disrupted BlackCat and LockBit RaaS operations, including sanctions on LockBit members aiming to undermine affiliate confidence.
In response, LockBit publicly e… Read More
Blog Directory > Technology Blogs > GBHackers on security technology Blog >
Gbhackers On Security Blog
gbhackers.com
Tags:
sim swap
systems hacked documents
lateral movement
cyber
sim swap requests
ransomware
network
manager developer portal
ransom hits record
security
GBHackers on Security is an Advanced Persistent Cyber Security Online platform which including, Daily hacking News Cyber Security Research,Web Application and Network Penetration Testing, Hacking Tutorials,Live Security Updates, Technology updates, Security investigations With dedicated Cyber security Expert Team and help to community more secure.
2024-04-24 08:31
IBM is reportedly close to finalizing negotiations to acquire HashiCorp, a prominent cloud infrastructure software market player.
This potential acquisition is part of IBM’s transfo… Read More
2024-04-24 07:09
The United States Justice Department has announced big rewards for information leading to the capture of four Iranian nationals.
These individuals are accused of conducting a sophisticate… Read More
2024-04-23 13:31
When cyber attacks strike, it’s rarely a single computer that suffers. Nowadays, cybercriminals set their sights on corporate networks, aiming to infiltrate and compromise multiple sys… Read More
2024-04-23 13:31
Oracle Virtualbox was identified and reported as having a critical vulnerability associated with Privilege Escalation and Arbitrary File Move/Delete.
This vulnerability was assigned with… Read More
2024-04-23 12:10
To combat the misuse of commercial spyware, the United States Department of State has announced visa restrictions on 13 individuals linked to developing and selling these invasive technologi… Read More
2024-04-23 09:43
The Volkswagen Group has fallen victim to a sophisticated hacking incident, with over 19,000 sensitive documents stolen.
Investigations point towards a possible involvement of Chinese hac… Read More
2024-04-23 08:13
Security researchers have identified a critical vulnerability in Apache HugeGraph, an open-source graph database tool.
This flaw, if exploited, could allow attackers to execute arbitrary… Read More
2024-04-23 08:12
A SIM Swap Scam or SIM Cloning Scam exploits a vulnerability in a two-factor authentication (2FA) system that relies on SMS messages for verification codes, where attackers aim to gain contr… Read More
2024-04-23 07:45
A significant vulnerability in the Perforce Akana Community Manager Developer Portal has been found, allowing attackers to conduct server-side request forgery (SSRF) attacks.
Communi… Read More
2024-04-23 07:12
The ongoing tension between privacy rights and public safety, Europol, along with European Police Chiefs, has issued a call for tech giants to provide lawful access to encrypted communicatio… Read More
2024-04-22 14:18
Hackers often target PyPI packages to exploit vulnerabilities and inject malicious code into widely used Python libraries.
Recently, cybersecurity researchers at FortiGuard Labs identifie… Read More
2024-04-22 14:10
APT29, a Russian threat group, targeted German political parties with a new backdoor called WINELOADER using spear-phishing emails containing malicious links to ZIP files hosted on compromis… Read More
2024-04-22 14:04
A significant vulnerability has been identified in Citrix’s monitoring tool, uberAgent.
If exploited, this flaw could allow attackers to escalate their privileges within the system… Read More
2024-04-22 13:32
Anonymous claims a successful cyberattack against the Israeli Defence Force (IDF), gaining access to 20 gigabytes of data, which allegedly includes over 233,000 military documents in various… Read More
2024-04-22 11:08
A new exploit targeting VMware ESXi Shell Service has been discovered and is circulating on various hacking forums.
This vulnerability poses a significant risk to organizations using VMwa… Read More
2024-04-22 11:07
A new vulnerability has been unearthed, allowing attackers to gain rootkit-like abilities on Windows systems without requiring administrative privileges.
Dubbed “MagicDot,” th… Read More
2024-04-22 10:40
A zero-day exploit targeting the popular messaging app WhatsApp has been advertised on underground hacker forums.
The exploit has raised serious concerns regarding the safety of users on… Read More
2024-04-22 09:55
CrushFTP is a file transfer server that supports secure protocols, offers easier configuration, and offers powerful monitoring tools.
It also provides a web interface that allows users to… Read More
2024-04-22 08:54
Cybersecurity experts from SafeBreach have revealed a series of vulnerabilities that could allow attackers to remotely delete files on a computer using Windows Defender, potentially leading… Read More
2024-04-22 08:29
With the tightening grip of Chinese regulatory measures on foreign digital services, Apple Inc. has removed several major messaging apps, including WhatsApp and Threads by Meta Platforms, fr… Read More
2024-04-22 06:28
The notorious cybercrime group previously known as Hellokity has reemerged under a new alias, “HelloGookie.”
This development was reported by the cybersecurity watchdog MonTh… Read More
2024-04-19 10:44
The Akira ransomware variant has severely impacted more than 250 organizations worldwide, amassing approximately USD 42 million in ransom payments.
This information comes from a detaile… Read More
2024-04-19 03:29
A new zero-day Local Privilege Escalation (LPE) exploit has been put up for sale on a notorious hacker forum.
This exploit, which has not yet been assigned a Common Vulnerabilities and E… Read More
2024-04-18 14:22
Palo Alto Networks has disclosed a critical vulnerability within its PAN-OS operating system, identified as CVE-2024-3400.
This zero-day flaw, found in the GlobalProtect Gateway, is curre… Read More
2024-04-18 13:53
IT employees in the automotive industry are often targeted by hackers because they have access to sensitive information such as customer data, intellectual property, and critical systems… Read More
2024-04-18 13:32
As Russia’s invasion of Ukraine enters its third year, the formidable Sandworm (aka FROZENBARENTS, APT44) cyber threat group remains highly active and increasingly integrated with Russ… Read More
2024-04-18 13:21
A new banker, SoumniBot, has recently been identified. It targets Korean users and is incredible by using an unusual method to evade investigation and detection, notably obfuscating the Andr… Read More
2024-04-18 11:26
LeSlipFrancais, the renowned French underwear brand, has confirmed a data breach impacting its customer base.
The breach, first reported by the online security platform Have I Been Pwned… Read More
2024-04-18 10:47
Cisco has unveiled its latest innovation, Cisco Hypershield, marking a milestone in cybersecurity.
This groundbreaking product, described as Cisco’s most consequential security solu… Read More
2024-04-18 09:37
Authorities have dismantled LabHost, a notorious cybercrime platform that facilitated widespread phishing attacks across the globe.
The crackdown on LabHost, founded in the UK in 2021, m… Read More
2024-04-18 08:43
Malware commonly encrypts its traffic (stolen data sent to a command-and-control server) and internal strings (like URLs and configurations) to prevent security systems from recognizing mali… Read More
2024-04-18 06:57
Armis, a leading cybersecurity company, has acquired Silk Security, an AI-powered vulnerability detection firm.
The acquisition comes when organizations grapple with a surge of security f… Read More
2024-04-17 16:00
In the wake of the recent disclosure of a critical vulnerability (CVE-2024-3400) affecting a leading firewall solution, Xiid Corporation reminds organizations that Xiid SealedTunnel customer… Read More
2024-04-17 13:00
Security researchers at Cado Security Labs have uncovered a new variant of the Cerber ransomware targeting Linux systems.
This strain of the notorious malware has been observed exploitin… Read More
2024-04-17 12:34
Detecting source code vulnerabilities aims to protect software systems from attacks by identifying inherent vulnerabilities.
Prior studies often oversimplify the problem into binary… Read More
2024-04-17 12:23
DMARC is targeted by hackers as this serves to act as a preventative measure against email spoofing and phishing attempts.
They compromise DMARC (Domain-based Message Authentication… Read More
2024-04-17 11:29
A new variant of the Xorist ransomware, dubbed L00KUPRU, has been discovered in the wild, posing a threat to unsuspecting users.
The L00KUPRU ransomware is known to encrypt user files, ap… Read More
2024-04-17 10:51
Oracle has released its April 2024 Critical Patch Update (CPU), addressing 372 security vulnerabilities across multiple Oracle products. This comprehensive update fixes critical flaws that c… Read More
2024-04-17 09:59
Cybersecurity researchers have uncovered a new phishing attack that has bypassed all antivirus detections.
The attack, designed to mimic the Outlook login panel, successfully tricking use… Read More
2024-04-17 09:48
Hackers use brute-force attacks since it is an uncomplicated technique to break passwords or get into systems without permission.
By systematically trying various combinations of us… Read More
2024-04-17 08:23
The Tor Project has released a new version of the Tor Browser, their secure and private web browsing tool. Tor Browser 13.0.14 includes several critical security updates and bug fixes.
Ke… Read More
2024-04-17 08:20
The Palo Alto Networks PAN-OS software has a critical command injection vulnerability that allows an unauthorized attacker to run arbitrary code on the firewall with root access. … Read More
2024-04-17 03:18
Hackers target Apple device users because they are perceived to be of higher social classes. This leads to targets who are richer than others and who can possibly provide more money to the h… Read More
2024-04-16 18:21
In today’s digital landscape, email security has become a critical concern for businesses of all sizes. As cyber threats continue to evolve, it’s essential for Managed Service Pr… Read More
2024-04-16 16:41
In a digital age where information is the new currency, the recent global hack has once again highlighted the urgent need for enhanced cybersecurity measures.
The breach was identified as… Read More
2024-04-16 14:25
Ahmed exploited a vulnerability in a decentralized cryptocurrency exchange’s smart contract by injecting fabricated pricing data, which triggered the generation of inflated fees totali… Read More
2024-04-16 12:56
Omni Hotels & Resorts has revealed that it was the target of a recent cyberattack, which resulted in the theft of customer information.
The hospitality giant has been working closely… Read More
2024-04-16 12:51
A new exploit campaign has emerged, targeting organizations that utilize Fortinet’s FortiClient EMS.
Dubbed “Connect:fun” by Forescout Research – Vedere Labs, thi… Read More
2024-04-16 11:56
TA558, a financially motivated threat actor identified in 2018, is targeting several countries but with utmost priority in Latin America.
Over 320 attacks have been observed from this par… Read More
2024-04-16 10:56
A group of cybercriminals known as “Blackjack” has launched a devastating attack on industrial control systems (ICS) worldwide.
The group’s custom-built malware, dubbed… Read More
2024-04-16 08:22
Cisco’s Duo Security, a leading multi-factor authentication (MFA) service, has suffered a significant data breach.
The April 1, 2024, incident involved unauthorized access to telep… Read More
2024-04-16 06:36
In a groundbreaking move, the U.S. Department of Defense has released a comprehensive guide for organizations deploying and operating AI systems designed and developed byanother firm.
The… Read More
2024-04-15 19:40
Cybersecurity researchers at Kaspersky have uncovered evidence that cybercriminal groups are customizing the virulent LockBit 3.0 ransomware for targeted attacks against organizations worldw… Read More
2024-04-15 14:10
A new remote code execution vulnerability has been identified to be affecting multiple Microsoft products including .NET, .NET Framework and Visual Studio.
This vulnerability has been as… Read More
2024-04-15 09:04
The revival of the LightSpy malware campaign has been observed, focusing on Indian Apple device users.
This sophisticated mobile spyware, suspected to have origins in China, is being used… Read More
2024-04-15 06:37
A new malware known as LightSpy has been targeting Android and iOS users.
This sophisticated surveillance tool raises alarms across the cybersecurity community due to its extensive capabi… Read More
2024-04-14 12:19
The Web3 movement is going from strength to strength with every day that passes. Slowly but surely, it’s building a new iteration of the internet that promises to give power back to th… Read More
2024-04-12 16:08
In a recent security bulletin, Palo Alto Networks disclosed a critical vulnerability in its GlobalProtect Gateway, identified as CVE-2024-3400. This flaw, rooted in the PAN-OS operating syst… Read More
2024-04-12 13:33
The software supply chain is filled with various challenges, such as untracked security vulnerabilities in open-source components and inconsistent update uptake.
The lighttpd vulner… Read More
2024-04-12 12:11
A LastPass employee recently became the target of an attempted fraud involving sophisticated audio deepfake technology.
This incident underscores the urgent need for heightened cybersecu… Read More
2024-04-12 10:43
In response to a recent data breach at Sisense, a provider of data analytics services, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) advised customers to reset their… Read More
2024-04-12 10:38
DuckDuckGo has launched Privacy Pro, a new subscription service that promises to enhance user privacy across the web.
This innovative offering combines a VPN service with additional priva… Read More
2024-04-12 08:12
In Q1 2024, Check Point Research (CPR) witnessed a notable increase in the average number of cyber attacks per organization per week, reaching 1308.
This marked a 5% increase from Q1 202… Read More
2024-04-12 07:16
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency directive concerning a breach in Microsoft’s corporate email system.
The directive, ED 24-02, ou… Read More
2024-04-11 16:01
Around 300,000 taxi passengers’ personal information was left exposed on the internet, causing concern in the UK and Ireland.
Cybersecurity researcher Jeremiah Fowler discovered the… Read More
2024-04-11 14:51
TA547 has been targeting German organizations with an email campaign delivering the Rhadamanthys malware.
Proofpoint has observed TA547 using Rhadamanthys, an information stealer that is… Read More
2024-04-11 11:02
The Cybersecurity and Infrastructure Security Agency (CISA) has unveiled its latest initiative: opening its advanced malware analysis system, Malware Next-Gen, to the public.
Malware Next… Read More
2024-04-11 10:34
WebDAV incidents simulate an offensive attack employing a WebDAV server to distribute malware to a client PC. Attackers store malicious payloads and attract users into downloading and execut… Read More
2024-04-11 09:52
In a sophisticated cyberattack campaign uncovered on April 10, 2024, cybercriminals are exploiting GitHub’s search functionality to distribute a particularly insidious form of malware… Read More
2024-04-11 09:07
Fortra’s Robot Schedule Enterprise Agent permits a low-privileged user to elevate privileges to the local system level.
The problem arises from the agent’s failure to ad… Read More
2024-04-11 04:32
Cybersecurity experts have uncovered a failed attempt by the notorious Russia-based Turla Advanced Persistent Threat (APT) group to infiltrate an Albanian organization.
This incident is… Read More
2024-04-10 18:04
A comprehensive four-year study of brute-force attacks against SSH servers has revealed an alarming increase in the frequency and sophistication of these cyber attacks on internet-connected… Read More
2024-04-10 16:51
Law enforcement authorities successfully penetrated EncroChat, an encrypted chat program that is frequently used by criminals, in a ground-breaking operation that has shocked the world of or… Read More
2024-04-10 15:00
Cyber GRC software company Cypago has announced a new automation solution for artificial intelligence (AI) governance, risk management and compliance. This includes implementation of NIST AI… Read More
2024-04-08 01:13
A new threat actor dubbed “CoralRaider” targets victims’ financial information, login credentials, and social media profiles—including accounts for businesses and adv… Read More
2024-04-06 07:33
Adversaries use stolen credentials or exploit software vulnerabilities to gain access for ransomware attacks, which impacts the initial infection method.
The study surveyed IT professiona… Read More
2024-04-05 13:18
In a groundbreaking Check Point Research (CPR) analysis, vulnerabilities have been uncovered in several popular dating applications, cumulatively boasting over 10 million downloads.
This… Read More
2024-04-05 13:04
YubiKey Manager GUI on Windows before version 1.2.6 has a vulnerability that could allow an attacker to escalate privileges.
Due to a limitation in Windows, it requires administrator pri… Read More
2024-04-05 11:51
Cybersecurity experts have identified a new threat lurking in the shadows of the dark web, a Remote Access Trojan (RAT) known as Oxycorat.
This malicious software is specifically designed… Read More
2024-04-05 11:06
Hackers have been found hijacking Facebook pages to impersonate popular AI brands, thereby injecting malware into the devices of unsuspecting users.
This revelation comes from a detailed… Read More
2024-04-05 09:08
A new critical vulnerability has been discovered in Progress Flowmon, assigned with CVE-2024-2389.
Progress Flowmon is a Cloud Application Performance monitoring solution that can help an… Read More
2024-04-05 08:00
Hackers have been exploiting Microsoft Bing’s advertising platform to launch a malvertising campaign that impersonates the reputable VPN service NordVPN.
This sophisticated scheme… Read More
2024-04-05 07:57
Hackers commonly employ dynamic-link library (DLL) hijacking and unhooking of APIs to damage security measures and authorize harmful activities on breached systems.
In this regard, DLL hi… Read More
2024-04-05 07:49
Four new vulnerabilities have been discovered in the Ivanti Connect Secure and Policy Secure Gateways. These vulnerabilities were associated with Heap overflow, null pointer dereference, and… Read More
2024-04-05 04:43
The research investigates the persistence and scale of AI package hallucination, a technique where LLMs recommend non-existent malicious packages.
The Langchain framework has allowe… Read More
2024-04-03 13:17
A critical vulnerability has been discovered in XZ Utils, a widely used data compression tool across Unix-like operating systems, including Linux.
This vulnerability, identified as CVE-2… Read More
2024-04-03 12:36
Storm-0558, a cyberespionage group affiliated with the People’s Republic of China, has reportedly compromised Microsoft Exchange mailboxes of 22 organizations and over 500 individuals… Read More
2024-04-03 09:13
Jackson County, Missouri, has become the latest victim of a ransomware attack, which has caused substantial disruptions within its Information Technology (IT) systems.
This attack has hig… Read More
2024-04-03 06:45
A new menace has emerged that targets personal information with alarming precision.
Dubbed the “Mighty Stealer,” this malicious software is designed to infiltrate devices and… Read More
2024-04-03 06:19
DarkGate loader delivery surged after the Qakbot takedown, with financially motivated actors like TA577 and ransomware groups (BianLian, Black Basta) using it to target financial institution… Read More
2024-04-02 17:43
Authentic8, provider of the leading OSINT research platform Silo for Research, today launched their Silo Shield Program to enhance online security for high-risk communities.
Also today… Read More
2024-04-02 15:53
March saw many notable phishing attacks, with criminals using new tactics and approaches to target unsuspecting victims.
It is time to explore some of the five most noteworthy campaigns… Read More
2024-04-02 14:28
Maintaining uninterrupted services is vital for any organization.
The backbone of ensuring this continuous uptime lies in the Incident Management process. Incident triage is a significan… Read More
2024-04-02 13:31
A massive cyber fraud operation targeting Indians in Cambodia has emerged, with an estimated Rs 500 crore stolen in six months.
Over 5,000 Indian nationals are reportedly being held… Read More
2024-04-02 13:30
Today, Congressman Eric Swalwell, CA-14, announced that he has partnered with Wolfsbane.ai to help prevent his 2024 election campaign content from being used to create AI clones and deepfake… Read More
2024-04-02 12:05
PandaBuy, a popular online shopping platform, has been the victim of a significant data breach.
This breach has resulted in the leak of personal information belonging to more than 1.3 mi… Read More
2024-04-02 11:28
Google has agreed to delete billions of data records that reflect the private browsing activities of users.
This decision comes as part of a settlement for a lawsuit that accused the tec… Read More
2024-04-02 08:44
The DoD DIB Cybersecurity Strategy is a three-year plan (FY24-27) to improve cybersecurity for defense contractors that aims to create a secure and resilient information environment for the… Read More
2024-04-02 08:14
Ransomware, initially a Windows threat, now targets Linux systems, endangering IoT ecosystems.
Linux ransomware employs diverse encryption methods, evading traditional forensics. … Read More
Subscribe to Gbhackers On Security
Get updates delivered right to your inbox!