2023-11-30 16:32
Hackers use weaponized invoices to exploit trust in financial transactions, embedding malware or malicious links within seemingly legitimate payment requests.
This tactic aims to de… Read More
Blog Directory > Technology Blogs > GBHackers on security technology Blog >
Gbhackers On Security Blog
gbhackers.com
Tags:
workspace
unauthenticated threat actor
bluetooth
invoice
fudan university reported
hackers attacking macos
cyber
korean lazarus hackers
cve fudan university
passwords
GBHackers on Security is an Advanced Persistent Cyber Security Online platform which including, Daily hacking News Cyber Security Research,Web Application and Network Penetration Testing, Hacking Tutorials,Live Security Updates, Technology updates, Security investigations With dedicated Cyber security Expert Team and help to community more secure.
2023-11-30 12:26
The U.S. Treasury Department sanctioned the famous cryptocurrency mixer Sinbad after it was claimed that the North Korean hacker group Lazarus was using it to launder funds that had bee… Read More
2023-11-30 11:00
In a disconcerting turn of events, cyber threat actors have set their sights on Unitronics programmable logic controllers (PLCs) embedded in Water and Wastewater Systems (WWS).
This… Read More
2023-11-30 10:12
Three Command injection vulnerabilities have been discovered in Zyxel NAS (Network Attached Storage) products, which could allow a threat actor to execute system commands on successful explo… Read More
2023-11-30 09:49
Hackers often use weaponized documents to exploit vulnerabilities in software, which enables the execution of malicious code.
All these documents contain malicious code or macros, often d… Read More
2023-11-30 09:04
The latest analysis shows that tens of millions of people are creating weak passwords on three of the four most popular websites in the world, which do not fulfill the minimum required stand… Read More
2023-11-29 14:50
Google has fixed the sixth Chrome zero-day bug that was exploited in the wild this year. The flaw, identified as CVE-2023-6345, is classified as an integer overflow in Skia, an ope… Read More
2023-11-29 14:33
An Android malware campaign was previously discovered that distributed banking trojans targeting four major Iranian Banks: Bank Mellat, Bank Saderat, Resalat Bank, and Central Bank of Iran… Read More
2023-11-29 13:28
Six novel Bluetooth attack methods have been discovered, which were named BLUFFS (Bluetooth Forward and Future Secrecy) attacks. These attacks could enable threat actors to impersonate devic… Read More
2023-11-29 10:24
Recent years saw a surge in cloud tech adoption, highlighting the efficiency through tools like Google’s Domain-Wide Delegation.
It enables GCP (Google Cloud Platform) identit… Read More
2023-11-29 06:29
In a digital age marred by deceit, 25-year-old Amir Hossein Golshan stands as a testament to the dark underbelly of cyberspace.
Hailing from downtown Los Angeles, Golshan’s in… Read More
2023-11-28 17:19
BOSTON, MASS. and TEL AVIV, ISRAEL, November 28, 2023 – A severe design flaw in Google Workspace’s domain-wide delegation feature discovered by threat hunting experts from Hunter… Read More
2023-11-28 14:25
Hackers launched ransomware attacks to extort money from the following two entities by encrypting their data and demanding a ransom payment for its release:-
Individuals
Organizations… Read More
2023-11-28 14:10
For over two years, a hacker group linked to China had uninterrupted access to NXP, the Dutch chip manufacturer’s computer network.
They target chips to exploit vulnerabilities in h… Read More
2023-11-28 12:36
Broadcom Inc., a multinational semiconductor manufacturing company headquartered in San Jose, CA, has announced the successful acquisition of VMware in a $61 billion deal.
VMware is a top… Read More
2023-11-28 07:23
In a perplexing turn of events, a notable cohort of Google Drive users is grappling with the disappearance of files from their accounts.
Reports indicate that some users have experi… Read More
2023-11-27 13:44
Investments in cybersecurity tools have been on the rise in the Asia-Pacific region, owing to the increased prevalence of cyberattacks. It is projected that the market will grow at a CAGR of… Read More
2023-11-27 13:38
Phishing bots are a tool used by hackers to fool people into disclosing private information such as-
Login credentials
Financial details
With the help of these automated tools, threat… Read More
2023-11-27 13:29
The Andariel threat group has been discovered installing malware via the exploitation of the Apache ActiveMQ remote code execution vulnerability classified as CVE-2023-46604.
The gro… Read More
2023-11-27 13:05
North Korea, DPRK threat actors, have been reportedly involved in several supply-chain attacks to gain unauthorized access to the intranet of an organization.
One of the software exploit… Read More
2023-11-27 09:48
In the ever-evolving cybersecurity domain, the resurgence of NetSupport RAT, a Remote Access Trojan (RAT), has raised concerns among security professionals.
This sophisticated malwa… Read More
2023-11-27 07:41
AutoZone Inc., a US retailer of automotive parts and accessories, warned customers that their data had been compromised as a result of the Clop MOVEit file transfer attacks.
Personal info… Read More
2023-11-27 06:55
The DPRK has been a great threat to organizations in recent times. Their attack methods have been discovered with several novel techniques involving different scenarios.
Their recent att… Read More
2023-11-27 06:42
It has been discovered that there is a high-severity vulnerability in Dell Command Configure that could potentially be exploited by malicious users to compromise the system.
The vulnerab… Read More
2023-11-27 06:22
DarkGate is a complete toolkit, first discovered in 2018, that provides attackers with extensive capabilities to access target systems completely.
On underground cybercrime forums… Read More
2023-11-25 12:30
In the perpetually evolving realm of cybersecurity, the reawakening of NetSupport RAT, a Remote Access Trojan (RAT), casts a looming shadow that beckons the attention of vigilant security pr… Read More
2023-11-24 09:31
Authorities seized about $9 million in crypto, which was earned by taking advantage of over 70 victims nationwide through alleged “pig butchering” schemes.
A pig-bu… Read More
2023-11-24 05:07
In the late 1990s, VPN technology revolutionized remote work. However, the traditional VPN model has become outdated and unworkable as the world becomes increasingly mobile and cloud-based… Read More
2023-11-23 13:40
MySQL stands out for its reliability and efficiency among the various database systems available. However, as with any technology that holds valuable data, MySQL databases are a lucrative ta… Read More
2023-11-23 11:58
Kubernetes is an open-source container orchestration platform that automates the deployment, scaling, and management of containerized applications.
Besides this, hackers often targe… Read More
2023-11-23 10:48
A new high-severity vulnerability has been discovered in multiple Cisco products, which could potentially allow HTTP/2 Rapid Reset Attack.
This vulnerability enables a novel distributed… Read More
2023-11-23 10:24
Microsoft Windows Hello Fingerprint authentication was evaluated for security over its fingerprint sensors embedded in laptops.
This led to the discovery of multiple vulnerabilities that… Read More
2023-11-23 07:06
Microsoft 365 Apps is a suite of productivity tools that includes the following apps and services offered by Microsoft through a subscription service:-
Microsoft Teams
OneDrive
Shar… Read More
2023-11-23 06:30
In the fast-paced world of cryptocurrency, the ever-looming threat of Rug Pulls has once again taken center stage.
Check Point’s Threat Intel Blockchain system, a vigilant gua… Read More
2023-11-22 11:34
Two ongoing efforts, Contagious Interview and Wagemole, have been identified to target job-seeking activities connected to North Korean Hackers and state-sponsored threat actors.
Threat a… Read More
2023-11-22 10:31
Poloniex is a popular cryptocurrency exchange platform headquartered in the United States that provides a diverse range of digital assets for trading. The platform was established in January… Read More
2023-11-22 08:32
DarkGate, a sophisticated Malware-as-a-Service (MaaS) offered by the enigmatic RastaFarEye persona, has surged in prominence.
The malware is known for abusing Microsoft Teams and MSI file… Read More
2023-11-21 15:32
Researchers discovered a new campaign delivering DarkGate and PikaBot that employs strategies similar to those employed in QakBot phishing attempts.
This operation sends out a large numbe… Read More
2023-11-21 14:02
Former COO of the Atlanta-based cybersecurity company Securolytics, Vikas Singla, launched a series of cyberattacks on the non-profit healthcare organization Gwinnett Medical Center (GMC), w… Read More
2023-11-21 13:45
Embarking on a journey into the realm of cyber threats, Microsoft recently uncovered a series of mobile banking trojan campaigns meticulously designed to exploit unsuspecting users in India… Read More
2023-11-21 09:39
The Andariel group has been identified in recent reports as distributing malware through asset management programs. This group has been previously discovered to be in a relationship with the… Read More
2023-11-21 08:56
In a pivotal decision on November 15, 2023, the Federal Communications Commission (FCC) orchestrated a formidable defensive strategy against insidious scams targeting consumers’ cell p… Read More
2023-11-20 14:10
A ransomware attack targeted Yamaha Motor Co., Ltd., resulting in a partial disclosure of the personal information maintained by the company.
Notably, a third party gained unauthorized ac… Read More
2023-11-20 13:48
Threat intelligence (TI) is critical to organizations’ cybersecurity infrastructure, allowing them to keep track of the evolving threat landscape and ensure timely detection. However… Read More
2023-11-20 11:35
Cyberattacks pose a significant risk, and prevention alone isn’t enough, so timely detection is crucial. That’s why most organizations use SIEM (Security Information and Event Ma… Read More
2023-11-20 09:17
Multiple critical flaws in the infrastructure supporting AI models have been uncovered by researchers, which raise the risk of server takeover, theft of sensitive information… Read More
2023-11-20 08:19
For half a decade, NordPass has delved into the realm of password habits, uncovering familiar tunes that persist.
However, this year’s narrative is layered with intriguing pat… Read More
2023-11-20 07:17
The sequence of events sounds like it was taken straight from a movie script. Five software programmers were working late into the night, chatting on their phones while they worked.
Durin… Read More
2023-11-19 04:03
The world’s third-largest economy, following the United States and China, can now be attributed to cybercrime, as stated by the World Economic Forum.
Cybercrime generates significan… Read More
2023-11-18 03:57
Kubernetes security is safeguarding your Kubernetes clusters, the applications they host, and the infrastructure they rely on from threats.
As a container orchestration platform, Kuberne… Read More
2023-11-14 14:22
Payment Card Industry Data Security Standard or PCI DSS 4.0 was released in May 2022 by the PCI Security Standards Council (PCI SSC).
After using PCI DSS 3.2.1 for several years, PCI DSS… Read More
2023-11-14 14:05
There have been several cases of GPT model-based detection for various attacks from system logs.
However, there has been no dedicated framework for detecting APTs as they use a low and s… Read More
2023-11-14 13:33
Recently, hackers have used the Ethereum network’s CREATE2 opcode to bypass wallet security alarms in certain wallets.
Using Create2’s pre-calculation feature, the Drain… Read More
2023-11-14 08:34
Dark forums and Telegram channels have become great places for threat actors to sell critical vulnerabilities and exploits.
These vulnerabilities and exploits were associated with the El… Read More
2023-11-13 14:38
A class-action lawsuit had been filed against Intel due to a critical “Downfall” vulnerability in Intel CPUs, a defect that Intel was aware of since 2018 but neglected… Read More
2023-11-13 08:21
A notorious phishing service that supplied cybercriminals with phishing kits, scam pages, and stolen credentials has been disrupted by a joint operation involving Malaysian, Australian, and… Read More
2023-11-13 05:44
Researchers detected IMPERIAL KITTEN, an adversary with ties to Iran, conducting strategic web compromise (SWC) operations with a focus on transportation, logistics, and technology firms… Read More
2023-11-13 04:54
Managing a diverse range of devices, including desktops, mobile devices, and Internet of Things (IoT) devices, is an essential aspect of modern businesses. To efficiently handle these device… Read More
2023-11-11 13:10
After being apprehended by the US government, a Serbian citizen confessed to placing multiple orders on the Monopoly drugs market, which operates on the darknet.
The individual in questio… Read More
2023-11-11 12:54
Cambodian government entities were discovered to be targeted and compromised by Chinese APT actors.
The threat actors are using the infrastructure to masquerade as a cloud backup service… Read More
2023-11-11 12:27
In an age where online threats loom large, safeguarding our personal and professional accounts has never been more critical.
With hackers tirelessly attempting to breach security ba… Read More
2023-11-11 11:49
IBM has recently announced the launch of its Cloud-Native SIEM solution, which is designed to enhance the scale, speed, and flexibility of security teams.
With this new offering, organiz… Read More
2023-11-11 05:48
Burp Suite 2023.10.3.4 is the name of the newest version of Burp Suite, which was just published by the PortSwigger developers.
The Burp Suite is a cybersecurity tool that is used for eva… Read More
2023-11-10 14:02
In a recent development, cybersecurity experts have identified a significant shift in the tactics employed by Sapphire Sleet, a notorious threat actor known for cryptocurrency theft through… Read More
2023-11-10 13:44
SysAid On-Prem software has been reported with a 0-day vulnerability determined during an incident response investigation.
According to Microsoft, attackers are exploiting this zero-day v… Read More
2023-11-10 10:32
In a recent and alarming development, the notorious Russia-linked threat actor Sandworm executed a sophisticated cyber-physical attack targeting a critical infrastructure organization in Ukr… Read More
2023-11-10 10:11
A new malware variant is distributed by BlueNordoff APT group, a financially motivated threat group targeting cryptocurrency exchanges, venture capital firms, and banks.
This new campaign… Read More
2023-11-10 09:42
Experts issued security alerts concerning the ongoing exploitation of Big-IP (CVE-2023-46747, CVE-2023-46748) and Citrix (CVE-2023-4966) vulnerabilities.
The publicly available Proof of C… Read More
2023-11-10 09:26
Trusted Computing Group’s Trust Platform Module 2.0 reference library specification has been discovered with two buffer overflow vulnerabilities that threat actors can exploit to acces… Read More
2023-11-10 07:24
WhatsApp has begun to roll out the ‘Protect IP Address in Calls’ feature, which conceals your IP address during calls.
Upon using this feature, all your calls will be relayed… Read More
2023-11-10 07:14
Hackers target Remote Desktop Protocol (RDP) via malware because it provides them with remote access to a victim’s computer or network, allowing them to:-
Steal data
Deploy ranso… Read More
2023-11-10 06:59
Hackers actively target Confluence flaws because it is a widely used collaboration and documentation platform, making it a valuable target for gaining unauthorized access to sensitive inform… Read More
2023-11-09 18:23
CISOs rely on information about security from across the organization, particularly from the various IT departments. Unfortunately, the information being fed to CISOs about cybersecurity ris… Read More
2023-11-09 06:35
Ransomware attacks are on the rise, causing organizations to lose millions of dollars, restricting them from accessing their data, and possibly disclosing personal information.
Accor… Read More
2023-11-09 05:18
Android has fixed 37 vulnerabilities that were impacting its devices with the release of its November 2023 security updates. Most of the flaws included information disclosure, elevation of p… Read More
2023-11-08 05:42
Cybersecurity researchers link attackers to the Iranian-backed APT group “Agonizing Serpens,” which has upgraded its capabilities and uses various tools to bypass security measur… Read More
2023-11-08 05:02
Two critical OS command injection flaws have been discovered in multiple QNAP products, which include QTS, Multimedia Console, Media Streaming add-on, QuTS Hero, and QuTScloud.
Thes… Read More
2023-11-07 18:14
In the ever-evolving digital world, organizations must safeguard their networks and sensitive data against sophisticated cyber threats. Have you ever heard NDR in relation to cybersecurity?… Read More
2023-11-07 15:03
Veeam, a Global Leader in Data Protection, issued hotfixes to address four vulnerabilities affecting the Veeam ONE IT infrastructure monitoring and analytics platform.
Two… Read More
2023-11-07 14:27
Modern security tools continue to improve in their ability to defend organizations’ networks and endpoints against cybercriminals. But the bad actors still occasionally find a way in… Read More
2023-11-06 14:49
Linux Privilege Escalation flaw is one of the highly critical flaws as it can allow an attacker to gain elevated privileges on a system, potentially leading to full control.
Hackers… Read More
2023-11-06 11:21
Natalie Mottram, a 25-year-old intelligence analyst who worked for Cheshire Police and the North West Regional Organised Crime Unit (ROCU), has been given a prison sentence of three years an… Read More
2023-11-06 11:00
Proxy services let users rent IP addresses and provide online anonymity by disguising their traffic as regular IP addresses while hiding the true source or origin.
Bitsight researchers re… Read More
2023-11-06 07:22
According to recent reports, Arabic-speaking Android users have been targeted with spyware by the “Arid Viper” threat actor, also known as APT-C-23, Desert Falcon, or TAG-63). Th… Read More
2023-11-06 07:17
Sam Bankaman-Fried, the founder and CEO of the largest cryptocurrency exchange, has recently pleaded guilty to charges of fraud and money laundering.
This news has sent shockwaves through… Read More
2023-11-03 16:58
Kubernetes is a popular open-source platform for managing containerized workloads and services. It’s a system that simplifies a wide array of deployment, scaling, and operations tasks… Read More
2023-11-03 11:30
Accenture, the global technology services and consulting giant, has announced the acquisition of Innotec Security, a leading cybersecurity-as-a-service provider based in Spain.
The… Read More
2023-11-03 11:20
CVSS (Common Vulnerability Scoring System) is vital for supplier-consumer interaction, offering a numerical score to assess security vulnerabilities’ technical severity that helps in g… Read More
2023-11-03 11:07
Social media platforms offer financially motivated threat actors opportunities for large-scale attacks by providing a vast user base to target with:-
Phishing scams
Fraudulent sc… Read More
2023-11-03 09:08
A new wave of cyberattacks has been discovered by Netskope Threat Labs, involving the use of SharePoint as a delivery platform for the notorious DarkGate malware.
This alarming tren… Read More
2023-11-03 06:32
Multiple vulnerabilities have been discovered in the Cisco Services Engine associated with Arbitrary File Upload and Denial of Service assigned with CVEs CVE-2023-20195, CVE-2023-20196, and… Read More
2023-11-02 15:03
A vulnerability of medium severity, identified as CVE-2023-20042, with a CVSS score of 6.8, was found in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software an… Read More
2023-11-02 15:02
A lot of money is being spent to protect the enterprise against intrusion. Ransomware protection is currently in the spotlight – and with good reason.
But organizations also invest… Read More
2023-11-02 11:52
Bank robbers of today are nothing like their counterparts of the past. Modern-day Bonnie and Clyde operate remotely, carrying out their operations from hundreds of miles away, simply using t… Read More
2023-11-02 10:13
The frequency of hackers exploiting macOS flaws varies over time, but Apple continuously releases security updates to patch vulnerabilities.
While macOS is generally considered more… Read More
2023-11-02 08:03
Hackers can exploit Massive Domain Generator and URL Shortener services by creating large numbers of deceptive or malicious domains and using URL shorteners to hide the true destination of l… Read More
2023-11-01 14:44
Hackers opt for DLL hijacking as a technique to exploit vulnerable applications because it allows them to load malicious code by tricking a legitimate application into loading a malicious DL… Read More
2023-11-01 12:48
At the end of October, AssetNote released a proof-of-concept for the CVE-2023–4966 associated with sensitive information disclosure for Citrix Netscaler ADC devices and was given a sev… Read More
2023-11-01 12:39
F5 Networks has issued a security alert about a severe vulnerability in its BIG-IP Configuration utility, identified as CVE-2023-46748.
This vulnerability is an authenticated SQL in… Read More
2023-11-01 12:32
HWP documents are primarily associated with the Hangul Word Processor software used in South Korea.
Hackers may opt for HWP documents to target National Defense and Press Sectors be… Read More
Subscribe to Gbhackers On Security
Get updates delivered right to your inbox!