GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

The notorious Tycoon 2FA phishing kit continues its evolution with new strategies designed to slip past endpoint detection systems. This development was highlighted in a recent analysis, showcasing several sophisticated techniques aimed at thwarting detection and analysis. Obfuscation with Invisible Unicode Characters and Proxies Tycoon 2FA’s latest iteration has introduced an obfuscation method using invisible […]

The post Tycoon 2FA Phishing Kit Uses Advanced Evasion Techniques to Bypass Endpoint Detection Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

INE Security Highlights How Practical, immersive training environments help defense contractors meet DoD cybersecurity requirements Defense contractors are facing increased pressure to meet the Department of Defense’s stringent Cybersecurity Maturity Model Certification (CMMC) 2.0 requirements ahead of 2025 compliance deadlines. INE Security, a leading global provider of cybersecurity training and certifications, is highlighting how hands-on cybersecurity labs […]

The post Hands-On Labs: The Key to Accelerating CMMC 2.0 Compliance appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued ten new Industrial Control Systems (ICS) advisories to address critical vulnerabilities and exploits that could impact key industrial systems. Released on April 10, 2025, these advisories provide crucial insights into ongoing cybersecurity risks, helping industries mitigate threats and protect critical infrastructure. The advisories highlight a range […]

The post CISA Issues 10 ICS Advisories Addressing Critical Vulnerabilities and Exploits appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Sensata Technologies Holding PLC, a global leader in sensor solutions and electrical protection, is currently grappling with the fallout of a ransomware attack that has disrupted its operations and compromised sensitive files. The breach, first reported on April 6, 2025, has temporarily impacted critical business functions, including manufacturing, shipping, and support services, as indicated in […]

The post Sensata Technologies Breached: Ransomware Attack Key Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity experts at Sublime have uncovered a complex malware campaign revolving around TROX Stealer, an information stealer that employs urgency to deceive victims. This malware, first detected in December 2024, highlights an intricate attack chain designed to extract sensitive data from everyday consumers. TROX Stealer’s success hinges on the psychological tactic of urgency, prompting victims […]

The post TROX Stealer Harvests Sensitive Data Including Stored Credit Cards and Browser Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Smishing Triad, a Chinese eCrime group, has launched an extensive operation targeting users across more than 121 countries. This campaign, primarily focused on stealing banking credentials, has evolved to include diverse industries, from postal and logistics to finance and retail sectors. Expansion of Phishing Operations Recent data from server logs analyzed by Silent Push reveal […]

The post Chinese eCrime Group Targets Users in 120+ Countries to Steal Banking Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A severe security flaw enabling unauthenticated remote code execution (RCE) with root privileges has been uncovered in select Calix networking devices, raising alarms for organizations using legacy hardware. The vulnerability resides in TCP port 6998 and impacts end-of-life (EOL) devices running vulnerable CWMP services. Vulnerability Overview The issue stems from improper input sanitization in the […]

The post Calix Devices Vulnerable to Pre-Auth RCE on Port 6998, Root Access Possible appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft has fortified its Exchange Server and SharePoint Server security by integrating advanced Antimalware Scan Interface (AMSI) capabilities. This measure, aimed at countering sophisticated attack vectors, represents a crucial step to safeguard on-premises infrastructure that serves as the backbone of many organizations worldwide. Why AMSI Integration Matters Exchange and SharePoint Servers are critical assets for […]

The post Microsoft Boosts Exchange and SharePoint Security with Updated Antimalware Scan appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability in AMD CPUs has been uncovered, enabling attackers with administrative privileges to bypass microcode signature verification and execute malicious code. Designated as CVE-2024-36347 (CVSS score: 6.4, Medium), the flaw impacts multiple generations of AMD EPYC™ server processors and select consumer Ryzen™ chips. Vulnerability Overview Google researchers identified a weakness in AMD’s microcode patch verification algorithm, […]

The post AMD CPU Signature Verification Vulnerability Enables Unauthorized Microcode Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent cybersecurity revelation has demonstrated how researchers successfully bypassed Windows Defender antivirus mechanisms using advanced techniques involving XOR encryption and direct system calls. This breakthrough has sparked discussions about the effectiveness of traditional antivirus measures against increasingly sophisticated attack vectors. A Vulnerability Unearthed The research, published by Hackmosphere, sheds light on how weaknesses in […]

The post Researchers Exploit Windows Defender with XOR and System Calls appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical unauthenticated Remote Code Execution (RCE) vulnerability, CVE-2025-22457, has been disclosed by Ivanti, sparking concerns across the cybersecurity industry. The flaw, which affects several Ivanti products, allows attackers to execute arbitrary code remotely, potentially compromising sensitive enterprise environments. Researchers, including the Rapid7 vulnerability team, have provided a detailed breakdown of how the flaw was exploited and what […]

The post Ivanti 0-Day RCE Flaw Exploitation Details Revealed appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Russia-linked cyber-espionage group known as Shuckworm (also identified as Gamaredon or Armageddon) has been observed targeting a Western country’s military mission located within Ukraine, employing an updated, PowerShell-based version of its GammaSteel infostealer malware. This campaign, which began in late February 2025 and continued into March, signifies Shuckworm’s persistent focus on Ukrainian entities and […]

The post Shuckworm Group Leverages GammaSteel Malware in Targeted PowerShell Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

AhnLab Security Intelligence Center (ASEC) has unearthed a complex cyber campaign in which attackers, suspected to be Arabic speakers, have been distributing ViperSoftX malware to unsuspecting Korean users. This operation has employed cracked software and torrents as vectors for spreading this dangerous malware, which often disguises itself as legitimate programs. The exact method through which […]

The post ViperSoftX Malware Spreads Through Cracked Software, Targeting Unsuspecting Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A severe vulnerability has been uncovered in the SureTriggers WordPress plugin, which could leave over 100,000 websites at risk. The issue, discovered by security researcher mikemyers, allows attackers to create rogue administrative users on sites where the plugin is not properly configured. Vulnerability Details This critical flaw, registered as CVE-2025-3102, is rooted in the plugin’s […]

The post Rogue Account‑Creation Flaw Leaves 100 K WordPress Sites Exposed appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

AI has recently been added to the list of things that keep cybersecurity leaders awake. The increasing popularity of and easy access to large language models (LLMs), such as ChatGPT, DeepSeek, and Gemini, have enabled threat actors to scale and personalize their attacks.  Organizations need to adapt their cyber defenses based on this trend. But […]

The post The State of AI Malware and Defenses Against It appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The threat actor known as GOFFEE has launched a series of targeted attacks against critical sectors within the Russian Federation, utilizing advanced malware and phishing techniques. The group’s latest campaign involves the deployment of PowerModul, a PowerShell-based implant, to escalate their intrusion capabilities and carry out coordinated strikes effectively. PowerModul and Initial Infection Vectors PowerModul […]

The post GOFFEE Deploys PowerModul in Coordinated Strikes on Government and Energy Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A Cisco’s Smart Install protocol (CVE-2018-0171), first patched in 2018, remains a pervasive threat to global network infrastructure due to widespread misconfigurations and exploitation by state-sponsored threat actors. The flaw allows unauthenticated attackers to execute arbitrary code on Cisco switches and routers via exposed Smart Install Client services, enabling configuration theft, credential harvesting, and firmware […]

The post A Seven‑Year‑Old Cisco Flaw Now Lets Hackers Execute Code Remotely on Network Gear appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

RansomHub, a leading Ransomware-as-a-Service (RaaS) group that emerged in early 2024, has found itself grappling with internal turmoil. The instability came to light on April 1st, 2025, when several of its client chat portals, critical for ransomware negotiations, went offline, signaling potential internal strife. Affiliate Confusion and Infrastructure Breakdown RansomHub’s affiliates, who had been promised […]

The post RansomHub RaaS in Disarray After Affiliate Chat Access Suddenly Revoked appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Sapphire Werewolf has introduced a potent new weapon into its cyber arsenal, unveiling the latest iteration of the Amethyst stealer in a calculated phishing attack against an energy firm. According to the Report, the operation cunningly disguises a malicious payload as a mundane HR memo. The threat actor begins its attack with a fraudulent email, […]

The post Sapphire Werewolf Upgrades Arsenal With Amethyst Stealer Targeting Energy Firms appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google Cloud announced the launch of a pioneering open protocol named Agent2Agent (A2A), aiming to revolutionize how AI agents interact and automate complex enterprise workflows. Developed in collaboration with over 50 technology partners including Atlassian, Box, Cohere, and Salesforce, A2A promises to facilitate seamless agent-to-agent communication, task management, and collaboration. A2A is designed to overcome […]

The post Google Introduces A2A Protocol, Empowering AI Agents to Team Up and Automate Workflows appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.