GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

SonicWall has issued an urgent advisory regarding a critical vulnerability in its SonicOS management access and SSLVPN. The flaw, identified as CVE-2024-40766, is actively exploited in the wild. It potentially allows unauthorized access to resources and, under certain conditions, causes firewalls to crash. The vulnerability affects SonicWall Gen 5 and Gen 6 devices and Gen […]

The post SonicWall Access Control Vulnerability Exploited in the Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has released a patch addressing a critical zero-day vulnerability that has been actively exploited. This vulnerability, CVE-2024-32896, is a privilege escalation flaw within the Android Framework component. The patch, part of the Android Security Bulletin for September 2024, underscores Google’s commitment to protecting its users from potential threats. Details of the Vulnerability The most […]

The post Google Patches Actively Exploited Android 0-day Privilege Escalation Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Blackwired, the leading cyber observatory for disruptive cybersecurity technologies, has announced the launch of ThirdWatch℠, a groundbreaking solution to identify direct threats facing an organization and its Third Parties. ThirdWatch℠ is a subject-directed monitoring platform that provides a comprehensive 360-degree view in 3D of existential threats that impact organizations and the associated cyber risks posed […]

The post Blackwired Launches ThirdWatch℠, A Paradigm Shift in Cybersecurity appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A new malicious software named “Fury Stealer” has been detected, posing a significant threat to online security. The malware, created by an unidentified threat actor, is designed to steal sensitive information, including login passwords, from unsuspecting victims. Cybersecurity analyst MonThreat first reported the announcement of this harmful tool on the social media platform X. What […]

The post New Fury Stealer Attacking Victims to Steal Login Passwords appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Live Webcast from Monaco will Explore the Extraordinary Opportunities in an Era of Explosive Innovation and Growth Cyber A.I. Group, Inc., a rapidly growing cybersecurity, artificial intelligence, and IT services firm, specializing in acquiring a diverse range of related service companies globally, announced today its inaugural international investor presentation set for September 12, 2024. The […]

The post Cyber A.I. Group Announces Global Presentation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The D-Link DAP-2310 Wireless Access Point (WAP) has been identified as vulnerable to remote code execution (RCE). Dark Wolf Solutions discovered this vulnerability, which seriously threatens users by allowing attackers to gain unauthorized remote access. This guide delves into the details of the vulnerability, the affected models, and the recommendations for users. Understanding the Vulnerability: […]

The post RCE Vulnerability in D-Link WAP Let Attackers Gain Remote Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The FTC has ordered Verkada to implement a comprehensive information security program to address its lax security practices that allowed a hacker to compromise customer security cameras.  Verkada will pay a $2.95 million fine for violating the CAN-SPAM Act by sending unsolicited commercial emails to prospective customers. The proposed order, which requires court approval, mandates […]

The post Verkada Pay $2.95 Million Failed To Secure Data Lead To Massive Breach appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cyble Research & Intelligence Labs has recently found information about a new type of malware-as-a-service (MaaS) called ‘ManticoraLoader’ in some underground forums. Since August 8, 2024, on forums and Telegram, this MaaS service has been offered by the threat group “DeadXInject.” These actors were also behind the development of the “AresLoader” malware and went after […]

The post New ManticoraLoader – Malware Attacking Citrix Users To Steal Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Head Mare, a Russian-focused hacktivist group, gained notoriety in 2023 by targeting organizations in Russia and Belarus as they employ phishing tactics to distribute WinRAR archives exploiting the CVE-2023-38831 vulnerability, gaining initial access to victims’ systems.  Once inside, they steal sensitive data and encrypt devices using LockBit and Babuk ransomware, whose toolset and tactics align […]

The post Head Mare Hacktivist Group Exploit WinRAR Vulnerability To Encrypt Windows And Linux appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft has identified a North Korean threat actor, Citrine Sleet, exploiting a zero-day vulnerability in Chromium (CVE-2024-7971) to gain remote code execution on cryptocurrency targets.  The threat actor deployed the FudModule rootkit, previously attributed to Diamond Sleet, suggesting potential shared use of malware between these North Korean threat actors. The V8 JavaScript engine in Chrome […]

The post North Korean Hackers Actively Exploiting Chromium RCE Zero-Day In The Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft identified a new custom multi-stage backdoor, “Tickler,” deployed by the Iranian state-sponsored threat actor Peach Sandstorm between April and July 2024.  Targeting sectors like satellite, communications equipment, oil and gas, and government, Tickler has been used to gather intelligence. Peach Sandstorm also conducted password spray attacks on educational and government sectors.  The group employed […]

The post New Custom Malware “Tickler” Attack Satellite Devices appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The FBI, CISA, MS-ISAC, and HHS have released a joint advisory detailing known RansomHub ransomware indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs).  RansomHub, a ransomware-as-a-service variant, has been active since February 2024, targeting various critical infrastructure sectors, and affiliates use a double-extortion model, encrypting systems and exfiltrating data.  Victims receive a ransom […]

The post Ransomhub Attacked 210 Victims Since Feb 2024, CISA Released Advisory For Defenders appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The People’s Cyber Army of Russia is a Russian hacktivist group known for its strategic use of DDoS attacks and other disruptive tactics.  Operating as part of the broader Russian cyber warfare landscape, the group has been involved in several attacks on Ukraine, reflecting a continuation of tactics seen in earlier Russian operations.  Their activities […]

The post Researchers Detailed Russian Hacktivist/State Hackers Tactics appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The stable channel for desktops has been updated to version 128.0.6613.119/.120 for Windows and Mac, and 128.0.6613.119 for Linux. This update will be gradually rolled out over the coming days and weeks. For those using the Extended Stable channel, version 128.0.6613.120 is now available for Windows and Mac. The full list of changes is in […]

The post Chrome Vulnerability Let Attackers Execute Arbitrary Code Remotely appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Iranian cyber actors have been identified as the perpetrators behind ransomware attacks targeting U.S. organizations across multiple sectors. This revelation comes from a joint Cybersecurity Advisory issued by the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the Department of Defense Cyber Crime Center (DC3). Background of the Threat Group […]

The post Iranian Threat Group Attack US Organization via Ransomware appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Researchers from Proofpoint have uncovered a sophisticated cyberattack campaign leveraging Google Sheets as a command and control (C2) platform. Dubbed “Voldemort” by the researchers, this campaign targets Windows users globally, employing a novel attack chain that combines both common and rare techniques to deliver custom malware. This article delves into the intricacies of the campaign, […]

The post Voldemort Threat Actors Abusing Google Sheets to Attack Windows Users  appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Cary, North Carolina, August 30th, 2024, CyberNewsWire: INE Security is pleased to announce that it has been recognized as a 2024 SC Award finalist in the Excellence Award category for Best IT Security-Related Training Program. Marking its 27th year, the SC Awards recognize the solutions, organizations, and individuals that have demonstrated exceptional achievement in advancing […]

The post INE Security Named 2024 SC Awards Finalist appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Researchers uncovered a sophisticated phishing campaign that exploits a .NET-based Snake Keylogger variant. This attack leverages weaponized Excel documents to infiltrate Windows systems, posing significant threats to user data security. This article delves into the mechanics of the attack, the techniques employed by the malware, and the implications for users and organizations. Understanding Snake Keylogger […]

The post .NET-based Snake Keylogger Attack Windows Using Weaponized Excel Documents appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Cybercriminals are leveraging platforms like GitHub to spread the Lumma information stealer malware. This sophisticated threat is part of a growing trend where attackers use legitimate services to distribute malicious tools, posing significant risks to users worldwide. What is Lumma Stealer? Lumma Stealer is a highly advanced malware designed to siphon sensitive information from unsuspecting […]

The post Attackers Spread Lumma Stealer Malware GitHub Comments appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity researchers from Mandiant and Google Cloud have uncovered a sophisticated scheme where hackers exploit digital advertising tools to conduct malicious campaigns. These tools, originally designed to enhance marketing efforts, have been repurposed by threat actors to evade detection and amplify their attacks. This article delves into the methods these cybercriminals use, the tools they […]

The post Hackers Exploited Digital Advertising Tools to Launch Malicious Campaigns appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.