GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Ukrainian Roosh Ventures has invested in the French freelance platform Jump. This was announced by tech entrepreneur and co-founder of the Roosh investment fund, Serhiy Tokarev, on his LinkedIn page: “Thrilled to announce that Roosh Ventures is backing Jump, a platform that’s changing the game for freelancers.”  Jump is a universal platform aiming to make […]

The post Serhiy Tokarev Told About Roosh’s Investment in the French Freelance Platform  appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A new ransomware campaign targeting individuals and organizations in the UK and the US has been identified. The attack, known as the “Prince Ransomware,” utilizes a phishing scam that impersonates the British postal carrier Royal Mail. This campaign highlights the growing sophistication of cyber threats and the need for heightened vigilance among internet users. The […]

The post Prince Ransomware Hits UK and US via Royal Mail Phishing Scam appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft and the U.S. Department of Justice (DOJ) have successfully dismantled a network of domains a Russian hacking group linked to the Federal Security Service (FSB) uses. This collaborative effort is critical in countering cyber threats targeting democratic institutions worldwide. Seizing Domains to Disrupt Cyberattacks In coordination with the DOJ, Microsoft’s Digital Crimes Unit (DCU) […]

The post Microsoft, DOJ Dismantle Domains Used by Russian FSB-Linked Hacking Group appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cloud Penetration Testing is a method of actively checking and examining the Cloud system by simulating the attack from the malicious code. Cloud computing is the shared responsibility of the Cloud provider and the client who earn the service from the provider. Due to the impact of the infrastructure, Penetration Testingnot allowed in SaaS Environment. […]

The post Cloud Penetration Testing Checklist – 2024 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers have uncovered a sophisticated Linux malware, dubbed “perfctl,” actively targeting millions of Linux servers worldwide. This malicious software exploits over 20,000 types of server misconfigurations, posing a significant threat to any Linux server connected to the internet. The malware’s stealthy nature and advanced evasion techniques make it particularly challenging to detect and mitigate. The […]

The post Linux Malware perfctl Attacking Millions of Linux Servers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Doppler, the leading platform in secrets management, today announces the launch of Change Requests, a new feature providing engineering teams with a secure, auditable approval process for managing and controlling secret changes across environments. Designed to enhance security, compliance, and team collaboration, Change Requests gives organizations the tools to mitigate the potential risks from misconfigurations […]

The post Doppler Launches ‘Change Requests’ to Strengthen Secrets Management Security with Audited Approvals appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

At DEF CON 32, the SquareX research team delivered a hard-hitting presentation titled Sneaky Extensions: The MV3 Escape Artists where they shared their findings on how malicious browser extensions are bypassing Google’s latest standard for building chrome extensions: Manifest V3 (MV3)’s security features, putting millions of users and businesses at risk. SquareX’s research team publicly […]

The post Millions of Enterprises at Risk: SquareX Shows How Malicious Extensions Bypass Google’s MV3 Restrictions appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

An exclusive live webinar will take place on October 4th at noon Eastern Time (ET), demonstrating how Criminal IP’s Attack Surface Management (ASM) can help organizations proactively detect and mitigate cyber threats. The webinar will feature a Criminal IP ASM Live Demo, providing a comprehensive view of attack surface visibility. As cyber threats continue to […]

The post Webinar Announcement: Attack Surface Management to the Rescue – Find, Fix, Fortify Your ASM with Criminal IP appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Police Service of Northern Ireland (PSNI) has been ordered to pay a £750,000 fine following a significant data breach last year. The breach involved the accidental release of the personal details of 9,400 officers and staff. Despite representations to the Information Commissioner’s Office (ICO) to reduce the penalty, the fine remains unchanged. Details of […]

The post Northern Ireland Police to Pay £750,000 Fine Following Data Breach appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

ANY.RUN announced an upgrade to its Threat Intelligence Portal, enhancing its capabilities to identify and analyze emerging cyber threats. This upgrade underscores ANY.RUN’s commitment to providing comprehensive threat intelligence solutions, empowering users to navigate the ever evolving landscape of cyber threats.  About Threat Intelligence Lookup  Threat Intelligence Lookup is a streamlined platform designed to help […]

The post ANY.RUN Upgrades Threat Intelligence to Identify Emerging Threats appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability has been discovered in Cisco’s Nexus Dashboard Fabric Controller (NDFC), potentially allowing hackers to execute arbitrary commands on affected systems. This flaw, identified as CVE-2024-20432, was first published on October 2, 2024. Its CVSS score of 9.9 indicates its severe impact. Vulnerability Details The vulnerability resides in the Cisco NDFC’s REST API […]

The post Cisco Nexus Vulnerability Let Hackers Execute Arbitrary Commands on Vulnerable Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has announced the addition of a new vulnerability to its Known Exploited Vulnerabilities Catalog. This vulnerability, CVE-2024-29824, affects Ivanti Endpoint Manager (EPM) and has become a target for cybercriminals using public exploits in recent attacks on Ivanti endpoints. CVE-2024-29824: A Critical Threat Ivanti, a U.S.-based IT software company […]

The post Hackers Now Exploit Ivanti Endpoint Manager Vulnerability to Launch Cyber Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Tor Project has announced the release of Tor Browser 13.5.6, which is now available for download from its official website and distribution directory. This latest version includes significant updates that focus on enhancing security and user experience across all platforms. Key Security Updates One of the most notable updates in Tor Browser 13.5.6 is […]

The post Tor Browser 13.5.6 Released – What’s New! appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aembit, the non-human IAM company, today announced the appointment of Mario Duarte as chief information security officer (CISO). Duarte, formerly head of security at Snowflake, joins Aembit with a deep commitment to address pressing gaps in non-human identity security. Duarte’s journey in cybersecurity began with a passion for penetration testing, sparked by the 1980s cult […]

The post Mario Duarte, Former Snowflake Cybersecurity Leader, Joins Aembit as CISO to Tackle Non-Human Identities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recently discovered vulnerability in Bluetooth technology has raised significant security concerns. This flaw could allow hackers to intercept passcodes during the device pairing process, affecting a wide range of Bluetooth devices and potentially having far-reaching implications for users worldwide. The Vulnerability: CVE-2020-26558 The vulnerability, CVE-2020-26558, is found in devices supporting the Passkey Entry association […]

The post New Bluetooth Vulnerability Leak, Your Passcode to Hackers During Pairing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The need for advanced tools that can effectively simulate real-world threats is paramount. Enter GhostStrike, a sophisticated cybersecurity tool explicitly designed for Red Team operations. With its array of features aimed at evading detection and performing process hollowing on Windows systems, GhostStrike is setting new benchmarks in cybersecurity testing. Dynamic API Resolution and Obfuscation Techniques […]

The post GhostStrike – A Cyber Security Tool for Red Team to Evade Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google Workspace has announced new password policies that will impact how users and third-party apps access Google services. The changes, aimed at eliminating less secure sign-in methods, will be implemented in stages throughout 2024. Here’s what you need to know about the upcoming changes and how they will affect users and administrators. Phasing Out Less […]

The post Google Workspace Announced New Password Policies, What is Changing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has warned about four critical vulnerabilities currently being exploited in the wild. These vulnerabilities affect various products, from routers to software platforms, posing significant risks to users worldwide. The vulnerabilities have been identified in D-Link, DrayTek, Motion Spell, and SAP products. CVE-2023-25280: D-Link DIR-820 Router OS Command Injection […]

The post CISA Warns of Four Vulnerabilities that Exploited Actively in the Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Diehl Defence anti-aircraft missiles from Baden-Württemberg are successfully intercepting Russian attacks on Kyiv, according to Mayor Vitali Klitschko. The German-supplied technology has achieved a 100% hit rate in defending the Ukrainian capital. The German government plans to install Diehl missile defense systems on three new government aircraft, which will equip the aircraft with advanced capabilities […]

The post North Korean Hackers Attempted To Steal Sensitive Military Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The newly emerged Gorilla Botnet has exhibited unprecedented activity, launching over 300,000 DDoS attacks against targets in over 100 countries between September 4 and 27.  The botnet, a modified version of Mirai, supports multiple CPU architectures and employs advanced techniques to maintain long-term control over infected devices.  It leverages encryption algorithms commonly used by the […]

The post GorillaBot Emerged As King For DDoS Attacks With 300,000+ Commands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.