GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

A recent advanced malware campaign leverages a phishing attack to deliver a seemingly benign Excel file that exploits CVE-2017-0199. By exploiting this vulnerability in Microsoft Office, attackers are able to embed malicious code within the file using OLE objects.  It utilizes encryption and obfuscation techniques to conceal the malicious payload. Upon opening the file, the […]

The post Beware Of Weaponized Excel Document That Delivers Fileless Remcos RAT appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability in the Apache OFBiz framework has been actively exploited by hackers. The flaw designated CVE-2024-45195, allows for unauthenticated remote code execution (RCE), posing a threat to organizations relying on OFBiz for their operations. CVE-2024-45195 – Vulnerability Details The CVE-2024-45195 vulnerability arises from missing view authorization checks in the web application. This enables […]

The post Hackers Exploiting Apache OFBiz RCE Vulnerability in the Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Docker has addressed critical vulnerabilities in Docker Desktop that could allow attackers to execute remote code. These vulnerabilities, identified as CVE-2024-8695 and CVE-2024-8696, highlight the ongoing risks associated with software extensions and the importance of timely updates. CVE-2024-8695: Crafted Extension Description Vulnerability The first vulnerability, CVE-2024-8695, involves a flaw in handling crafted extension descriptions or […]

The post Docker Desktop Vulnerabilities Let Attackers Execute Remote Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Fortinet, a leading cybersecurity firm, has confirmed a data breach involving a third-party cloud service after a hacker, known by the alias “Fortibitch,” claimed to have stolen 440GB of data. The breach primarily affects a small number of Fortinet’s Asia-Pacific customers. The compromised data is reportedly stored on a cloud-based shared file drive. The hacker […]

The post Fortinet Confirms Data Breach Following Hacker’s Claim of 440GB Data Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

SquareX has been named a winner of the prestigious Rising Star category in CybersecAsia Readers’ Choice Awards 2024 Awards, due to its outstanding achievements in its innovative browser security solutions. For the past 5 years, this award has been honouring cybersecurity organizations that are making a significant impact and delivering ground breaking solutions to help […]

The post SquareX, Awarded Rising Star Category in CybersecAsia Readers’ Choice Awards 2024 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a strategic move to bolster its cybersecurity capabilities, Mastercard has announced an agreement to acquire Recorded Future, a leading global threat intelligence company, for $2.65 billion. This acquisition, from Insight Partners, aims to enhance Mastercard’s existing suite of services focused on cyber resilience and trust within the digital economy. Recorded Future, renowned as the […]

The post Mastercard to Acquire Threat Intel Firm Recorded Future for $2.65 Billion appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Exploiting memory corruption vulnerabilities in server-side software often requires knowledge of the binary and environment, which limits the attack surface, especially for unknown binaries and load-balanced environments.  Successful exploitation is challenging due to the difficulty of preparing the heap and deploying ROP chains without this information.  Researchers discovered vulnerabilities in the Kakadu JPEG 2000 library, […]

The post Critical Vulnerabilities in JPEG 2000 Library Let Attackers Execute Remote Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

RCE attacks on WhatsUp Gold exploited the Active Monitor PowerShell Script to execute malicious code, as the vulnerabilities CVE-2024-6670 and CVE-2024-6671, patched on August 16, were leveraged to execute remote access tools and gain persistence. Despite the availability of patches, many organizations were slow to apply them, leading to widespread attacks. The attackers abused NmPoller.exe […]

The post Hackers Exploiting Progress WhatsUp RCE Vulnerability In The Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The investment will drive the company’s advancement of scalable workload access management for enterprises Aembit, the leading non-human identity and access management (IAM) company, has secured $25 million in Series A funding, bringing its total capital raised to nearly $45 million. Acrew Capital led the round, with participation from existing investors Ballistic Ventures, Ten Eleven […]

The post Aembit Raises $25 Million in Series A Funding for Non-Human Identity and Access Management appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cody Thomas developed Apfell, an open-source macOS post-exploitation framework, in 2018 and evolved into Mythic, a cross-platform framework that addresses the limitations of existing tools.  Mythic provides a unified interface for managing agents written in various languages for different platforms, which allows for flexibility and customization, enabling the creation of agents with specific functionalities.  Currently, […]

The post New Loki Backdoor Attacking macOS Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CosmicBeetle, a threat actor specializing in ransomware, has recently replaced its old ransomware, Scarab, with ScRansom, a custom-built ransomware that continues to evolve.  The threat actor has been actively targeting SMBs worldwide, exploiting vulnerabilities to gain access to their systems and experimenting with the leaked LockBit builder, attempting to leverage its reputation by impersonating the […]

The post CosmicBeetle Exploiting Old Vulnerabilities To Attacks SMBs All Over The World appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Iranian threat actor APT34, also known as GreenBug, has recently launched a new campaign targeting Iraqi government entities by employing a custom toolset, including a novel IIS backdoor and DNS tunneling protocol.  The malware used in this campaign shares similarities with previously reported APT34 malware families, such as Karkoff, Saitama, and IIS Group 2.  […]

The post Threat Actors Using New Malware Toolkit That Involves IIS Backdoor, DNS Tunneling appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

SCATTERED SPIDER, a ransomware group, leverages cloud infrastructure and social engineering to target insurance and financial institutions by using stolen credentials, SIM swaps, and cloud-native tools to gain and maintain access, impersonating employees to deceive victims.  Their partnership with BlackCat has enhanced their ability to target Western organizations due to their understanding of Western business […]

The post New Developer-As-A-Service In Hacking Forums Empowering Phishing And Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Phishing remains a significant concern for both individuals and organizations. Recent findings from ThreatLabz have highlighted the alarming prevalence of phishing attacks targeting major brands, with Google, Microsoft, and Amazon emerging as the top three most impersonated companies. This article explores the intricacies of these phishing tactics, the role of certificate authorities and domain registrars, […]

The post Hackers Mimic Google, Microsoft & Amazon Domains for Phishing Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Criminal IP, a distinguished leader in Cyber Threat Intelligence (CTI) search engine developed by AI SPERA, announced that it has successfully integrated its IP address-related risk detection data with IPLocation.io, one of the most visited IP analysis and lookup tools on the internet. Through the integration, IPLocation.io, a prominent IP address geolocation tracker platform with […]

The post Criminal IP Teams Up with IPLocation.io to Deliver Unmatched IP Solutions to Global Audiences appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CAMO, or Commercial Applications, Malicious Operations, highlights attackers’ increasing reliance on legitimate IT tools to bypass security defenses, which can be used for various malicious activities like ransomware distribution, network scanning, lateral movement, and C2 establishment. It can mislead security personnel during investigations, leading to successful compromises. Organizations should use GreyMatter Hunt packages to establish […]

The post Threat Actors Exploiting Legitimate Software For Stealthy Cyber Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers discovered flaws in the Autel MaxiCharger EV charger that make it potential to execute arbitrary code on the device by just placing it within Bluetooth range. The vulnerabilities tracked as CVE-2024-23958, CVE-2024-23959, and CVE-2024-23967 were identified during Pwn2Own Automotive 2024 in Tokyo. The Autel MaxiCharger has significantly the most extensive hardware feature set, including […]

The post Researchers Hacked Car EV Chargers To Execute Arbitrary Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Siemens ProductCERT has disclosed a critical vulnerability in its Industrial Edge Management systems. The vulnerability, identified as CVE-2024-45032, poses a significant risk by allowing unauthenticated remote attackers to impersonate other devices within the system. This flaw has been rated with a maximum CVSS score of 10.0, indicating its severe potential impact. CVE Details The vulnerability […]

The post Siemens Industrial Edge Management Vulnerable to Authorization Bypass Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

RansomHub has recently employed a novel attack method utilizing TDSSKiller and LaZagne, where TDSSKiller, traditionally used to disable EDR systems, was deployed to compromise network defenses.  Subsequently, LaZagne was used to harvest credentials from compromised systems, which is unprecedented in RansomHub’s operations and was not documented in CISA’s recent advisory.  The attack sequence began with […]

The post New RansomHub Attack Killing Kaspersky’s TDSSKiller To Disable EDR appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Recent research has revealed a new Android malware targeting mnemonic keys, a crucial component for cryptocurrency wallet recovery. Disguised as legitimate apps, this malware scans devices for images containing mnemonic phrases. Once installed, it covertly steals personal data like text messages, contacts, and images.  The research has identified over 280 such malicious apps targeting Korean […]

The post New Android Spyware As TV Streaming App Steals Sensitive Data From Devices appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.