GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

The U.S. Department of Commerce’s National Institute of Standards and Technology (NIST) has taken a step in safeguarding digital security against future quantum threats. By finalizing a set of three encryption algorithms, NIST aims to protect sensitive information from the potential capabilities of quantum computers, which could break existing encryption methods. The Journey Toward Quantum-Resistant […]

The post NIST Finalizes 3 Algorithms to Combat Future Quantum Cyber Threats appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

IBM recently disclosed critical vulnerabilities affecting its QRadar Suite Software and IBM Cloud Pak for Security. These vulnerabilities, if exploited, could allow attackers to execute arbitrary code remotely, potentially leading to severe security breaches. The company has addressed these issues in its latest software release and urges users to update their systems immediately. Vulnerability Details […]

The post Critical Vulnerabilities in IBM QRadar Allow Attackers to Execute Arbitrary Code Remotely appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

In July 2022, Microsoft patched a well-known PPL bypass flaw, initially discovered by Ionescu and Forshaw.  This allowed protection circumvention without kernel code execution, and this update now broke the PPLdump PoC. SCRT Team researchers at Orange Cyberdefense recently discovered a new exploit that enables threat actors to bypass LSASS protection. This new exploit was […]

The post BYOVDLL – A New Exploit That Is Bypassing LSASS Protection appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

APT42 (aka Damselfly, UNC788, CALANQUE, Charming Kitten) is a sophisticated Iranian state-sponsored cyber espionage group.  This Advanced Persistent Threat (APT) group is known for its ability to carry out long-term and focused digital surveillance campaigns. The major targets of such actions are often government bodies, defense contractors, and critical infrastructure. Cybersecurity researchers at Cyfirma recently […]

The post Iranian APT42 Actors Conducting World Wide Surveillance Operations appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Earth Baku, an APT actor who initially focused on the Indo-Pacific region, has grown its activities extensively since late 2022. The group has increased its presence in Europe, the Middle East, and Africa (MEA), having also confirmed engagements in Italy, Germany, UAE and Qatar. Cybersecurity researchers at Trend Micro recently discovered that Earth Baku has […]

The post Earth Baku Using Customized Tools To Maintain Persistence And Steal Data appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft announced that Face Check with Microsoft Entra Verified ID is now generally accessible. It is available standalone and as part of the Microsoft Entra Suite, a comprehensive identity solution that combines network access, identity protection, governance, and identity verification features to provide Zero Trust access. Notably, earlier this year, the business provided a public […]

The post Face Check With Microsoft Entra Verified ID Is Now Generally Available, Microsoft appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Cyberattacks have highlighted vulnerabilities in GraphQL APIs, leading to significant security breaches in various organizations. GraphQL, a query language for APIs, allows clients to request specific data, making it a popular choice for developers. However, its flexibility also opens doors for potential exploitation. This article delves into the methods used by attackers to exploit GraphQL […]

The post Hackers Exploited by GraphQL Vulnerabilities to Compromise Organizations appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

NetSPI discovered that Microsoft Outlook is vulnerable to authenticated remote code execution (CVE-2024-21378) due to improper validation of synchronized form objects.  By manipulating a configuration file, attackers can automatically register and instantiate a custom form, specifying a malicious executable as the form server, which bypasses Outlook‘s faulty allow-listing mechanism, enabling remote code execution on the […]

The post 0-Click Outlook RCE Vulnerability Triggered When Email is Clicked – Technical Analysis appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Two men living a life of luxury in Florida have been charged with cyber fraud after authorities became suspicious of their extravagant spending habits. Russian national Pavel Kublitskii and Kazakhstan national Alexandr Khodyrev, who arrived in the U.S. in 2022 seeking asylum, are now facing serious charges related to their alleged involvement in dark web […]

The post Dark Web Marketplace Admins Busted Following Luxury Life appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Researchers studied the infrastructure behind clickbait PDF attacks by analyzing a large dataset of real-world PDFs to identify clickbait ones and their linked infrastructure and found that attackers use various hosting types, including object storage, website hosting, and CDNs.  The attackers exploit vulnerabilities in outdated software components to upload malicious PDFs, while researchers also investigated […]

The post Clickbait PDFs, An Entry point For Multiple Web Based Attacks appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Hackers always keep updating their tools and add new ones to adapt to evolving security measures, bypass defenses, and exploit newly discovered vulnerabilities.  Staying ahead of the cybersecurity advancements is completely important for them as doing so helps them maintain their ability to carry out successful cyber attacks. Cybersecurity researchers at The DFIR Report recently […]

The post Hackers Toolkit Unveiled, Comprehensive Tools For Various Cyber Attacks appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Zoom Video Communications has recently disclosed several critical vulnerabilities affecting its Workplace Apps, SDKs, and Rooms Clients. These vulnerabilities, identified in multiple security bulletins, pose significant risks, potentially allowing attackers to escalate privileges on affected systems. The issues impact users across various platforms, including Windows, macOS, Linux, iOS, and Android. High-Risk Vulnerabilities Identified Among the […]

The post Zoom Fixes Critical Vulnerabilities Allowing Privilege Escalation appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Scammers have exploited the popularity of former President Donald Trump and tech mogul Elon Musk to deceive unsuspecting victims. According to a recent tweet by Avast Threat Labs, the fraudulent scheme involved hijacking YouTube accounts to broadcast fake interviews, and within just a few hours, it amassed approximately $9,000. Hijacked YouTube Accounts Fuel Deception The […]

The post CryptoScam Strikes Misusing Trump & Musk Interview appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

FBI Cleveland announced a significant victory against cybercrime by disrupting “Radar/Dispossessor,” a notorious ransomware group led by the online moniker “Brain.” This operation dismantled three servers in the United States, three in the United Kingdom, and 18 in Germany. Additionally, authorities seized eight U.S.-based criminal domains and one German-based domain. The takedown was a collaborative […]

The post Authorities Seized Dispossessor Ransomware Servers appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A new Ransomware-as-a-Service (RaaS) platform known as DeathGrip has surfaced, offering sophisticated ransomware tools to aspiring cyber criminals. This service is being promoted through Telegram and various underground forums, providing a gateway for individuals with limited technical expertise to launch potent ransomware attacks. DeathGrip’s emergence underscores the growing accessibility of cybercrime tools, posing an increased […]

The post DeathGrip Ransomware Expanding Services Using RaaS Service appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability identified as CVE-2024-7348 has been discovered in PostgreSQL, enabling attackers to execute arbitrary SQL functions. This vulnerability in the pg_dump utility poses a significant security risk, especially when executed by superusers. CVE-2024-7348 – Vulnerability Details The flaw is a Time-of-check Time-of-use (TOCTOU) race condition in the pg_dump process. An attacker can exploit this by […]

The post PostgreSQL Vulnerability Allows Hackers To Execute Arbitrary SQL Functions appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A newly discovered phishing marketplace, ONNX Store, empowers cybercriminals to launch sophisticated attacks against Microsoft 365 and Office 365 environments. The platform provides tools to circumvent robust 2FA safeguards, enabling threat actors to compromise accounts with increased efficiency.  Corporate security teams must prioritize anti-phishing defenses to mitigate the risk of successful attacks, data breaches, and […]

The post Telegram Bot Selling Phishing Tools to Bypass 2FA & Hack Microsoft 365 Accounts appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Hackers attack AWS as it hosts a vast number of high-value targets, including sensitive data, business applications, and cloud resources for organizations worldwide. In February 2024, six AWS services were found to have some critical vulnerabilities. The services include CloudFormation, Glue, EMR, SageMaker, ServiceCatalog and CodeStar. Cybersecurity analysts at Aquasec identified grave dangers associated with […]

The post Critical AWS Services Vulnerability Let Attackers Execute Remote Code appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Evolution Mining Limited, a prominent global player in the gold mining industry, has reported a ransomware attack that impacted its IT systems. The company, which operates several mines across Australia and Canada, discovered the breach on August 8, 2024. This incident highlights the growing threat of cyberattacks on critical industries worldwide. Incident Details and Response […]

The post Australian Gold Mining Company Reports Ransomware Attack appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Head Mare, a hacktivist group targeting Russia and Belarus, leverages phishing campaigns distributing WinRAR archives to exploit CVE-2023-38831 for initial access. By deploying LockBit and Babuk ransomware, they encrypt victim systems and publicly disclose stolen data.  The group shares similarities with other anti-Russian hacktivists in tactics but employs more advanced access methods, as their operations, […]

The post Hackers Exploiting WinRAR Flaw To Attacks Windows & Linux(ESXi) Machines appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.