GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

The UK’s National Cyber Security Centre (NCSC) recently hosted an unprecedented conference at its London headquarters, bringing together international government partners, UK government officials, and industry leaders. The focus was on exploring the potential of cyber deception technologies and techniques in bolstering cyber defense. This initiative aims to establish a comprehensive evidence base for using […]

The post NCSC to Build Nation-Scale Evidence Base for Cyber Deception appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

By reverse-engineering Quick Share’s proprietary communication protocol, researchers uncovered multiple vulnerabilities, including unauthorized file writes, forced Wi-Fi connections, directory traversal, and denial-of-service conditions.  These flaws were chained together to achieve remote code execution on Windows systems with Quick Share installed, bypass file approval dialogs and establish persistent Wi-Fi connections.  Google addressed these issues with two […]

The post Google’s Quick Share Vulnerabilities Let Attackers Execute Remote Code appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

U.S. authorities have arrested two believed administrators of the notorious WWH-Club, an online marketplace for stolen credit card information. The arrests mark a major step in the ongoing battle against cybercrime and the illicit trade of unauthorized access devices. The Arrests On August 6, 2024, Pavel Kublitskii and Alexandr Khodyrev were apprehended by law enforcement […]

The post Authorities Arrested Two Admins of WWH-Club Stolen Credit Card Marketplace appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Criminal IP, an expanding Cyber Threat Intelligence (CTI) search engine from AI SPERA, has recently completed its technology integration with Maltego, a global all-in-one investigation platform that specializes in visualized analysis of combined cyber data. This collaboration integrates Criminal IP’s comprehensive database of malicious IPs, domains, and CVEs directly into Maltego’s unified user interface and […]

The post Criminal IP and Maltego Collaborate to Broaden Threat Intelligence Data Search appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated phishing campaign targeting Windows systems leverages multiple evasion techniques, including Python obfuscation, shellcode generation, and loading, to deploy a payload of malware.  This multi-stage attack, disguised as a customer service request, delivers malicious attachments that, once opened, install XWorm, VenomRAT, AsyncRAT, and PureHVNC, which grant attackers remote system control, posing a significant threat […]

The post Threat Actors Exploiting Windows Systems To Deploy Multiple Malwares appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors often target and exploit security flaws in web browsers, as exploiting flaws in web browsers enables them to gain unauthorized access and perform several illicit activities. Not only that, threat actors also get a wide attack surface with minimal effort by exploiting the security flaws in browsers. Cybersecurity researchers at Oligo Security’s research […]

The post 0.0.0.0 Day – 18 Yr Old Vulnerability Allow Attackers to Bypass All Browser Security appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The Apache HTTP Server relies on hundreds of independently developed modules to handle client requests, sharing a complex data structure for communication.  While modularity promotes specialization, the lack of standardized interfaces, coupled with the massive scale of the system, introduces potential vulnerabilities.  As modules evolve independently with minimal understanding of each other, inconsistencies and security […]

The post Confusion Attacks Vulnerability In Apache HTTP Server Allow Attackers To Gain Root Access Remotely appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft has released a report detailing Iran’s efforts to influence the upcoming 2024 US presidential election. The report highlights the increasing activity of groups linked to the Iranian government, aiming to sway voters and create controversy, particularly in key swing states. This intelligence underscores the ongoing threat of foreign interference in American democracy. Covert News […]

The post Iranian Hackers Targeting 2024 US Election Campaigns appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Kimsuky, a North Korean APT group, employs targeted phishing campaigns, leveraging DMARC exploitation to conceal social engineering, infiltrate university networks, and steal research for the Reconnaissance General Bureau.  It aligns with North Korea’s goal of intelligence acquisition to advance its scientific capabilities, mirroring past actions of stealing nuclear, healthcare, and pharmaceutical research.  The recent exposure […]

The post North Korean Kimusky Group Attacking University Professors appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Mobile Device Management (MDM) is a device management solution for laptops, tablets, and smartphones used by organizations to enable them to control and protect their employees’ mobile devices. Moreover, MDM has been developed with various tools that administrators can use to manage these gadgets better. Main functions include installing applications from both official and unofficial […]

The post Leaked MDM Credentials Exposes Commonly Laptops And Smartphones For Hacking appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A new APT group, dubbed Actor240524, launched a spear-phishing campaign targeting Azerbaijani and Israeli diplomats on July 1, 2024, where the attackers employed a malicious Word document containing Azerbaijani-language content disguised as official documentation to lure victims.  The attack indicates a potential focus on disrupting the Azerbaijan-Israel relationship, as the group leverages new Trojan programs, […]

The post New APT Actor240524 Weaponizing Official Documents To Deliver Malware appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Jenkins, an open source automation server, has been found to have two security issues, one of which is a critical flaw that, if exploited, might lead to remote code execution (RCE). An attacker may be able to read arbitrary files from the Jenkins controller file system, which could disclose confidential data or open the door […]

The post Critical Jenkins Vulnerabilities Expose Servers To RCE Attack appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has raised alarms over malicious cyber actors’ active exploitation of the Cisco Smart Install feature. This legacy feature, originally designed to simplify the deployment of new switches, is now being leveraged by hackers to gain unauthorized access to system configuration files, posing significant security risks to organizations worldwide. […]

The post CISA Warns of Cisco Smart Install Feature Actively Exploited by Hackers appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Such is the industry, that RISC-V, an open and extensible instruction set architecture (ISA) has now invaded the CPU market, opening up many opportunities for new entrants. It has gained a lot of traction through Linux kernel support as well as being adopted by consumer devices and cloud platforms. However, RISC-V’s flexible nature has led […]

The post GhostWrite Vulnerability Let Hackers Read And Write Any Part Of The Computer’s Memory appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Every software and operating system vendor has been implementing security measures to protect their products. This is due to the fact that threat actors require a lot of time to find a zero-days but require less time to find a readily available exploit for a vulnerable software. This brought them to the thought where they […]

The post Windows Zero-day Flaw Let Hackers Downgrade Fully Updated Systems To Old Vulnerabilities appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated mobile attack vector involves a deceptive iOS update that masquerades as the legitimate iOS 18, tricking users into installing malicious code.  The persistence mechanism allows threat actors to maintain covert control over the compromised device, facilitating data exfiltration and continued device exploitation without user awareness.  Understanding the intricate workings of such attacks necessitates […]

The post Hackers Exploit iOS Settings to Trigger Fake iOS Updates on Hijacked Devices appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Ransomware affiliates are forming alliances to recoup losses from unreliable partners. A prominent example involves ALPHV extorting $22 million from Change Healthcare but withholding funds from its data exfiltration affiliate.  To remedy this, the affiliate has reportedly partnered with RansomHub to demand additional payment from Change Healthcare for data deletion, showcasing a new tactic in […]

The post DISPOSSESSOR And RADAR Ransomware Emerging With RaaS Model appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

MongoDB has disclosed a critical vulnerability that could allow attackers to escalate privileges on systems running certain versions of MongoDB. This vulnerability, CVE-2024-7553, affects multiple versions of MongoDB Server, C Driver, and PHP Driver. The flaw stems from incorrect validation of files loaded from a local untrusted directory, particularly impacting systems running on Windows. CVE-2024-7553 […]

The post MongoDB Vulnerabilities Let Attackers Escalate Privileges appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Authorities have dismantled a “laptop farm” in Nashville, Tennessee, allegedly used to support the Democratic People’s Republic of Korea’s (DPRK) weapons program. Matthew Isaac Knoot, 38, has been charged with multiple offenses, including conspiracy to cause damage to protected computers and money laundering. The Scheme Unveiled According to court documents, Knoot participated in a complex […]

The post Authorities Dismantled North Korean Remote IT Worker Laptop Farm appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated threat activity cluster, STAC6451, has been identified targeting Microsoft SQL servers. This cluster, primarily observed by Sophos Managed Detection and Response (MDR) teams, has compromised organizations by exploiting SQL server vulnerabilities. The attackers have been using a combination of brute-force attacks, command execution, and lateral movement techniques to infiltrate and compromise networks. This […]

The post STAC6451 Hacker Hijacking Microsoft SQL Servers to Compromise Organizations appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.