GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Following extensive analyses and investigations by German security authorities, the Federal Government has officially attributed responsibility for a significant cyberattack on the Federal Office of Cartography and Geodesy (BKG) at the end of 2021 to Chinese state actors. The federal government condemned the attack, which infiltrated BKG’s network for espionage purposes. According to Bmi Bund […]

The post Germany has accused China of Attack on Critical Infrastructure Since 2021 appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Cyber A.I. Group, Inc., an emerging growth global cybersecurity, A.I. and IT services company, announced today that it has executed a Letter of Intent (LOI) to acquire a prominent North American-based cybersecurity firm. The announcement was made by Walter Hughes, CEO of Cyber A.I. Group alongside A.J. Cervantes, Jr., Executive Chairman of Cyber A.I. Group […]

The post Cyber A.I. Group Announces LOI to Acquire Prominent North American Cyber Security Company appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Despite robust defenses, Cross-Site Scripting (XSS) remains a persistent web vulnerability, as its exploitation has become increasingly challenging. A recent discovery highlights how integrating OAuth, a modern authentication standard, with vulnerable websites can resurrect XSS risks.  By manipulating OAuth flows and leveraging existing XSS flaws, attackers can potentially compromise sensitive data and execute malicious actions, […]

The post OAuth Vulnerability Exposes 1 Million Websites To XSS Attacks appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The World Wide Web Consortium (W3C) has strongly opposed Google’s decision to halt the deprecation of third-party cookies. The W3C has updated its Technical Architecture Group (TAG) finding to emphasize the necessity of removing third-party cookies due to their inherent privacy issues. The consortium argues that these cookies enable tracking across multiple websites, which can […]

The post World Wide Web Consortium Opposed Google’s Decision on Third-party cookies appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity firm TrustedSec has unveiled a powerful new tool called Specula. It exploits a longstanding vulnerability in Microsoft Outlook to transform it into a Command and Control (C2) server. This revelation has sent shockwaves through the cybersecurity community, highlighting a persistent weak point in many corporate networks. The Specula Framework Specula leverages a seemingly innocuous […]

The post New Specula Tool Turning Outlook as a C2 Server by Leveraging Registry appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Texas Attorney General Ken Paxton has secured a $1.4 billion settlement with Meta Platforms Inc. (formerly known as Facebook) over the unauthorized capture and use of millions of Texans’ personal biometric data. This settlement marks the largest privacy settlement ever obtained by an Attorney General from a single state and serves as a significant warning […]

The post Meta paid a $1.4 Billion Settlement for the Unauthorized Capture of Personal Biometric Data appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Google has rolled out a new security update for its Chrome browser, addressing several critical vulnerabilities. The update on the Stable channel brings Chrome to version 127.0.6533.88/89 for Windows and Mac, and 127.0.6533.88 for Linux. The update will be distributed over the coming days and weeks. Critical Vulnerabilities Addressed According to Chrome reports, the latest […]

The post Chrome Security Update: Patch for Critical Flaw that Leads to Exploitation appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Progress, the company behind MOVEit Transfer, has issued a critical security alert addressing a newly discovered vulnerability in its MOVEit Transfer product. The flaw, CVE-2024-6576, has been classified as a high-severity issue, with a CVSS score of 7.3, indicating a significant user risk. CVE-2024-6576: Improper Authentication Leading to Privilege Escalation The vulnerability found in the […]

The post Progress Patched New MOVEit File Transfer Flaw that Allows Privilege Escalation appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The popular audiobook and podcast platform uBook has been affected by a data breach that exposed the personal information of 710,000 users. According to a tweet by ThreatMon, the breach, which occurred in July 2024, was announced by a member of a dark web forum, raising serious concerns about user privacy and data security. Details […]

The post ubook Suffered Data Breach, 710,000 Users’ Data Exposed appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Hackers use phishing emails to mislead recipients into providing personal data like usernames, passwords, credit card numbers, or social security numbers. This method exploits human emotions and trust, allowing a threat actor to compromise an account, steal an identity, or disseminate malware with little technical skill. Guardio Labs recently discovered “EchoSpoofing” which is a serious […]

The post Proofpoint’s Email Protection Let Attackers Send Millions Of Phishing Emails appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Hackers prefer ransomware attacks primarily because they offer the highest chance of financial gain. By locking victims’ information systems and asking for payment to release them, ransomware attacks lock victims’ information systems and demand payment to unlock them. Considering such a high level of risk, victims are pushed to make ransom payments as fast as […]

The post Hackers Exploiting ESXi Hypervisor Auth Bypass Flaw For Ransomware Attacks appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

 A threat actor has taken to social media to claim responsibility for hacking into a Microsoft employee’s device. The announcement was made via a Telegram post, accompanied by a video purportedly showing the breach’s aftermath, as per a tweet by ThreatMon, a Cybersecurity Intelligence Platform. Details of the Alleged Breach The threat actor alleges that […]

The post Threat Actor Allegedly Claiming Hack of Microsoft Employee’s Device appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A serious flaw in OpenSSH servers, dubbed “regreSSHion,” affects macOS systems and could allow a remote attacker to execute arbitrary code. A few weeks ago, Qualys’ threat research unit discovered this vulnerability, which has been identified as regreSSHion and tracked as CVE-2024-6387.  It was found that on glibc-based Linux systems, the vulnerability—a signal handler race […]

The post Critical OpenSSH “regreSSHion” Vulnerability Impacted macOS  Systems, Patch Now appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The SocGholish downloader has been in operation since 2017 and it is still evolving. This malware, which poses as a browser update, is favored by multiple threat groups such as the Russian-operated Evil Corp (Manatee Tempest) and the Initial Access Broker TA569 (Mustard Tempest). In recent times, it is seen that the malware now specifically […]

The post SocGholish Malware Attacking Windows Users Using Fake Browser Update appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

In March 2024, a new variant of the AcidRain wiper malware dubbed “AcidPour” was noticed. It targets Linux data storage devices and permanently erases data from the targeted systems, making them inoperative. It targets crucial sectors of Linux devices such as SCSI SATA, Memory Technology Devices (MTD), MultiMediaCard Storage, DMSETUP, and Unsorted Block Image devices, […]

The post AcidPour Malware Attacking Linux Data Storage Devices To Wipe Out Data appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A threat actor has allegedly claimed responsibility for breaching Cyepro Solutions, a company known for its cloud solutions tailored to the automotive sales industry. The breach, reportedly in July 2024, has potentially compromised the personal information of approximately 97,000 individuals. Breach Details Emerge The news broke when Dark Web Intelligence, a well-known entity in the […]

The post Threat Actor Allegedly Claiming Breach of Cyepr appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity firm Group-IB has uncovered a sophisticated cybercrime operation targeting Spanish banking customers. The criminal group GXC Team has been using AI-powered phishing tools and Android malware to steal sensitive banking information. This article delves into the GXC Team’s operational methods, the unique characteristics of its malicious tools, its attack strategies, and its effective defense […]

The post Hacker Attacking Bank Users With AI-powered Phishing Tools and Android Malware appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

DigiCert, a leading digital certificate provider, has announced the revocation of thousands of certificates due to a domain validation error. This decision follows the discovery of a critical issue in their Domain Control Validation (DCV) process, which has affected approximately 0.4% of their issued certificates. The company is taking swift action to comply with the […]

The post DigiCert to Revoke Thousands of Certificates Following Domain Validation Error appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Adversaries are employing Large Language Models to generate malicious code, delivered via phishing emails, for downloading diverse payloads, including Rhadamanthys, NetSupport, CleanUpLoader, ModiLoader, LokiBot, and Dunihi.  It indicates a concerning trend of threat actors leveraging AI to automate malware creation and distribution, posing significant challenges for cybersecurity defenses.  A broad-spectrum cyberattack campaign leverages phishing emails […]

The post Threat Actots Leveraging ChatGPT To Craft Sophisticated Attacks appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A large-scale cyberattack orchestrated by Ukrainian intelligence led to disruptions in the Russian banking sector. According to a source from Ukrainian intelligence, ATM services at several top Russian banks were rendered inoperative, leaving customers unable to withdraw cash. The attack began on July 23 and has been described as unprecedented in its scale and impact. […]

The post Ukraine Hacked Russian Banks, Leading Major Disruption appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.