GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

A critical vulnerability in Fortinet’s FortiGate SSLVPN appliances, CVE-2024-23113, has been actively exploited in the wild. This format string flaw vulnerability has raised significant concerns due to its potential for remote code execution. The flaw allows attackers to control format strings, leading to unauthorized access and manipulation of network border appliances without requiring credentials or […]

The post Fortigate SSLVPN Vulnerability Exploited in the Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Splunk has disclosed multiple vulnerabilities affecting its Enterprise product, which could allow attackers to execute remote code. These vulnerabilities, primarily affecting Windows installations, highlight the critical need for organizations to update and secure their systems promptly. Overview of the Security Advisories Splunk, a leading provider of data analytics and monitoring solutions, has released a series […]

The post Splunk Enterprise Vulnerabilities let Attackers Execute Remote Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Earth Simnavaz, an Iranian state-sponsored cyber espionage group, has recently intensified its attacks on critical infrastructure in the UAE and wider Gulf region.  The group employs sophisticated techniques to gain unauthorized access and exfiltrate sensitive data, such as using a new backdoor to steal credentials via on-premises Microsoft Exchange servers by exploiting vulnerabilities like CVE-2024-30088 […]

The post OilRig Hackers Exploiting Microsoft Exchange Server To Steal Login Details appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers recently analyzed a CoreWarrior malware sample, which spreads aggressively by creating numerous copies and connecting to various IP addresses. It establishes multiple backdoor connections and monitors user activity through Windows UI element hooks, which poses a significant security risk as it can compromise system integrity and steal sensitive data. The malware is a UPX-packed […]

The post CoreWarrior Malware Attacking Windows Machines From Dozens Of IP Address appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The recent discovery of the TrickMo Banking Trojan variant by Cleafy has prompted further investigation, where researchers have identified 40 variants, 16 droppers, and 22 active Command and Control servers associated with this threat.  These variants employ advanced techniques like zip file manipulation and obfuscation to evade detection. Despite the lack of IOC release, the […]

The post TrickMo Malware Targets Android Devices to Steal Unlock Patterns and PINs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical security vulnerability has been discovered in the popular Java framework pac4j. The vulnerability specifically affects versions before 4.0 of the pac4j-core module. This vulnerability, identified as CVE-2023-25581, exposes systems to potential remote code execution (RCE) attacks due to a flaw in the deserialization process. Vulnerability Details – CVE-2023-25581 The issue stems from a […]

The post pac4j Java Framework Vulnerable to RCE Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Scammers use sophisticated AI technology to impersonate tech giants like Google, aiming to take over unsuspecting users’ Gmail accounts. A recent incident highlights these fraudsters’ cunning tactics, underscoring the need for heightened vigilance. The Initial Contact: A Suspicious Notification The trouble began with an unexpected notification. The user received a prompt to approve a Gmail […]

The post Beware of Fake AI Scam calls that Takeover your Gmail Account appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A security vulnerability in Zendesk, a widely used customer service tool, has been uncovered. This flaw allowed attackers to access support tickets from any company using Zendesk, posing significant risks to sensitive information. Zendesk initially dismissed the vulnerability, which involved email spoofing, but later forced the company to implement critical security fixes. Here’s a detailed […]

The post Zendesk Email Spoofing Flaw Let Attackers Access Support Tickets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

18 individuals and entities have been charged with widespread fraud and manipulation within the cryptocurrency markets. The charges, unsealed in Boston, target leaders of four cryptocurrency companies, four financial services firms known as “market makers,” and various employees. This case marks a significant step in addressing fraudulent activities in the rapidly evolving digital currency landscape. […]

The post 18 Individuals Charged for Widespread Manipulation Cryptocurrency Markets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors are leveraging a newly discovered deepfake tool, ProKYC, to bypass two-factor authentication on cryptocurrency exchanges, which is designed specifically for NAF (New Account Fraud) attacks and can create verified but synthetic accounts by mimicking facial recognition authentication. By overcoming these security measures, threat actors can engage in money laundering, create mule accounts, and […]

The post Threat Actor ProKYC Selling Tools To Bypass Two-Factor Authentication appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical use-after-free vulnerability affecting Firefox and Firefox Extended Support Release (ESR) is being actively exploited in cyberattacks. With a CVSS base score of 9.8, the flaw is identified as Use-after-free in the Animation timeline component tracked as CVE-2024-9680 reported by Damien Schaeffer from ESET.“ An attacker was able to achieve code execution in the […]

The post Mozilla Warns Of Firefox Zero-Day Actively Exploited In Cyber Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

IDLink, SpyCloud’s new automated digital identity correlation capability, is now core to its industry-leading Investigations solution used by CTI teams, security operations, fraud and risk prevention analysts, and law enforcement globally SpyCloud, the leader in Identity Threat Protection, announced that its SaaS Investigations solution has been enhanced with identity analytics that illuminate the scope of […]

The post SpyCloud Embeds Identity Analytics in Cybercrime Investigations Solution to Accelerate Insider and Supply Chain Risk Analysis & Threat Actor Attribution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The agreement has marked over 600,000 fraudulent domains for takedown in just two months through automated defense and proactive prevention. Abusix and Red Sift to hold exclusive webinar sharing insights on transforming cyber attack mitigation. Abusix, an organization specializing in internet abuse prevention, and Red Sift, a leader in misconfiguration and exposure management, have announced […]

The post Abusix and Red Sift Form New Partnership, Leveraging Automation to Mitigate Cyber Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers exploit a zero-day vulnerability found in Qualcomm chipsets, potentially affecting millions worldwide. The flaw, identified as CVE-2024-43047, is a use-after-free vulnerability resulting from memory corruption in the DSP Services while maintaining memory maps of HLOS memory. Vulnerability in Qualcomm Chipsets – CVE-2024-43047 Google’s Threat Analysis Group has flagged this vulnerability under limited, targeted exploitation.  […]

The post Hackers Exploiting Zero-day Flaw in Qualcomm Chips to Attack Android Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers recently disclosed six new security vulnerabilities across various software, as one critical vulnerability was found in Foxit PDF Reader, a widely used alternative to Adobe Acrobat.  Given the memory corruption vulnerability, attackers could execute arbitrary code on the machine that is the target of their attack.  Additionally, three vulnerabilities were discovered in Veertu’s Anka […]

The post Foxit PDF Reader Vulnerability Let Attackers Execute Arbitary Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Wireshark, the world’s leading network protocol analyzer, has just released version 4.4.1, bringing a host of bug fixes and updates to enhance user experience and functionality. Hosted by the Wireshark Foundation, this tool is indispensable for troubleshooting, analysis, development, and education in network protocol analysis. Here’s a detailed look at what’s new in this release. […]

The post Wireshark 4.4.1 Released, What’s new! appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

VMware has disclosed multiple vulnerabilities in its NSX product line that could potentially allow attackers to gain root access. The vulnerabilities, identified as CVE-2024-38818, CVE-2024-38817, and CVE-2024-38815, affect both VMware NSX and VMware Cloud Foundation. According to the Broadcom report, the advisory, VMSA-2024-0020, was initially published on October 9, 2024, and highlights the moderate severity […]

The post Multiple VMware NSX Vulnerabilities Let Attackers Gain Root Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has recently updated its Known Exploited Vulnerabilities Catalog, adding critical vulnerabilities from Fortinet and Ivanti. These vulnerabilities are actively exploited in the wild, posing significant risks to organizations worldwide. CISA urges immediate action to mitigate potential threats. Fortinet Multiple Products Format String Vulnerability – CVE-2024-23113 Fortinet’s suite of […]

The post CISA Warns of Fortinet & Ivanti Vulnerabilities Exploited in Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Network Penetration Testing checklist determines vulnerabilities in the network posture by discovering open ports, troubleshooting live systems, and services, and grabbing system banners. The pen-testing helps the administrator close unused ports, add additional services, hide or customize banners, troubleshoot services, and calibrate firewall rules. You should test in all ways to guarantee there is no security […]

The post Network Penetration Testing Checklist – 2024 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The sophisticated ransomware group Dark Angels, active since 2022, targets large companies for substantial ransom payments by employing third-party ransomware payloads like Babuk, RTM Locker, and RagnarLocker to encrypt files on Windows and Linux systems.  It employs ransomware in a strategic manner, taking into account the potential impact of file encryption, in order to minimize […]

The post Dark Angels Ransomware Attacking Windows And Linux/ESXi Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.