Aggregator

Walk through CVE-2024-9474, a PAN-OS privilege escalation flaw enabling command injection from admin to root. Includes PwnOS demo, exploitation steps, and defense tips.

Google has introduced CodeMender, a new artificial intelligence-powered agent that automatically enhances software security by identifying and fixing vulnerabilities. This initiative addresses the growing gap between the rapid, AI-assisted discovery of security flaws and the time-consuming manual effort required to patch them. Leveraging advanced AI, CodeMender not only reacts to new threats but also proactively […]

The post Google’s New AI Agent, CodeMender, Automatically Rewrites Vulnerable Code appeared first on Cyber Security News.

ClamAV 1.5.0 is now available with new features that strengthen malware detection in Microsoft Office and PDF documents. This update marks a significant step forward for users who need reliable and thorough scanning of encrypted files and embedded links. Alongside improved file checks, the release also adds support for external signature verification, flexible hashing options, […]

The post ClamAV 1.5.0 Released with Enhanced MS Office and PDF File Verification appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In cybersecurity, time is scarce, talent is scarce, and certainty is scarce. That’s why efficiency has quietly become the most valuable currency inside the security operations center (SOC). Enterprise Strategy Group (ESG) research found that 53 percent of organizations say network detection and response (NDR) has...

We’re excited to share that Realm Security has raised a $15M Series A, just 12 months after our $5M seed round. We wouldn’t be here without our customers, our team, and our partners. Thank you for believing in what we’re building and for pushing us to make security data smarter, faster, and more useful every day.

The post We Raised $15M to Build the Future of Security Data appeared first on Realm.Security.

The post We Raised $15M to Build the Future of Security Data appeared first on Security Boulevard.

The rapid adoption of generative AI (GenAI), especially large language model (LLM) chatbots, has revolutionized customer engagement by delivering unparalleled efficiency and personalization. Yet, with this transformative power comes an equally formidable risk: adversaries are increasingly weaponizing AI applications to gain unauthorized access to critical systems. A compromised chatbot can morph from a helpful assistant […]

The post AI Chatbot Exploited as a Backdoor to Access Sensitive Data and Infrastructure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

OpenAI has taken decisive action to stop misuse of its ChatGPT models by banning accounts tied to a group of Chinese hackers. This move reflects OpenAI’s core aim to ensuring artificial general intelligence benefits everyone. By setting clear rules and acting swiftly on policy violations, OpenAI hopes to keep AI tools safe and accessible for […]

The post OpenAI Blocks ChatGPT Accounts Linked to Chinese Hackers Developing Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Избыточные разрешения, уязвимый код, утечки данных — это не полный список тех опасностей, что в себе несут бесплатные VPN-сервисы.

Yurei ransomware first emerged in early September 2025, targeting Windows environments with a sophisticated Go-based payload designed for rapid, large-scale encryption. Once executed, the malware enumerates all accessible local and network drives, appends a .Yurei extension to each file, and writes unique ransom notes in every affected directory. Its operators then demand payment over Tor, […]

The post Yurei Ransomware Leverages SMB Shares and Removable Drives to Encrypt Files appeared first on Cyber Security News.

A vulnerability classified as critical has been found in Dell PowerProtect Data Domain with Data Domain Operating System of Feature Release, PowerProtect Data Domain with Data Domain Operating System LTS2025, PowerProtect Data Domain with Data Domain Operating System LTS2024 and PowerProtect Data Domain with Data Domain Operating System LTS2023 up to 8.3.1.0. Affected is an unknown function. The manipulation leads to path traversal. This vulnerability is uniquely identified as CVE-2025-43934. Local access is required to approach this attack. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0. It has been rated as critical. This vulnerability affects unknown code of the file /del_tax.php. The manipulation of the argument ID leads to sql injection. This vulnerability is documented as CVE-2025-11405. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability was found in bytecodealliance wasmtime up to 37.0.1 and classified as problematic. This impacts an unknown function of the component C API. The manipulation results in missing release of resource. This vulnerability is cataloged as CVE-2025-61670. The attack must originate from the local network. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability was found in DependencyTrack dependency-track up to 4.13.4 and classified as problematic. Affected by this issue is some unknown functionality of the component .NET Component. Such manipulation leads to insufficiently protected credentials. This vulnerability is listed as CVE-2025-61776. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability was found in Dell PowerProtect Data Domain with Data Domain Operating System of Feature Release, PowerProtect Data Domain with Data Domain Operating System LTS2025, PowerProtect Data Domain with Data Domain Operating System LTS2024 and PowerProtect Data Domain with Data Domain Operating System LTS2023 up to 8.3.1.0. It has been classified as critical. Impacted is an unknown function. The manipulation leads to stack-based buffer overflow. This vulnerability is listed as CVE-2025-45375. The attack must be carried out locally. There is no available exploit. Upgrading the affected component is recommended.

银狐最新过沙箱高级免杀木马分析

Salesforce is refusing a demand by the hackers behind that widespread data-stealing attacks on its customers, which threatened to release massive amounts of the data unless the SaaS vendor negotiated a ransom payment. In an email, Salesforce reportedly told customers about its refusal to pay and offered them its support.

The post Salesforce Refuses to Pay Ransom to Data-Stealing Hackers appeared first on Security Boulevard.

A vulnerability, which was classified as problematic, has been found in Dell PowerProtect Data Domain with Data Domain Operating System of Feature Release, PowerProtect Data Domain with Data Domain Operating System LTS2024 and PowerProtect Data Domain with Data Domain Operating System LTS2023 up to 8.1.0.10. This impacts an unknown function. The manipulation leads to incorrect implementation of authentication algorithm. This vulnerability is referenced as CVE-2025-43727. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

Security researchers have identified two significant vulnerabilities in Nagios Log Server that expose critical system information and allow unauthorized service manipulation. The vulnerabilities, tracked as CVE-2025-44823 and CVE-2025-44824, affect versions prior to 2024R1.3.2 and pose serious risks to enterprise monitoring infrastructure. CVE ID Affected Product CVSS Score Severity Impact CVE-2025-44823 Nagios Log Server 9.9 CRITICAL […]

The post Nagios Vulnerability Allows Users to Retrieve Cleartext Administrative API Keys appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Новый культ среди разработчиков оказался миной замедленного действия.