GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

A severe cryptographic vulnerability in the popular open-source Meshtastic project allows attackers to decrypt private messages and hijack nodes across LoRa mesh networks. The vulnerability tracked as, CVE-2025-52464, flaw stems from duplicated encryption keys and insufficient randomness during key generation.  The issue affects multiple hardware platforms and poses significant risks to users relying on Meshtastic […]

The post Critical Meshtastic Flaw Allows Attackers to Decrypt Private Messages appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CoinMarketCap, the globally recognized cryptocurrency data aggregator, experienced a significant security incident when a vulnerability in its homepage doodle image was exploited to inject malicious code, leading to a phishing campaign targeting user wallets. Incident Overview The breach originated from a seemingly innocuous doodle image featured on CoinMarketCap’s homepage. Threat actors manipulated the backend API […]

The post CoinMarketCap Doodle Image Vulnerability Lets Attackers Run Malicious Code via API Call appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft Outlook is a cornerstone of professional and personal communication, relied upon by millions for email management, calendaring, and task organization. However, Outlook’s Personal Storage Table (PST) files, which store emails, contacts, calendars, and other data, are prone to corruption due to various factors. When PST files become corrupted, users face disruptions, ranging from missing […]

The post Stellar Repair For Outlook: A Comprehensive Review Of The Ultimate PST Repair Tool appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Network administrators and cybersecurity experts will be pleased to learn that OpenVPN 2.7_alpha2 will be released on June 19, 2025, according to the OpenVPN community project team. While this early alpha build for the upcoming 2.7.0 feature release introduces several innovative enhancements, it also addresses a critical vulnerability in the Windows driver that could allow […]

The post OpenVPN Driver Vulnerability Let Attackers Crash Windows Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A covert Iranian social media operation has been uncovered, targeting Israeli users on platform X with a psychological campaign designed to sow discord and despair. Researchers at the Foundation for Defense of Democracies (FDD) have exposed a Persian-language Telegram channel, CAR ONLINE (@caronline_original), which boasts over 400,000 subscribers and serves as the orchestration hub for […]

The post Israeli Social Media Users Targeted in Covert Iranian Influence Campaign appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Mattermost, a widely-used open-source collaboration platform, has recently disclosed critical vulnerabilities in its software that could allow attackers to execute remote code through path traversal exploits. As detailed on the official Mattermost Security Updates page, these flaws have been identified through rigorous security reviews and penetration testing conducted by global security research communities, deploying organizations, […]

The post Mattermost Vulnerabilities Let Attackers Execute Remote Code Via Path Traversal appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aflac Incorporated, a Georgia-based insurance giant, identified unauthorized access to its network infrastructure, raising alarms over a potential data breach. The company swiftly activated its cybersecurity incident response protocols and claims to have contained the intrusion within hours of detection. Unauthorized Network Access Detected According to Aflac’s official filing with the Securities and Exchange Commission […]

The post Aflac Cyber Attack – Hackers May Have Stolen Personal And Health Information appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cyberspace has become a crucial battlefield in addition to conventional combat since the open conflict between Israel and Iran broke out. Following Israeli airstrikes on Iranian nuclear and military sites and Iran’s retaliatory missile salvos, both nations recognized as formidable cyber powers have escalated their digital operations. Israel-linked group Gonjeshke Darande (Predatory Sparrow), widely considered […]

The post CyberWarfare on the Rise With Surge in Hacktivist Activity Following Israel-Iran appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

DuckDuckGo has rolled out an advanced update to its browser’s built-in Scam Blocker, a robust security feature designed to shield users from a wide array of online threats, including phishing sites, malware, and sophisticated scams. Now integrated into the DuckDuckGo browser for both desktop and mobile platforms, Scam Blocker offers protection by default, requiring no […]

The post DuckDuckGo Browser’s Scam Blocker to Guard Against Phishing and Malware Sites appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A series of misconfigured web servers have been uncovered, revealing a treasure trove of publicly accessible tools and tactics employed by malicious actors targeting critical infrastructure. These exposed open directories, discovered through Hunt’s advanced scanning capabilities, highlight a significant security lapse that threat actors are exploiting with low-cost, high-reward methods. Unveiling Hidden Threats on the […]

The post Open Directories Exposes Publically Available tools Used by Hackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent report from ESET has uncovered a sophisticated cyber espionage campaign by the Russia-aligned Sednit group, targeting high-value webmail platforms through cross-site scripting (XSS) attacks. Dubbed Operation RoundPress, this operation has compromised popular webmail services such as Roundcube, Horde, MDaemon, and Zimbra, with a primary focus on governmental entities and defense organizations in Eastern […]

The post Surge in XSS Cyberattacks Targets Popular Webmail Platforms, ESET Reports appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft has unveiled a groundbreaking advancement in cybersecurity with the integration of the Enterprise Exposure Graph into its threat detection and response capabilities. This cutting-edge solution, part of Microsoft Defender XDR and Microsoft Security Exposure Management (MSEM), is designed to combat the increasing sophistication of hybrid attacks that span on-premises and cloud environments. Innovative Exposure […]

The post Microsoft Announces New Graph Powered Detection of Hybrid Attack Targeting Organizations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Over 35 different pro-Iranian hacktivist organizations launched a coordinated attack on Israeli military, government, and key infrastructure targets in a dramatic escalation of cyberwarfare. This surge in activity starkly contrasts with the limited response from just 4-5 identified pro-Israeli groups, highlighting a significant imbalance in the ongoing digital conflict between the two nations. Unprecedented Surge […]

The post Iranian Hacktivist Attacking Israeli Military, Government, and Infrastructure Targets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

China’s National Cybersecurity Notification Center has issued an urgent warning about critical vulnerabilities in ComfyUI, a widely used image-generation framework for large AI models. These flaws, already under active exploitation by hacker groups, have compromised at least 695 servers worldwide, according to threat intelligence from XLab. The attackers are deploying a sophisticated backdoor named “Pickai,” […]

The post Hackers Target 700+ ComfyUI AI Image Generation Servers to Spread Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a Russia’s dairy supply chain, a suspected cyberattack has targeted the Mercury component of the national veterinary certification system, forcing it into emergency operation mode. This critical system, integral to the processing of veterinary accompanying documents, ensures the traceability and safety compliance of animal-derived products, including dairy. The attack has temporarily halted normal operations, […]

The post Cyberattack Disrupts Russian Dairy Supply Chain by Targeting Animal Certification System appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Unit 42 researchers from Palo Alto Networks have identified a renewed wave of attacks by the Prometei botnet, specifically targeting Linux servers, as of March 2025. Initially discovered in July 2020 with a focus on Windows systems, Prometei has since evolved, with its Linux variant gaining prominence since December 2020. Resurgence of a Persistent Threat […]

The post Prometei Botnet Targets Linux Servers for Cryptocurrency Mining Operations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly identified cyber threat linked to a China-based threat actor has emerged, targeting users across East and Southeast Asia with a trojanized MSI installer disguised as a legitimate WhatsApp setup file. This deceptive campaign delivers a customized version of the XWorm Remote Access Trojan (RAT), a malicious tool designed to infiltrate systems, steal sensitive […]

The post Beware of Weaponized MSI Installer Masquerading as WhatsApp to Deliver XWorm RAT appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A malicious campaign tracked as Mocha Manakin has been identified employing the deceptive “paste-and-run” technique to trick unsuspecting users into executing harmful scripts. First observed in August 2024 and actively monitored since January 2025 by security researchers at Red Canary, this threat cluster uses sophisticated social engineering lures to gain initial access to systems. Emerging […]

The post Mocha Manakin Uses Paste-and-Run Technique to Deceive Users into Downloading Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors are increasingly exploiting the trust users place in sponsored search results on platforms like Google to orchestrate sophisticated scams. These malicious entities craft deceptive advertisements that mimic legitimate websites, particularly targeting popular brands and tech support services. By leveraging the visibility of paid ads, which often appear at the top of search results, […]

The post Threat Actors Manipulate Google Search Results to Display Scammer’s Phone Number Instead of Real Number appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A severe security vulnerability in the Insomnia API Client, a widely used tool by developers and security testers for interacting with APIs, has been uncovered by researchers at an offensive security consultancy. Discovered by Technical Director Marcio Almeida and Head of Research Justin Steven, the flaw allows for arbitrary code execution through a mechanism known […]

The post Insomnia API Client Vulnerability Enables Arbitrary Code Execution via Template Injection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.