GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

A new toolkit named Impact Solutions has emerged on cybercrime forums, offering a comprehensive, user-friendly framework for crafting advanced phishing campaigns. By democratizing malware delivery, Impact Solutions empowers even low-skill threat actors to bypass both end users and conventional security filters, delivering malicious payloads via seemingly innocuous attachments. This article explores the mechanics of Impact […]

The post New ‘Point-and-Click’ Phishing Kit Evades Security Filters to Deliver Malicious Payloads appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cisco Talos has revealed that UAT-8099, a Chinese-speaking cybercrime group, has been exploiting vulnerable Internet Information Services (IIS) servers across multiple countries to conduct search engine optimization (SEO) fraud and steal high-value data. Identified in April 2025, this group targets reputable IIS servers in India, Thailand, Vietnam, Canada, and Brazil, focusing on organizations such as […]

The post IIS Servers Compromised by Chinese Hackers for SEO Manipulation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a sophisticated resurgence of smishing campaigns, cybercriminals have begun embedding trusted brand names into deceptive URLs and group messaging threads to lure unsuspecting users into downloading malware. By inserting a familiar company name before the “@” symbol in links, attackers exploit users’ trust in established entities such as FedEx and Microsoft. Coupled with deceptively […]

The post Threat Actors Imitate Popular Brands in New Malware Distribution Campaigns appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Oracle has confirmed that a group of hackers stole data from its E-Business Suite (EBS) applications and is using the information in extortion campaigns. The company warns that these attackers exploited vulnerabilities already fixed in the July 2025 Critical Patch Update (CPU). Oracle strongly urges all customers to apply the latest CPU immediately to defend […]

The post Oracle Confirms Hackers Target E-Business Suite Data in Extortion Campaigns appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A new offering named Rhadamanthys, a sophisticated information stealer, has surfaced for sale on underground marketplaces, with subscription packages starting at $299 and reaching up to $499 per month. Marked by its polished branding and tiered pricing structure, the malware positions itself as a professional-grade service rather than a casual tool for novice cybercriminals. Since […]

The post Rhadamanthys Stealer Offered on Dark Web for $299–$499 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Signal, the popular end-to-end encrypted messaging platform, has announced a groundbreaking advancement in cryptographic security with the introduction of the Sparse Post Quantum Ratchet (SPQR). This innovative protocol represents a significant leap forward in protecting user communications against emerging quantum computing threats while maintaining all existing security guarantees. Revolutionary Triple Ratchet Protocol Debuts The new […]

The post Signal Introduces Hybrid Post-Quantum Ratchet to Strengthen Security appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Virtual Private Networks (VPNs) are trusted by millions to protect privacy, secure communications, and enable remote access on their mobile devices. But what if the very apps designed to safeguard your data are riddled with dangerous security flaws that expose the exact information they promise to protect? A comprehensive security and privacy analysis by Zimperium […]

The post Hundreds of Free VPN Apps Expose Android and iOS Users’ Personal Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft Defender for Endpoint users, particularly those with Dell devices, are experiencing a widespread issue with false Basic Input/Output System (BIOS) security alerts due to a critical software bug. The problem, which surfaced on October 2, 2025, has prompted Microsoft to issue a service degradation notice affecting multiple organizations worldwide. Widespread False Alert Campaign The […]

The post Microsoft Defender Bug Sparks Numerous False BIOS Security Alerts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

NCC Group detailed a VMware Workstation guest-to-host escape achievable from a compromised VM via a logic flaw in virtual device handling that permits memory corruption and controlled code execution on the host process. The write-up shows a practical exploitation path from guest userland to host compromise, validating real-world risk. The attack requires execution inside a […]

The post PoC Released for VMware Workstation Guest-to-Host Escape Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Confucius hacking group, a long-running cyber-espionage operation with suspected state-sponsored ties, has significantly evolved its attack methodologies over the past year, transitioning from document stealers like WooperStealer to sophisticated Python-based backdoors including AnonDoor malware. The December 2024 campaign demonstrated Confucius’ refined social engineering tactics, utilizing phishing emails with weaponized PowerPoint presentations (Document.ppsx) that displayed […]

The post Confucius Hacker Group Weaponizes Documents to Infect Windows Systems with AnonDoor Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Obex, a newly released proof-of-concept utility by security researcher dis0rder0x00, demonstrates a simple but effective user-mode method to stop unwanted security and monitoring modules from loading into Windows processes. The tool launches a target process under debugger control and enforces a configurable DLL blocklist, preventing both startup and runtime loads of designated libraries. A demonstration […]

The post New Obex Tools Blocks Runtime Loading of EDR Dynamic Libraries appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Three critical security flaws were discovered in firmware version V9.4.0cu.1360_B20241207 of the TOTOLINK X6000R router released on March 28, 2025. These vulnerabilities range from argument injection and command injection to a security bypass that can lead to remote code execution. Attackers can crash devices, corrupt system files, and execute arbitrary commands without authentication. Users must […]

The post TOTOLINK X6000R Routers Hit by Three Vulnerabilities Allowing Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability in the official Termix Docker image puts users at risk of exposing sensitive SSH credentials. The flaw allows anyone with network access to retrieve stored host addresses, usernames, and passwords without logging in. How the Vulnerability Works Termix provides a Docker image that runs a Node.js backend behind an Nginx reverse proxy. […]

The post Termix Docker Image Leaking SSH Credentials (CVE-2025-59951) appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Chrome team has released Chrome 141.0.7390.54/55 to the stable channel for Windows, Mac, and Linux, rolling out over the coming days and weeks. This update delivers critical security fixes, including 21 distinct vulnerabilities that span high, medium, and low severity. External researchers contributed to several of these fixes, earning rewards up to $25,000. Users are strongly […]

The post Chrome Security Update Addressing 21 Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft is currently investigating a significant bug affecting classic Outlook for Windows that prevents users from accessing their email accounts. The issue manifests as a persistent error message stating “Cannot start Microsoft Outlook. Cannot open the Outlook window. The set of folders cannot be opened. The attempt to log on to Microsoft Exchange has failed.” […]

The post Microsoft Outlook Bug on Windows Devices Results in Repeated Email Crashes appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Splunk released security advisories addressing multiple vulnerabilities affecting various versions of Splunk Enterprise and Splunk Cloud Platform. The flaws range from cross-site scripting (XSS) vulnerabilities to access control bypasses, with CVSS scores ranging from 4.6 to 7.5. Critical Vulnerabilities Identified The security advisories reveal six distinct vulnerabilities that primarily affect Splunk Web components. Two cross-site […]

The post Splunk Enterprise Flaws Allow Attackers to Run Unauthorized JavaScript Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has unveiled a groundbreaking AI-powered ransomware detection system for its Drive desktop application, representing a significant advancement in cybersecurity protection for organizations worldwide. This innovative feature automatically halts file synchronization when malicious encryption attempts are detected, preventing widespread data corruption across enterprise networks. Google Drive desktop ransomware detection alert with file syncing paused and […]

The post Google Drive Desktop Gets AI-Powered Ransomware Detection to Block Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In today’s fast-paced digital environment, organizations face constant threats from cybercriminals exploiting weaknesses in IT systems. Vulnerability management software is one of the most crucial elements in safeguarding a network, as it helps identify, evaluate, and remediate security gaps before attackers exploit them. By automating vulnerability scanning, prioritizing risks, and offering intelligent patch management, these […]

The post Top 10 Best Vulnerability Management Software in 2025 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Ukraine’s national cyber incident response team, CERT-UA, has issued an urgent warning about a new malware campaign that weaponizes Excel add-in (XLL) files to deploy the CABINETRAT backdoor. Throughout September 2025, CERT-UA analysts discovered multiple malicious XLL files masquerading as benign documents, including “Звернення УБД.xll” and “recept_ruslana_nekitenko.xll,” which exploit Excel’s Add-in Manager and the xlAutoOpen […]

The post Ukraine Warns of Weaponized XLL Files Delivering CABINETRAT Malware via Zip Archives appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Chinese state-sponsored cyber threat group Salt Typhoon has been targeting global telecommunications infrastructure since at least 2019, exploiting network edge devices to establish deep persistence and harvest vast quantities of sensitive data. Aligned with the Ministry of State Security (MSS), Salt Typhoon focuses on long-term signals intelligence (SIGINT) collection, leveraging front companies and contractor ecosystems […]

The post Chinese State-Sponsored Hackers Exploiting Network Edge Devices to Harvest Sensitive Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.