GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

A new ransomware variant, dubbed DEVMAN, has surfaced in the cyberthreat landscape, showcasing a complex lineage tied to the notorious DragonForce family. Built on a foundation of DragonForce and Conti codebases, DEVMAN introduces unique identifiers such as the .DEVMAN file extension and distinct behavioral traits, setting it apart while retaining core similarities with its predecessors. […]

The post New DEVMAN Ransomware by DragonForce Targets Windows 10 and 11 Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The cybercriminal group TA829, also tracked under aliases like RomCom, Void Rabisu, and Tropical Scorpius, has been observed deploying sophisticated tactics, techniques, and procedures (TTPs) alongside an updated version of its infamous RomCom backdoor, now dubbed SingleCamper (aka SnipBot). This group, known for blending financially motivated cybercrime with espionage campaigns often aligned with Russian state […]

The post TA829 Hackers Use New TTPs and Enhanced RomCom Backdoor to Evade Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The North Korean state-sponsored hacker collective Kimsuky has been found to use a dishonest technique called “ClickFix” to compromise victim machines in a number of concerning cyberattacks. First documented by Proofpoint in April 2024, ClickFix manipulates users into executing malicious scripts by disguising itself as legitimate troubleshooting guides or secure document verification processes. This psychological […]

The post Kimusky Hackers Employ ClickFix Technique to Run Malicious Scripts on Victim Devices appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A series of sophisticated cyberattacks targeting over 20 vital sectors in Israel and its allies has been launched by more than 80 hacktivist groups in a major escalation of cyberwarfare that parallels the ongoing Iran-Israel confrontation. Following Israel’s recent airstrikes on Iranian military and nuclear facilities, and Iran’s swift retaliation, the digital battlefield has exploded […]

The post Hacktivist Group Launches Attacks on 20+ Critical Sectors Amid Iran–Israel Conflict appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The S2 Group Intelligence team has uncovered a Russian-origin malware known as Snake Keylogger, a stealer coded in .NET, leveraging legitimate Java utilities to bypass security tools. This operation, distributed via a Malware as a Service (MaaS) model, targets diverse victims, including companies, governments, and individuals, with a particular focus on the oil industry during […]

The post Snake Keyloggers Exploit Java Utilities to Evade Detection by Security Tools appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A series of critical vulnerabilities have been discovered in MICROSENS NMP Web+, a widely used network management platform for industrial and critical manufacturing environments, putting thousands of organizations worldwide at significant risk of cyberattack. The flaws, reported by security researchers Tomer Goldschmidt and Noam Moshe of Claroty Team82 and coordinated with the German BSI CERT-Bund, […]

The post Critical Vulnerability in Microsens Devices Exposes Systems to Hackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Swiss government has confirmed that sensitive federal data has been leaked onto the dark web following a ransomware attack on Radix, a non-profit health promotion foundation serving multiple federal offices. The breach, attributed to the Sarcoma ransomware group, has raised fresh concerns about the security of government contractors and the ripple effects of cyberattacks […]

The post Swiss Government Confirms Radix Ransomware Attack Leaked Federal Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Multiple security vulnerabilities in IBM Cloud Pak System enable remote attackers to execute HTML injection attacks, potentially compromising user data and system integrity. These flaws, detailed in recent IBM security bulletins, affect various versions of the platform and expose organizations to cross-site scripting (XSS) and prototype pollution attacks. CVE ID Description CVSS Score CVE-2025-2895 HTML […]

The post IBM Cloud Pak Vulnerabilities Allow HTML Injection by Remote Attackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft Teams is set to revolutionize workplace collaboration once again, rolling out a highly anticipated feature that enables users to add bots and agents directly within Chats and Channels, without disrupting their ongoing conversations. The update, announced under Message ID MC1093236, marks a significant step towards a more fluid and productive Teams experience. Starting in […]

The post Microsoft Teams Enables In‑Chat Bot & Agent Integration appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent in-depth investigation by Intrinsec has exposed a sprawling network of over 300 cracking websites, orchestrated by Pakistani freelancers, designed to distribute info-stealing malware. These sites, often masquerading as legitimate sources for cracked software, have been identified as a primary vector for stealer compromises, impacting numerous corporate clients worldwide. Unveiling a Vast Network of […]

The post Pakistani Threat Actors Created 300+ Cracking Sites to Distribute Info-Stealing Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated malware campaign targeting WordPress websites has recently been uncovered, showcasing an intricate and stealthy approach to delivering a Windows-based trojan. This attack, which operates beneath the surface of seemingly clean websites, employs a layered infection chain involving PHP-based droppers, obfuscated code, and IP-based evasion tactics to distribute a malicious payload named client32.exe. Hidden […]

The post Stealthy WordPress Malware Uses PHP Backdoor to Deliver Windows Trojan appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Linus Torvalds has officially announced the release of Linux 6.16-rc4, marking the halfway point in the development cycle for the upcoming 6.16 kernel. Despite a notably large merge window, Torvalds described the release candidate process as “fairly calm,” signaling a smooth path toward the anticipated stable release in late July or early August. Balanced Focus Across […]

The post Linux 6.16-rc4 Launches Out With Filesystem, Driver, and Hardware Fixes appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity researchers have unveiled a new attack—dubbed the “C4 Bomb” (Chrome Cookie Cipher Cracker)—that successfully bypasses Google Chrome’s much-touted AppBound Cookie Encryption. This breakthrough exposes millions of users to renewed risks of cookie theft, credential compromise, and potential data breaches, despite Google’s recent efforts to harden Chrome against infostealer malware. AppBound Cookie Encryption In July […]

The post New C4 Bomb Attack Breaks Through Chrome’s AppBound Cookie Protections appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Trustwave SpiderLabs has uncovered a chilling cyber threat targeting Latin American organizations, particularly in the financial sector, with a focus on Colombian institutions. The threat cluster, linked to the notorious Proton66 OOO infrastructure, employs a cunning mix of open-source Remote Access Trojans (RATs) and advanced obfuscation techniques to bypass static detection mechanisms. Unmasking a Sophisticated […]

The post Blind Eagle Hackers Leverage Open-Source RATs and Ciphers to Evade Static Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft Threat Intelligence has uncovered a sophisticated operation by North Korean remote IT workers who are leveraging cutting-edge artificial intelligence (AI) tools to infiltrate organizations worldwide. Since at least 2020, these highly skilled individuals, often based in North Korea, China, and Russia, have been targeting technology-related roles across various industries to generate revenue for the […]

The post North Korean IT Workers Employ New Tactics to Infiltrate Global Organizations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA), alongside the Federal Bureau of Investigation (FBI), the Department of Defense Cyber Crime Center (DC3), and the National Security Agency (NSA), has issued a stern warning about potential cyberattacks by Iranian state-sponsored or affiliated threat actors targeting U.S. critical infrastructure. The advisory underscores the urgency for organizations, especially […]

The post CISA Warns Iranian Cyber Threats Targeting U.S. Critical Infrastructure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers have uncovered severe vulnerabilities in Django that could allow attackers to execute arbitrary code on affected systems. These flaws, ranging from directory traversal to log injection, highlight critical security risks in one of Python’s most popular web frameworks. Recent Security Advisories Django’s security team addressed multiple vulnerabilities in 2025: Exploit Chain: Directory Traversal […]

The post Django App Vulnerabilities Allow Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Europol and international law enforcement have dismantled a sprawling cryptocurrency investment fraud network that allegedly defrauded more than 5,000 victims globally, laundering at least €460 million ($540 million) in illicit funds. The arrests, carried out on June 25, 2025, mark one of the largest crackdowns on crypto fraud in European history. Coordinated International Effort The […]

The post Europol Dismantles Massive Crypto Investment Scam Targeting 5000+ victims Worldwide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert following the addition of a critical Citrix NetScaler vulnerability—CVE-2025-6543—to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation in the wild. Vulnerability Details CVE-2025-6543 is a buffer overflow vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway appliances when configured as a Gateway […]

The post CISA Issues Alert on Actively Exploited Citrix NetScaler ADC and Gateway Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has issued an urgent security update for its Chrome browser, addressing a critical zero-day vulnerability that is being actively exploited by attackers. The flaw, tracked as CVE-2025-6554, is a type confusion vulnerability in Chrome’s V8 JavaScript engine, which underpins the browser’s ability to process web content across Windows, macOS, and Linux platforms. The vulnerability was discovered by […]

The post Chrome 0-Day Flaw Exploited in the Wild to Execute Arbitrary Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.