Aggregator

Over 300 malicious Android applications downloaded 60 million items from Google Play acted as adware or attempted to steal credentials and credit card information. [...]

Google acquires cloud security leader Wiz for $32B—the largest cybersecurity deal ever. This historic purchase boosts Google Cloud's security offerings, enhances its multicloud capabilities, and intensifies competition with Microsoft and AWS in the rapidly evolving cloud security landscape.

The post Google’s $32B Wiz Acquisition: A Watershed Moment in Cloud Security M&A appeared first on Security Boulevard.

Though the group initially stuck to classic ransomware TTPs before demanding the ransom, it went off script when it began threatening the group and detailing potential consequences the victim would face.

ClearFake, a malicious JavaScript framework first identified in July 2023, has evolved with sophisticated new social engineering tactics. Originally designed to display fake browser update pages, the framework has undergone significant developments, incorporating more advanced deception techniques to deliver malware through compromised websites. The latest variant, discovered in December 2024, employs fake reCAPTCHA or Cloudflare […]

The post New Clearfake Variant Leverages Fake reCAPTCHA To Trick Users Deliver Malicious PowerShell Code appeared first on Cyber Security News.

A sophisticated phishing campaign is currently targeting cryptocurrency investors with fraudulent emails claiming to be from Coinbase. The scam attempts to trick users into transferring their funds to wallets controlled by attackers through a deceptive “mandatory wallet migration” scheme. How the Scam Works The phishing emails, with the subject line “Migrate to Coinbase wallet,” falsely […]

The post Fake Coinbase Migration Messages Target Users to Steal Wallet Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical Windows vulnerability that has been exploited since 2017 by state-sponsored threat actors has been uncovered recently by researchers. The vulnerability, tracked as ZDI-CAN-25373, allows attackers to execute hidden malicious commands on victims’ machines by leveraging specially crafted Windows shortcut (.lnk) files. This security flaw impacts how Windows displays the contents of shortcut files […]

The post 8-Year Old Windows Shortcut Zero-Day Exploited by 11 State-Sponsored Hacker Groups appeared first on Cyber Security News.

A vulnerability, which was classified as problematic, has been found in Safe App 3.0.9. This issue affects some unknown processing. The manipulation leads to improper restriction of excessive authentication attempts. The identification of this vulnerability is CVE-2025-25595. The attack can only be done within the local network. There is no exploit available.

Electromagnetic (EM) side-channel analysis has emerged as a significant threat to cryptographically secured devices, particularly in the era of the Internet of Things (IoT). These attacks exploit information leakages through physical parameters such as EM radiation, which is emitted by all powered electronic devices due to internal current flows. Unlike traditional power analysis attacks, EM […]

The post Electromagnetic Side-Channel Analysis of Cryptographically Secured Devices appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

После последнего патча некоторые ПК лишились помощника.

AP Sensing научила оптоволокно распознавать любую угрозу.

A vulnerability classified as problematic was found in Systemic Risk Value up to 2.8.0. This vulnerability affects unknown code of the file /GetFile.aspx. The manipulation of the argument ReportUrl leads to file inclusion. This vulnerability was named CVE-2025-26137. The attack needs to be approached within the local network. There is no exploit available.

A vulnerability classified as critical has been found in Dell Wyse Proprietary OS up to 2408. This affects an unknown part. The manipulation leads to incorrect permission assignment. This vulnerability is uniquely identified as CVE-2025-27688. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Systemic Risk Value up to 2.8.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /RiskValue/GroupingEntities/Controls/GetFile.aspx?ID=. The manipulation of the argument ID leads to improper access controls. This vulnerability is handled as CVE-2025-26138. Access to the local network is required for this attack. There is no exploit available.

At least 11 state-backed hacking groups from North Korea, Iran, Russia, and China have been exploiting a new Windows vulnerability in data theft and cyber espionage zero-day attacks since 2017. [...]

A vulnerability was found in IBM AIX 7.2/7.3. It has been declared as very critical. Affected by this vulnerability is an unknown functionality of the component SSL TLS Protection Mechanism. The manipulation leads to process control. This vulnerability is known as CVE-2024-56347. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in IBM AIX 7.2/7.3. It has been classified as very critical. Affected is an unknown function of the component Nimesis NIM Master Service. The manipulation leads to process control. This vulnerability is traded as CVE-2024-56346. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A novel defense strategy, MirrorGuard, has been proposed to enhance the security of large language models (LLMs) against jailbreak attacks. This approach introduces a dynamic and adaptive method to detect and mitigate malicious inputs by leveraging the concept of “mirrors.” Mirrors are dynamically generated prompts that mirror the syntactic structure of the input while ensuring […]

The post MirrorGuard: Adaptive Defense Mechanism Against Jailbreak Attacks for Secure Deployments appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.