Aggregator

Currently trending CVE - Hype Score: 1 - TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to contain a hardcoded password for the root account which can be obtained via a brute force attack.

In recent years, VPN vulnerabilities have emerged as a critical threat vector for organizations worldwide. Threat actors, including both cybercriminal groups and state-sponsored entities, are increasingly exploiting these vulnerabilities to gain unauthorized access to sensitive networks. Two notable vulnerabilities, CVE-2018-13379 and CVE-2022-40684, have become staples in the attacker’s playbook, allowing for large-scale credential theft and […]

The post VPN Vulnerabilities Become a Primary Weapon for Threat Actors Targeting Organizations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Qilin Ransomware Group Leaks Los Madroños Hospital Data

A significant vulnerability in Microsoft Windows File Explorer, identified as CVE-2025-24071, has been discovered and is being actively exploited in the wild. This vulnerability allows attackers to capture NTLM hashes, potentially leading to network spoofing attacks and credential theft. The exploit involves specially crafted .library-ms files embedded within compressed archives like RAR or ZIP. When […]

The post Microsoft Windows NTLM File Explorer Vulnerability Exploited in The Wild – PoC Released appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent analysis by Cloudflare reveals a concerning trend in online security: nearly 41% of successful logins across websites involve compromised passwords. This issue is exacerbated by the widespread practice of password reuse among users. Despite growing awareness about online security risks, many individuals continue to use the same passwords across multiple accounts, creating a […]

The post 41% of Successful Logins Across Websites Involve Compromised Passwords appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Alleged Leak of 4,000,000 Israeli Facebook accounts

A vulnerability classified as problematic has been found in HCL MyXalytics 6.3/6.4. This affects an unknown part. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2024-42176. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Mattermost up to 9.11.8. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Reporting. The manipulation leads to incorrect authorization. This vulnerability is handled as CVE-2025-1472. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Read about the significant hidden costs and ethical pitfalls of content scraping ? and learn how to protect your website.

Alleged Data Sale of Antipublic Collection - Total Lines 5 Billion+

Эксперимент доказывает, что технологии уже готовы заменить человека.

California Cryobank, the largest US sperm bank, suffered a data breach exposing customer information. California Cryobank (CCB) is the largest sperm bank in the U.S., providing frozen donor sperm and reproductive services, including egg and embryo storage. It operates in all 50 states and over 30 countries worldwide, helping individuals and couples with fertility treatments. […]

游戏市场情报公司 Newzoo 咨询总监 Ben Porter 本周在 GDC 上发表演讲，称 PC 已经成为最大的游戏市场，而 PC 玩家最爱老游戏。Newzoo 每年深入调查了 73,000 名玩家，以及分析了逾万款游戏数据。根据 Newzoo 的分析，2023 年 PC 玩家有 8.735 亿，2024 年增长至 9.075 亿。相比下主机玩家在 2024 年有 6.531 亿。PC 玩家偏爱老游戏：数据显示，从 2024 年 1 月到 12 月，67% 的玩家游戏时间是花在六年或更久的游戏上；25% 是花在 2-5 年前的游戏上，8% 的时间花在不到 2 年前的游戏上。对于这 67% 的玩家：7.1% 是花在 CSGO/ CS2 上，6.4% 花在《英雄联盟（League of Legends）》上，6.2% 花在 Roblox 上，5.8% 花在 Dota 2 上，5.4% 花在《堡垒之夜（Fortnite）》上。

Alleged Leak of 35 Italian Databases

A vulnerability was found in Netbox 4.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /dcim/power-outlets/{id}/edit/. The manipulation of the argument Name leads to cross site scripting. This vulnerability is handled as CVE-2024-40735. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Netbox 4.0.3. This affects an unknown part of the file /dcim/power-outlets/add. The manipulation of the argument Name leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-40736. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in Netbox 4.0.3. This vulnerability affects unknown code of the file /dcim/console-ports/add. The manipulation of the argument Name leads to cross site scripting. This vulnerability was named CVE-2024-40737. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Netbox 4.0.3. This issue affects some unknown processing of the file /dcim/power-feeds/{id}/edit/. The manipulation of the argument Name leads to cross site scripting. The identification of this vulnerability is CVE-2024-40740. The attack may be initiated remotely. There is no exploit available.