Aggregator

Z-PENTEST ALLIANCE Targeted the Website of ALYN Hospital

A new cybercrime platform named 'Atlantis AIO' provides an automated credential stuffing service against 140 online platforms, including email services, e-commerce sites, banks, and VPNs. [...]

bincrypter – Pack/Encrypt/Obfuscate ELF + SHELL scripts A Linux Binary Runtime Crypter – in BASH! Features Obfuscates & encrypts any ELF binary or #!-script AV/EDR death: Morphing + different signature every time 100% in-memory. No temporary...

The post bincrypter: A Linux Binary Runtime Crypter appeared first on Penetration Testing Tools.

In a concerning development for cybersecurity professionals, threat actors are increasingly utilizing a powerful tool called Atlantis AIO to automate and scale credential stuffing attacks across more than 140 platforms. This multi-checker tool, designed to exploit stolen user credentials, has emerged as a formidable weapon in the cybercriminal arsenal, enabling attackers to test millions of […]

The post Threat Actors Use “Atlantis AIO” Tool to Automate Credential Stuffing Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers Dylan Tran and Jimmy Bayne have unveiled a new fileless lateral movement technique that exploits trapped Component Object Model (COM) objects in Windows systems. This method, based on research by James Forshaw of Google Project Zero, allows attackers to execute .NET managed code in the context of a server-side Distributed COM (DCOM) process. […]

The post Hackers Exploit COM Objects for Fileless Malware and Lateral Movement appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Currently trending CVE - Hype Score: 26 - Out of bounds write in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Defensie kan burger zorgreservisten oproepen bij crises. Het ministerie begint daarvoor een samenwerking met de Nationale Zorgreserve (NZR). Bij dit netwerk zijn civiele (oud) zorgprofessionals aangesloten. Zij kunnen ingezet worden voor crises in Nederland, maar nu dus ook bij inzet van Defensie. Deze mensen wordt dan gevraagd of ze achtervang willen zijn in het geval medisch defensiepersoneel naar het buitenland moet. 

In a significant escalation of illicit activities, B1ack’s Stash, a notorious dark web carding marketplace, has announced plans to release an additional 4 million stolen credit card records for free. This move is part of a broader strategy to attract cybercriminals and establish credibility within the underground economy. The marketplace first gained attention in April […]

The post B1ack’s Stash Marketplace Actors Set to Release 4 Million Stolen Credit Card Records for Free appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Спины нового типа доказывают своё превосходство в вычислениях будущего.

The post The Rise of Mobile Phishing and How to Prevent Mobile Phishing appeared first on AI Security Automation.

The post The Rise of Mobile Phishing and How to Prevent Mobile Phishing appeared first on Security Boulevard.

A Pakistan-based Advanced Persistent Threat (APT) group, likely APT36, has launched a multi-platform cyberattack campaign targeting Indian users through a fraudulent website impersonating the Indian Post Office. The attack, discovered by CYFIRMA researchers, exploits both Windows and Android vulnerabilities, demonstrating a significant evolution in the group’s tactics. Sophisticated Attack Leverages Youth Laptop Scheme The malicious […]

The post Pakistan APT Hackers Weaponize malicious IndiaPost Site to Target Windows and Android Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability, which was classified as problematic, was found in Directus up to 11.4.x. Affected is an unknown function of the component HEAD Request Handler. The manipulation leads to allocation of resources. This vulnerability is traded as CVE-2025-30350. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Directus up to 11.4.x. This issue affects some unknown processing. The manipulation leads to allocation of resources. The identification of this vulnerability is CVE-2025-30225. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Icinga icingaweb2 up to 2.11.4/2.12.2. This vulnerability affects unknown code of the component Command-Line Interface. The manipulation leads to open redirect. This vulnerability was named CVE-2025-30164. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Frappe up to 14.93.1/15.54.x. This affects an unknown part. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2025-30217. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Icinga icingaweb2 up to 2.11.4/2.12.2. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-27609. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Track, measure, and prove your AppSec impact with the Mend.io Value Dashboard.

The post Introducing the Mend.io Value Dashboard: Measure and Showcase Your Security Impact appeared first on Security Boulevard.

Benchmark Results From Google Show Gemini 2.5 Outperforming Rivals
Google introduced on Tuesday its "most intelligent" AI reasoning model yet, designed to pause and "think" before responding. The model ships with a 1 million-token context window, capable of processing about 750,000 words in a single input - more than the entire Lord of the Rings series.