Aggregator

You must login to view this content

A sophisticated malware campaign dubbed Odyssey Stealer has been uncovered, targeting macOS users through a deceptive method known as Clickfix tactics. This campaign leverages typosquatted domains malicious websites mimicking legitimate ones like the macOS App Store, finance platforms, or cryptocurrency news portals to trick users into executing harmful AppleScripts (osascripts). These scripts are engineered to […]

The post Threat Actors Use Clickfix Tactics to Deploy Malicious AppleScripts for Stealing Login Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Pig butchering scams were the most common activity carried out at the facilities identified in the Amnesty International investigation.

The post Slavery, torture, human trafficking discovered at 53 Cambodian online scamming compounds appeared first on CyberScoop.

Third-party antivirus software will no longer have access to the Windows kernel as Microsoft rolls out changes to reduce IT downtime from unexpected crashes or disruptions. 

The post Microsoft security updates address CrowdStrike crash, kill ‘Blue Screen of Death’ appeared first on CyberScoop.

A comprehensive follow-up analysis to the FortiGuard Incident Response Team’s (FGIR) investigation titled “Intrusion into Middle East Critical National Infrastructure” has revealed a protracted cyberattack that targeted critical national infrastructure (CNI) in the Middle East. This is a startling revelation. The report, part of the 2025 Global Threat Landscape Report, exposes how threat actors exploited […]

The post Threat Actors Leverage Windows Task Scheduler to Embed Malware and Maintain Persistence appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hawaiian Airlines announced a cybersecurity incident Friday as security experts warned of a sector-wide threat.

The post Scattered Spider strikes again? Aviation industry appears to be next target for criminal group appeared first on CyberScoop.

A sophisticated phishing campaign targeting over 70 organizations, predominantly in the US, has been uncovered by Varonis’ Managed Data Detection and Response (MDDR) Forensics team. This campaign, active since May 2025, exploits a lesser-known feature of Microsoft 365 called Direct Send, which allows devices and applications within a tenant to send emails without authentication. Designed […]

The post Exploitation of Microsoft 365 Direct Send to Deliver Phishing Emails as Internal Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.