Aggregator

Recent investigations by Check Point Research have uncovered a sophisticated malware campaign that leverages a subtle but dangerous weakness in Discord’s invitation system. Cybercriminals are hijacking expired and deleted Discord invite links, including custom (vanity) and standard codes, to redirect unsuspecting users to malicious servers. This technique is being used as the initial vector in […]

The post Cybercriminals Exploiting Expired Discord Invite Links to Deploy Multi-Stage Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Trend Micro has released security updates to address multiple critical-severity remote code execution and authentication bypass vulnerabilities that impact its Apex Central and Endpoint Encryption (TMEE) PolicyServer products. [...]

The recommendation to the bankruptcy judge overseeing the sale is partially based on messages from 23andMe customers who told him they are worried about their genetic data’s inclusion in the sale.

A new, highly sophisticated cyberattack campaign is targeting users seeking to download the popular language model DeepSeek-R1, exploiting global interest in large language models (LLMs). Kaspersky researchers have uncovered that threat actors are utilizing malvertising and phishing tactics to distribute previously unknown malware, named BrowserVenom, capable of hijacking victims’ web traffic and stealing sensitive information. […]

The post Threat Actors Exploit DeepSeek-R1 Popularity to Target Windows Device Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Исследователи показали путь к компактной и быстрой QRAM.

Google Cloud and Cloudflare are investigating ongoing outages impacting access to sites and various services across multiple regions. [...]

某管理系统代码审计

Author/Presenter: Jon "maddog" Hall (Board Chair Emeritus: Linux Professional Institute, Founder: Project Cauã, Co-Founder: Caninos Loucos,
Technical Advisor: QSentinel, Executive Director: Linux® International®)

Our sincere appreciation to LinuxFest Northwest (Now Celebrating Their Organizational 25th Anniversary Of Community Excellence), and the Presenters/Authors for publishing their superb LinuxFest Northwest 2025 video content. Originating from the conference’s events located at the Bellingham Technical College in Bellingham, Washington; and via the organizations YouTube channel.

Thanks and a Tip O' The Hat to Verification Labs :: Penetration Testing Specialists :: Trey Blalock GCTI, GWAPT, GCFA, GPEN, GPCS, GCPN, CRISC, CISA, CISM, CISSP, SSCP, CDPSE for recommending and appearing as speaker at the LinuxFest Northwest conference.

Permalink

The post LinuxFest Northwest: LFNW 2025: In The Beginning… appeared first on Security Boulevard.

The spyware’s developer, Intellexa, has been under pressure due to sanctions and public disclosure, but Recorded Future uncovered fresh activity.

The post Predator spyware activity surfaces in new places with new tricks appeared first on CyberScoop.

A critical vulnerability in OpenPGP.js, a widely used JavaScript library for encrypted messaging and digital signatures, has been patched after researchers discovered it allowed attackers to spoof message signatures, potentially undermining the trust model of public key cryptography. The flaw, tracked as CVE-2025-47934, was uncovered by security researchers Edoardo Geraci and Thomas Rinsma of Codean […]

The post OpenPGP.js Vulnerability Allows Attackers to Bypass Message Signature Verification appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly discovered remote access trojan (RAT) named CyberEye is making waves in the cybersecurity community for its sophisticated capabilities and its reliance on Telegram, the popular messaging platform, as its command-and-control (C2) infrastructure. First detected in the wild in May 2025, CyberEye is distributed under various names, including TelegramRAT, and is rapidly gaining traction among cybercriminals […]

The post Windows Defender Bypass Using PowerShell and Registry Edits in CyberEYE RAT appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

在一些攻防项目中，除了一些常见的大型系统外，常常还会遇到其他一些相对小众的系统，而在打不动大型系统时，这些相对小众的系统往往是比较好的入口点，这些系统更容易通过代码审计找到一些漏洞，从而getshell，在人力和时间成本上都比较契合一些攻防项目，下面就我遇到的一些案例进行分析，给各位师傅分享一些实战思路。

Человечество готовится к самому плотному столкновению материи в истории.

Andrea Isoni of AI Technologies on Certifications, Deepfakes and ISO 42001
AI misuse - from deepfakes to cyber incidents - continues to outpace regulation. Andrea Isoni, chief AI officer at AI Technologies discusses why stronger cyber laws, certification frameworks like ISO 42001 and risk-based prioritization are necessary to manage AI risks safely and compliantly.

VulnCheck's Garrity on the Uncertainty of the CVE Ecosystem and EUVD's Limitations
Funding shortages and incomplete coverage in critical vulnerability databases are increasing the risk for defenders. Patrick Garrity, security researcher at VulnCheck, discusses how data gaps and scoring confusion hinder response strategies for potential cyberattacks.

NextJenSecurity Founder Calls for Global Policy Shifts to Reduce Vulnerabilities
Governments worldwide are shifting from reactive responses to preventive strategies to tackle ransomware attacks. Jen Ellis, founder of NextJenSecurity, stresses the need for vulnerability accountability and secure-by-design policies to tackle systemic cybersecurity flaws.

Also: 5 Guilty Pleas in Cambodia-linked $36.9 Million Scam
Every week, ISMG rounds up cybersecurity incidents in digital assets. This week, charges against a crypto firm founder in a $530M sanctions evasion and money laundering case, guilty pleas in a $36.9M scam, an $8.3M exploit of Alex Lab, and Cetus Protocol relaunched after a $223M hack.

Agentic AI Is Creating New Risks, New Career Opportunities for Cyber Professionals
If your AI agent decided to act on its own tomorrow, would your systems know who it was, what it did, and whether it had the right to do it? If the answer is no, it's time to give your new coworker a badge and a policy framework. These non-human identities are creating new career opportunities.

Andrea Isoni of AI Technologies on Certifications, Deepfakes and ISO 42001
AI misuse - from deepfakes to cyber incidents - continues to outpace regulation. Andrea Isoni, chief AI officer at AI Technologies discusses why stronger cyber laws, certification frameworks like ISO 42001 and risk-based prioritization are necessary to manage AI risks safely and compliantly.

VulnCheck's Garrity on the Uncertainty of the CVE Ecosystem and EUVD's Limitations
Funding shortages and incomplete coverage in critical vulnerability databases are increasing the risk for defenders. Patrick Garrity, security researcher at VulnCheck, discusses how data gaps and scoring confusion hinder response strategies for potential cyberattacks.