Aggregator

Cybersecurity researchers have uncovered a sophisticated Android malware campaign known as “Tria Stealer,” which is targeting users in Malaysia and Brunei to collect sensitive information such as SMS data, call logs, WhatsApp messages, and emails. The malware campaign, which has been active since March 2024, uses wedding invitations as a lure to trick victims into […]

The post Tria Stealer Malware Exploits Android Devices to Harvest SMS Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Currently trending CVE - hypeScore: 9 - Git Credential Manager (GCM) is a secure Git credential helper built on .NET that runs on Windows, macOS, and Linux. The Git credential protocol is text-based over standard input/output, and consists of a series of lines of key-value pairs in the format `key=value`. Git's documen

Currently trending CVE - hypeScore: 9 - Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the `git-credential(1)` command without checking for embedded line-ending control characters, and then sends any credential

Il requisito 7.4 della ISO/IEC 27001:2022 riveste un’importanza strategica nella protezione delle in

Investire e innovare mediante soluzioni di intelligenza artificiale può essere un valido volano di c

Sebbene le potenzialità di DeepSeek siano evidenti, tanto da essere diventata l’app gratuita di AI g

DeepSeek, che in queste ore ha cambiato il mondo dell’IA, ha recentemente raggiunto la vetta della c

Il CSIRT ha rilevato una campagna di phishing via SMS (smishing) a tema Poste Italiane, mirata a car

Le feste sono finite ma sembrerebbe che “la festa” di attacchi informatici non accenni a terminare.

UK organizations are significantly increasing cybersecurity budgets, with a projected 31% growth in the next year

A vulnerability, which was classified as critical, has been found in code-projects Simple Plugins Car Rental Management 1.0. Affected by this issue is some unknown functionality of the file /admin/approve.php. The manipulation of the argument id leads to sql injection. This vulnerability is handled as CVE-2025-0874. The attack may be launched remotely. Furthermore, there is an exploit available.

Работодатели превращают домашние офисы в зоны контроля, а сотрудники готовы платить за свою приватность.

A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /customeredit.php. The manipulation of the argument id/address/fullname/phonenumber/email/city/comment leads to sql injection. This vulnerability is known as CVE-2025-0873. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file /addpayment.php. The manipulation of the argument id/amount/desc/inccat leads to sql injection. This vulnerability is traded as CVE-2025-0872. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in vruizg VR-Frases Plugin up to 3.0.1 on WordPress. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument several leads to sql injection. The identification of this vulnerability is CVE-2025-0861. The attack may be initiated remotely. There is no exploit available.