GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

In a landmark global cybercrime crackdown, INTERPOL’s Operation Secure has seen the takedown of more than 20,000 malicious IP addresses and domains associated with infostealer malware. Law enforcement across 26 countries collaborated to dismantle cybercriminal infrastructure, marking a significant step forward in the fight against digital threats in the Asia-Pacific region. Operation Secure: Regional Collaboration […]

The post Interpol Dismantles 20,000 Malicious IPs and Domains Tied to 69 Malware Variants appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Bitsight TRACE has uncovered more than 40,000 security cameras openly accessible on the internet—streaming live footage from homes, offices, factories, and even sensitive datacenter rooms. This widespread exposure, which Bitsight first flagged in 2023, shows no sign of improvement, leaving millions potentially vulnerable to unwitting surveillance, industrial espionage, and privacy invasion by anyone with a […]

The post Over 40,000 Internet-Connected Cameras Exposed, Streaming Live Online appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers from Binarly have uncovered a major software vulnerability in the Unified Extensible Firmware Interface (UEFI) ecosystem, specifically impacting the Secure Boot mechanism used by almost all modern PCs and servers. Dubbed CVE-2025-3052 (BRLY-2025-001), this memory corruption flaw enables attackers to execute unsigned code during the early boot phase, bypassing Secure Boot protections and potentially […]

The post New Secure Boot Vulnerability Allows Attackers to Install Malware in PC and Server Boot Processes appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

ConnectWise, a leading provider of remote management and cyber protection tools for managed service providers (MSPs), is set to implement a significant security update affecting ScreenConnect, ConnectWise Automate, and ConnectWise RMM. The action, scheduled for June 13, 2025, at 8:00 p.m. ET, follows concerns raised by third-party security researchers regarding how earlier versions of ScreenConnect […]

The post ConnectWise to Update Code Signing Certificates for ScreenConnect, Automate, and RMM appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Unit 42, Palo Alto Networks’ threat intelligence division, has recently conducted investigations that have revealed a worrying trend: threat actors are increasingly creating and modifying Linux Executable and Linkable Format (ELF) malware to attack cloud infrastructure. With cloud adoption skyrocketing and Linux-based systems underpinning the vast majority of cloud workloads estimates suggest between 70% and […]

The post Linux Malware Authors Targeting Cloud Environments with ELF Binaries appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft confirmed a critical security vulnerability (CVE-2025-47176) in Microsoft Office Outlook, enabling attackers to execute arbitrary code. Despite the “Remote Code Execution” title, the attack vector is local, requiring attackers to run code from a user’s own machine. However, the potential impact remains high for organizations, as successful exploitation can compromise the confidentiality, integrity, and […]

The post Outlook Vulnerability Allows Remote Execution of Arbitrary Code by Attackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical elevation of privilege vulnerability has been identified in the Windows Task Scheduler service, tracked as CVE-2025-33067. Officially published on June 10, 2025, by Microsoft as the assigning CNA (CVE Numbering Authority), this flaw allows attackers to potentially gain elevated privileges on affected systems, bypassing normal user restrictions and compromising the integrity of the […]

The post Windows Task Scheduler Flaw Allows Attackers to Escalate Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft addressed a critical security flaw (CVE-2025-32713) in the Windows Common Log File System (CLFS) driver during its June 2025 Patch Tuesday. The heap-based buffer overflow vulnerability enables local attackers to escalate privileges to SYSTEM-level access, posing significant risks to enterprise environments. Anatomy of CVE-2025-32713 The vulnerability stems from improper memory handling in the CLFS […]

The post Windows Common Log File System Driver Flaw Allows Attackers to Escalate Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft has disclosed four critical remote code execution (RCE) vulnerabilities in its Office suite as part of the June 2025 Patch Tuesday updates, posing significant risks to organizations and individuals who depend on the widely used productivity software. The vulnerabilities, tracked as CVE-2025-47162, CVE-2025-47953, CVE-2025-47164, and CVE-2025-47167, each received a CVSS v3.1 base score of […]

The post Multiple Microsoft Office Vulnerabilities Enable Remote Code Execution by Attackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A high-severity vulnerability (CVE-2025-47950) in CoreDNS’s DNS-over-QUIC (DoQ) implementation enables remote attackers to crash DNS servers through stream amplification attacks. Patched in v1.21.2, this flaw highlights risks in modern protocol adoption for cloud-native systems Goroutine Proliferation in DoQ Implementation The vulnerability stems from CoreDNS’s handling of QUIC streams in its server_quic.go component. For every incoming […]

The post CoreDNS Vulnerability Allows Attackers to Exhaust Server Memory via Amplification Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Apache CloudStack, a leading open-source cloud management platform, has announced the immediate availability of new Long-Term Support (LTS) releases—version 4.19.3.0 and 4.20.1.0—to address multiple critical security vulnerabilities. The advisory, published by PMC member Pearl Dsilva on June 10, 2025, highlights five distinct vulnerabilities, two of which are rated critical and pose significant risks to user […]

The post Apache CloudStack Flaw Allows Attackers to Execute Privileged Actions appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

HPE Aruba Networking has issued a critical security advisory regarding a high-severity vulnerability in its Private 5G Core Platform. Tracked as CVE-2025-37100, the flaw enables unauthorized access to sensitive system files, posing a significant risk to enterprise confidentiality and infrastructure integrity. This security bulletin outlines the technical details, risk factors, and remediation steps for affected […]

The post HPE Aruba Network Flaw Exposes Sensitive Data to Potential Hackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability (CVE-2025-4275) in Insyde H2O UEFI firmware allows attackers to bypass Secure Boot protections by injecting malicious digital certificates via an unprotected NVRAM variable. Dubbed Hydroph0bia, this flaw enables pre-boot execution of unsigned code, posing severe risks to enterprise and consumer devices. Insecure NVRAM Variable Handling The vulnerability stems from the improper use […]

The post Insyde UEFI Flaw Enables Digital Certificate Injection via NVRAM Variable appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google Chrome’s Stable channel is being updated to version 137.0.7151.103 for Windows and Mac, with Linux receiving version 137.0.7151.103 as well. The rollout will take place gradually over the coming days and weeks, ensuring smooth deployment and minimal disruption for users. The official changelog provides a detailed breakdown of all modifications and enhancements included in […]

The post Multiple Chrome Flaws Enable Remote Code Execution by Attackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical zero-day vulnerability in Microsoft Windows, designated CVE-2025-33053, has been actively exploited by the advanced persistent threat (APT) group Stealth Falcon. The flaw, enabling remote code execution (RCE) through manipulation of a system’s working directory, was addressed by Microsoft in its June 2025 Patch Tuesday updates following CPR’s responsible disclosure. Below is a technical […]

The post Microsoft Windows WebDAV 0-Day RCE Vulnerability Actively Exploited in The Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft has released its June 2025 Patch Tuesday security updates, addressing a total of 66 vulnerabilities across its software ecosystem. This month’s updates include fixes for ten critical vulnerabilities and two zero-day flaws, one of which is actively exploited in the wild and another that was publicly disclosed. The patches cover a wide range of […]

The post Microsoft Patch Tuesday June 2025 – 66 Vulnerabilities Patched Including 2 Zero-Day appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent report by Kaspersky ICS CERT, released on June 10, 2025, sheds light on the persistent and evolving cyberthreats targeting industrial automation systems (IAS) worldwide during the first quarter of 2025. The comprehensive analysis, based on data from Kaspersky Security Network (KSN), reveals that 21.9% of Industrial Control System (ICS) computers globally encountered malicious […]

The post New Report Highlights the Internet as the Primary Threat to Industrial Automation Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

ESET, a leading cybersecurity firm, has shed light on the intricate nature of digital footprints the data trails left by users during online interactions. As the internet becomes an integral part of daily life, every click, post, and transaction contributes to a vast repository of personal information. This digital trace, encompassing social media activity, browsing […]

The post ESET Details on How to Manage Your Digital Footprint appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability in the SAP NetWeaver Application Server AS ABAP has been disclosed under SAP Security Note #3600840, carrying a near-maximum CVSS score of 9.6. This flaw, rooted in a Missing Authorization Check within the Remote Function Call (RFC) framework, poses a severe risk to system integrity and availability. Authenticated attackers can exploit this […]

The post SAP NetWeaver Vulnerability Allows Attackers to Escalate Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A discovery by Socket’s Threat Research Team has unveiled a malicious Python package named imad213, masquerading as an Instagram growth tool. Created by a threat actor identified as im_ad__213 with the associated email madmadimado59@gmail[.]com, this malware cunningly tricks users into surrendering their Instagram credentials. Deceptive Python Package Targets Instagram Users Promoted with a polished GitHub […]

The post Beware of Instagram Growth Tools Stealing Login Credentials and Sending Them to Attackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.