GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

As small businesses increasingly adopt artificial intelligence (AI) tools to streamline operations, cybercriminals are seizing the opportunity to deploy ransomware through deceptive campaigns. According to a recent report by Cisco Talos, attackers are masquerading as legitimate AI software providers, embedding malware within counterfeit applications that mimic popular services. With 98% of small businesses using at […]

The post Beware: Fake AI Business Tools Spreading Hidden Ransomware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly identified wave of cyberattacks by the notorious Scattered Spider hacking group has zeroed in on help-desk administrators at major technology companies, leveraging advanced social engineering techniques to breach corporate defenses. Known for their adept use of psychological manipulation, these threat actors have demonstrated a chilling ability to exploit human vulnerabilities as effectively as […]

The post Scattered Spider Hackers Target Tech Company Help-Desk Administrators appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The latest wave of Mirai botnet activity has resurfaced with a refined attack chain exploiting CVE-2024-3721, a critical command injection vulnerability in TBK DVR-4104 and DVR-4216 devices. This campaign leverages unpatched firmware to deploy a modified Mirai variant designed for IoT device hijacking and DDoS operations. Exploitation Vector & Payload Delivery Attackers exploit the vulnerability […]

The post New Mirai Variant Exploits TBK DVR Flaw for Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical heap-based buffer overflow vulnerability, tracked as CVE-2025-24993, has been discovered in the Windows New Technology File System (NTFS), posing a significant threat to millions of Windows users globally. The flaw, patched during Microsoft’s March 2025 Patch Tuesday, was actively exploited as a zero-day in the wild, prompting urgent advisories from both Microsoft and […]

The post Microsoft Unveils European Security Effort to Disrupt Cybercrime Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The AhnLab Security Intelligence Center (ASEC) has recently issued a detailed report confirming the persistent distribution of ViperSoftX malware by threat actors, with notable impact on users in South Korea and beyond. First identified by Fortinet in 2020, ViperSoftX is a sophisticated PowerShell-based malware designed to infiltrate infected systems, execute remote commands, and steal sensitive […]

The post ViperSoftX Malware Used by Threat Actors to Steal Sensitive Information appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical memory corruption vulnerability, tracked as CVE-2025-5688, has been disclosed in FreeRTOS-Plus-TCP, Amazon’s open-source TCP/IP stack widely used in embedded and IoT devices. The flaw, rated 8.4 (High) on the CVSS scale, is rooted in how the stack processes Link-Local Multicast Name Resolution (LLMNR) and Multicast DNS (mDNS) queries containing excessively long DNS names, […]

The post Critical FreeRTOS-Plus-TCP Flaw Allows Code Execution or System Crash appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical security flaw has been uncovered in numerous popular Chrome extensions, affecting millions of users worldwide by exposing sensitive credentials such as API keys, secrets, and tokens directly within their source code. This alarming oversight in modern development practices has left digital doors wide open for cyber attackers to exploit, potentially leading to data […]

The post Chrome Extensions Flaw Exposes Sensitive API Keys, Secrets and Tokens appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hewlett-Packard Enterprise (HPE) has released a critical security bulletin addressing multiple high-impact vulnerabilities in its Insight Remote Support (IRS) software, versions prior to 7.15.0.646. These flaws, identified by external researchers and disclosed to HPE, could allow remote attackers to execute arbitrary code, traverse directories, and exfiltrate sensitive information from affected systems. Technical Breakdown of Vulnerabilities […]

The post Critical RCE Flaw Found in HPE Insight Remote Support Tool appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cisco Talos has uncovered a sophisticated and destructive cyberattack targeting a critical infrastructure entity in Ukraine, deploying a previously unknown wiper malware dubbed “PathWiper.” This attack, attributed with high confidence to a Russia-nexus advanced persistent threat (APT) actor, showcases the persistent and evolving threat to Ukrainian critical infrastructure amid the ongoing Russia-Ukraine conflict. The attackers […]

The post New pathWiper Malware Targets Critical Infrastructure to Deploy Admin Tools appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

HUMAN’s Satori Threat Intelligence and Research team, in collaboration with Google, Trend Micro, and Shadowserver, has uncovered and partially disrupted a massive cyber fraud operation named BADBOX 2.0. This operation, an evolved iteration of the original BADBOX malware disclosed in 2023, has infected over 1 million Android Open Source Project (AOSP) devices worldwide, marking it […]

The post BADBOX 2.0 Malware Hits Over a Million Android Devices in Global Cyber Threat appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The widespread text-sharing website Paste.ee has been used as a weapon by bad actors to spread powerful malware strains like XWorm and AsyncRAT, which is a worrying trend for cybersecurity professional. This tactic represents a significant shift in phishing and malware delivery strategies, exploiting a trusted service to bypass traditional security defenses. Unveiling a New […]

The post Paste.ee Turned Cyber Weapon: XWorm and AsyncRAT Delivered by Malicious Actors appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical memory leak vulnerability in Apache Tomcat’s HTTP/2 implementation (CVE-2025-31650) has been weaponized, enabling unauthenticated denial-of-service attacks through malformed priority headers. The flaw affects Tomcat versions 9.0.76–9.0.102, 10.1.10–10.1.39, and 11.0.0-M2–11.0.5, with public exploits already circulating 12. Vulnerability Mechanics and Attack Vector According to the report, the vulnerability stems from the improper cleanup of failed […]

The post PoC Exploit Released for Apache Tomcat DoS Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent spearphishing campaign targeting Polish entities has been attributed with high confidence to the UNC1151 threat actor, a group linked to Belarusian state interests and, according to some sources, Russian intelligence services. CERT Polska reports that the attackers leveraged a critical vulnerability in the Roundcube webmail platform—CVE-2024-42009—to steal user credentials with minimal user interaction. […]

The post Hackers Exploit Roundcube Vulnerability to Steal User Credentials via XSS Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

ESET researchers have uncovered the persistent activities of BladedFeline, an Iranian-aligned Advanced Persistent Threat (APT) group, which has maintained covert access to the networks of Kurdish and Iraqi government officials for nearly eight years. First identified in 2017 through attacks on the Kurdistan Regional Government (KRG), BladedFeline has since evolved into a sophisticated cyberespionage entity, […]

The post Iranian APT ‘BladedFeline’ Remains Hidden in Networks for 8 Years appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A new wave of cyber threats has emerged with the discovery of updated variants of Chaos RAT, a notorious open-source remote administration tool (RAT) first identified in 2022. As reported by Acronis TRU researchers in their recent 2025 analysis, this malware continues to evolve, targeting both Linux and Windows environments with sophisticated capabilities for espionage […]

The post New Chaos RAT Targets Linux and Windows Users to Steal Sensitive Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The cybersecurity landscape witnessed the emergence of new PowerShell-based malware samples circulating in underground forums and threat-hunting communities, marking a significant evolution of the notorious ViperSoftX stealer. This updated variant, building on its 2024 predecessor, showcases remarkable advancements in modularity, stealth, and persistence mechanisms, posing a heightened threat to cryptocurrency users and enterprises. Detailed analysis […]

The post ViperSoftX Malware Enhances Modularity, Stealth, and Persistence Techniques appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

China has accused Taiwan’s Democratic Progressive Party (DPP) authorities of orchestrating a series of sophisticated cyber attacks through Advanced Persistent Threat (APT) groups. Referred to as “T-APTs,” these groups are allegedly supported by Taiwan’s Information, Communications and Electronic Force Command (ICEFCOM) and are claimed to have close ties with the United States. Allegations of Cyber […]

The post China Accuses Taiwan of Operating APT Groups with US Support appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In the wake of the COVID-19 pandemic, collaborative tools like Microsoft Teams, Zoom, and WebEx have become indispensable for remote work, enabling seamless communication with colleagues and clients. However, their widespread adoption has also made them prime targets for cybercriminals. A recent phishing campaign exploiting the popularity of Zoom has surfaced, tricking users into downloading […]

The post Beware of Fake Zoom Client Downloads Granting Attackers Access to Your Computer appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly identified malicious plugin, dubbed “wp-runtime-cache,” has been discovered targeting WordPress sites with a sophisticated method to steal admin credentials. Disguised as a caching plugin, this malware lurks in the wp-content/plugins directory, evading detection by hiding from the WordPress admin panel’s plugin list. Unlike legitimate caching plugins that typically offer visible settings or management […]

The post WordPress Admins Cautioned About Fake Cache Plugin Stealing Admin Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A data breach has reportedly struck Odoo, a leading Belgian provider of open-source business management software. On June 5, 2025, a 63.4MB employee database—allegedly sourced through a “collaborative effort with a senior insider”—was advertised for sale on a dark web forum. The seller is demanding $25,000 in Monero (XMR) or Bitcoin (BTC) for the trove, […]

The post Odoo Employee Database Allegedly Exposed and Put Up for Sale on Dark Web appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.