GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

The Indonesian hacker group “INDOHAXSEC” has allegedly breached the National Tuberculosis Registry (NTBR) of Malaysia, managed by the Ministry of Health. The group announced their claim via a post on a hacking forum, stirring fears over the safety of sensitive health data in the country. The cyberattack came to light after INDOHAXSEC boasted about the […]

The post INDOHAXSEC Hacker Group Allegedly Breaches Malaysia’s National Tuberculosis Registry appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

OpenAI has introduced “Deep Research,” a cutting-edge feature within ChatGPT that promises to revolutionize the way people handle complex and time-intensive tasks. Designed to synthesize vast amounts of information from the web in mere minutes, Deep Research aims to outperform humans in speed, precision, and reasoning for advanced knowledge work. The feature is now available […]

The post ChatGPT’s Deep Research Breakthrough Enables Faster-Than-Human Task Handling appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A significant vulnerability has been discovered in the Alibaba Cloud Object Storage Service (OSS) that allows unauthorized users to upload data, posing critical security risks for organizations relying on this cloud solution. The vulnerability, caused by the misconfiguration of the PUT method, potentially exposes sensitive data and leaves storage buckets open to exploitation. The security […]

The post Alibaba Cloud Storage Flaw Exposes Data to Unauthorized Uploads appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The cybersecurity realm received an exciting update this week with the release of Parrot 6.3, the latest version of the Parrot Security operating system. As one of the most trusted Linux distributions tailored for ethical hackers, penetration testers, and security researchers, Parrot OS continues to set the benchmark for flexibility, performance, and innovation. So, what’s new […]

The post Parrot 6.3 Release, What’s New appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A significant evolution in the cybersecurity landscape has emerged with the uncovering of new vulnerabilities in Windows 11 (24H2). Process Hollowing, a widely used technique often referred to as RunPE, has encountered new challenges in this operating system version due to changes in the Windows loader, impacting both security researchers and attackers alike. Process Hollowing […]

The post New Process Hollowing Attack Vectors Uncovered in Windows 11 (24H2) appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

BeyondTrust, a leading provider of identity and access management solutions, disclosed a zero-day breach impacting 17 Remote Support SaaS customers. The incident, detected on December 5, 2024, has been linked to the compromise of an infrastructure API key used to access specific Remote Support SaaS instances. The breach allowed attackers to reset local application passwords […]

The post BeyondTrust Zero-Day Breach – 17 SaaS Customers API Key Compromised appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity experts have uncovered a sophisticated phishing campaign targeting Microsoft advertising accounts. The attack, orchestrated through malicious Google Ads, aims to steal login credentials of users accessing Microsoft’s advertising platform. This incident highlights the growing risk of malvertising, where cybercriminals exploit legitimate ad networks to deceive users. How the Attack Works The phishing campaign leverages […]

The post Microsoft Advertisers Account Hacked Using Malicious Google Ads appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a significant advancement against increasingly sophisticated ransomware threats, researchers from NYU Tandon School of Engineering have introduced SHIELD (Secure Host-Independent Extensible Logging), an innovative detection architecture. This system leverages hardware-level, tamper-proof metrics for real-time ransomware identification. By operating independently of compromised host systems, SHIELD addresses a critical gap in existing detection frameworks, offering unparalleled […]

The post New ‘SHIELD’ Platform Leverages FPGA and Off-Host Monitoring to Tackle Advanced Ransomware Threats appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A team of researchers from Ben Gurion University of the Negev has pioneered a novel memory forensics framework for analyzing Unified Extensible Firmware Interface (UEFI) memory during the pre-operating system (pre-OS) phase. Their study, published on January 28, 2025, introduces a groundbreaking approach to addressing the growing threat of UEFI-based malware, which has become a […]

The post Researchers Launch Open-Source UEFI Memory Forensics Framework to Counter Advanced Bootkits appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A groundbreaking technique for Kerberos relaying over HTTP, leveraging multicast poisoning, has been recently detailed by cybersecurity researchers. Introduced by James Forshaw and further developed using the Responder and krbrelayx tools, this approach exploits local name resolution protocols like LLMNR (Link-Local Multicast Name Resolution) to achieve pre-authenticated Kerberos relay attacks. This method provides a fresh […]

The post Hackers Exploiting DNS Poisoning to Compromise Active Directory Environments appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Since mid-2024, cybersecurity researchers have been monitoring a sophisticated Android malware campaign dubbed “Tria Stealer,” which exploits fake wedding invitations to lure users into installing malicious apps (APK files). Malware Campaign Overview The campaign primarily targets users in Malaysia and Brunei, with Malaysia experiencing the most significant impact. Analysis indicates the operation originates from an […]

The post New Android Malware Exploiting Wedding Invitations to Steal Victims WhatsApp Messages appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Proton, the globally recognized provider of privacy-focused services such as Proton VPN and Proton Pass, is facing scrutiny after the discovery of severe memory protection vulnerabilities in its products. Despite having established itself as a trusted name for safeguarding user data, these flaws could expose sensitive personal information, including encrypted VPN traffic and credit card […]

The post 500 Million Proton VPN & Pass Users at Risk Due to Memory Protection Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The cybersecurity landscape faces increasing challenges as Arcus Media ransomware emerges as a highly sophisticated threat. This Ransomware-as-a-Service (RaaS) operation, first observed in May 2024, has rapidly evolved, executing coordinated attacks that disrupt critical processes, encrypt data, and hinder recovery efforts. With more than 50 major attacks claimed across industries, Arcus Media demonstrates the growing […]

The post Arcus Media Ransomware Strikes: Files Locked, Backups Erased, and Remote Access Disabled appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Proofpoint researchers have identified a marked increase in phishing campaigns and malicious domain registrations designed to exploit tax filing season. These operations, targeting countries such as the UK, US, Switzerland, and Australia, leverage tax-related themes to dupe victims into divulging sensitive information or making fraudulent payments. This surge in activity aligns with the yearly patterns […]

The post Hackers Impersonate Top Tax Firm with 40,000 Phishing Messages to Steal Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent investigation by Unit 42 of Palo Alto Networks has uncovered a sophisticated, state-sponsored cyberespionage operation, tracked as CL-STA-0048. The campaign targeted high-value organizations in South Asia, particularly a telecommunications company. Employing rare tactics and tools, the attackers leveraged unique payload delivery methods and exploited vulnerabilities in widely used services such as IIS, Apache […]

The post Cybercriminals Exploit Public-Facing IIS, Apache, and SQL Servers to Breach Gov & Telecom Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Doppler, the leading provider of secrets management solutions, announced a new integration with Datadog, a cloud application monitoring and security platform. This collaboration provides engineering and operations teams with an integrated solution for securely managing sensitive credentials and gaining insights into cloud environments through real-time monitoring. In an era of rapid cloud adoption, DevOps and […]

The post Doppler Announces Integration with Datadog to Streamline Security and Monitoring appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft has introduced “Administrator Protection” (AP), a sophisticated security feature aimed at elevating Windows operating system security by redefining how administrative privileges are managed and reducing the risk of privilege escalation attacks. Detailed in its latest technical blog post, this feature marks a pivotal step in advancing user protection and mitigating vulnerabilities rooted in legacy […]

The post Microsoft Enhances Windows 11 Security with Admin Protection to Prevent Crowdstrike-Like Incident appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued seven Industrial Control Systems (ICS) advisories, highlighting critical vulnerabilities in systems vital to industrial and operational processes. These advisories aim to enhance awareness and encourage mitigation strategies to maintain the security and integrity of ICS environments. Below, we delve into the details of each advisory […]

The post CISA Releases Seven ICS Advisories to Strengthen Cybersecurity Posture appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a recent discovery by Socket researchers, a malicious npm package named postcss-optimizer has been identified as an operation spearheaded by the North Korean state-sponsored group, Lazarus Advanced Persistent Threat (APT). Tied to past campaigns and employing code-level similarities, the package is linked to the Contagious Interview subgroup of Lazarus, infamously targeting software developers through […]

The post Lazarus Group Drop Malicious NPM Packages in Developers Systems Remotely appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent investigation conducted by STRIKE, a division of SecurityScorecard, has unveiled the intricate and far-reaching operation of the Lazarus Group, a North Korean advanced persistent threat (APT) group. Dubbed “Operation Phantom Circuit,” the campaign highlights a deliberate and sophisticated effort to infiltrate global systems through compromised software supply chains and advanced Command-and-Control (C2) infrastructure. […]

The post Lazarus Hackers Tamper with Software Packages to Gain Backdoor Access to the Victims Device appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.