GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

CyTwist, a leader in advanced next-generation threat detection solutions, has launched its patented detection engine to combat the insidious rise of AI-generated malware. The cybersecurity landscape is evolving as attackers harness the power of artificial intelligence (AI) to develop advanced and evasive threats. The rise of AI-generated malware and AI-enhanced cyberattacks has escalated the threat […]

The post CyTwist Launches Advanced Security Solution to Identify AI-Driven Cyber Threats in Minutes appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The January 2025 Android Security Bulletin has issued important updates regarding critical vulnerabilities that affect Android devices. Users are urged to ensure their devices are updated to the latest security patch level, which as per the bulletin, should be 2025-01-05 or later to mitigate potential risks. Overview of Vulnerabilities The bulletin highlights a series of […]

The post Android Security Updates: Patch for Critical RCE Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

India has unveiled its draft Digital Personal Data Protection Rules, designed to operationalize the Digital Personal Data Protection Act, 2023 (DPDP Act). As the nation strides forward in the digital age, these rules are pivotal in creating a framework that balances the protection of individual privacy with the need for innovation in a burgeoning digital […]

The post India’s Draft Digital Personal Data Protection Rules appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers have successfully infiltrated Argentina’s Airport Security Police (PSA) payroll system, raising alarms about the safety of sensitive personnel information. This incident has revealed significant vulnerabilities in employee data management, as attackers accessed confidential salary records and tampered with pay slips. Reports indicate that unauthorized deductions, ranging from 2,000 to 5,000 pesos, were made under […]

The post Hackers Compromised Argentina’s Airport Security Payroll System appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

An alarming new development emerged in the cybersecurity landscape with the release of a proof-of-concept (PoC) exploit targeting the critical vulnerability identified as CVE-2024-6387. This vulnerability, discovered by researchers at Qualys, allows remote unauthenticated attackers to execute arbitrary code on vulnerable OpenSSH servers, posing a significant risk to users relying on this widely utilized protocol […]

The post PoC Exploit Released for Critical OpenSSH Vulnerability (CVE-2024-6387) appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The popular cookie management extension EditThisCookie has been the target of a malicious impersonation. Originally a trusted tool for Chrome users, EditThisCookie allowed users to manage cookie data in their browsers. However, after significant scrutiny, the legitimate version has been removed from the Chrome Web Store, leaving users vulnerable to a fake extension that has […]

The post Malicious EditThisCookie Extension Attacking Chrome Users to Steal Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability has been identified in the popular UpdraftPlus: WP Backup & Migration Plugin, potentially impacting over 3 million WordPress websites. This security flaw allows unauthenticated attackers to exploit a PHP Object Injection vulnerability through deserialization of untrusted input. The issue affects all versions of the plugin up to and including 1.24.11. A patch […]

The post WordPress Plugin Vulnerability Exposes 3 Million Websites to Injection Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent blog post by developer Jeff Johnson has brought to light a new feature in Apple’s Photos app within the recently launched iOS 18. Titled “Enhanced Visual Search,” this toggle permits iPhones to transmit photo data to Apple by default, raising concerns about user privacy and data-sharing practices. Enhanced Visual Search: A New Feature […]

The post iPhone Sharing the Photos by Default to Apple appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

BARWM, a novel backdoor attack approach for real-world deep learning (DL) models deployed on mobile devices. Existing backdoor attacks often suffer from limitations such as altering the model structure or relying on easily detectable, sample-agnostic triggers.  By utilizing DNN-based steganography to generate sample-specific backdoor triggers that are imperceptible, it is able to circumvent these limitations. […]

The post Stealthy Steganography Backdoor Attacks Target Android Apps appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The researcher proposes a game-theoretic approach to analyze the interaction between the model defender and attacker in trigger-based black-box model watermarking.  They design payoff functions for both players and determine the optimal strategies for each player, which provides a theoretical foundation for future research on black-box model watermarking. A framework where a watermark is embedded […]

The post The Defender vs. The Attacker Game appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Python script leverages low-level interactions with the Windows operating system, which imports crucial libraries like `System.Reflection`, `ctypes`, and `wintypes`, enabling it to directly invoke Windows APIs.  It allows the script to manipulate system behavior at a fundamental level, potentially enabling actions like loading malicious payloads, modifying system settings, or evading security measures.  It is […]

The post Weaponized Python Scripts Deliver New SwaetRAT Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

An attacker with physical access can abruptly restart the device and dump RAM, as analysis of this memory may reveal FVEK keys from recently running Windows instances, compromising data encryption.  The effectiveness of this attack is, however, limited because the data stored in RAM degrades rapidly after the power is cut off. The script flashimage.sh […]

The post Windows 11 BitLocker Bypassed to Extract Encryption Keys appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Attackers published 20 malicious npm packages impersonating legitimate Nomic Foundation and Hardhat plugins, where these packages, downloaded over 1,000 times, compromised development environments and potentially backdoored production systems and resulted in financial losses. They are utilizing Ethereum smart contracts, such as 0xa1b40044EBc2794f207D45143Bd82a1B86156c6b, to store and distribute Command & Control (C2) server addresses to compromised systems, […]

The post Malicious npm Packages Stealing Developers’ Sensitive Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Garak is a free, open-source tool specifically designed to test the robustness and reliability of Large Language Models (LLMs). Inspired by utilities like Nmap or Metasploit, Garak identifies potential weak points in LLMs by probing for issues such as hallucinations, data leakage, prompt injections, toxicity, jailbreak effectiveness, and misinformation propagation. This guide covers everything you […]

The post Garak – An Open Source LLM Vulnerability Scanner for AI Red-Teaming appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Tenable Holdings, Inc. has confirmed the passing of its esteemed Chairman and Chief Executive Officer, Amit Yoran, who succumbed to cancer on January 3, 2025. Yoran, aged 54, was a distinguished figure in the cybersecurity realm, known for his visionary leadership and relentless drive to enhance digital security. Amit Yoran’s remarkable career in cybersecurity spanned […]

The post Cybersecurity Firm Tenable’s CEO “Amit Yoran” has Died at 54 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Within today’s fast-changing global society, effective training is vital for personal and professional success. However, traditional methods often do not provide enough flexibility or personalization options. In light of this, learning experience platforms (LXPs) have revolutionized how organizations and individuals approach learning and skills development. These sophisticated digital systems offer learners of all kinds an […]

The post How Learning Experience Platforms Are Transforming Training appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers have released a proof of concept (PoC) exploit for a critical privilege escalation vulnerability affecting Microsoft Windows. This vulnerability, CVE-2024-43452, allows attackers to gain elevated privileges on a compromised system, potentially leading to unchecked access to sensitive data and critical system resources. Vulnerability Details The Windows Registry database stores configuration settings and options for […]

The post Windows Registry Privilege Escalation Vulnerability – PoC Released appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

LegionLoader, a C/C++ downloader malware, first seen in 2019, delivers payloads like malicious Chrome extensions, which can manipulate emails, track browsing, and even transform infected browsers into proxies for attackers, enabling them to browse the web with the victim’s credentials. It has been observed distributing various stealers through Chrome extensions since August 2024, including LummaC2, […]

The post LegionLoader Abusing Chrome Extensions To Deliver Infostealer Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a recent security advisory, ASUS has alerted users to critical vulnerabilities affecting several of its router models.  These flaws, tracked as CVE-2024-12912 and CVE-2024-13062, pose severe risks by allowing attackers to execute arbitrary commands on compromised devices. ASUS has advised users to act immediately by updating their routers to stay protected. About the Vulnerabilities The two vulnerabilities […]

The post ASUS Critical Vulnerabilities Let Attackers Execute Arbitrary Commands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

NTT Docomo, one of Japan’s leading telecommunications and IT service providers, experienced a massive disruption on January 2, 2025, after a Distributed Denial of Service (DDoS) attack targeted its network infrastructure. The attack resulted in widespread service irregularities affecting customers for nearly 11 hours, from 5:27 a.m. until 4:10 p.m. Services Impacted The cyberattack caused […]

The post NTT Docomo Hit by DDoS Attack, Services Disrupted for 11 Hours appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.