Category: GBHackers

Threat Actors Exploit Ivanti Connect Secure Flaws to Deploy Cobalt Strike Beacon
18
Jul
2025

Threat Actors Exploit Ivanti Connect Secure Flaws to Deploy Cobalt Strike Beacon

Threat actors have been actively exploiting vulnerabilities in Ivanti Connect Secure, specifically CVE-2025-0282 and CVE-2025-22457, to deploy advanced malware, including…

Microsoft Defender for Office 365 Gets Enhanced Threat Dashboard
18
Jul
2025

Microsoft Defender for Office 365 Gets Enhanced Threat Dashboard

Microsoft has announced significant transparency improvements for its email security platform, introducing a new customer-facing dashboard that provides detailed visibility…

Grafana Flaws Allow User Redirection and Code Execution in Dashboards
18
Jul
2025

Grafana Flaws Allow User Redirection and Code Execution in Dashboards

Grafana Labs has released critical security patches addressing two significant vulnerabilities that could enable attackers to redirect users to malicious…

Google Sues BadBox 2.0 Botnet Operators Behind 10 Million+ Infected Devices
18
Jul
2025

Google Sues BadBox 2.0 Botnet Operators Behind 10 Million+ Infected Devices

Google has initiated legal proceedings against the operators of BadBox 2.0, identified as the largest botnet comprising internet-connected televisions and…

Sophos Intercept X for Windows Flaws Enable Arbitrary Code Execution
18
Jul
2025

Sophos Intercept X for Windows Flaws Enable Arbitrary Code Execution

Sophos has disclosed three critical security vulnerabilities in its Intercept X for Windows endpoint security solution that could allow attackers…

New QR Code Attacks Through PDFs Bypass Detection and Steal Credentials
18
Jul
2025

New QR Code Attacks Through PDFs Bypass Detection and Steal Credentials

Researchers at Cyble Research and Intelligence Labs (CRIL) have uncovered an ongoing quishing campaign dubbed “Scanception,” which exploits QR code-based…

Ubiquiti UniFi Vulnerability Lets Hackers Inject Malicious Commands
18
Jul
2025

Ubiquiti UniFi Vulnerability Lets Hackers Inject Malicious Commands

A critical security vulnerability has been discovered in Ubiquiti’s UniFi Access devices that could allow malicious actors to inject and…

BIND 9 Vulnerabilities Enable Cache Poisoning and Service Disruption
18
Jul
2025

BIND 9 Vulnerabilities Enable Cache Poisoning and Service Disruption

The Internet Systems Consortium (ISC) has disclosed two critical security vulnerabilities in BIND 9, one of the most widely used…

Signal App Clone Vulnerability Actively Exploited for Password Theft
18
Jul
2025

Signal App Clone Vulnerability Actively Exploited for Password Theft

A critical vulnerability in TeleMessageTM SGNL, an enterprise messaging platform modeled after Signal, is being actively exploited by threat actors…

Hackers Abuse DNS Blind Spots to Stealthily Deliver Malware
18
Jul
2025

Hackers Abuse DNS Blind Spots to Stealthily Deliver Malware

Cybersecurity researchers have uncovered a sophisticated technique where threat actors are exploiting DNS infrastructure to covertly store and distribute malware,…

UNG0002 Actors Weaponize LNK Files via ClickFix Fake CAPTCHA Pages
17
Jul
2025

UNG0002 Actors Weaponize LNK Files via ClickFix Fake CAPTCHA Pages

Cybersecurity researchers at Seqrite Labs have identified a sophisticated espionage group designated as UNG0002 (Unknown Group 0002) that has been…

Chinese State-Sponsored Hackers Target Semiconductor Industry with Weaponized Cobalt Strike
17
Jul
2025

Chinese State-Sponsored Hackers Target Semiconductor Industry with Weaponized Cobalt Strike

Proofpoint Threat Research has identified a sophisticated multi-pronged cyberespionage campaign targeting Taiwan’s semiconductor industry between March and June 2025. Three…