Category: GBHackers

Lazarus Group Targets Windows 11 with ClickFix Tactics and Fake Job Offers
28
Aug
2025

Lazarus Group Targets Windows 11 with ClickFix Tactics and Fake Job Offers

The notorious Lazarus advanced persistent threat (APT) organization, which Qi’anxin internally tracks as APT-Q-1, has been seen using the ClickFix…

Share: X : Lazarus Group Targets Windows 11 with ClickFix Tactics and Fake Job OffersFacebook : Lazarus Group Targets Windows 11 with ClickFix Tactics and Fake Job OffersLinkedin : Lazarus Group Targets Windows 11 with ClickFix Tactics and Fake Job OffersReddit : Lazarus Group Targets Windows 11 with ClickFix Tactics and Fake Job OffersTelegram : Lazarus Group Targets Windows 11 with ClickFix Tactics and Fake Job OffersWhatsApp : Lazarus Group Targets Windows 11 with ClickFix Tactics and Fake Job OffersEmail : Lazarus Group Targets Windows 11 with ClickFix Tactics and Fake Job Offers
ShadowSilk Targets Penetration-Testing Tools and Public Exploits to Breach Organizations
28
Aug
2025

ShadowSilk Targets Penetration-Testing Tools and Public Exploits to Breach Organizations

Cybersecurity experts discovered an advanced persistent threat (APT) cluster called ShadowSilk in a thorough research published by Group-IB. Since at…

Share: X : ShadowSilk Targets Penetration-Testing Tools and Public Exploits to Breach OrganizationsFacebook : ShadowSilk Targets Penetration-Testing Tools and Public Exploits to Breach OrganizationsLinkedin : ShadowSilk Targets Penetration-Testing Tools and Public Exploits to Breach OrganizationsReddit : ShadowSilk Targets Penetration-Testing Tools and Public Exploits to Breach OrganizationsTelegram : ShadowSilk Targets Penetration-Testing Tools and Public Exploits to Breach OrganizationsWhatsApp : ShadowSilk Targets Penetration-Testing Tools and Public Exploits to Breach OrganizationsEmail : ShadowSilk Targets Penetration-Testing Tools and Public Exploits to Breach Organizations
U.S. Treasury Sanctions North Korean IT Worker Network Funding Weapons Programs
28
Aug
2025

U.S. Treasury Sanctions North Korean IT Worker Network Funding Weapons Programs

The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has imposed sanctions on Russian national Vitaliy Sergeyevich…

Share: X : U.S. Treasury Sanctions North Korean IT Worker Network Funding Weapons ProgramsFacebook : U.S. Treasury Sanctions North Korean IT Worker Network Funding Weapons ProgramsLinkedin : U.S. Treasury Sanctions North Korean IT Worker Network Funding Weapons ProgramsReddit : U.S. Treasury Sanctions North Korean IT Worker Network Funding Weapons ProgramsTelegram : U.S. Treasury Sanctions North Korean IT Worker Network Funding Weapons ProgramsWhatsApp : U.S. Treasury Sanctions North Korean IT Worker Network Funding Weapons ProgramsEmail : U.S. Treasury Sanctions North Korean IT Worker Network Funding Weapons Programs
New Research Explores Emulating Scattered Spider Tactics in Real-World Scenarios
28
Aug
2025

New Research Explores Emulating Scattered Spider Tactics in Real-World Scenarios

Experts have described methods for mimicking the strategies of the advanced persistent threat (APT) group Scattered Spider in a recent…

Share: X : New Research Explores Emulating Scattered Spider Tactics in Real-World ScenariosFacebook : New Research Explores Emulating Scattered Spider Tactics in Real-World ScenariosLinkedin : New Research Explores Emulating Scattered Spider Tactics in Real-World ScenariosReddit : New Research Explores Emulating Scattered Spider Tactics in Real-World ScenariosTelegram : New Research Explores Emulating Scattered Spider Tactics in Real-World ScenariosWhatsApp : New Research Explores Emulating Scattered Spider Tactics in Real-World ScenariosEmail : New Research Explores Emulating Scattered Spider Tactics in Real-World Scenarios
Cisco Nexus 3000 & 9000 Vulnerability Enables DoS Attacks
28
Aug
2025

Cisco Nexus 3000 & 9000 Vulnerability Enables DoS Attacks

Cisco has issued a high-severity security advisory warning of a dangerous vulnerability in its Nexus 3000 and 9000 Series switches…

Share: X : Cisco Nexus 3000 & 9000 Vulnerability Enables DoS AttacksFacebook : Cisco Nexus 3000 & 9000 Vulnerability Enables DoS AttacksLinkedin : Cisco Nexus 3000 & 9000 Vulnerability Enables DoS AttacksReddit : Cisco Nexus 3000 & 9000 Vulnerability Enables DoS AttacksTelegram : Cisco Nexus 3000 & 9000 Vulnerability Enables DoS AttacksWhatsApp : Cisco Nexus 3000 & 9000 Vulnerability Enables DoS AttacksEmail : Cisco Nexus 3000 & 9000 Vulnerability Enables DoS Attacks
Using dMSAs for Credential Theft and Lateral Movement in AD
28
Aug
2025

Using dMSAs for Credential Theft and Lateral Movement in AD

Akamai researchers evaluated Microsoft’s patch for the BadSuccessor vulnerability (CVE-2025-53779) to determine its scope and limitations. While the update effectively…

Share: X : Using dMSAs for Credential Theft and Lateral Movement in ADFacebook : Using dMSAs for Credential Theft and Lateral Movement in ADLinkedin : Using dMSAs for Credential Theft and Lateral Movement in ADReddit : Using dMSAs for Credential Theft and Lateral Movement in ADTelegram : Using dMSAs for Credential Theft and Lateral Movement in ADWhatsApp : Using dMSAs for Credential Theft and Lateral Movement in ADEmail : Using dMSAs for Credential Theft and Lateral Movement in AD
CISA Issues Alert on Citrix NetScaler 0-Day RCE Exploited in the Wild
28
Aug
2025

CISA Issues Alert on Citrix NetScaler 0-Day RCE Exploited in the Wild

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert after detecting active exploitation of a critical zero-day…

Share: X : CISA Issues Alert on Citrix NetScaler 0-Day RCE Exploited in the WildFacebook : CISA Issues Alert on Citrix NetScaler 0-Day RCE Exploited in the WildLinkedin : CISA Issues Alert on Citrix NetScaler 0-Day RCE Exploited in the WildReddit : CISA Issues Alert on Citrix NetScaler 0-Day RCE Exploited in the WildTelegram : CISA Issues Alert on Citrix NetScaler 0-Day RCE Exploited in the WildWhatsApp : CISA Issues Alert on Citrix NetScaler 0-Day RCE Exploited in the WildEmail : CISA Issues Alert on Citrix NetScaler 0-Day RCE Exploited in the Wild
New TamperedChef Attack Uses Weaponized PDF Editor to Steal Sensitive Data and Login Credentials
28
Aug
2025

New TamperedChef Attack Uses Weaponized PDF Editor to Steal Sensitive Data and Login Credentials

Cybersecurity researchers at Truesec have uncovered a sophisticated malware campaign distributing a weaponized PDF editor under the guise of “AppSuite…

Share: X : New TamperedChef Attack Uses Weaponized PDF Editor to Steal Sensitive Data and Login CredentialsFacebook : New TamperedChef Attack Uses Weaponized PDF Editor to Steal Sensitive Data and Login CredentialsLinkedin : New TamperedChef Attack Uses Weaponized PDF Editor to Steal Sensitive Data and Login CredentialsReddit : New TamperedChef Attack Uses Weaponized PDF Editor to Steal Sensitive Data and Login CredentialsTelegram : New TamperedChef Attack Uses Weaponized PDF Editor to Steal Sensitive Data and Login CredentialsWhatsApp : New TamperedChef Attack Uses Weaponized PDF Editor to Steal Sensitive Data and Login CredentialsEmail : New TamperedChef Attack Uses Weaponized PDF Editor to Steal Sensitive Data and Login Credentials
New Research and PoC Reveal Security Risks in LLM-Based Coding
28
Aug
2025

New Research and PoC Reveal Security Risks in LLM-Based Coding

A recent investigation has uncovered that relying solely on large language models (LLMs) to generate application code can introduce critical…

Share: X : New Research and PoC Reveal Security Risks in LLM-Based CodingFacebook : New Research and PoC Reveal Security Risks in LLM-Based CodingLinkedin : New Research and PoC Reveal Security Risks in LLM-Based CodingReddit : New Research and PoC Reveal Security Risks in LLM-Based CodingTelegram : New Research and PoC Reveal Security Risks in LLM-Based CodingWhatsApp : New Research and PoC Reveal Security Risks in LLM-Based CodingEmail : New Research and PoC Reveal Security Risks in LLM-Based Coding
CISA Releases Guide to Hunt and Mitigate Chinese State-Sponsored Threats
28
Aug
2025

CISA Releases Guide to Hunt and Mitigate Chinese State-Sponsored Threats

The Cybersecurity and Infrastructure Security Agency (CISA) unveiled a comprehensive Cybersecurity Advisory (CSA) designed to empower network defenders to detect,…

Share: X : CISA Releases Guide to Hunt and Mitigate Chinese State-Sponsored ThreatsFacebook : CISA Releases Guide to Hunt and Mitigate Chinese State-Sponsored ThreatsLinkedin : CISA Releases Guide to Hunt and Mitigate Chinese State-Sponsored ThreatsReddit : CISA Releases Guide to Hunt and Mitigate Chinese State-Sponsored ThreatsTelegram : CISA Releases Guide to Hunt and Mitigate Chinese State-Sponsored ThreatsWhatsApp : CISA Releases Guide to Hunt and Mitigate Chinese State-Sponsored ThreatsEmail : CISA Releases Guide to Hunt and Mitigate Chinese State-Sponsored Threats
Over 28,000 Citrix Servers at Risk from Active 0-Day RCE Exploit
28
Aug
2025

Over 28,000 Citrix Servers at Risk from Active 0-Day RCE Exploit

A critical zero-day remote code execution (RCE) vulnerability is currently threatening the security of over 28,000 Citrix instances worldwide. The flaw, designated…

Share: X : Over 28,000 Citrix Servers at Risk from Active 0-Day RCE ExploitFacebook : Over 28,000 Citrix Servers at Risk from Active 0-Day RCE ExploitLinkedin : Over 28,000 Citrix Servers at Risk from Active 0-Day RCE ExploitReddit : Over 28,000 Citrix Servers at Risk from Active 0-Day RCE ExploitTelegram : Over 28,000 Citrix Servers at Risk from Active 0-Day RCE ExploitWhatsApp : Over 28,000 Citrix Servers at Risk from Active 0-Day RCE ExploitEmail : Over 28,000 Citrix Servers at Risk from Active 0-Day RCE Exploit
Microsoft Teams Flaw Prevents Users From Accessing Embedded Office Files
28
Aug
2025

Microsoft Teams Flaw Prevents Users From Accessing Embedded Office Files

A widespread service disruption is currently affecting Microsoft Teams users across the globe, preventing access to embedded Office documents within the collaboration…

Share: X : Microsoft Teams Flaw Prevents Users From Accessing Embedded Office FilesFacebook : Microsoft Teams Flaw Prevents Users From Accessing Embedded Office FilesLinkedin : Microsoft Teams Flaw Prevents Users From Accessing Embedded Office FilesReddit : Microsoft Teams Flaw Prevents Users From Accessing Embedded Office FilesTelegram : Microsoft Teams Flaw Prevents Users From Accessing Embedded Office FilesWhatsApp : Microsoft Teams Flaw Prevents Users From Accessing Embedded Office FilesEmail : Microsoft Teams Flaw Prevents Users From Accessing Embedded Office Files