Category: GBHackers

Researchers Exploited Windows Charset Conversion Feature to Execute Remote Code
27
Jan
2025

Researchers Exploited Windows Charset Conversion Feature to Execute Remote Code

Researchers have exposed a systemic vulnerability within the Windows operating system, leveraging its “Best-Fit” charset conversion feature to bypass security…

GitLab Security Update - Patch for Multiple Vulnerabilities
27
Jan
2025

GitLab Security Update – Patch for Multiple Vulnerabilities

Free Webinar – DevSecOps Hacks By embedding security into your CI/CD workflows, you can shift left, streamline your DevSecOps processes,…

Critical Vulnerability in Meta Llama Framework Let Remote Attackers Execute Arbitrary Code
27
Jan
2025

Critical Vulnerability in Meta Llama Framework Let Remote Attackers Execute Arbitrary Code

The Oligo Research team has disclosed a critical vulnerability in Meta’s widely used Llama-stack framework. This vulnerability, tracked as CVE-2024-50050, allows…

INE Security Alert: Expediting CMMC 2.0 Compliance - GBHackers Security
26
Jan
2025

INE Security Alert: Expediting CMMC 2.0 Compliance – GBHackers Security

Free Webinar – DevSecOps Hacks By embedding security into your CI/CD workflows, you can shift left, streamline your DevSecOps processes,…

370+Ivanti Connect Secure Exploited Using 0-Day Vulnerability
24
Jan
2025

370+Ivanti Connect Secure Exploited Using 0-Day Vulnerability

A major cybersecurity incident has come to light, with more than 370 Ivanti Connect Secure (ICS) devices reportedly compromised through…

HellCat and Morpheus Ransomware Share Identical Payloads for Attacks
24
Jan
2025

HellCat and Morpheus Ransomware Share Identical Payloads for Attacks

The cybersecurity landscape witnessed a surge in ransomware activity during the latter half of 2024 and into early 2025, with…

Salt Typhoon Hacked Nine U.S. Telecoms, Tactics and Techniques Revealed
24
Jan
2025

Salt Typhoon Hacked Nine U.S. Telecoms, Tactics and Techniques Revealed

Salt Typhoon, a state-sponsored Advanced Persistent Threat (APT) group linked to the People’s Republic of China (PRC), has executed one…

Subaru’s STARLINK Connected Car’s Vulnerability Let Attackers Gain Restricted Access
24
Jan
2025

Subaru’s STARLINK Connected Car’s Vulnerability Let Attackers Gain Restricted Access

In a groundbreaking discovery on November 20, 2024, cybersecurity researchers Shubham Shah and a colleague unearthed a major security vulnerability…

PayPal Fined $2 Million Fine For Violating Cybersecurity Regulations
24
Jan
2025

PayPal Fined $2 Million Fine For Violating Cybersecurity Regulations

The New York State Department of Financial Services (NYDFS) has imposed a $2 million penalty on PayPal, Inc. for breaches…

Android Kisok Tablets Vulnerability Let Attackers Control AC & Lights
24
Jan
2025

Android Kisok Tablets Vulnerability Let Attackers Control AC & Lights

A startling security flaw found in Android-based kiosk tablets at luxury hotels has exposed a grave vulnerability, potentially allowing attackers…

Server Configurations and TLS Certificates Revealed
24
Jan
2025

Server Configurations and TLS Certificates Revealed

In a recent technical investigation, researchers uncovered critical insights into the infrastructure linked to a suspected Chinese state-backed cyber actor…

CISA Releases Six ICS Advisories Details Security Issues
24
Jan
2025

CISA Releases Six ICS Advisories Details Security Issues

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued six Industrial Control Systems (ICS) advisories addressing vulnerabilities in a range…