Category: GBHackers

Windows CLFS Zero-Day Vulnerability Actively Exploited in the Wild
14
May
2025

Windows CLFS Zero-Day Vulnerability Actively Exploited in the Wild

Microsoft has disclosed two critical security vulnerabilities in the Windows Common Log File System (CLFS) Driver that are currently being…

Microsoft Alerts on AD CS Flaw Enabling Remote Denial-of-Service Attacks
14
May
2025

Microsoft Alerts on AD CS Flaw Enabling Remote Denial-of-Service Attacks

Microsoft has issued a security advisory for a newly identified vulnerability in Active Directory Certificate Services (AD CS), tracked as…

Weaponized PyPI Package Targets Developers to Steal Source Code
14
May
2025

Weaponized PyPI Package Targets Developers to Steal Source Code

Security researchers at RL have discovered a malicious Python package called “solana-token” on PyPI that is intended to prey on…

Chinese Hackers Exploit SAP NetWeaver Zero-Day Vulnerability to Target Critical Infrastructure
14
May
2025

Chinese Hackers Exploit SAP NetWeaver Zero-Day Vulnerability to Target Critical Infrastructure

EclecticIQ analysts have uncovered a sophisticated cyber-espionage campaign orchestrated by China-nexus nation-state Advanced Persistent Threats (APTs) targeting critical infrastructure worldwide….

Researchers Unveil New Threat-Hunting Techniques to Detect Azure Managed Identity Abuse
14
May
2025

Researchers Unveil New Threat-Hunting Techniques to Detect Azure Managed Identity Abuse

A group of cybersecurity specialists from Hunters, working under the prestigious Team Axon, have presented sophisticated threat-hunting techniques in a…

Windows Ancillary for WinSock 0-Day Vulnerability Actively Exploited to Gain Admin Access.
14
May
2025

Windows Ancillary for WinSock 0-Day Vulnerability Actively Exploited to Gain Admin Access.

Microsoft has confirmed active exploitation of a critical privilege escalation vulnerability in the Windows Ancillary Function Driver for WinSock, tracked…

New Microsoft Scripting Engine Vulnerability Exposes Systems to Remote Code Attacks
14
May
2025

New Microsoft Scripting Engine Vulnerability Exposes Systems to Remote Code Attacks

Critical zero-day vulnerability in Microsoft’s Scripting Engine (CVE-2025-30397) has been confirmed to enable remote code execution (RCE) attacks over networks,…

Critical 0-Day in Windows DWM Enables Privilege Escalation
14
May
2025

Critical 0-Day in Windows DWM Enables Privilege Escalation

Microsoft has disclosed a significant security vulnerability (CVE-2025-30400) affecting the Windows Desktop Window Manager (DWM) that is actively being exploited…

Critical 0-Day in Windows DWM Enables Privilege Escalation
14
May
2025

Critical 0-Day in Windows DWM Enables Privilege Escalation

Microsoft has disclosed a significant security vulnerability (CVE-2025-30400) affecting the Windows Desktop Window Manager (DWM) that is actively being exploited…

Swan Vector APT Targets Organizations with Malicious LNK and DLL Implants
13
May
2025

Swan Vector APT Targets Organizations with Malicious LNK and DLL Implants

A newly identified advanced persistent threat (APT) campaign, dubbed “Swan Vector” by Seqrite Labs, has been targeting educational institutions and…

Researchers Introduce Mythic Framework Agent to Enhance Pentesting Tool Performance
13
May
2025

Researchers Introduce Mythic Framework Agent to Enhance Pentesting Tool Performance

Penetration testing is still essential for upholding strong security procedures in a time when cybersecurity threats are changing quickly. Recently,…

Microsoft Patch Tuesday May 2025 Released With the Fixes for 72 Flaws With 5 Actively Exploited 0-Day
13
May
2025

Microsoft Patch Tuesday May 2025 Released With the Fixes for 72 Flaws With 5 Actively Exploited 0-Day

CVE Number CVE Title Impact Max Severity CVE-2025-29966 Remote Desktop Client Remote Code Execution Vulnerability Remote Code Execution Critical CVE-2025-29967…