Category: GBHackers

Entro Security Labs Releases Non-Human Identities Research Security Advisory - GBHackers Security
16
Sep
2024

Entro Security Labs Releases Non-Human Identities Research Security Advisory – GBHackers Security

Analysis of millions of real-world NHI secrets by Entro Security Labs reveals widespread, significant risks, emphasizes need for improved Secrets…

Windows MSHTML Zero-Day Vulnerability Exploited In The Wild
16
Sep
2024

Windows MSHTML Zero-Day Vulnerability Exploited In The Wild

Adobe released eight security updates in September 2024, addressing 28 vulnerabilities in various products, as ColdFusion received a critical patch…

Critical Vulnerabilities Impact Million of D-Link Routers, Patch Now!
16
Sep
2024

Critical Vulnerabilities Impact Million of D-Link Routers, Patch Now!

Millions of D-Link routers are at risk due to several critical vulnerabilities. Security researcher Raymond identified these vulnerabilities, which have…

Medusa Ransomware Exploiting Fortinet Flaw For Sophisticated Ransomware Attacks
16
Sep
2024

Medusa Ransomware Exploiting Fortinet Flaw For Sophisticated Ransomware Attacks

Medusa, a relatively new ransomware group, has gained notoriety for its dual-pronged online presence. Unlike its peers, Medusa maintains a…

Azure API Management Vulnerability Let Attackers Escalate Privileges
16
Sep
2024

Azure API Management Vulnerability Let Attackers Escalate Privileges

A vulnerability in Azure API Management (APIM) has been identified. It allows attackers to escalate privileges and access sensitive information….

Spring Framework Vulnerability Let Attackers obtain Any Files from the System
16
Sep
2024

Spring Framework Vulnerability Let Attackers obtain Any Files from the System

A newly discovered vulnerability in the Spring Framework has been identified, potentially allowing attackers to access any file on the…

CISA Urges Agencies to Upgrade or Remove End-of-Life Ivanti Appliance
16
Sep
2024

CISA Urges Agencies to Upgrade or Remove End-of-Life Ivanti Appliance

The Cybersecurity and Infrastructure Security Agency (CISA) has called upon federal agencies and organizations to take immediate action concerning a…

Crimson Palace Returns With New Hacking Tolls And Tactics
16
Sep
2024

Crimson Palace Returns With New Hacking Tolls And Tactics

Cluster Bravo, despite its brief initial activity, subsequently targeted 11 organizations in the same region, as researchers found that these…

Kali Linux 2024.3 Released With New Hacking Tools
13
Sep
2024

Kali Linux 2024.3 Released With New Hacking Tools

Kali Linux 2024.3, the most recent iteration of Offensive Security’s highly regarded Debian-based distribution designed for ethical hacking and penetration…

Hacker Tricks ChatGPT to Get Details for Making Homemade Bombs
13
Sep
2024

Hacker Tricks ChatGPT to Get Details for Making Homemade Bombs

A hacker known as Amadon has reportedly managed to bypass the safety protocols of ChatGPT, a popular AI chatbot developed…

Citrix Workspace App Vulnerable to Privilege Escalation Attacks
13
Sep
2024

Citrix Workspace App Vulnerable to Privilege Escalation Attacks

Citrix released a security bulletin (CTX691485) detailing two critical vulnerabilities in the Citrix Workspace app for Windows. These vulnerabilities, identified…

Beware Of Weaponized Excel Document That Delivers Fileless Remcos RAT
13
Sep
2024

Beware Of Weaponized Excel Document That Delivers Fileless Remcos RAT

A recent advanced malware campaign leverages a phishing attack to deliver a seemingly benign Excel file that exploits CVE-2017-0199. By…