Category: GBHackers

Subaru’s STARLINK Connected Car’s Vulnerability Let Attackers Gain Restricted Access
24
Jan
2025

Subaru’s STARLINK Connected Car’s Vulnerability Let Attackers Gain Restricted Access

In a groundbreaking discovery on November 20, 2024, cybersecurity researchers Shubham Shah and a colleague unearthed a major security vulnerability…

PayPal Fined $2 Million Fine For Violating Cybersecurity Regulations
24
Jan
2025

PayPal Fined $2 Million Fine For Violating Cybersecurity Regulations

The New York State Department of Financial Services (NYDFS) has imposed a $2 million penalty on PayPal, Inc. for breaches…

Android Kisok Tablets Vulnerability Let Attackers Control AC & Lights
24
Jan
2025

Android Kisok Tablets Vulnerability Let Attackers Control AC & Lights

A startling security flaw found in Android-based kiosk tablets at luxury hotels has exposed a grave vulnerability, potentially allowing attackers…

Server Configurations and TLS Certificates Revealed
24
Jan
2025

Server Configurations and TLS Certificates Revealed

In a recent technical investigation, researchers uncovered critical insights into the infrastructure linked to a suspected Chinese state-backed cyber actor…

CISA Releases Six ICS Advisories Details Security Issues
24
Jan
2025

CISA Releases Six ICS Advisories Details Security Issues

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued six Industrial Control Systems (ICS) advisories addressing vulnerabilities in a range…

Beware of Fake Captcha Verifications Spreading Lumma Malware
24
Jan
2025

Beware of Fake Captcha Verifications Spreading Lumma Malware

In January, Netskope Threat Labs uncovered a sophisticated global malware campaign leveraging fake CAPTCHA pages to deliver the Lumma Stealer…

Juniper Routers Exploited via Magic Packet Vulnerability to Deploy Custom Backdoor
24
Jan
2025

Juniper Routers Exploited via Magic Packet Vulnerability to Deploy Custom Backdoor

A sophisticated cyber campaign dubbed “J-magic” has been discovered targeting enterprise-grade Juniper routers with a backdoor attack that leverages a…

SonicWall Arbitrary OS Commands Execution Vulnerability Exploited in Attacks
23
Jan
2025

SonicWall Arbitrary OS Commands Execution Vulnerability Exploited in Attacks

 A critical vulnerability in SonicWall’s SMA1000 series tracked as CVE-2025-23006, has come under active exploitation by threat actors. SonicWall’s PSIRT (Product…

Murdoc Botnet Exploiting AVTECH Cameras & Huawei Routers to Gain Complete Control
23
Jan
2025

Murdoc Botnet Exploiting AVTECH Cameras & Huawei Routers to Gain Complete Control

Researchers have identified an active malware campaign involving a Mirai botnet variant, dubbed Murdoc, which has been targeting AVTECH cameras…

AI Assistant Jailbreaked to Reveal its System Prompts
23
Jan
2025

AI Assistant Jailbreaked to Reveal its System Prompts

Anonymous tinkerer claims to have bypassed an AI assistant’s safeguards to uncover its highly confidential system prompt—the underlying instructions shaping…

Open-Source ClamAV Releases Security Update for Buffer Overflow Vulnerability
23
Jan
2025

Open-Source ClamAV Releases Security Update for Buffer Overflow Vulnerability

ClamAV, a widely used open-source antivirus software, has released security patch updates to address a critical buffer overflow vulnerability (CVE-2025-20128)….

Rails Apps Arbitrary File Write Vulnerability Let Attackers Execute Code Remotely
23
Jan
2025

Rails Apps Arbitrary File Write Vulnerability Let Attackers Execute Code Remotely

A newly exposed vulnerability in Ruby on Rails applications allows attackers to achieve Remote Code Execution (RCE) through a flaw…