Category: GBHackers

Rogue Account‑Creation Flaw Leaves 100 K WordPress Sites Exposed
10
Apr
2025

Rogue Account‑Creation Flaw Leaves 100 K WordPress Sites Exposed

A severe vulnerability has been uncovered in the SureTriggers WordPress plugin, which could leave over 100,000 websites at risk. The…

Shuckworm Group Leverages GammaSteel Malware in Targeted PowerShell Attacks
10
Apr
2025

Shuckworm Group Leverages GammaSteel Malware in Targeted PowerShell Attacks

The Russia-linked cyber-espionage group known as Shuckworm (also identified as Gamaredon or Armageddon) has been observed targeting a Western country’s…

ViperSoftX Malware Spreads Through Cracked Software, Targeting Unsuspecting Users
10
Apr
2025

ViperSoftX Malware Spreads Through Cracked Software, Targeting Unsuspecting Users

AhnLab Security Intelligence Center (ASEC) has unearthed a complex cyber campaign in which attackers, suspected to be Arabic speakers, have…

Sapphire Werewolf Upgrades Arsenal With Amethyst Stealer Targeting Energy Firms
10
Apr
2025

Sapphire Werewolf Upgrades Arsenal With Amethyst Stealer Targeting Energy Firms

Why Application Security is Non-Negotiable The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application…

SonicWall Patches Multiple Vulnerabilities in NetExtender Windows Client
10
Apr
2025

SonicWall Patches Multiple Vulnerabilities in NetExtender Windows Client

Why Application Security is Non-Negotiable The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application…

Dell Alerts Users to Critical PowerScale OneFS Flaws Enabling Account Takeover
10
Apr
2025

Dell Alerts Users to Critical PowerScale OneFS Flaws Enabling Account Takeover

Why Application Security is Non-Negotiable The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application…

Langflow AI Builder Vulnerability Allows Remote Server Takeover by Attackers
10
Apr
2025

Langflow AI Builder Vulnerability Allows Remote Server Takeover by Attackers

A critical security vulnerability has been discovered in the Langflow AI Builder, a popular tool for creating agentic AI workflows….

Powerful Post-Exploitation Toolkit for Active Directory Attacks
10
Apr
2025

Powerful Post-Exploitation Toolkit for Active Directory Attacks

Why Application Security is Non-Negotiable The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application…

Hackers Claim WooCommerce Breach Exposing 4.4 Million Customer Records
10
Apr
2025

Hackers Claim WooCommerce Breach Exposing 4.4 Million Customer Records

A hacker operating under the alias “Satanic” has claimed responsibility for a massive data breach involving WooCommerce, a leading e-commerce…

Microsoft Identity Web Flaw Exposes Sensitive Client Secrets and Certificates
10
Apr
2025

Microsoft Identity Web Flaw Exposes Sensitive Client Secrets and Certificates

A new vulnerability has been discovered in the Microsoft.Identity.Web NuGet package under specific conditions, potentially exposing sensitive information such as…

AkiraBot Floods 80,000 Sites After Outsmarting CAPTCHAs and Slipping Past Network Defenses
10
Apr
2025

AkiraBot Floods 80,000 Sites After Outsmarting CAPTCHAs and Slipping Past Network Defenses

AkiraBot, identified by SentinelLABS, represents a sophisticated spam bot framework that targets website chats and contact forms to promote low-quality…

APT32 Turns GitHub into a Weapon Against Security Teams and Enterprise Networks
10
Apr
2025

APT32 Turns GitHub into a Weapon Against Security Teams and Enterprise Networks

Southeast Asian Advanced Persistent Threat (APT) group OceanLotus, also known as APT32, has been identified as employing GitHub to conduct…