Category: GBHackers

Chinese Hackers Breach Belgium State Security Service as Investigation Continues
28
Feb
2025

Chinese Hackers Breach Belgium State Security Service as Investigation Continues

Belgium’s State Security Service (VSSE) has suffered what is being described as its most severe security breach to date. For…

New Pass-the-Cookie Attacks Bypass MFA, Giving Hackers Full Account Access
28
Feb
2025

New Pass-the-Cookie Attacks Bypass MFA, Giving Hackers Full Account Access

Multi-factor authentication (MFA), long considered a cornerstone of cybersecurity defense, is facing a formidable new threat: “Pass-the-Cookie” attacks. Recent findings reveal…

PingAM Java Agent Vulnerability Allows Attackers to Bypass Security
28
Feb
2025

PingAM Java Agent Vulnerability Allows Attackers to Bypass Security

A critical security flaw (CVE-2025-20059) has been identified in supported versions of Ping Identity’s PingAM Java Agent, potentially enabling attackers…

Chinese Hackers Exploit Check Point VPN Zero-Day to Target Organizations Globally
28
Feb
2025

Chinese Hackers Exploit Check Point VPN Zero-Day to Target Organizations Globally

A sophisticated cyberespionage campaign linked to Chinese state-sponsored actors has exploited a previously patched Check Point VPN vulnerability (CVE-2024-24919) to…

New GitHub Scam Uses Fake “Mods” and “Cracks” to Steal User Data
28
Feb
2025

New GitHub Scam Uses Fake “Mods” and “Cracks” to Steal User Data

A sophisticated malware campaign leveraging GitHub repositories disguised as game modifications and cracked software has been uncovered, exposing a dangerous…

DeepSeek Data Leak Exposes 12,000 Hardcoded API Keys and Passwords
28
Feb
2025

DeepSeek Data Leak Exposes 12,000 Hardcoded API Keys and Passwords

A sweeping analysis of the Common Crawl dataset—a cornerstone of training data for large language models (LLMs) like DeepSeek—has uncovered…

260 Domains Hosting 5,000 Malicious PDFs to Steal Credit Card Data
28
Feb
2025

260 Domains Hosting 5,000 Malicious PDFs to Steal Credit Card Data

Netskope Threat Labs uncovered a sprawling phishing operation involving 260 domains hosting approximately 5,000 malicious PDF files. These documents, disguised…

Winos4.0 Malware Targets Windows Users Through Malicious PDF Files
28
Feb
2025

Winos4.0 Malware Targets Windows Users Through Malicious PDF Files

A new wave of cyberattacks leveraging the Winos4.0 malware framework has targeted organizations in Taiwan through malicious PDF attachments disguised…

New Malware Uses Legitimate Antivirus Driver to Bypass All System Protections
28
Feb
2025

New Malware Uses Legitimate Antivirus Driver to Bypass All System Protections

In a concerning development, cybersecurity researchers at Trellix have uncovered a sophisticated malware campaign that exploits a legitimate antivirus driver…

DragonForce Attacks Critical Infrastructure to Exfiltrate Data and Halt Operations
27
Feb
2025

DragonForce Attacks Critical Infrastructure to Exfiltrate Data and Halt Operations

The DragonForce ransomware group has launched a significant cyberattack on critical infrastructure in Saudi Arabia, targeting a prominent real estate…

Threat Actors Attack Job Seekers of Fortune 500 Companies to Steal Personal Details
27
Feb
2025

Threat Actors Attack Job Seekers of Fortune 500 Companies to Steal Personal Details

In Q3 2024, Cofense Intelligence uncovered a targeted spear-phishing campaign aimed at employees working in social media, marketing, and related…

Unpatched Vulnerabilities Attract Cybercriminals as EDR Visibility Remains Limited
27
Feb
2025

Unpatched Vulnerabilities Attract Cybercriminals as EDR Visibility Remains Limited

Cyber adversaries have evolved into highly organized and professional entities, mirroring the operational efficiency of legitimate businesses, according to the…