Category: GBHackers

Corporate Users 3x More Likely Targeted by Phishing Than Malware – SpyCloud Report
05
Dec
2025

Corporate Users 3x More Likely Targeted by Phishing Than Malware – SpyCloud Report

Austin, TX, USA, December 4th, 2025, CyberNewsWire Phishing has surged 400% year-over-year, highlighting need for real-time visibility into identity exposures….

K7 Antivirus Flaw Lets Attackers Gain SYSTEM-Level Privileges
04
Dec
2025

K7 Antivirus Flaw Lets Attackers Gain SYSTEM-Level Privileges

A critical security vulnerability has been discovered in K7 Ultimate Security antivirus software that allows attackers to gain the highest…

CISA Issues Five New ICS Advisories on Emerging Vulnerabilities and Exploits
04
Dec
2025

CISA Issues Five New ICS Advisories on Emerging Vulnerabilities and Exploits

The Cybersecurity and Infrastructure Security Agency (CISA) released five critical advisories on December 2, 2025, addressing high-severity vulnerabilities affecting industrial…

WordPress Plugin Vulnerability Under Active Attack, Allowing Remote Code Execution
04
Dec
2025

WordPress Plugin Vulnerability Under Active Attack, Allowing Remote Code Execution

A severe remote code execution vulnerability in the Sneeit Framework WordPress plugin is under active exploitation, with attackers launching thousands…

Marquis Data Breach Exposes Dozens of U.S. Banks and Credit Unions
04
Dec
2025

Marquis Data Breach Exposes Dozens of U.S. Banks and Credit Unions

A significant cybersecurity incident affecting multiple U.S. financial institutions came to light on November 26, 2025, when Marquis Software Solutions…

Hackers Weaponize Velociraptor DFIR for Stealthy C2 and Ransomware Deployment
04
Dec
2025

Hackers Weaponize Velociraptor DFIR for Stealthy C2 and Ransomware Deployment

Threat actors are increasingly weaponizing Velociraptor, a legitimate open-source digital forensics and incident response (DFIR) tool, to establish command-and-control (C2)…

Akamai Fixes HTTP Request Smuggling Flaw in Edge Servers
04
Dec
2025

Akamai Fixes HTTP Request Smuggling Flaw in Edge Servers

Akamai has fixed a vulnerability in its edge servers that could have allowed HTTP Request Smuggling attacks. The issue was…

Sryxen’ Malware Uses Headless Browser Trick to Bypass Chrome Protections
04
Dec
2025

Sryxen’ Malware Uses Headless Browser Trick to Bypass Chrome Protections

A new Windows-focused information stealer dubbed “Sryxen” is drawing attention in the security community for its blend of modern browser…

Vim for Windows Flaw Lets Attackers Execute Arbitrary Code
04
Dec
2025

Vim for Windows Flaw Lets Attackers Execute Arbitrary Code

A high security vulnerability has been discovered in Vim for Windows that could allow attackers to run malicious code on…

New Scanner Released to Detect Exposed ReactJS and Next.js RSC Endpoints (CVE-2025-55182)
04
Dec
2025

New Scanner Released to Detect Exposed ReactJS and Next.js RSC Endpoints (CVE-2025-55182)

Security researchers have released a specialized scanning tool to identify vulnerable React Server Component (RSC) endpoints in modern web applications,…

PickleScan Uncovers 0-Day Vulnerabilities Allowing Arbitrary Code Execution via Malicious PyTorch Models
04
Dec
2025

PickleScan Uncovers 0-Day Vulnerabilities Allowing Arbitrary Code Execution via Malicious PyTorch Models

JFrog Security Research has uncovered three critical zero-day vulnerabilities in PickleScan, a widely-adopted industry-standard tool for scanning machine learning models…

Hackers Actively Exploit New Windows LNK 0-Day Vulnerability
04
Dec
2025

Hackers Actively Exploit New Windows LNK 0-Day Vulnerability

A newly discovered security flaw in Windows shortcut files is being actively used by hackers to target diplomatic organisations. The…