CISA Warns Of Active Exploitation Of Flaws In Fortinet, Ivanti & Nice Linear
A recent security alert warns of three critical vulnerabilities actively exploited in the wild, of which the first is CVE-2023-48788, an SQL injection vulnerability in…
Category: GBHackers
Customers Data Exposed Via Vendor
Giant Tiger, a prominent Ottawa-based discount retailer, has announced a breach of customer data. This incident, linked to a third-party vendor responsible for managing the…
CISA & FBI Warns that Hackers Use SQL Injection Vulnerabilities
Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have warned technology manufacturers and their customers about the persistent threat posed…
StrelaStealer Malware Hacked 100+ Organizations
Strelastealer malware has been found to be distributed in large-scale campaigns that have currently impacted over 100 organizations across the U.S. and EU. The malware…
Microsoft To Ban 50+ Products For Users In Russia
Softline Group, a major IT solutions provider, has confirmed the suspension of access to cloud products offered by Microsoft, Amazon, and Google for Russian customers.…
170K+ User Accounts Hacked by Using Fake Python Infrastructure
Over 170,000 users have fallen victim to a meticulously orchestrated scheme exploiting the Python software supply chain. The Checkmarx Research team has uncovered a multi-faceted…
Russian Hackers Attacking Political Parties In Recent Cyber Attacks
Political parties are often targeted by hackers since they want to achieve various goals. This is because hackers may attempt to access confidential data like…
Beware of New ‘HelloFire’ Ransomware Actor Mimic as a Pentester
A new threat is the emergence of a ransomware encryptor dubbed ‘HelloFire.’ This new player in the cybercrime arena is employing deceptive tactics to disguise…
Hackers Claiming Unauthorized Access to the Fortinet Devices
Hackers have claimed unauthorized access to Fortinet devices across various companies. This breach highlights cybercriminals’ persistent threat to corporate security infrastructures and the importance of…
Hackers Transform the Raspberry Pi into an Online Anonymity Tool – GBHackers on Security
A new tool, GEOBOX, was advertised on the Dark Web that utilizes Raspberry Pi devices for fraud and anonymization, allowing users to spoof GPS locations,…
Sign1 Malware Hijacked 39,000 WordPress Websites
A client’s website was experiencing random pop-ups as server side scanner logs revealed a JavaScript injection related to Sign1, which is a malware campaign that…
Hackers Deploy STRRAT & VCURMS Malware on Windows Via GitHub
A new phishing campaign targets users with emails containing a button to “verify payment information.” Clicking the button triggers the download of a malicious JAR…