Linux Malware Attacking Apache, Docker, Redis & Confluence
A sophisticated malware campaign targeting servers running popular web-facing services such as Apache Hadoop YARN, Docker, Confluence, and Redis has been identified. This campaign is…
Category: GBHackers
Cisco Small Business Access Let Attackers Inject Commands
Cisco has alerted its customers to critical vulnerabilities in the web-based management interface of its Small Business 100, 300, and 500 Series Wireless Access Points…
VMware Critical Flaws Let Attackers Execute Remote Code
Vulnerabilities in VMware software expose it to remote execution of code by threat actors due to critical defects. These are found in different parts of…
PetSmart warns of Active Password Cracking Attacks
PetSmart, Inc. is a renowned retail chain operating in the United States, Canada, and Puerto Rico. It offers a comprehensive range of pet products and…
Hackers Use Number of Legitimate Tools in Ransomware Attacks
Ransomware attacks remain a formidable challenge for organizations worldwide. These attacks not only encrypt critical data, rendering it inaccessible to the rightful owners but increasingly…
Hackers Exploiting iOS 0-Day To Attack iPhones
Apple releases emergency fixes to address two new zero-day vulnerabilities in iOS that impact iPhones. The two zero-day vulnerabilities were discovered in RTKit, tracked as…
NSA Details Seven Pillars Of Zero Trust
The National Security Agency (NSA) issued a Cybersecurity Information Sheet (CSI) that discusses limiting adversary lateral movement within an organization’s network to access sensitive data and…
Hackers Abuse QEMU Hardware Emulator for C2 Communication
QEMU is an open-source platform that provides a secure and private virtualized space for trying out malicious codes, exploits, and attacks on their own environments. …
OpenNMS XSS Flaw Let Attackers Inject JavaScript Payload
A critical vulnerability in OpenNMS, a widely used network monitoring solution, has been identified, allowing attackers to inject malicious JavaScript payloads through a Cross-Site Scripting…
American Express Credit Card Information Exposed
American Express has recently notified its customers of a data breach involving a third-party service provider, marking a security incident that has potentially compromised customer…
225,000+ ChatGPT credentials Up For Sale on Dark Web Markets
A prominent cybersecurity technology creator, has released its latest report, “Hi-Tech Crime Trends 2023/2024,” highlighting critical global cyber threats. The report reveals a concerning trend…
Hackers Install macOS Malware Via Weaponised Calendar Invites
Hackers use weaponized calendar invites to exploit vulnerabilities in email systems, tricking users into clicking on malicious links or downloading malware disguised as event attachments. …