Hackers Bypass Cloudflare Firewall & DDoS using Cloudflare
Cloudflare, a prominent cybersecurity vendor renowned for its web protection services, faces a security challenge that could expose its customers to unforeseen risks. A recent…
Category: GBHackers
Lazarus Tricking Employees with Trojanized Coding Challenges
Lazarus group has been recently discovered to have targeted an Aerospace company in Spain, which involved deploying several tools, including an undocumented backdoor named “LightlessCan.”…
LightSpy APT Attacking WeChat Users to Steal Payment Data
LightSpy malware, responsible for a watering hole attack conducted against iOS users in Hong Kong, has been discovered to be embedded with Android implant Core…
Budworm APT Attacking Telecoms Org With New Custom Tools
APT (Advanced Persistent Threat) actors are evolving at a rapid pace, continually enhancing their toolsets and tactics. They adapt quickly to security measures, leveraging advanced…
APT34 Employs Weaponized Word Documents to Deploy Malware
APT34 is a secretive cyberespionage group specializing in Middle East targets, known for gathering sensitive intelligence via spear phishing and advanced infiltration methods. The sophistication…
Malicious HDMI Cables Steals Photos, Videos, and Location Data
John Bumstead, who works for a company called 404Media that fixes and sells used electronics, found an iPhone-to-HDMI adapter that seemed normal at first. However,…
Cisco Patches IOS software Zero-day Exploited in Attacks
Cisco has issued fixes to address a vulnerability in the GET VPN feature of IOS and IOS XE software that has been exploited in attacks.…
Hackers Inject Malicious Ads into GPT-4 Powered Bing Chat
In February 2023, Microsoft unveiled its revolutionary AI-assisted search engine, Bing Chat, driven by OpenAI’s cutting-edge GPT-4 technology. This announcement marked a notable event in…
Progress S/W Warns of Critical Vulnerability in WS_FTP Server
Multiple vulnerabilities have been discovered in Progress’s WS_FTP, which include .NET deserialization, directory traversal, reflected cross-site scripting (XSS), SQL injection, stored cross-site scripting, cross-site request…
ZeroFont Phishing-Hackers Manipulates Font Size to Bypass Office
A new but ancient technique for Phishing emails has been recently identified called ZeroFont Phishing. Threat actors have followed several tactics for sending phishing emails,…
ZYXEL Buffer Overflow vulnerability – Attacker Launch DoS Attack
ZYXEL has been discovered with a Buffer Overflow vulnerability on their ZYXEL-PMG2005-T20B device, which can result in a denial-of-service condition. This condition exists due to…
Case Study: Blocking Botnet-Driven Low-Rate HTTP DDoS Attacks
Indusface research on 1400+ websites recorded a significant surge in DDoS attacks and bot attacks during Q2, 2023, compared to Q1, 2023. We observed a…