Enterprise Device Management With QR Codes
Corporate mobile devices have become essential to everyday tasks for employees, but this convenience also comes with security risks. The challenge lies in managing and…
Category: GBHackers
Kali Linux 2023.3 Released: What’s New!
Kali Linux 2023.3 is now available, and it includes a variety of new packages and tools, as well as the usual upgrades. The release of…
GroundPeony Group Exploiting Zero-day Flaw
A cyber attack group – GroundPeony, targeting the Taiwanese government, was discovered in March 2023; it used several tactics, such as tampering with legitimate websites…
Hackers Threaten Patients Following Massive Cyberattack
One of the renowned hospitals in Israel became the victim of a data breach, and patients were blackmailed with a financial motive. According to an…
How Does it Strengthen Your Cyber Security
Cyberattacks are becoming increasingly sophisticated, threatening organizations’ critical infrastructure and sensitive data more than ever. Core solutions such as SIEMs are often insufficient to ensure…
Carderbee Hacking Group – Supply Chain Attack
For a supply chain attack and to plant the Korplug backdoor (aka PlugX) on the systems of the targeted victims, an unknown APT group was…
Apache XML Graphics Batik Flaw Exposes Sensitive Information
Two Server-Side Request Forgery (SSRF) vulnerabilities were found in Apache Batik, which could allow a threat actor to access sensitive information in Apache Batik. These…
Let Attackers Access Critical APIs
An unauthenticated critical API access vulnerability was found in the Ivanti Sentry interface, which could allow a threat actor to gain access to sensitive APIs…
Researchers Uncovered the Developer of CypherRAT & CraxsRAT
Researchers have identified a new Malware-as-a-Service (MaaS) operator called ‘EVLF DEV’ as being behind the creation of CypherRAT and CraxsRAT. EVLF has been selling CraxsRAT,…
Apache Ivy Injection Flaw Let Attackers Exfiltrate Sensitive Data
A blind XPath injection vulnerability was discovered in Apache Software Foundation Apache Ivy, which allows threat actors to exfiltrate data and access sensitive information that…
Juniper Networks Junos OS let Attacker Remotely Execute Code
Multiple vulnerabilities have been discovered on Junos OS, which can be combined to execute a preAuth remote code execution vulnerability on Junos OS on SRX…
DotRunpeX Injector Widely Delivers Known Malware Families to Attack Windows
DotRunpeX is one of the new and stealthiest .NET injectors that employs the “Process Hollowing” method, through which this malware distributes a diverse range of…