GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

Microsoft has addressed three critical security flaws in its Office suite, including two vulnerabilities rated Critical and one Important, all enabling remote code execution (RCE) via use-after-free memory corruption weaknesses. These vulnerabilities, disclosed between March and May 2025, expose systems to attacks where malicious actors could execute arbitrary code by enticing users to open specially […]

The post Critical Microsoft Office Vulnerabilities Enable Malicious Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft has disclosed two critical vulnerabilities in its Windows Remote Desktop services that could allow attackers to execute arbitrary code on vulnerable systems over a network. Designated CVE-2025-29966 and CVE-2025-29967, these heap-based buffer overflow flaws affect the Windows Remote Desktop Protocol (RDP) and Remote Desktop Gateway (RD Gateway) service, respectively. Both vulnerabilities carry a CVSS […]

The post New Windows RDP Vulnerability Enables Network-Based Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft has disclosed a significant security vulnerability (CVE-2025-30400) affecting the Windows Desktop Window Manager (DWM) that is actively being exploited in the wild. The flaw, rated as “Important” with a CVSS score of 7.8, allows attackers with local access to elevate their privileges on affected systems. This zero-day vulnerability involves a use-after-free memory condition that […]

The post Critical 0-Day in Windows DWM Enables Privilege Escalation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft has released its May 2025 Patch Tuesday updates, addressing 72 security vulnerabilities across its software portfolio, including Windows, Microsoft Office, Azure, and Visual Studio. Microsoft patched a total of 72 vulnerabilities, including 29 related to Remote Code Execution, 18 to Elevation of Privilege, 14 to Information Disclosure, 7 to Denial of Service, and 2 […]

The post Microsoft Patch Tuesday May 2025 Released With the Fixes for 72 Flaws With 5 Actively Exploited 0-Day appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Ivanti, a leading enterprise software provider, has released critical security updates addressing vulnerabilities across several products, including Endpoint Manager Mobile (EPMM), Neurons for ITSM (on-premises), Cloud Services Application (CSA), and Neurons for MDM (N-MDM). These vulnerabilities, ranging from medium to critical severity, could allow attackers to execute remote code, gain administrative access, escalate privileges, or […]

The post Ivanti Released Security Updates to Fix for the Mutiple RCE Vulnerabilities – Patch Now appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical stack-based buffer overflow vulnerability (CWE-121) has been discovered in multiple Fortinet products, including FortiVoice, FortiMail, FortiNDR, FortiRecorder, and FortiCamera. A critical zero-day vulnerability in FortiVoice systems is being actively exploited in the wild. It allows unauthenticated attackers to execute arbitrary code or commands remotely through specially crafted HTTP requests, which poses a significant […]

The post Fortinet FortiVoice Zero-day Vulnerability Actively Exploited in The Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The 2025 Third-Party Breach Report from Black Kite highlights a staggering 123% surge in ransomware attacks during 2024, driven largely by sophisticated exploitation of third-party vendor ecosystems. As cybercriminals refine their tactics, third-party vendors have emerged as the predominant entry point for some of the most catastrophic breaches in recent history. The report underscores how […]

The post Ransomware Attacks Surge by 123% Amid Evolving Tactics and Strategies appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Penetration testing is still essential for upholding strong security procedures in a time when cybersecurity threats are changing quickly. Recently, a team of security professionals has announced significant advancements in penetration testing tools with the introduction of a new agent for the Mythic framework, aimed at improving detection evasion and operational efficiency. Framework Overview The […]

The post Researchers Introduce Mythic Framework Agent to Enhance Pentesting Tool Performance appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly identified advanced persistent threat (APT) campaign, dubbed “Swan Vector” by Seqrite Labs, has been targeting educational institutions and mechanical engineering industries in East Asian nations, particularly Taiwan and Japan. Discovered in April 2025, this campaign leverages intricate social engineering tactics, primarily through spearphishing attachments disguised as resumes and financial documents. The initial infection […]

The post Swan Vector APT Targets Organizations with Malicious LNK and DLL Implants appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors have successfully exploited the widely-used open-source password manager, KeePass, to spread malware and facilitate large-scale password theft. The attack, which was reported by WithSecure’s Incident Response team, involved modifying and re-signing KeePass installers with trusted certificates to deliver a custom malware loader dubbed KeeLoader. Malware Delivery Through KeePass The infection chain began with […]

The post Hackers Weaponize KeePass Password Manager to Spread Malware and Steal Passwords appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

British retail giant Marks & Spencer has officially confirmed that customer personal data was compromised during a cyber attack that began three weeks ago. The retailer revealed that the breach affects potentially millions of customers whose information has been stolen, though payment card details remain secure. The company is still struggling to restore its online […]

The post Marks & Spencer Confirms Customer Data Breach in Recent Cyber Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Zoom has released multiple security bulletins addressing seven newly discovered vulnerabilities in Zoom Workplace Apps, with one rated as high severity. All vulnerabilities were disclosed on May 13, 2025, and could potentially allow attackers to escalate privileges through various attack vectors. The most critical flaw involves a Time-of-check Time-of-use (TOCTOU) vulnerability that could lead to […]

The post Zoom Workplace Apps Flaws Allow Hackers to Gain Elevated Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers have disclosed a new macOS sandbox escape vulnerability tracked as CVE-2025-31258, accompanied by a proof-of-concept (PoC) exploit demonstrating partial sandbox bypass via Apple’s RemoteViewServices framework. The flaw, discovered by researcher wh1te4ever, exposes weaknesses in macOS’s inter-process communication (IPC) mechanisms that could enable attackers to execute arbitrary code outside application sandbox constraints. With the […]

The post PoC Exploit Published for macOS Sandbox Escape Vulnerability (CVE-2025-31258) appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The United States indicted fourteen North Korean nationals for orchestrating a sophisticated scheme to secure remote IT jobs at American companies and nonprofits using stolen identities. This operation, which has funneled at least $88 million USD to the North Korean government (DPRK) over the past six years, has raised alarm across industries, with Fortune 500 […]

The post Researchers Uncover Remote IT Job Fraud Scheme Involving North Korean Nationals appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A Türkiye-affiliated espionage threat actor, tracked by Microsoft Threat Intelligence as Marbled Dust (also known as Sea Turtle and UNC1326), has been exploiting a zero-day vulnerability in Output Messenger, a popular multiplatform chat software. Identified as CVE-2025-27920, this directory traversal flaw in the Output Messenger Server Manager application allows authenticated attackers to upload malicious files […]

The post Attackers Leverage Unpatched Output Messenger 0‑Day to Deliver Malicious Payloads appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cobalt Strike has announced the release of version 4.11.1, an out-of-band update addressing several critical issues discovered in the previous 4.11 release. The update primarily fixes a module stomping issue that could cause system crashes in specific circumstances, resolves problems with the “Enable SSL” checkbox functionality, and adds clearer deprecation warnings for stomp reflective loaders. […]

The post Cobalt Strike 4.11.1 Released With SSL Checkbox Fix appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Apple released critical security updates for macOS Sequoia 15.5 on May 12, 2025, addressing over 40 vulnerabilities across system components ranging from kernel-level memory corruption risks to app sandbox escapes. The patches target flaws that could allow attackers to access sensitive user data, trigger system crashes, or execute arbitrary code. Researchers from academic institutions and […]

The post Apple Releases Security Patches to Fix Critical Data Exposure Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Sophos Managed Detection and Response (MDR) in September 2024, the notorious Lumma Stealer malware has evolved with sophisticated PowerShell tools and advanced evasion tactics, leveraging fake CAPTCHA sites to deceive users. Active since mid-2022 and offered as Malware-as-a-Service (MaaS) by a presumed Russian developer, Lumma Stealer targets sensitive data such as passwords, session tokens, cryptocurrency […]

The post Lumma Stealer Upgraded with PowerShell Tools and Advanced Evasion Techniques appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybercriminals have unleashed a new malware campaign using fake AI video generation platforms as a lure. Dubbed Noodlophile Stealer, this previously undocumented infostealer targets unsuspecting users by exploiting their enthusiasm for AI-powered content creation tools. Disguised as legitimate services promising to transform images into videos, these fraudulent platforms-often promoted through viral social media campaigns and […]

The post New Noodlophile Malware Spreads Through Fake AI Video Generation Platforms appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The North Korean state-sponsored Advanced Persistent Threat (APT) group Kimsuky, also known as “Black Banshee,” has been active since at least 2012, targeting nations like South Korea, Japan, and the United States with sophisticated cyber espionage campaigns. Recently, new Indicators of Compromise (IOCs) shared via a tweet revealed a ZIP file containing malicious payloads, exposing […]

The post Kimsuky Hacker Group Deploys New Phishing Techniques and Malware Campaigns appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.