no alarms and no surprises please..

BADBOX Botnet Rises Again: 192,000+ Android Devices Compromised The BADBOX botnet is back and more dangerous than ever. Originally thought to have been dismantled, this cybercriminal operation has not only resurfaced but expanded, compromising over 192,000 Android-based devices… Go to gbhackers.com

Data Exfiltration and RCE Risks Found in Azure Data Factory’s Airflow Integration Unit 42 researchers have uncovered multiple vulnerabilities in Azure Data Factory’s managed Apache Airflow integration, potentially enabling attackers to achieve shadow administrator control, data exfiltration, and remote code execution. Apache… Go to gbhackers.com

High-Severity Vulnerabilities Fixed in Latest Chrome Release Google has released a crucial update for its Chrome browser, addressing five security vulnerabilities, several of which are rated as “High” severity. Users are strongly urged to update to the… Go to gbhackers.com

Fake CAPTCHAs Deliver Lumma Infostealer Malware in Massive Malvertising Campaign A large-scale malvertising campaign analyzed by Guardio Labs exposes how fake CAPTCHA prompts are used to deliver the Lumma infostealer malware. This sophisticated operation highlights the dark side of Internet… Go to gbhackers.com

Discover the Advanced Techniques and Capabilities of Nova: A Snake Keylogger Fork Nova, a newly discovered fork of the infamous Snake Keylogger family, is a growing challenge in cybersecurity. According to research conducted by ANY.RUN, this variant employs advanced techniques to steal… Go to gbhackers.com

RCE and DoS Vulnerabilities Addressed in Apache Tomcat: CVE-2024-50379 and CVE-2024-54677 The Apache Software Foundation has released important security updates to address two vulnerabilities in Apache Tomcat, a widely-used open-source web server, and servlet container. One of the vulnerabilities could allow… Go to gbhackers.com

CVE-2024-53376: CyberPanel Flaw Exposes Systems to Full Compromise, PoC Published Security researcher Thanatos has uncovered a critical vulnerability (CVE-2024-53376) in CyberPanel, a popular web hosting control panel, that could allow attackers to completely compromise servers. Versions of CyberPanel prior to… Go to gbhackers.com

New Malware “I2PRAT” Exploits Anonymous I2P Network for Stealthy Command and Control A new malware campaign, identified as I2PRAT (I2P Remote Access Trojan), is raising the bar for cybercriminals’ ability to evade detection. Detailed in a report by Banu Ramakrishnan, a Malware… Go to gbhackers.com

CVE-2024-55949 (CVSS 9.3): Critical MinIO Flaw Allows Any User to Gain Full Admin Privileges A newly discovered vulnerability in MinIO, the popular open-source object storage platform, could allow any user to escalate their privileges to the administrator level, posing a significant risk to data… Go to gbhackers.com

HiatusRAT Campaign Targets Web Cameras and DVRs: FBI Warns of Rising IoT Exploits The FBI, in collaboration with CISA, has issued a new alert regarding the HiatusRAT malware campaign. The latest iteration of the campaign has shifted its focus to Internet of Things… Go to gbhackers.com

DLL Side-Loading Strikes Again: Yokai Backdoor Bypasses Security Cybersecurity researchers from Netskope have uncovered a new side-loaded backdoor, dubbed Yokai, targeting Thai officials through decoy documents and a legitimate application. This campaign highlights the continued use of DLL… Go to gbhackers.com

Why Merchant Management Software is a Must-Have for Modern Banks and Payment Service Providers In today’s rapidly evolving financial ecosystem, banks and payment service providers (PSPs) face increasing demands for efficiency, scalability, and compliance. Merchant management software has emerged as a critical tool to… Go to gbhackers.com

CVE-2024-49112 (CVSS 9.8): Critical Windows LDAP Flaw Puts Networks at Risk of Remote Takeover Microsoft has disclosed a critical Remote Code Execution (RCE) vulnerability in its Lightweight Directory Access Protocol (LDAP) service, tracked as CVE-2024-49112. Released as part of the company’s December Patch Tuesday… Go to gbhackers.com

Zero-Click HomeKit Exploit Used to Spy on Serbian Journalists A new report by Amnesty International reveals that NSO Group’s Pegasus spyware was used to target iPhones belonging to Serbian journalists and activists. The attacks were conducted using a zero-click… Go to gbhackers.com

Hackers exploit critical Apache Struts RCE flaw (CVE-2024-53677) after PoC exploit release Threat actors have begun exploiting a critical vulnerability in the Apache Struts framework, CVE-2024-53677, just days after a proof-of-concept (PoC) exploit was published online. Rated 9.5 on the CVSSv4 severity… Go to gbhackers.com

CVE-2024-55661: RCE Vulnerability Discovered in Laravel Pulse Monitoring Tool A serious security flaw has been discovered in Laravel Pulse, a popular real-time application performance monitoring and dashboard tool for Laravel applications. Tracked as CVE-2024-55661, this vulnerability could allow authenticated… Go to gbhackers.com

Threat Actors Exploit Fake Brand Collaborations to Target YouTube Channels A recent report from CloudSek’s Threat Researcher Team exposes a highly sophisticated phishing campaign that targets popular YouTube channels through fraudulent brand collaboration offers. Threat actors behind this scheme employ… Go to gbhackers.com

Hackers Hack Hackers: MUT-1244 Steals Credentials in Deceptive GitHub Attack According to Datadog Security Labs, a cybercriminal group known as MUT-1244 has launched a sophisticated attack campaign that successfully compromised not only regular users but also other hackers and security… Go to gbhackers.com

OpenAI Services Hit by Major Outage Due to Telemetry Service Deployment OpenAI experienced a significant service disruption on December 11, 2024, impacting all its services, including ChatGPT, the API, and Sora. The outage, lasting over four hours, was caused by a… Go to gbhackers.com

CVE-2024-38819: Spring Framework Path Traversal PoC Exploit Released A critical vulnerability in the Spring Framework, tracked as CVE-2024-38819 (CVSS score 7.5), has been publicly disclosed, along with a proof-of-concept (PoC) exploit. This flaw allows attackers to conduct path… Go to gbhackers.com

Open Sesame Attack: Ruijie Networks Devices Vulnerable to Remote Takeover In a critical revelation highlighting the vulnerabilities of IoT ecosystems, Team82 has published a report detailing 10 security flaws in Ruijie Networks’ Reyee cloud management platform and its associated Reyee… Go to gbhackers.com

CVE-2024-45337: Golang Crypto Library Flawed, Risks Authorization Bypass A critical security vulnerability, tracked as CVE-2024-45337 (CVSS 9.1), has been discovered in the Golang cryptography library. This flaw stems from the misuse of the ServerConfig.PublicKeyCallback function, potentially leading to authorization… Go to gbhackers.com

Russian APT “Secret Blizzard” Leverages Cybercriminal Tools in Ukraine Attacks A new report from Microsoft Threat Intelligence reveals that the Russian state-sponsored threat actor known as Secret Blizzard (also tracked as Turla, Waterbug, Venomous Bear, Snake, Turla Team, and Turla… Go to gbhackers.com

Google Ads Abused in Graphic Design Malvertising Attack Silent Push Threat Analysts have revealed a widespread malvertising campaign exploiting Google Ads to target graphic design professionals. This ongoing operation, active since November, utilizes domains hosted on dedicated IP… Go to gbhackers.com

Citrix Alerts on Global Password Spraying Campaigns Targeting NetScaler Appliances Citrix has issued an advisory highlighting an increase in password spraying attacks aimed at NetScaler appliances worldwide. These attacks exploit authentication endpoints, causing significant operational disruptions for targeted organizations. Unlike… Go to gbhackers.com

CVE-2024-11053 (CVSS 9.1): Curl Vulnerability Exposes User Credentials in Redirects A recently discovered vulnerability in the popular curl command line tool and library, tracked as CVE-2024-11053 and assigned a CVSS score of 9.1, could lead to the unintended exposure of… Go to gbhackers.com

New Android Banking Trojan Targets Indian Users Through Fake Apps McAfee Labs has revealed the discovery of a new Android banking trojan targeting Indian users, exploiting the country’s dependence on utility and banking apps to steal sensitive financial information. This… Go to gbhackers.com

Critical Microsoft Azure MFA Bypass Exposed: What You Need to Know Oasis Security’s research team has unveiled a critical vulnerability in Microsoft Azure’s Multi-Factor Authentication (MFA) system, exposing millions of users to potential breaches. The bypass technique allows attackers to gain… Go to gbhackers.com

IOCONTROL Malware: CyberAv3ngers’ Weapon of Choice Targets Critical Infrastructure A sophisticated malware strain dubbed “IOCONTROL” has emerged as a significant threat to industrial control systems (ICS) and Internet of Things (IoT) devices, particularly in Israel and the United States…. Go to gbhackers.com