no alarms and no surprises please..

Why Should Gamers Use a Proxy? Feature Gaming Without Proxy Gaming With Proxy Ping and Latency High ping, leading to lag Reduced ping for smoother gameplay Geo-Restrictions Limited access to some servers Unblocks restricted gaming servers… Go to gbhackers.com

Zero-Day Attack Alert: Corrupted Files Weaponized in New Attacks A new 0-day attack leverages file corruption to slip past antivirus and sandbox defenses. A sophisticated new phishing campaign is leveraging a novel technique to bypass traditional security measures, delivering… Go to gbhackers.com

Cyber Monday Scams: Unmasking the Shadows of Online Shopping Cyber Monday, a day eagerly awaited by shoppers for its irresistible deals, has become a hunting ground for cybercriminals leveraging the surge in online activity to execute sophisticated scams. CloudSEK’s… Go to gbhackers.com

Bologna FC Suffers Major Data Breach in Ransomware Attack Serie A club falls victim to RansomHub, exposing sensitive player, financial, and operational data. Bologna FC 1909 S.p.a. has officially confirmed a targeted ransomware attack on its internal security systems,… Go to gbhackers.com

Windows 10 ESU Cracked: Free Security Updates on the Horizon? The MAS team, led by developer @Massgravel, has reportedly bypassed the paid Extended Security Updates (ESU) program for Windows 10, potentially allowing users to receive security updates for free even… Go to gbhackers.com

Microsoft Clarifies Windows 11 Installation on Unsupported Devices: Proceed with Caution Microsoft has updated its support documentation regarding Windows 11 installation on devices that don’t meet the minimum system requirements. While the company still advises against this practice, the updated documentation… Go to gbhackers.com

MediaTek Patches High-Severity Vulnerability in Smartphone Chipsets (CVE-2024-20125) MediaTek has released its latest Product Security Bulletin, addressing a high-severity vulnerability that could lead to unauthorized access and control of user devices. The vulnerability, identified as CVE-2024-20125, allows attackers… Go to gbhackers.com

Windows Server 2012 Users Beware: 0day Vulnerability Bypasses Mark of the Web Security ACROS Security, the creators of 0patch micropatching technology, have uncovered a zero-day vulnerability affecting Windows Server 2012 and Server 2012 R2. This vulnerability allows malicious actors to circumvent the “Mark… Go to gbhackers.com

Critical Vulnerabilities Discovered in IBM Security Verify Access Appliance Security researchers have disclosed multiple critical vulnerabilities affecting IBM Security Verify Access Appliance, a widely deployed solution for web application access management and authentication. IBM has issued a security bulletin… Go to gbhackers.com

Security Alert: Bootkitty Bootkit Targets Linux via UEFI Vulnerability (CVE-2023-40238) Security researchers from Binarly and ESET have uncovered “Bootkitty,” the first-ever UEFI bootkit designed to target Linux systems. This new threat exploits the LogoFAIL vulnerability (CVE-2023-40238), a UEFI firmware flaw,… Go to gbhackers.com

Hackers vs. LED Indicators: Why Tape Remains the Ultimate Camera Shield A few years ago, a viral photo of Mark Zuckerberg’s laptop revealed a simple yet effective security measure: tape covering the webcam. It was a moment that ignited global conversations… Go to gbhackers.com

Operation “Code on Toast”: A Deep Dive into TA-RedAnt’s Exploitation of Zero-Day Flaw (CVE-2024-38178) North Korean-linked hacking group TA-RedAnt has been implicated in a sophisticated large-scale cyber attack dubbed “Operation Code on Toast,” targeting unsuspecting users through a novel Internet Explorer (IE) vulnerability. Security… Go to gbhackers.com

CVE-2024-52336 & CVE-2024-52337: Vulnerabilities in Linux Tuned Daemon The SUSE Security Team has uncovered two vulnerabilities in the Linux Tuned daemon, a critical tool for runtime hardware and kernel optimization. These vulnerabilities, tracked as CVE-2024-52336 (CVSS 7.8) and… Go to gbhackers.com

CVE-2024-11980 (CVSS 10): Critical Flaw in Billion Electric Routers TWCERT/CC disclosed multiple vulnerabilities affecting several Billion Electric router models, including the M100, M150, M120N, and M500. These vulnerabilities range in severity, with the most critical (CVE-2024-11980) receiving a CVSSv3… Go to gbhackers.com

CVE-2024-8672 (CVSS 9.9): Critical Flaw in Widget Options Plugin Threatens 100,000+ Websites A critical security vulnerability (CVE-2024-8672) in the popular “Widget Options” plugin, which boasts over 100,000 active installations, has been patched in the latest release (version 4.0.8). This vulnerability, assigned a… Go to gbhackers.com

Over-the-Air Vulnerabilities in Advantech EKI Access Points Put Industrial Networks at Risk Industrial environments are increasingly relying on wireless technologies to power critical operations. However, a recent report from Nozomi Networks Labs reveals that this technological shift is exposing industrial networks to… Go to gbhackers.com

CVE-2024-52338: Critical Security Flaw in Apache Arrow R Package Allows Arbitrary Code Execution The Apache Software Foundation has addressed a critical security vulnerability (CVE-2024-52338) in the Apache Arrow R package. This vulnerability, impacting versions 4.0.0 through 16.1.0, could allow attackers to execute arbitrary… Go to gbhackers.com

Malicious PyPI Package Targets Cryptocurrency Wallets: aiocpa Campaign Exposed Cybersecurity researchers at ReversingLabs have uncovered a stealthy supply chain attack targeting cryptocurrency wallets via the PyPI repository. The malicious package, named aiocpa, posed as a legitimate crypto client tool,… Go to gbhackers.com

ShadowHound: Enhancing Active Directory Reconnaissance with a Stealthy and Efficient Ingestor Abstract In the realm of offensive security assessments, the need for discreet and effective Active Directory (AD) reconnaissance is paramount. Traditional methods often rely on introducing external binaries, increasing the… Go to gbhackers.com

CVE-2024-11667: Critical Vulnerability in Zyxel Firewalls Actively Exploited CERT Germany (CERT-Bund) and Zyxel have warned of actively exploiting a critical vulnerability in Zyxel firewalls. This vulnerability tracked as CVE-2024-11667, is being leveraged to deploy Helldown ransomware, with initial… Go to gbhackers.com

Zero-Day in Active Directory Certificate Services: Researcher Exposes CVE-2024-49019 with PoC Security researchers from TrustedSec have uncovered a critical zero-day vulnerability, CVE-2024-49019, affecting Active Directory Certificate Services (AD CS). This flaw exploits a feature of version 1 certificate templates, allowing attackers… Go to gbhackers.com

Evasive Malware Campaign Leverages CleverSoar Installer & Nidhogg Rootkit Rapid7 Labs has uncovered a sophisticated malware campaign employing the newly identified CleverSoar installer, a highly evasive threat targeting Chinese and Vietnamese-speaking users. With advanced evasion techniques and layered malicious… Go to gbhackers.com

Malicious npm Packages Threaten Crypto Developers: Keylogging and Wallet Theft Revealed Researchers at Socket have uncovered a malicious campaign targeting crypto developers. The attacker, operating under the pseudonym “topnotchdeveloper12”, has published three malicious npm packages—crypto-keccak, crypto-jsonwebtoken, and crypto-bignumber—that mimic legitimate cryptographic… Go to gbhackers.com

Integer Overflow Vulnerability in Windows Driver Enables Privilege Escalation, PoC Published An independent researcher has uncovered a critical vulnerability in the ksthunk.sys driver, a component of the Windows operating system responsible for facilitating 32-bit to 64-bit process communications. The flaw, which… Go to gbhackers.com