News

Thu 13 Mar 2025· 77 articles

1. 11:17

   QuamCore Emerges From Stealth With $9 Million to Build a Quantum Computer

   QuamCore’s secret sauce is a patented architecture that will allow the integration of 1 million qubits in a single cryostat.

   SecurityWeekOriginal report
2. 11:15

   Mozilla Issues Urgent Firefox Update Warning to Prevent Add-on Failures

   Mozilla has issued an urgent warning to all Firefox users, emphasizing the need to update their browsers before a critical root certificate expires on March 14, 2025. This certificate is used to verify signed content and add-ons across various Mozilla…

   gbhackers.comOriginal report
3. 11:07

   Bitdefender Identifies Security Vulnerabilities Enabling Man-in-the-Middle Exploits

   Cybersecurity firm Bitdefender has disclosed two high-severity security vulnerabilities affecting its legacy BOX v1 device, exposing users to potential remote code execution and man-in-the-middle attacks. The vulnerabilities, identified on March 12th, 2025,…

   gbhackers.comOriginal report
4. 11:02

   Meta warns of actively exploited flaw in FreeType library

   Meta warned that a vulnerability, tracked as CVE-2025-27363, impacting the FreeType library may have been exploited in the wild. Meta warned that an out-of-bounds write flaw, tracked as CVE-2025-27363 (CVSS score of 8.1), in the FreeType library may h...

   Security AffairsOriginal report
5. 11:00

   #StopRansomware: Medusa Ransomware

   Release Date: March 12, 2025 Alert Code: AA25-071A Summary Note: This joint Cybersecurity Advisory is part of an ongoing #StopRansomware effort to publish advisories for network defenders detailing various ransomware variants and ransomware threat actors.…

   DataBreachesOriginal report
6. 10:55

   New DCRat Campaign Uses YouTube Videos to Target Users

   A new campaign involving the DCRat backdoor has recently been uncovered, leveraging YouTube as a primary distribution channel. Since the beginning of the year, attackers have been using the popular video-sharing platform to target users by creating fake or…

   gbhackers.comOriginal report
7. 10:43

   Hackers Exploit Microsoft Copilot for Advanced Phishing Attacks

   Hackers have been targeting Microsoft Copilot, a newly launched Generative AI assistant, to carry out sophisticated phishing attacks. This campaign highlights the risks associated with the widespread adoption of Microsoft services and the challenges that…

   gbhackers.comOriginal report
8. 10:00

   Head Mare and Twelve join forces to attack Russian entities

   Introduction In September 2024, a series of attacks targeted Russian companies, revealing indicators of compromise and tactics associated with two hacktivist groups: Head Mare and Twelve. Our investigation showed that Head Mare relied heavily on tools…

   securelist.comOriginal report
9. 10:00

   OpenAI Operator Agent Used in Proof-of-Concept Phishing Attack

   Researchers from Symantec showed how OpenAI's Operator agent, currently in research preview, can be used to construct a basic phishing attack from start to finish.

   Dark ReadingOriginal report
10. 08:58

    Aleksej Besciokov, Garantex Co-founder, Faces Extradition After Arrest

    Indian law enforcement authorities have announced the arrest of Aleksej Besciokov, a Lithuanian citizen and co-founder of the

    SecurityOnlineOriginal report
11. 08:55

    Fake CAPTCHA Malware Exploits Windows Users to Run PowerShell Commands

    In early February 2025, Trustwave SpiderLabs uncovered a resurgence of a malicious campaign leveraging fake CAPTCHA verifications to deliver malware. This campaign uses deceptive CAPTCHA prompts to trick users into executing PowerShell commands, initiating a…

    gbhackers.comOriginal report
12. 08:51

    Microsoft Patches 2-Year-Old Windows Kernel Flaw CVE-2025-24983 After Exploitation

    Cybersecurity firm ESET has announced that Microsoft has finally patched a long-standing security vulnerability in the Windows NT

    SecurityOnlineOriginal report
13. 08:49

    Medusa ransomware hit over 300 critical infrastructure organizations until February 2025

    The Medusa ransomware operation hit over 300 organizations in critical infrastructure sectors in the United States until February 2025. The FBI, CISA, and MS-ISAC have issued a joint advisory detailing Medusa ransomware tactics, techniques, and indicators of…

    Security AffairsOriginal report
14. 08:40

    FreeType Vulnerability Actively Exploited for Arbitrary Code Execution

    A significant vulnerability has been identified in the FreeType library, a widely used open-source font rendering engine. This vulnerability tracked as CVE-2025-27363, is being actively exploited and may lead to arbitrary code execution on affected systems.…

    gbhackers.comOriginal report
15. 08:22

    Medusa Ransomware Hits 300+ Critical Infrastructure Organizations Worldwide

    The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) have issued a joint advisory on the Medusa ransomware, a ransomware-as-a-service (RaaS)…

    gbhackers.comOriginal report
16. 07:29

    Tenda AC7 Vulnerability Lets Hackers Execute Malicious Payloads for Root Access

    A vulnerability has been discovered in the Tenda AC7 router, firmware version V15.03.06.44, which allows attackers to execute malicious payloads and gain root access. As per a report in Github, the vulnerability, identified through experimental setup and…

    gbhackers.comOriginal report
17. 07:13

    Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk

    Meta has warned that a security vulnerability impacting the FreeType open-source font rendering library may have been exploited in the wild. The vulnerability has been assigned the CVE identifier CVE-2025-27363, and carries a CVSS score of 8.1, indicating…

    The Hacker NewsOriginal report
18. 07:08

    WARNING: Expiring Root Certificate May Disable Firefox Add-Ons, Security Features, and DRM Playback

    Browser maker Mozilla is urging users to update their Firefox instances to the latest version to avoid facing issues with using add-ons due to the impending expiration of a root certificate. "On March 14, 2025, a root certificate used to verify signed…

    The Hacker NewsOriginal report
19. 06:18

    GitLab Identifies Security Vulnerabilities Enabling Attacker Logins as Valid Users

    GitLab announced the release of versions 17.9.2, 17.8.5, and 17.7.7 for both its Community Edition (CE) and Enterprise Edition (EE). These updates include crucial bug and security fixes, urging all self-managed installations to upgrade promptly to protect…

    gbhackers.comOriginal report
20. 06:00

    Abu Dhabi Guidelines Offer Blueprint for Cybersecurity in Health

    Following increasing attacks on healthcare organizations, the United Arab Emirates has refined its regulatory strategy for improving cybersecurity in healthcare.

    Dark ReadingOriginal report
21. 05:39

    Fortinet Addresses Security Issues in FortiSandbox, FortiOS, and Other Products

    Fortinet’s Product Security Incident Response Team (PSIRT) announced the resolution of several critical and high-severity security vulnerabilities affecting various Fortinet products, including FortiSandbox and FortiOS. These updates are part of Fortinet’s…

    gbhackers.comOriginal report
22. 05:20

    Chinese Hacked Exploit Juniper Networks Routers to Implant Backdoor

    Cybersecurity researchers have uncovered a sophisticated cyber espionage campaign targeting critical network infrastructure, marking a significant evolution in tactics by Chinese state-sponsored hackers. Mandiant, a leading cybersecurity firm, has discovered…

    gbhackers.comOriginal report
23. 05:08

    U.S. Accuses 12 Chinese Nationals of Hacking National Security Networks

    The United States has taken significant steps to address the growing threat of Chinese cyber intrusions into U.S. government agencies and critical infrastructure. On March 5, the U.S. Department of Justice (DOJ) indicted 12 Chinese nationals and one Chinese…

    gbhackers.comOriginal report
24. 04:07

    Windows 11 Printing Problems: Microsoft Confirms Spontaneous Printing Bug

    If you have recently encountered instances where your printer inexplicably prints content on its own, do not be

    SecurityOnlineOriginal report
25. 03:16

    Cisco Issues High-Severity Security Alert for IOS XR Software (CVE-2025-20138)

    Cisco has released a security advisory detailing a high-severity vulnerability affecting its IOS XR Software. The flaw, identified

    SecurityOnlineOriginal report
26. 02:15

    GitLab Urgently Patches Critical Authentication Bypass Flaws – CVE-2025-25291 & CVE-2025-25292

    GitLab has rolled out new versions 17.9.2, 17.8.5, and 17.7.7 for both its Community Edition (CE) and Enterprise

    SecurityOnlineOriginal report
27. 02:09

    FBI, CISA, and MS-ISAC Warn Organizations About Medusa Ransomware Attacks

    In a joint cybersecurity advisory, the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA),

    SecurityOnlineOriginal report
28. 02:05

    CVE-2024-54085: AMI SPx Vulnerability Scores Critical CVSS 10

    AMI, a leading provider of BIOS and BMC firmware, has announced security advisories addressing multiple vulnerabilities affecting its

    SecurityOnlineOriginal report
29. 02:02

    AI-Powered Deception: Fake GitHub Repositories Spread SmartLoader and Lumma Stealer

    Trend Micro researchers have uncovered a new campaign that uses AI-generated content to create convincing fake GitHub repositories,

    SecurityOnlineOriginal report
30. 01:58

    CVE-2025-27017: Apache NiFi Vulnerability Exposes MongoDB Credentials

    A security vulnerability has been discovered in Apache NiFi, a popular data flow automation tool used by thousands

    SecurityOnlineOriginal report
31. 01:57

    Elysium Ransomware: A New Variant of the Ghost Family Targeting Critical Infrastructure

    Netskope Threat Labs has recently published an analysis of a new ransomware variant dubbed Elysium, linked to the

    SecurityOnlineOriginal report
32. 01:53

    CVE-2025-26319 (CVSS 9.8): Flowise Open-Source Platform Vulnerable to File Upload Exploit, No Patch

    Security researcher Dor Attias has discovered a critical vulnerability in Flowise, a popular open-source platform used for building

    SecurityOnlineOriginal report
33. 01:48

    Copilot Phishing: New Scam Targets Microsoft Users

    As enterprises increasingly integrate Microsoft Copilot into their workflows, cybercriminals are seizing the opportunity to exploit user unfamiliarity

    SecurityOnlineOriginal report
34. 01:40

    CVE-2024-56336: Siemens Exposes 9.8-Rated Bootloader Flaw in SINAMICS S200 Drives

    Siemens has issued a security advisory warning of an unlocked bootloader vulnerability in a specific range of SINAMICS

    SecurityOnlineOriginal report
35. 01:36

    Blind Eagle’s Rapid Adaptation: New Tactics Deployed Days After Patch

    A new wave of cyberattacks linked to the Blind Eagle (APT-C-36) group has been uncovered by Check Point

    SecurityOnlineOriginal report
36. 01:32

    CVE-2025-1851: Tenda AC7 Routers at Risk of Root Compromise, PoC Released

    A high-severity vulnerability has been discovered in Tenda AC7 routers, potentially granting attackers root access to the device.

    SecurityOnlineOriginal report
37. 01:27

    From Sellers to Reviewers: Exposing the Fake Review Network

    The integrity of online shopping is under siege by fraudulent review networks, as detailed in a recent report

    SecurityOnlineOriginal report