News

Wed 13 Aug 2025· 79 articles

1. 22:22

   OpenAI relaxes GPT-5 rate limit, promises to improve the personality

   OpenAI is slowly addressing all concerns around GPT-5, including rate limits and now its personality, which has been criticized for being less affirmative. [...]

   BleepingComputerOriginal report
2. 21:15

   Fortinet Products Are in the Crosshairs Again

   The company disclosed a critical FortiSIEM flaw with a PoC exploit for it the same week researchers warned of an ominous surge in malicious traffic targeting the vendor's SSL VPNs.

   Dark ReadingOriginal report
3. 20:28

   Russians hacked US courts, say investigators

   Russia is after secret files in the US court system, according to reports this week—and its hackers appear to have reached at least some of them. Last week, news broke of a successful cyberattack against the decades-old US court filing system. Called Case…

   MalwarebytesOriginal report
4. 20:23

   Fortinet warns of FortiSIEM pre-auth RCE flaw with exploit in the wild

   Fortinet is warning about a remote unauthenticated command injection flaw in FortiSIEM that has in-the-wild exploit code, making it critical for admins to apply the latest security updates. [...]

   BleepingComputerOriginal report
5. 20:09

   Whispers of XZ Utils Backdoor Live on in Old Docker Images

   Developers maintaining the images made the "intentional choice" to leave the artifacts available as "a historical curiosity," given the improbability they'd be exploited.

   Dark ReadingOriginal report
6. 20:06

   Infamous XZ Backdoor Found Hidden in Docker Images for Over a Year

   Security researchers at Binarly have discovered that the sophisticated supply chain hack still exists in publicly accessible Docker images on Docker Hub, more than a year after the startling revelation of the XZ Utils backdoor in March 2024. The backdoor,…

   gbhackers.comOriginal report
7. 19:45

   Emerging AI-Driven Phishing Trends Reshape Cybercrime Tactics

   Artificial intelligence (AI) in advances and adaptive social engineering techniques have led to a significant revolution in phishing and scams within the continually changing realm of cybercrime. Cybercriminals are leveraging neural networks and large…

   gbhackers.comOriginal report
8. 19:41

   Windows 11 24H2 updates failing again with 0x80240069 errors

   The KB5063878 Windows 11 24H2 cumulative update, released earlier this week, fails to install on some systems according to widespread reports from Windows administrators. [...]

   BleepingComputerOriginal report
9. 19:14

   New downgrade attack can bypass FIDO auth in Microsoft Entra ID

   Security researchers have created a new FIDO downgrade attack against Microsoft Entra ID that tricks users into authenticating with weaker login methods, making them susceptible to phishing and session hijacking. [...]

   BleepingComputerOriginal report
10. 18:40

    Google’s Android pKVM Framework Achieves SESIP Level 5 Certification

    Google has revealed that protected KVM (pKVM), the hypervisor that powers the Android Virtualization Framework (AVF), has achieved SESIP Level 5 certification, marking a major breakthrough for open-source security and consumer electronics. This milestone…

    gbhackers.comOriginal report
11. 17:41

    Adobe’s August 2025 Patch Tuesday Fixes 60 Vulnerabilities Across Multiple Products

    Adobe has rolled out its August 2025 Patch Tuesday updates, addressing a total of 60 vulnerabilities across a wide array of products, including key creative tools and enterprise solutions. These patches primarily focus on out-of-bounds read and write issues,…

    gbhackers.comOriginal report
12. 17:40

    Critical FortiSIEM flaw under active exploitation, Fortinet warns

    Fortinet warns of a critical FortiSIEM vulnerability, tracked as CVE-2025-25256, that is actively exploited in attacks in the wild. Fortinet warns customers of a critical vulnerability, tracked as CVE-2025-25256 (CVSS score of 9.8), affecting FortiSIEM for…

    Security AffairsOriginal report
13. 16:42

    Spike in Fortinet VPN brute-force attacks raises zero-day concerns

    A massive spike in brute-force attacks targeted Fortinet SSL VPNs earlier this month, followed by a switch to FortiManager, marked a deliberate shift in targeting that has historically preceded new vulnerability disclosures. [...]

    BleepingComputerOriginal report
14. 16:36

    Patch Now: Attackers Target OT Networks via Critical RCE Flaw

    Researchers observed exploitation attempts against a vulnerability with a CVSS score of 10 in a popular Erlang-based platform for critical infrastructure and OT development.

    Dark ReadingOriginal report
15. 16:25

    Pennsylvania attorney general's email, site down after cyberattack

    The Office of the Pennsylvania Attorney General has announced that a recent cyberattack has taken down its systems, including landline phone lines and email accounts. [...]

    BleepingComputerOriginal report
16. 16:21

    10 Best Purple Teaming Companies in 2025

    The landscape of cybersecurity in mid-2025 is undergoing a profound transformation. As threats become more sophisticated and persistent, organizations are realizing that siloed security teams are no longer sufficient. In response, many are turning to Purple…

    gbhackers.comOriginal report
17. 15:49

    Microsoft patches some very important vulnerabilities in August’s patch Tuesday

    In the August 2025 patch Tuesday round Microsoft fixed a total of 111 Microsoft vulnerabilities. A few of them are very important for people to apply. Even if you’re not a tech expert, keeping your Windows system up to date is one of the simplest and most…

    MalwarebytesOriginal report
18. 15:48

    SmartLoader Malware Masquerades as Legitimate GitHub Repository to Infect Users

    AhnLab Security Intelligence Center (ASEC) has uncovered a sophisticated campaign involving the massive dissemination of SmartLoader malware through GitHub repositories designed to mimic legitimate software projects. These repositories target users searching…

    gbhackers.comOriginal report
19. 15:46

    New PS1Bot Malware Campaign Uses Malvertising to Deploy Multi-Stage In-Memory Attacks

    Cybersecurity researchers have discovered a new malvertising campaign that's designed to infect victims with a multi-stage malware framework called PS1Bot. "PS1Bot features a modular design, with several modules delivered used to perform a variety of…

    The Hacker NewsOriginal report
20. 14:50

    Hackers Deploy Dedicated Phishlet for FIDO Authentication Downgrade Attacks

    Proofpoint researchers have uncovered a novel technique allowing threat actors to bypass FIDO-based authentication through downgrade attacks, leveraging a custom phishlet within adversary-in-the-middle (AiTM) frameworks. This method exploits gaps in browser…

    gbhackers.comOriginal report
21. 14:00

    What the LockBit 4.0 Leak Reveals About RaaS Groups

    The leak serves as a wake-up call: Being prepared is the cornerstone of a successful defense, and those who don't prepare are going to face uncertainty caused by the lack of attackers' accountability.

    Dark ReadingOriginal report
22. 13:58

    ShinyHunters May Have Teamed Up With Scattered Spider in Salesforce Attack Campaigns

    The financially motivated threat group ShinyHunters has returned with a sophisticated series of attacks targeting Salesforce instances across high-profile enterprises in industries like retail, aviation, and insurance, after a year of relative quiet…

    gbhackers.comOriginal report
23. 13:35

    Microsoft removes PowerShell 2.0 from Windows 11, Windows Server

    Microsoft will remove PowerShell 2.0 from Windows starting in August, eight years after announcing its deprecation and keeping it around as an optional feature. [...]

    BleepingComputerOriginal report
24. 13:19

    Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE Flaws

    Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could allow privilege escalation and remote code execution. The vulnerability impacting Zoom Clients for Windows, tracked as CVE-2025-49457 (CVSS score:…

    The Hacker NewsOriginal report
25. 12:52

    Web DDoS and App Exploitation Attacks Surge in First Half of 2025

    Radware’s monitoring showed a 39% increase in Web DDoS attacks compared to the second half of 2024, culminating in a record 54% quarter-over-quarter increase in Q2, indicating a dramatic escalation of cyber threats during the first half of 2025. This…

    gbhackers.comOriginal report
26. 12:29

    Chipmaker Patch Tuesday: Many Vulnerabilities Addressed by Intel, AMD, Nvidia

    Intel, AMD and Nvidia have published security advisories describing vulnerabilities found recently in their products.

    SecurityWeekOriginal report
27. 12:24

    Microsoft asks users to ignore certificate enrollment errors

    Microsoft has asked customers this week to disregard incorrect CertificateServicesClient (CertEnroll) errors that appear after installing the July 2025 preview update and subsequent Windows 11 24H2 updates. [...]

    BleepingComputerOriginal report
28. 11:50

    VexTrio Hackers Use Fake CAPTCHAs and Malicious Apps on Google Play & App Store to Target Users

    Security researchers at Infoblox Threat Intel have revealed the complex workings of VexTrio, a highly skilled cybercriminal network that has been active since at least 2017. This discovery highlights the ongoing dangers in the digital economy. Formerly known…

    gbhackers.comOriginal report
29. 11:41

    Multiple GitLab Vulnerabilities Allow Account Takeover and Stored XSS Attacks

    GitLab has released critical security patches addressing multiple high-severity vulnerabilities that could enable attackers to execute account takeovers and stored cross-site scripting (XSS) attacks across both Community Edition (CE) and Enterprise Edition…

    gbhackers.comOriginal report
30. 11:37

    Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code

    Fortinet is alerting customers of a critical security flaw in FortiSIEM for which it said there exists an exploit in the wild. The vulnerability, tracked as CVE-2025-25256, carries a CVSS score of 9.8 out of a maximum of 10.0. "An improper neutralization of…

    The Hacker NewsOriginal report
31. 11:34

    Site Behind Major SSN Leak Returns With Detailed Data on Millions: How to Opt Out

    Michael Kan reports: National Public Data, a website infamous for its role in leaking millions of Social Security numbers last year, has returned with the ability to look up anyone’s personal information. The site shut down in December amid a wave of…

    DataBreachesOriginal report
32. 11:25

    Microsoft Office Vulnerabilities Allow Attackers to Execute Remote Code

    Microsoft has disclosed three critical security vulnerabilities in its Office suite that could enable attackers to execute malicious code remotely on affected systems. The vulnerabilities, identified as CVE-2025-53731, CVE-2025-53740, and CVE-2025-53730,…

    gbhackers.comOriginal report
33. 11:25

    AI SOC 101: Key Capabilities Security Leaders Need to Know

    Security operations have never been a 9-to-5 job. For SOC analysts, the day often starts and ends deep in a queue of alerts, chasing down what turns out to be false positives, or switching between half a dozen tools to piece together context. The work is…

    The Hacker NewsOriginal report
34. 11:24

    OpenAI adds new GPT-5 models, restores o3, o4-mini and it's a mess all over again

    One of the few things many disliked about ChatGPT was the confusing number of models. OpenAI claimed GPT-5 would fix this, but it seems to have made it worse. [...]

    BleepingComputerOriginal report
35. 11:18

    Russia Is Suspected to Be Behind Breach of Federal Court Filing System

    Adam Goldman, Glenn Thrush, and Mattathias Schwartz report: Investigators have uncovered evidence that Russia is at least partly responsible for a recent hack of the computer system that manages federal court documents, including highly sensitive records…

    DataBreachesOriginal report
36. 11:14

    New Zero-Click Flaw Bypasses Microsoft’s Patch, Leaking NTLM Credentials, PoC Available

    SecurityOnlineOriginal report
37. 11:10

    Manpower Says Data Breach Stemming From Ransomware Attack Impacts 140,000

    The RansomHub ransomware group stole sensitive information from staffing and recruiting firm Manpower in January.

    SecurityWeekOriginal report
38. 11:06

    NL: Hacked lab paid ransom: ‘Millions of euros demanded’

    The following is a machine translation of an article by Daniel Verlaan: The hacked Clinical Diagnostics laboratory in Rijswijk has paid a ransom to the cybercriminals. Ransomware group Nova, responsible for the hack, confirmed this to RTL Nieuws. The…

    DataBreachesOriginal report
39. 10:57

    Microsoft Exchange Server Flaws Allow Network-Based Spoofing and Data Tampering

    Microsoft has disclosed critical security vulnerabilities in Exchange Server that could enable attackers to conduct network-based spoofing attacks and tamper with sensitive data, according to security bulletins released on August 12, 2025. The…

    gbhackers.comOriginal report
40. 10:49

    GitLab Patches High-Severity Flaws: Update Now to Prevent XSS and Account Takeover

    SecurityOnlineOriginal report