News

Tue 19 Aug 2025· 82 articles

1. 11:45

   Secure AI Use Without the Blind Spots

   Why every company needs a clear, enforceable AI policy — now.

   Dark ReadingOriginal report
2. 11:40

   Hacktivist Sentenced to 20 Months of Prison in UK

   Al-Tahery Al-Mashriky of the Yemen Cyber Army has been accused of hacking into and defacing many websites as part of hacktivist campaigns.

   SecurityWeekOriginal report
3. 11:24

   U.K. Government Drops Apple Encryption Backdoor Order After U.S. Civil Liberties Pushback

   The U.K. government has apparently abandoned its plans to force Apple to weaken encryption protections and include a backdoor that would have enabled access to the protected data of U.S. citizens. U.S. Director of National Intelligence (DNI) Tulsi Gabbard,…

   The Hacker NewsOriginal report
4. 11:15

   Why Your Security Culture is Critical to Mitigating Cyber Risk

   After two decades of developing increasingly mature security architectures, organizations are running up against a hard truth: tools and technologies alone are not enough to mitigate cyber risk. As tech stacks have grown more sophisticated and capable,…

   The Hacker NewsOriginal report
5. 11:09

   North Korean Kimsuky Hackers Use GitHub to Target Foreign Embassies with XenoRAT Malware

   The Trellix Advanced Research Center exposed a DPRK-linked espionage operation attributed to the Kimsuky group (APT43), targeting diplomatic missions in South Korea. Between March and July, at least 19 spear-phishing emails impersonated trusted diplomatic…

   gbhackers.comOriginal report
6. 10:23

   Microsoft Defender AI Can Detect Plaintext Credentials in Active Directory

   Microsoft has unveiled a new AI-powered security capability that addresses one of cybersecurity’s most persistent vulnerabilities: plaintext credentials stored in Active Directory systems. The enhanced Microsoft Defender feature uses sophisticated artificial…

   gbhackers.comOriginal report
7. 10:04

   New Exploit Poses Threat to SAP NetWeaver Instances

   A new public exploit chains two critical flaws in SAP NetWeaver, exposing unpatched instances to code execution attacks.

   SecurityWeekOriginal report
8. 10:00

   GodRAT – New RAT targeting financial institutions

   Summary In September 2024, we detected malicious activity targeting financial (trading and brokerage) firms through the distribution of malicious .scr (screen saver) files disguised as financial documents via Skype messenger. The threat actor deployed a…

   securelist.comOriginal report
9. 10:00

   Fashionable Phishing Bait: GenAI on the Hook

   GenAI-created phishing campaigns misuse tools ranging from website builders to text generators in order to create more convincing and scalable attacks.

   unit42.paloaltonetworks.comOriginal report
10. 09:57

    PyPI Moves to Stop Domain Resurrection Attacks with Expired Domain Blocks

    The Python Package Index (PyPI) has implemented new security measures to protect against domain resurrection attacks, a sophisticated supply-chain threat where attackers purchase expired domains to hijack user accounts through password reset mechanisms.…

    gbhackers.comOriginal report
11. 09:23

    1.1 Million Unique Records Identified in Allianz Life Data Leak

    Have I Been Pwned has analyzed the information made public by the hackers who recently targeted Allianz Life.

    SecurityWeekOriginal report
12. 09:07

    SoftBank Bets Big on Intel, Injecting $2 Billion Amid Government Scrutiny

    SecurityOnlineOriginal report
13. 09:04

    Beyond Plus: OpenAI Rolls Out “ChatGPT Go” with an Aggressive New Pricing Strategy for India

    SecurityOnlineOriginal report
14. 08:56

    Google Translate Adds AI Features, Posing a Threat to Duolingo

    SecurityOnlineOriginal report
15. 08:52

    Apple’s Xcode Is Getting Native Claude AI Integration

    SecurityOnlineOriginal report
16. 08:25

    Lockbit Linux ESXi Ransomware Variant Reveals Evasion Techniques and File Encryption Process

    A recent reverse engineering analysis of a Lockbit ransomware variant targeting Linux-based ESXi servers has uncovered several sophisticated evasion techniques and operational details. The malware, first documented in 2022, employs the ptrace system call to…

    gbhackers.comOriginal report
17. 08:18

    Allianz Life security breach impacted 1.1 million customers

    Allianz Life breach exposed data of most of its 1.4M customers; HIBP lists 1.1M impacted, though the insurer hasn’t confirmed exact figures. In July, Allianz Life disclosed a breach where hackers stole data from a cloud database, affecting most of its 1.4M…

    Security AffairsOriginal report
18. 08:01

    Analyzing evolution of the PipeMagic malware

    Hackers exploited Windows flaw CVE-2025-29824 to deploy PipeMagic malware in RansomExx attacks, Kaspersky revealed. A joint report from Kaspersky and BI.ZONE analyzed the evolution of PipeMagic malware from its first detection in 2022 to new infection...

    Security AffairsOriginal report
19. 07:48

    New Research Links VPN Apps, Highlights Security Deficiencies

    Citizen Lab has identified links between multiple VPN providers, and multiple security weaknesses in their mobile applications.

    SecurityWeekOriginal report
20. 07:18

    Malicious npm Packages Target Crypto Developers to Steal Login Credentials

    A sophisticated threat campaign dubbed “Solana-Scan” has emerged, deploying malicious npm packages aimed at infiltrating the Solana cryptocurrency ecosystem. Identified by the Safety research team through advanced malicious package detection technology, this…

    gbhackers.comOriginal report
21. 07:17

    Massive Allianz Life data breach impacts 1.1 million people

    Hackers have stolen the personal information of 1.1 million individuals in a Salesforce data theft attack, which impacted U.S. insurance giant Allianz Life in July. [...]

    BleepingComputerOriginal report
22. 07:17

    PipeMagic Malware Imitates ChatGPT App to Exploit Windows Vulnerability and Deploy Ransomware

    The PipeMagic malware, which is credited to the financially motivated threat actor Storm-2460, is a remarkable illustration of how cyber dangers are always changing. It poses as the genuine open-source ChatGPT Desktop Application from GitHub. This…

    gbhackers.comOriginal report
23. 07:12

    U.S. CISA adds Trend Micro Apex One flaw to its Known Exploited Vulnerabilities catalog

    U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Trend Micro Apex One flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Trend Micro Apex One flaw, tracked as CVE-202...

    Security AffairsOriginal report
24. 07:08

    New Sni5Gect Attack Targets 5G to Steal Messages and Inject Payloads

    Cybersecurity researchers at Singapore University of Technology and Design have unveiled a sophisticated new attack framework called SNI5GECT that can intercept 5G communications and inject malicious payloads without requiring a rogue base station. The…

    gbhackers.comOriginal report
25. 06:41

    CISA Alerts on Active Exploitation of Trend Micro Apex One Vulnerability

    The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Trend Micro Apex One vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, warning of active exploitation targeting the enterprise security platform. The…

    gbhackers.comOriginal report
26. 06:36

    PyPI Blocks 1,800 Expired-Domain Emails to Prevent Account Takeovers and Supply Chain Attacks

    The maintainers of the Python Package Index (PyPI) repository have announced that the package manager now checks for expired domains to prevent supply chain attacks. "These changes improve PyPI's overall account security posture, making it harder for…

    The Hacker NewsOriginal report
27. 05:52

    Hackers Exploit Cisco Secure Links to Evade Scanners and Bypass Filters

    Cybercriminals have discovered a sophisticated new attack vector that weaponizes Cisco’s security infrastructure against users, according to recent research from Raven AI. The company’s context-aware detection systems uncovered a credential phishing campaign…

    gbhackers.comOriginal report
28. 05:21

    Hijacked Satellites and Orbiting Space Weapons: In the 21st Century, Space Is the New Battlefield

    From hacked satellites to nuclear threats in orbit, the battle for dominance beyond Earth is redefining modern warfare and national security.

    SecurityWeekOriginal report
29. 04:57

    Intel Websites Compromised, Allowing Hackers Access to Employee and Confidential Data

    A series of critical security flaws in Intel’s internal web infrastructure exposed the personal details of more than 270,000 employees and potentially provided attackers with access to sensitive corporate and supplier information. The discoveries highlight…

    gbhackers.comOriginal report
30. 04:15

    Apple’s New iOS 26 Feature Extends Battery Life, But at a Cost

    SecurityOnlineOriginal report
31. 04:11

    A German Court Just Revived a Lawsuit That Could Make Ad Blockers Illegal

    SecurityOnlineOriginal report
32. 03:18

    CVE-2025-55205: Critical Flaw in Capsule Kubernetes Exposes Clusters to Cross-Tenant Attacks

    SecurityOnlineOriginal report
33. 02:53

    A Popular YouTube Extension Is Leaving Firefox and Developers Are Blaming Mozilla

    SecurityOnlineOriginal report
34. 02:48

    The End of Anonymity? U.S. Treasury Considers Mandatory Real-Name Verification for DeFi

    SecurityOnlineOriginal report
35. 02:22

    Phishing Scam Alert: McAfee Uncovers a New Android Campaign Impersonating a Government Solar Program

    SecurityOnlineOriginal report
36. 02:16

    PyPI Fights Back: New Security Feature Prevents Account Takeovers via Expired Domains

    SecurityOnlineOriginal report
37. 01:59

    CISA Flags Actively Exploited Trend Micro Apex One Vulnerability (CVE-2025-54948)

    SecurityOnlineOriginal report
38. 01:49

    A Controversial Safeguard: Claude AI Now Ends Abusive Conversations to Protect Itself

    SecurityOnlineOriginal report
39. 01:37

    Microsoft’s Azure Used for Mass Surveillance in Gaza and West Bank

    SecurityOnlineOriginal report
40. 00:05

    PipeMagic Returns: Kaspersky Uncovers Evolving Backdoor Linked to CVE-2025-29824 Exploits

    SecurityOnlineOriginal report