Skip to content

ADMIN.FOUNDATION

  • n8n Vulnerability Allows Remote Attackers to Hijack Systems via Malicious Workflow Execution

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    n8n has released urgent security updates to address a critical vulnerability that exposes host systems to Remote Code Execution (RCE). Tracked as CVE-2026-25049, this flaw allows authenticated attackers to escape the expression evaluation sandbox and execute arbitrary system commands, potentially leading to a complete compromise of the underlying infrastructure. This disclosure comes shortly after the remediation […]

    The post n8n Vulnerability Allows Remote Attackers to Hijack Systems via Malicious Workflow Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ Stories

    ·

    This week didn’t produce one big headline. It produced many small signals — the kind that quietly shape what attacks will look like next. Researchers tracked intrusions that start in ordinary places: developer workflows, remote tools, cloud access, identity paths, and even routine user actions. Nothing looked dramatic on the surface. That’s the point. Entry is becoming less

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Sanctioned Bulletproof Host Linked to Hijacking of Old Home Routers

    ·

    Aeza International, Bulletproof, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, DNS, Home Routers, IoT, Malware, Phishing, Routers, Russia, Security
    Compromised home routers in 30+ countries had DNS traffic redirected, sending users to malicious sites while normal browsing appeared unaffected.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Moxa Switches Vulnerability Enables Unauthorized Access through Authentication Bypass

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    Moxa has released a critical security advisory addressing a severe vulnerability affecting multiple series of its industrial Ethernet switches. Tracked as CVE-2024-12297, this flaw allows remote attackers to bypass authentication mechanisms, potentially granting unauthorized access to critical network infrastructure. With a CVSS v4.0 score of 9.2, the vulnerability is classified as critical, urging immediate action from administrators […]

    The post Moxa Switches Vulnerability Enables Unauthorized Access through Authentication Bypass appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity Alert: Fake Traffic Ticket Portals Target Personal, Credit Card Data

    ·

    cyber security, Cyber Security News

    A highly sophisticated phishing campaign that targets Canadian drivers by impersonating provincial traffic bureaus. This new wave of attacks utilizes “SEO poisoning” to trick search engines into ranking fake websites above legitimate government portals. The campaign forces victims through a deceptive “waiting room” experience before harvesting their sensitive Personally Identifiable Information (PII) and credit card […]

    The post Cybersecurity Alert: Fake Traffic Ticket Portals Target Personal, Credit Card Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • LockBit 5.0 Unveils Cross-Platform Threats for Windows, Linux & ESXi Systems

    ·

    cyber security, Cyber Security News, Linux, Windows

    The inner workings of LockBit 5.0, a sophisticated ransomware variant targeting Windows, Linux, and VMware ESXi systems simultaneously. This latest version represents a significant evolution in the cyber threat landscape, demonstrating how ransomware operators are refining their tools to maximize damage across diverse enterprise environments. LockBit operates on a “Ransomware-as-a-Service” (RaaS) model, where a core […]

    The post LockBit 5.0 Unveils Cross-Platform Threats for Windows, Linux & ESXi Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Buyer’s Guide to AI Usage Control

    ·

    Today’s “AI everywhere” reality is woven into everyday workflows across the enterprise, embedded in SaaS platforms, browsers, copilots, extensions, and a rapidly expanding universe of shadow tools that appear faster than security teams can track. Yet most organizations still rely on legacy controls that operate far away from where AI interactions actually occur. The result is a widening

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Infy Hackers Resume Operations with New C2 Servers After Iran Internet Blackout Ends

    ·

    The elusive Iranian threat group known as Infy (aka Prince of Persia) has evolved its tactics as part of efforts to hide its tracks, even as it readied new command-and-control (C2) infrastructure coinciding with the end of the widespread internet blackout the regime imposed at the start of the month. “The threat actor stopped maintaining its C2 servers on January 8 for the first time since we

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • DragonForce Ransomware Targets Critical Businesses to Exfiltrate Sensitive Data

    ·

    cyber security, Cyber Security News, Ransomware

    DragonForce is a ransomware group that emerged in late 2023 and has grown into a serious threat to businesses by combining data theft with file encryption. The group uses dual extortion: it steals sensitive data, encrypts systems, and then threatens to publish the stolen information on dark web leak sites if victims do not pay.​ […]

    The post DragonForce Ransomware Targets Critical Businesses to Exfiltrate Sensitive Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Go 1.25.7 and Go 1.24.13 Released With Patches for Multiple Security Vulnerabilities

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability, what is New

    The Go team has officially released versions 1.25.7 and 1.24.13. These minor point releases address two distinct security vulnerabilities affecting the cmd/cgo command and the crypto/tls library. The updates are recommended for all users to prevent potential code smuggling and authentication bypass scenarios. Overview of the Vulnerability cmd/cgo: Code Smuggling via Comment Parsing The first vulnerability, tracked as CVE-2025-61732, affects the cmd/cgo tool, which enables […]

    The post Go 1.25.7 and Go 1.24.13 Released With Patches for Multiple Security Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 518 519 520 521 522 … 1,053
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence