BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
[wp-rss-aggregator feeds="kitploit" limit="10" pagination="off"]
Exploit DB
[wp-rss-aggregator feeds="exploit-db" limit="10" pagination="off"]
Latest news and insights on Security
Korean Telco Allegedly Infected Around 600,000 P2P Users with Malware
/in General NewsSouth Korean telco KT has been accused of purposely infecting customers with malware as a result of excessive use of peer-to-peer (P2P) downloading tools. Around 600,000 users of online storage services have reportedly been affected.
Cyware News – Latest Cyber News – Read More
The Secrets of Hidden AI Training on Your Data
/in General NewsWhile some SaaS threats are clear and visible, others are hidden in plain sight, both posing significant risks to your organization. Wing’s research indicates that an astounding 99.7% of organizations utilize applications embedded with AI functionalities. These AI-driven tools are indispensable, providing seamless experiences from collaboration and communication to work management and
The Hacker News – Read More
How to Use Python to Build Secure Blockchain Applications
/in General NewsDid you know it’s now possible to build blockchain applications, known also as decentralized applications (or “dApps” for short) in native Python? Blockchain development has traditionally required learning specialized languages, creating a barrier for many developers… until now. AlgoKit, an all-in-one development toolkit for Algorand, enables developers to build blockchain applications in pure
The Hacker News – Read More
Novel Snowblind Malware Targets Banking Customers in Southeast Asia
/in General NewsSnowblind is effective on all modern Android devices and primarily targets banking apps. It avoids detection by modifying the app and exploiting the Linux kernel’s seccomp feature to control the app’s system calls.
Cyware News – Latest Cyber News – Read More
Phantom Secrets: Undetected Secrets Expose Major Corporations
/in General NewsMajor secrets, including cloud environment credentials, internal infrastructures, and telemetry platforms, have been found exposed on the internet due to Git-based processes and Source Code Management (SCM) platforms behavior.
Cyware News – Latest Cyber News – Read More
Prompt Injection Flaw in Vanna AI Exposes Databases to RCE Attacks
/in General NewsCybersecurity researchers have disclosed a high-severity security flaw in the Vanna.AI library that could be exploited to achieve remote code execution vulnerability via prompt injection techniques.
The vulnerability, tracked as CVE-2024-5565 (CVSS score: 8.1), relates to a case of prompt injection in the “ask” function that could be exploited to trick the library into executing arbitrary
The Hacker News – Read More
Evolve Bank Data Leaked After LockBit’s ‘Federal Reserve Hack’
/in General NewsThe LockBit ransomware group claimed to have hacked the US Federal Reserve, but leaked data from an Arkansas-based bank.
The post Evolve Bank Data Leaked After LockBit’s ‘Federal Reserve Hack’ appeared first on SecurityWeek.
SecurityWeek – Read More
Russian National Indicted for Cyber Attacks on Ukraine Before 2022 Invasion
/in General NewsA 22-year-old Russian national has been indicted in the U.S. for his alleged role in staging destructive cyber attacks against Ukraine and its allies in the days leading to Russia’s full-blown military invasion of Ukraine in early 2022.
Amin Timovich Stigal, the defendant in question, is assessed to be affiliated with the Main Directorate of the General Staff of the Armed Forces of the Russian
The Hacker News – Read More
‘Phantom’ Source Code Secrets Haunt Major Organizations
/in General NewsAqua Security shows that code in repositories remains accessible even after being deleted or overwritten, continuing to leak secrets.
The post ‘Phantom’ Source Code Secrets Haunt Major Organizations appeared first on SecurityWeek.
SecurityWeek – Read More
Update: MOVEit Transfer Vulnerability Targeted Amid Disclosure Drama
/in General NewsThe non-profit cybersecurity organization, the Shadowserver Foundation, has observed exploitation attempts against CVE-2024-5806. They noted that the exploitation began soon after the vulnerability details were made public.
Cyware News – Latest Cyber News – Read More