BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
[wp-rss-aggregator feeds="kitploit" limit="10" pagination="off"]
Exploit DB
[wp-rss-aggregator feeds="exploit-db" limit="10" pagination="off"]
Latest news and insights on Security
2.8 Million Impacted by Data Breach at Prescription Services Firm Sav-Rx
/in General NewsPharmacy prescription services provider Sav-Rx says the personal information of 2.8 million was stolen in a cyberattack.
The post 2.8 Million Impacted by Data Breach at Prescription Services Firm Sav-Rx appeared first on SecurityWeek.
SecurityWeek – Read More
Cops Are Just Trolling Cybercriminals Now
/in General NewsPolice are using subtle psychological operations against ransomware gangs to sow distrust in their ranks—and trick them into emerging from the shadows.
Security Latest – Read More
Digital ID Adoption: Implementation and Security Concerns
/in General NewsAs digital transformation accelerates, understanding how businesses are preparing for and implementing digital ID technologies is crucial for staying ahead in security and efficiency, according to Regula.
Cyware News – Latest Cyber News – Read More
SingCERT Warns Critical Vulnerabilities Found in Multiple WordPress Plugins
/in General NewsSecurity updates have been promptly released to address these critical vulnerabilities in multiple WordPress plugins. SingCERT reported 9 critical plugin vulnerabilities and shared the mitigation strategies to avoid exploration by threat actors.
Cyware News – Latest Cyber News – Read More
White House Announces Plans to Revamp Data Routing Security by Year-End
/in General NewsThe augmentations concern the Border Gateway Protocol, a backbone data transmission algorithm that determines the optimal path for data packets to move across networks, said National Cyber Director Harry Coker
Cyware News – Latest Cyber News – Read More
Usage of TLS in DDNS Services leads to Information Disclosure in Multiple Vendors
/in General NewsWhen DDNS is combined with automatic TLS certificate generation using ACME clients, the public Certificate Transparency logs can be abused by attackers to find vulnerable devices en masse.
Cyware News – Latest Cyber News – Read More
Update: Threat Actors Created Rogue VMs to Evade Detection During December 2023 Attack on MITRE
/in General NewsAccording to the new update, threat actors exploited zero-day flaws in Ivanti Connect Secure (ICS) and created rogue virtual machines (VMs) within the organization’s VMware environment.
Cyware News – Latest Cyber News – Read More
Check Point VPN Targeted for Initial Access in Enterprise Attacks
/in General NewsCheck Point is warning customers that threat actors are targeting insecure VPN instances for initial access to enterprise networks.
The post Check Point VPN Targeted for Initial Access in Enterprise Attacks appeared first on SecurityWeek.
SecurityWeek – Read More
Human Error Still Perceived as the Achilles’ Heel of Cybersecurity
/in General NewsWhile fears of cyberattacks continue to rise, CISOs demonstrate increasing confidence in their ability to defend against these threats, reflecting a significant shift in the cybersecurity landscape, according to Proofpoint.
Cyware News – Latest Cyber News – Read More
Phishing with Cloudflare Workers: Transparent Phishing and HTML Smuggling
/in General NewsOne campaign uses HTML smuggling to hide the phishing content from network inspection. The other uses a method called transparent phishing, where the attacker uses Cloudflare Workers to act as a reverse proxy server for a legitimate login page.
Cyware News – Latest Cyber News – Read More