BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
No feed items found.
Exploit DB
- [remote] Microsoft Windows - NTLM Hash Leak Malicious Windows Theme
- [remote] Aztech DSL5005EN Router - 'sysAccess.asp' Admin Password Change (Unauthenticated)
- [webapps] TeamPass 3.0.0.21 - SQL Injection
- [webapps] Jasmin Ransomware - SQL Injection Login Bypass
- [webapps] FluxBB 1.5.11 - Stored Cross-Site Scripting (XSS)
- [webapps] JUX Real Estate 3.4.0 - SQL Injection
- [webapps] Loaded Commerce 6.6 - Client-Side Template Injection(CSTI) (AngularJS)
- [webapps] Extensive VC Addons for WPBakery page builder 1.9.0 - Remote Code Execution (RCE)
- [webapps] TranzAxis 3.2.41.10.26 - Stored Cross-Site Scripting (XSS) (Authenticated)
- [webapps] Gitea 1.24.0 - HTML Injection
Orbit Chain Loses $86 Million in the Last Fintech Hack of 2023
/in General NewsThe stolen funds are believed to be linked to North Korean hacking groups, such as Lazarus, who use cryptocurrency cyberattacks to bypass international sanctions and finance their weapons development program.
Cyware News – Latest Cyber News – Read More
New York State AG Hits Hospital With $300K Fine for Web Tracker Use
/in General NewsNewYork-Presbyterian Hospital has been fined $300,000 by state regulators for privacy violations related to its use of tracking tools on its websites and patient portal. It violated HIPAA rules by sharing patient information with third parties.
Cyware News – Latest Cyber News – Read More
Steam Drops Support for Windows 7 and 8.1 to Boost Security
/in General NewsThe end of support for these older Windows versions is due to the reliance on an embedded version of Google Chrome that no longer functions on them, as well as the need for Windows feature and security updates only available on Windows 10 and above.
Cyware News – Latest Cyber News – Read More
DOJ Slams XCast with $10 Million Fine Over Massive Illegal Robocall Operation
/in General NewsThe U.S. Department of Justice (DoJ) on Tuesday said it reached a settlement with VoIP service provider XCast over allegations that it facilitated illegal telemarketing campaigns since at least January 2018, in contravention of the Telemarketing Sales Rule (TSR).
In addition to prohibiting the company from violating the law, the stipulated order requires it to meet other compliance measures,
The Hacker News – Read More
Update: After Ransomware Claims, Xerox Says Subsidiary Hit With Cyberattack
/in General NewsXerox stated that the incident had no impact on its corporate systems, operations, or data, but limited personal information in the XBS environment may have been affected.
Cyware News – Latest Cyber News – Read More
Cybercriminals Share Millions of Stolen Records During Holiday Break
/in General NewsThe “Leaksmus” event on the Dark Web exposed some 50 million records containing sensitive information from people all around the world.
darkreading – Read More
Google Settles Lawsuit Over Tracking ‘Incognito Mode’ Chrome Users
/in General NewsGoogle tracked privacy-conscious Internet users, and now it’s paying for it.
darkreading – Read More
Cybersecurity New Year’s resolutions every enterprise leader (and user) should make
/in General NewsMuch like day-to-day life, good cybersecurity hygiene is critical. Here are five resolutions enterprises must make for the year ahead.Read More
Security News | VentureBeat – Read More
States and Congress Wrestle With Cybersecurity After Iran Attacks Small Town Water Utilities
/in General NewsThe hacking of a municipal water plant is prompting new warnings from U.S. security officials at a time when governments are wrestling with how to harden water utilities against cyberattacks.
The post States and Congress Wrestle With Cybersecurity After Iran Attacks Small Town Water Utilities appeared first on SecurityWeek.
SecurityWeek – Read More
Cyberattackers Target Nuclear Waste Company via LinkedIn
/in General NewsThe hackers were unsuccessful in their attempt, but this is not the first time the company has experienced this kind of attack.
darkreading – Read More