BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
GitHub Issues Abused in Copilot Attack Leading to Repository Takeover
/in General NewsAttackers can inject malicious instructions in a GitHub Issue that are automatically processed by Copilot when launching a Codespace from that issue.
The post GitHub Issues Abused in Copilot Attack Leading to Repository Takeover appeared first on SecurityWeek.
SecurityWeek – Read More
Romanian Hacker Extradited to US Admits Hacking Oregon State Network
/in General NewsCatalin Dragomir admits to hacking an Oregon government office and selling network access. Read more on the $250k fraud case and his 2026 sentencing.
Hackread – Cybersecurity News, Data Breaches, AI and More – Read More
Taiwan Security Firm Confirms Flaw Flagged by CISA Likely Exploited by Chinese APTs
/in General NewsThe vulnerability in TeamT5 ThreatSonar Anti-Ransomware was recently added to CISA’s KEV catalog.
The post Taiwan Security Firm Confirms Flaw Flagged by CISA Likely Exploited by Chinese APTs appeared first on SecurityWeek.
SecurityWeek – Read More
Identity Prioritization isn’t a Backlog Problem – It’s a Risk Math Problem
/in General NewsMost identity programs still prioritize work the way they prioritize IT tickets: by volume, loudness, or “what failed a control check.” That approach breaks the moment your environment stops being mostly-human and mostly-onboarded.
In modern enterprises, identity risk is created by a compound of factors: control posture, hygiene, business context, and intent. Any one of these can perhaps be
The Hacker News – Read More
Lazarus Group Uses Medusa Ransomware in Middle East and U.S. Healthcare Attacks
/in General NewsThe North Korea-linked Lazarus Group (aka Diamond Sleet and Pompilus) has been observed using Medusa ransomware in an attack targeting an unnamed entity in the Middle East, according to a new report by the Symantec and Carbon Black Threat Hunter Team.
Broadcom’s threat intelligence division said it also identified the same threat actors mounting an unsuccessful attack against a healthcare
The Hacker News – Read More
Anonymous Fénix Members Arrested in Spain
/in General NewsThe group’s administrator and moderator were arrested last year, and two other members were arrested this month.
The post Anonymous Fénix Members Arrested in Spain appeared first on SecurityWeek.
SecurityWeek – Read More
UnsolicitedBooker Targets Central Asian Telecoms With LuciDoor and MarsSnake Backdoors
/in General NewsThe threat activity cluster known as UnsolicitedBooker has been observed targeting telecommunications companies in Kyrgyzstan and Tajikistan, marking a shift from prior attacks aimed at Saudi Arabian entities.
The attacks involve the deployment of two distinct backdoors codenamed LuciDoor and MarsSnake, according to a report published by Positive Technologies last week.
“The group used several
The Hacker News – Read More
Anthropic Says Chinese AI Firms Used 16 Million Claude Queries to Copy Model
/in General NewsAnthropic on Monday said it identified “industrial-scale campaigns” mounted by three artificial intelligence (AI) companies, DeepSeek, Moonshot AI, and MiniMax, to illegally extract Claude’s capabilities to improve their own models.
The distillation attacks generated over 16 million exchanges with its large language model (LLM) through about 24,000 fraudulent accounts in violation of its terms
The Hacker News – Read More
How to take full-page screenshots in Chrome on any device – it’s easy and free
/in General NewsWant to capture a scrolling screenshot of a web page in Chrome? Here’s how to quickly take one on a desktop or your phone.
Latest news – Read More
Try this tiny Linux distro when nothing else will fit – here’s why
/in General NewsTiny Core Linux is an incredibly small, modular distro that can be customized to your specifications. Here’s how to get started.
Latest news – Read More