BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
Cyber Startup Oasis Secures $35 Million Series A Extension, Doubles Valuation
/in General NewsThe extension round was led by existing investors Accel, Cyberstarts, and Sequoia Capital, along with private investors. Oasis has now raised a total of $75 million, including its seed round and previous Series A.
Cyware News – Latest Cyber News – Read More
AI is Creating a New Generation of Cyberattacks
/in General NewsMost businesses see offensive AI fast becoming a standard tool for cybercriminals, with 93% of security leaders expecting to face daily AI-driven attacks, according to Netacea.
Cyware News – Latest Cyber News – Read More
Iranian Hackers Impersonate Journalists in Social Engineering Campaign
/in General NewsA hacking group linked to the intelligence wing of Iran’s Revolutionary Guard Corps impersonated journalists and human rights activists as part of a social engineering campaign, according to research released Wednesday by Mandiant and Google Cloud.
Cyware News – Latest Cyber News – Read More
Corelight Gets $150M to Expand Detection, Improve Workflows
/in General NewsThe latest investment will allow Corelight to deepen its relationship with existing partners, while extending its expertise from large enterprises and government entities to the enterprise sector.
Cyware News – Latest Cyber News – Read More
Dropbox Data Breach Impacts Customer Information
/in General NewsDropbox says hackers breached its Sign production environment and accessed customer email addresses and hashed passwords.
The post Dropbox Data Breach Impacts Customer Information appeared first on SecurityWeek.
SecurityWeek – Read More
CISA Warns of Active Exploitation of Severe GitLab Password Reset Vulnerability
/in General NewsThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw impacting GitLab to its Known Exploited Vulnerabilities (KEV) catalog, owing to active exploitation in the wild.
Tracked as CVE-2023-7028 (CVSS score: 10.0), the maximum severity vulnerability could facilitate account takeover by sending password reset emails to an unverified email
The Hacker News – Read More
‘DuneQuixote’ Shows Stealth Cyberattack Methods Are Evolving. Can Defenders Keep Up?
/in General NewsA recent campaign targeting Middle Eastern government organizations plays standard detection tools like a fiddle. With cyberattackers getting more creative, defenders must start keeping pace.
darkreading – Read More
Inside Ukraine’s Killer-Drone Startup Industry
/in General NewsUkraine needs small drones to combat Russian forces—and is bootstrapping its own industry at home.
Security Latest – Read More
New Cuttlefish Malware Hijacks Router Connections, Sniffs for Cloud Credentials
/in General NewsA new malware called Cuttlefish is targeting small office and home office (SOHO) routers with the goal of stealthily monitoring all traffic through the devices and gather authentication data from HTTP GET and POST requests.
“This malware is modular, designed primarily to steal authentication material found in web requests that transit the router from the adjacent
The Hacker News – Read More
Change Healthcare Cyberattack Was Due to a Lack of Multifactor Authentication, UnitedHealth CEO says
/in General NewsUnitedHealth CEO Andrew Witty said in a U.S. Senate hearing that his company is still trying to understand why the server did not have the additional protection.
The post Change Healthcare Cyberattack Was Due to a Lack of Multifactor Authentication, UnitedHealth CEO says appeared first on SecurityWeek.
SecurityWeek – Read More