BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
Zero-Click Flaw Exposes Potentially Millions of Popular Storage Devices to Attack
/in General NewsA vulnerability categorized as “critical” in a photo app installed by default on Synology network-attached storage devices could give attackers the ability to steal data and worse.
Security Latest – Read More
Lottie-Player Supply Chain Attack Targets Cryptocurrency Wallets
/in General NewsLottieFiles has confirmed that Lottie-Player has been compromised in a supply chain attack whose goal is cryptocurrency theft.
The post Lottie-Player Supply Chain Attack Targets Cryptocurrency Wallets appeared first on SecurityWeek.
SecurityWeek – Read More
Microsoft Delays Windows Copilot+ Recall Release Over Privacy Concerns
/in General NewsMicrosoft is further delaying the release of its controversial Recall feature for Windows Copilot+ PCs, stating it’s taking the time to improve the experience.
The development was first reported by The Verge. The artificial intelligence-powered tool was initially slated for a preview release starting in October.
“We are committed to delivering a secure and trusted experience with Recall,” the
The Hacker News – Read More
Bug Bounty Platform Bugcrowd Secures $50 Million in Growth Capital
/in General NewsBugcrowd has secured $50 million in growth capital facility from Silicon Valley Bank for expansion and innovation.
The post Bug Bounty Platform Bugcrowd Secures $50 Million in Growth Capital appeared first on SecurityWeek.
SecurityWeek – Read More
Major Security Update: Chrome Patches Critical Out-of-Bounds Vulnerability
/in General NewsNot too long ago, we discovered a critical security flaw in Firefox. This week, Chrome is addressing fixes for yet more critical vulnerabilities. Google recently patched vulnerabilities in its Chrome browser, one of which was marked as critical, tracked as CVE-2024-10487. The vulnerability allowed remote attackers to perform out-of-bounds memory access via a crafted HTML page.
Source
TechSplicer – Read More
A Step-by-Step Guide to How Threat Hunting Works
/in General NewsStay ahead of cybercrime with proactive threat hunting. Learn how threat hunters identify hidden threats, protect critical systems,…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Facebook Businesses Targeted in Infostealer Phishing Campaign
/in General NewsThe threat actors deceive their victims by impersonating the legal teams of companies, well-known Web stores, and manufacturers.
darkreading – Read More
Cybersecurity Job Market Stagnates, Dissatisfaction Abounds
/in General NewsThe 2024 ISC2 Cybersecurity Workforce Study found that amid a tightening job market and dynamic cyber-threat environment, ongoing staffing and skills shortages are putting organizations at serious risk. Can AI move the needle in defenders’ favor?
darkreading – Read More
FBI: Iranian cyber group targeted Summer Olympics with attack on French display provider
/in General NewsThe hacking group’s goal was to “display photo montages denouncing the participation of Israeli athletes in the 2024 Olympic and Paralympic Games,” the FBI said.
The Record from Recorded Future News – Read More
Microsoft delays its troubled AI-powered Recall feature yet again
/in General NewsMicrosoft needs ‘additional time to refine’ Recall. Here’s the new target date for rollout and what else we know.
Latest stories for ZDNET in Security – Read More