BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
The Mystery of the $400 Million FTX Heist May Have Been Solved
/in General NewsAn indictment against three Americans suggests that at least some of the culprits behind the theft of an FTX crypto fortune may be in custody.
Security Latest – Read More
Feds Confirm Remote Killing of Volt Typhoon’s SOHO Botnet
/in General NewsThe China-backed APT was using the botnet, made up of mostly end-of-life, patchless routers from Cisco and Netgear, to set up shop inside US critical infrastructure.
darkreading – Read More
Ukraine Military Targeted With Russian APT PowerShell Attack
/in General NewsThe attack, associated with Shuckworm, employs TTPs observed in prior campaigns against the Ukrainian military, predominantly using PowerShell.
darkreading – Read More
Delinea Research Reveals that Ransomware Is Back on the Rise As Cybercriminals’ Motivation Shifts to Data Exfiltration
/in General NewsPost Content
darkreading – Read More
UK: City Cyber Task Force Launches to Secure Corporate Finance
/in General NewsThe Institute of Chartered Accountants in England and Wales (ICAEW) and the National Cyber Security Centre (NCSC) are leading a task force with other organizations to improve the security of corporate finance deals.
Cyware News – Latest Cyber News – Read More
Protect AI Acquires Laiyer AI to Better Secure AI Models
/in General NewsThe acquisition will enable organizations to benefit from Laiyer AI’s LLM Guard software, which detects, redacts, and sanitizes inputs and outputs from LLMs with lower latency, while also supporting open source contributions.
Cyware News – Latest Cyber News – Read More
Does CVSS 4.0 Solve the Exploitability Problem?
/in General NewsThe new system introduces changes such as splitting attack complexity into two parameters and categorizing user interaction into three levels, offering a more nuanced and comprehensive assessment of vulnerabilities.
Cyware News – Latest Cyber News – Read More
The Imperative for Robust Security Design in the Health Industry
/in General NewsIt is imperative that healthcare and health-tech companies move beyond reactive measures and adopt a proactive stance in safeguarding sensitive patient information.
darkreading – Read More
Zero-Day Vulnerability can Blind Defenses Relying on Windows Event Logs
/in General NewsThe vulnerability can be leveraged by an attacker with local network access, and until Microsoft issues a patch, users can implement micropatches provided by Acros to mitigate the risk.
Cyware News – Latest Cyber News – Read More
Exploit Released for Android Local Elevation Flaw Impacting Seven OEMs
/in General NewsA local privilege elevation flaw (CVE-2023-45779) affecting several Android OEMs was discovered and addressed in the December 2023 security update, highlighting weaknesses in APEX module signing using test keys.
Cyware News – Latest Cyber News – Read More