BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
More_eggs Malware Disguised as Resumes Targets Recruiters in Phishing Attack
/in General NewsCybersecurity researchers have spotted a phishing attack distributing the More_eggs malware by masquerading it as a resume, a technique originally detected more than two years ago.
The attack, which was unsuccessful, targeted an unnamed company in the industrial services industry in May 2024, Canadian cybersecurity firm eSentire disclosed last week.
“Specifically, the targeted individual was a
The Hacker News – Read More
Want free and anonymous access to AI chatbots? DuckDuckGo’s new tool is for you
/in General NewsThe privacy-minded DuckDuck Go promises that your chats are private, anonymized, and not used for AI model training.
Latest stories for ZDNET in Security – Read More
Fortinet Expands Cloud Security Portfolio with Lacework Acquisition
/in General NewsFortinet announces plans to acquire Lacework, a late-stage cloud security startup that was once listed as a “unicorn” company valued north of $1 billion.
The post Fortinet Expands Cloud Security Portfolio with Lacework Acquisition appeared first on SecurityWeek.
SecurityWeek – Read More
Criminal IP Unveils Fraud Detection Data Products on Snowflake Marketplace
/in General NewsCriminal IP Unveils Innovative Fraud Detection Data Products on Snowflake Marketplace AI SPERA, a leader in Cyber Threat…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Critical PyTorch Vulnerability Can Lead to Sensitive AI Data Theft
/in General NewsA critical vulnerability in the PyTorch distributed RPC framework could be exploited for remote code execution.
The post Critical PyTorch Vulnerability Can Lead to Sensitive AI Data Theft appeared first on SecurityWeek.
SecurityWeek – Read More
Making Choices for Stronger Vulnerability Management
/in General NewsThe threat environment will continue to grow in complexity. Now is the time for organizations to streamline how they manage and mitigate overlooked vulnerabilities.
darkreading – Read More
PHP Patches Critical Remote Code Execution Vulnerability
/in General NewsPHP has released patches for CVE-2024-4577, a critical vulnerability that could lead to arbitrary code execution on remote servers.
The post PHP Patches Critical Remote Code Execution Vulnerability appeared first on SecurityWeek.
SecurityWeek – Read More
Ransomware Is ‘More Brutal’ Than Ever in 2024
/in General NewsAs the fight against ransomware slogs on, security experts warn of a potential escalation to “real-world violence.” But recent police crackdowns are successfully disrupting the cybercriminal ecosystem.
Security Latest – Read More
Is a US Nationwide Privacy Law Really Coming?
/in General NewsIf passed, APRA will be a giant leap forward for the rights and freedoms of Americans.
darkreading – Read More
Azure Service Tags Vulnerability: Microsoft Warns of Potential Abuse by Hackers
/in General NewsMicrosoft is warning about the potential abuse of Azure Service Tags by malicious actors to forge requests from a trusted service and get around firewall rules, thereby allowing them to gain unauthorized access to cloud resources.
“This case does highlight an inherent risk in using service tags as a single mechanism for vetting incoming network traffic,” the Microsoft Security Response Center (
The Hacker News – Read More