BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
ClickUp Data Leak Exposes Enterprise Emails for Over a Year
/in General NewsA hardcoded ClickUp API key exposed hundreds of corporate and government emails for over a year, raising new SaaS security concerns.
The post ClickUp Data Leak Exposes Enterprise Emails for Over a Year appeared first on TechRepublic.
Security Archives – TechRepublic – Read More
Decoding Q1 2026’s $152.9 Billion Crypto Custody Concentration
/in General NewsCrypto Custody Concentration hits $152.9B as institutions shift to derivatives, consolidating capital on top exchanges amid Q1 market slowdown.
Hackread – Cybersecurity News, Data Breaches, AI and More – Read More
BlueNoroff Uses Fake Zoom Calls to Turn Victims Into Attack Lures
/in General NewsThe North Korean group is using stolen victim videos, AI-generated avatars, and fake Zoom calls to scale malware attacks against cryptocurrency executives.
darkreading – Read More
Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push
/in General NewsCybersecurity researchers have disclosed details of a critical security vulnerability impacting GitHub.com and GitHub Enterprise Server that could allow an authenticated user to obtain remote code execution with a single “git push” command.
The flaw, tracked as CVE-2026-3854 (CVSS score: 8.7), is a case of command injection that could allow an attacker with push access to a repository to achieve
The Hacker News – Read More
Microsoft finally open sources DOS 1.0 – and it’s so much more than the code
/in General NewsWant a blast from the past? Microsoft just open-sourced its very first operating system, offering a rare insight into the PC’s earliest days.
Latest news – Read More
Cyber Insurance Data Gives CISOs New Ammo for Budget Talks
/in General NewsBoards may ignore alerts, but they listen to losses: new data from Resilience links security gaps directly to financial impact.
The post Cyber Insurance Data Gives CISOs New Ammo for Budget Talks appeared first on SecurityWeek.
SecurityWeek – Read More
Vidar Rises to Top of Chaotic Infostealer Market
/in General NewsThe malware has filled the gap created by last year’s law enforcement takedowns of Lumma and Rhadamanthys.
darkreading – Read More
Cyber Command, NSA chief warns foreign adversaries likely to target midterms
/in General NewsArmy Gen. Joshua Rudd told lawmakers “we are postured and ready to support as required or tasked, making sure that we safeguard our elections.”
The Record from Recorded Future News – Read More
Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaign
/in General NewsA cybercrime group of Brazilian origin has resurfaced after more than three years to orchestrate a campaign that targets Minecraft players with a new stealer called LofyStealer (aka GrabBot).
“The malware disguises itself as a Minecraft hack called ‘Slinky,'” Brazil-based cybersecurity company ZenoX said in a technical report. “It uses the official game icon to induce voluntary execution,
The Hacker News – Read More
Paragon is not collaborating with Italian authorities probing spyware attacks, report says
/in General NewsDespite promising to help determine what happened with the hacks targeting journalists and activists in Italy, Israeli-American spyware maker Paragon has reportedly not responded to authorities’ requests for information.
Security News | TechCrunch – Read More