BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
152,000 Impacted by Data Breach at Berman & Rabin
/in General NewsLaw firm Berman & Rabin says 152,000 people are impacted by a data breach resulting from a July 2024 ransomware attack.
The post 152,000 Impacted by Data Breach at Berman & Rabin appeared first on SecurityWeek.
SecurityWeek – Read More
Frederick Health Hit by Ransomware Attack
/in General NewsMaryland healthcare provider Frederick Health has taken some of its systems offline in response to a ransomware attack.
The post Frederick Health Hit by Ransomware Attack appeared first on SecurityWeek.
SecurityWeek – Read More
Unprotected DeepSeek Database Exposed Chats, Other Sensitive Information
/in General NewsAn unprotected database belonging to Chinese AI company DeepSeek exposed highly sensitive information, including chat history, secret keys, and backend data.
The post Unprotected DeepSeek Database Exposed Chats, Other Sensitive Information appeared first on SecurityWeek.
SecurityWeek – Read More
Tenable to Acquire Vulcan Cyber for $150 Million
/in General NewsTenable plans to acquire exposure management company Vulcan Cyber for roughly $150 million in cash and stock.
The post Tenable to Acquire Vulcan Cyber for $150 Million appeared first on SecurityWeek.
SecurityWeek – Read More
New Aquabot Botnet Exploits CVE-2024-41710 in Mitel Phones for DDoS Attacks
/in General NewsA Mirai botnet variant dubbed Aquabot has been observed actively attempting to exploit a medium-severity security flaw impacting Mitel phones in order to ensnare them into a network capable of mounting distributed denial-of-service (DDoS) attacks.
The vulnerability in question is CVE-2024-41710 (CVSS score: 6.8), a case of command injection in the boot process that could allow a malicious actor
The Hacker News – Read More
Unpatched PHP Voyager Flaws Leave Servers Open to One-Click RCE Exploits
/in General NewsThree security flaws have been disclosed in the open-source PHP package Voyager that could be exploited by an attacker to achieve one-click remote code execution on affected instances.
“When an authenticated Voyager user clicks on a malicious link, attackers can execute arbitrary code on the server,” Sonar researcher Yaniv Nizry said in a write-up published earlier this week.
The
The Hacker News – Read More
Fake Videos of Former First Lady Scam Namibians
/in General NewsAmateurish financial scams are common across Africa, and Namibia’s influential former first lady, Monica Geingos, has emerged as a particularly effective host body for these messages.
darkreading – Read More
Operation Talent: FBI Seizes Nulled.to, Cracked.to, Sellix.io and more
/in General NewsThe FBI has seized Nulled.to, Cracked.to, Sellix.io, and StarkRDP.io in Operation Talent, targeting cybercrime forums and illicit marketplaces.…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
DeepSeek helps speed up threat detection while raising national security concerns
/in General NewsDeepSeek and its R1 model aren’t wasting any time rewriting the rules of cybersecurity AI in real-time. Enterprises can’t ignore this risk.Read More
Security News | VentureBeat – Read More
Dario Amodei challenges DeepSeek’s $6 million AI narrative: What Anthropic thinks about China’s latest AI move
/in General NewsAnthropic co-founder Dario Amodei reveals DeepSeek’s Chinese AI breakthrough actually cost billions, not $6 million, challenging market narratives and explaining why AI development remains resource-intensive despite engineering improvements.Read More
Security News | VentureBeat – Read More