BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
Researcher Drops MiniPlasma Windows Exploit for Unpatched 2020 CVE
/in General NewsThe researcher dropped the MiniPlasma exploit that uses the original proof-of-concept (PoC) code targeting the bug.
The post Researcher Drops MiniPlasma Windows Exploit for Unpatched 2020 CVE appeared first on SecurityWeek.
SecurityWeek – Read More
An ICE Firearms Trainer Was Involved in At Least 4 Deadly Shootings
/in General NewsDavid Norman, a former Phoenix police officer who’s described himself as “a fucking savage,” now runs a company that provided training to Homeland Security’s Special Response Teams.
Security Latest – Read More
Grafana Confirms Breach After Hackers Claim They Stole Data
/in General NewsGrafana appears to have been targeted by Coinbase Cartel, a cybercrime group linked to ShinyHunters, Scattered Spider, and Lapsus$.
The post Grafana Confirms Breach After Hackers Claim They Stole Data appeared first on SecurityWeek.
SecurityWeek – Read More
First Shai-Hulud Worm Clones Emerge
/in General NewsAt least one threat actor has adopted the recently released malware source code in attacks against NPM developers.
The post First Shai-Hulud Worm Clones Emerge appeared first on SecurityWeek.
SecurityWeek – Read More
Save 20% on Corsair gaming gear right now – here’s how
/in General NewsCorsair’s latest sale makes premium peripherals more affordable.
Latest news – Read More
Exploitation of Critical NGINX Vulnerability Begins
/in General NewsThe flaw leads to denial-of-service on default configurations and to remote code execution if ASLR is disabled.
The post Exploitation of Critical NGINX Vulnerability Begins appeared first on SecurityWeek.
SecurityWeek – Read More
Hackers Earn $1.3 Million at Pwn2Own Berlin 2026
/in General NewsParticipants demonstrated exploits for Windows, Linux, VMware, Nvidia, and AI products.
The post Hackers Earn $1.3 Million at Pwn2Own Berlin 2026 appeared first on SecurityWeek.
SecurityWeek – Read More
Can Laws Stop Deepfakes? South Korea Aims to Find Out
/in General NewsSouth Korea’s local elections next month will be a test bed for how effective regulations might be to stymie the flow of deepfakes.
darkreading – Read More
Closing the Gap: The Regulatory and Structural Maturation of Digital Assets
/in General NewsDigital assets are reshaping global finance as institutions adopt regulated crypto infrastructure, stablecoins, and tokenized assets.
Hackread – Cybersecurity News, Data Breaches, AI and More – Read More
NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE
/in General NewsA newly disclosed security flaw impacting NGINX Plus and NGINX Open has come under active exploitation in the wild, days after its public disclosure, according to VulnCheck.
The vulnerability, tracked as CVE-2026-42945 (CVSS score: 9.2), is a heap buffer overflow in ngx_http_rewrite_module affecting NGINX versions 0.6.27 through 1.30.0. According to AI-native security company depthfirst, the
The Hacker News – Read More