BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
SocGholish: Fake Update Puts Visitors at Risk
/in General NewsThe recent developments in SocGholish infection tactics target WordPress-based websites. The attack sequence involves initial access through compromised websites with vulnerable WordPress plugins.
Cyware News – Latest Cyber News – Read More
Google Chrome Now Asks for Passwords To Scan Protected Archives
/in General NewsThe new warning messages help users understand the danger posed by each downloaded file from the Internet. Google has implemented a two-tier download warning system using AI-powered malware verdicts from its Safe Browsing service.
Cyware News – Latest Cyber News – Read More
PKfail Vulnerability Allows Secure Boot Bypass on Hundreds of Computer Models
/in General NewsA vulnerability dubbed PKfail can allow attackers to run malicious code during the boot process, which can be used to deliver UEFI bootkits.
The post PKfail Vulnerability Allows Secure Boot Bypass on Hundreds of Computer Models appeared first on SecurityWeek.
SecurityWeek – Read More
Master Cybersecurity With The Complete CompTIA Security+ SY0-701 Certification Kit by IDUNOVA
/in General NewsPrepare for your cybersecurity certification with comprehensive study materials (including 30 hours of videos and hands-on labs) and expert guidance.
Security | TechRepublic – Read More
Email Gateway Security Gaps Enable New Malware Tactics
/in General NewsEmail security gaps in gateway defenses have allowed phishing hackers to sneak malware past static scanning functions. Hackers hid malicious attachments by using a decoy file extension in a compressed archive.
Cyware News – Latest Cyber News – Read More
U.S. DoJ Indicts North Korean Hacker for Ransomware Attacks on Hospitals
/in General NewsThe U.S. Department of Justice (DoJ) on Thursday unsealed an indictment against a North Korean military intelligence operative for allegedly carrying out ransomware attacks against healthcare facilities in the country and funneling the payments to orchestrate additional intrusions into defense, technology, and government entities across the world.
“Rim Jong Hyok and his co-conspirators deployed
The Hacker News – Read More
Patchwork Group Found Using Brute Ratel C4 and an Enhanced Version of PGoShell Backdoor
/in General NewsPatchwork hackers targeted Bhutan using the advanced Brute Ratel C4 tool, along with an updated backdoor called PGoShell. This marks the first time Patchwork has been observed using the red teaming software.
Cyware News – Latest Cyber News – Read More
Mimecast Acquires Veteran Data Security Firm Code42
/in General NewsMimecast has acquired veteran data security firm Code42, adding 175 employees to its team. Code42, founded in 2001, focuses on expanding its data protection platform, Incydr, with recent enhancements for source code exfiltration detection.
Cyware News – Latest Cyber News – Read More
97% of Devices Disrupted by CrowdStrike Restored as Insurer Estimates Billions in Losses
/in General NewsCrowdStrike says 97% of Windows systems impacted by its bad update are back online, just as an insurer predicts billions in losses for major companies.
The post 97% of Devices Disrupted by CrowdStrike Restored as Insurer Estimates Billions in Losses appeared first on SecurityWeek.
SecurityWeek – Read More
Ongoing Cyberattack Targets Exposed Selenium Grid Services for Crypto Mining
/in General NewsCybersecurity researchers are sounding the alarm over an ongoing campaign that’s leveraging internet-exposed Selenium Grid services for illicit cryptocurrency mining.
Cloud security Wiz is tracking the activity under the name SeleniumGreed. The campaign, which is targeting older versions of Selenium (3.141.59 and prior), is believed to be underway since at least April 2023.
“Unbeknownst to most
The Hacker News – Read More