BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
Operation Endgame: Police reveal takedowns of three key cybercrime tools
/in General NewsThe Rhadamanthys infostealer, the VenomRAT remote access trojan and the Elysium botnet were targeted in the latest phase of the international police action known as Operation Endgame.
The Record from Recorded Future News – Read More
NHS Investigating Oracle EBS Hack Claims as Hackers Name Over 40 Alleged Victims
/in General NewsThe UK’s national healthcare system is working with the country’s National Cyber Security Centre to investigate the incident.
The post NHS Investigating Oracle EBS Hack Claims as Hackers Name Over 40 Alleged Victims appeared first on SecurityWeek.
SecurityWeek – Read More
AI will cause ‘jobs chaos’ within the next few years, says Gartner – what that means
/in General NewsThe firm named four scenarios AI could create at work, and said businesses should prepare for all of them.
Latest news – Read More
ThreatsDay Bulletin: Cisco 0-Days, AI Bug Bounties, Crypto Heists, State-Linked Leaks and 20 More Stories
/in General NewsBehind every click, there’s a risk waiting to be tested. A simple ad, email, or link can now hide something dangerous. Hackers are getting smarter, using new tools to sneak past filters and turn trusted systems against us.
But security teams are fighting back. They’re building faster defenses, better ways to spot attacks, and stronger systems to keep people safe. It’s a constant race — every
The Hacker News – Read More
Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon
/in General NewsAmazon has seen a threat actor exploiting CVE-2025-20337 and CVE-2025-5777, two critical Cisco and Citrix vulnerabilities, as zero-days.
The post Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon appeared first on SecurityWeek.
SecurityWeek – Read More
CISA Flags Critical WatchGuard Fireware Flaw Exposing 54,000 Fireboxes to No-Login Attacks
/in General NewsThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical security flaw impacting WatchGuard Fireware to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The vulnerability in question is CVE-2025-9242 (CVSS score: 9.3), an out-of-bounds write vulnerability affecting Fireware OS 11.10.2 up to and including
The Hacker News – Read More
BreachLock and Vanta Bridge the Gap Between Continuous Security Testing and Compliance with New Integration
/in General NewsNew York, New York, 13th November 2025, CyberNewsWire
Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More – Read More
Firefox 145 and Chrome 142 Patch High-Severity Flaws in Latest Releases
/in General NewsGoogle and Mozilla have released fresh Chrome and Firefox updates that address multiple high-severity security defects.
The post Firefox 145 and Chrome 142 Patch High-Severity Flaws in Latest Releases appeared first on SecurityWeek.
SecurityWeek – Read More
Kenya Kicks Off ‘Code Nation’ With a Nod to Cybersecurity
/in General NewsThe African country aims to train 1 million workers in tech skills in the short term, with a focus on software engineering, cybersecurity, and data science.
darkreading – Read More
Over 46,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack
/in General NewsCybersecurity researchers are calling attention to a large-scale spam campaign that has flooded the npm registry with thousands of fake packages since early 2024 as part of a likely financially motivated effort.
“The packages were systematically published over an extended period, flooding the npm registry with junk packages that survived in the ecosystem for almost two years,” Endor Labs
The Hacker News – Read More