BackBox News

Latest news and insights on Security

Thousands of Ivanti VPN Appliances Impacted by Recent Vulnerability

Researchers at the Shadowserver Foundation identify thousands of internet-exposed Ivanti VPN appliances likely impacted by a recently disclosed vulnerability leading to remote code execution.

The post Thousands of Ivanti VPN Appliances Impacted by Recent Vulnerability appeared first on SecurityWeek.

SecurityWeek – ​Read More

Hotel Check-In Terminal Leaks Rafts of Guests’ Room Codes

Martin Schobert at Swiss security firm Pentagrid discovered that an attacker could input a series of six consecutive dashes (——) in place of a booking reference number and the terminal would return an extensive list of room details.

Cyware News – Latest Cyber News – ​Read More

Key Lawmakers Float New Rules for Personal Data Protection; Bill Would Make Privacy a Consumer Right

The American Privacy Rights Act would preempt most state privacy laws — though it wouldn’t impact certain states’ laws already on the books that protect financial, health or employee data.

The post Key Lawmakers Float New Rules for Personal Data Protection; Bill Would Make Privacy a Consumer Right appeared first on SecurityWeek.

SecurityWeek – ​Read More

Confidential VMs Hacked via New Ahoi Attacks

New Ahoi attacks Heckler and WeSee target AMD SEV-SNP and Intel TDX with malicious interrupts to hack confidential VMs.

The post Confidential VMs Hacked via New Ahoi Attacks appeared first on SecurityWeek.

SecurityWeek – ​Read More

The Legacy of a Security Breach

By Daily Contributors

Today over at Resonance Security I am going to look at one of the more unusual ways in…

This is a post from HackRead.com Read the original post: The Legacy of a Security Breach

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

Google Sues Crypto Investment App Makers Over Alleged Massive “Pig Butchering” Scam

Two China-based Android app developers are being sued by Google for an alleged scam targeting 100,000 users worldwide through fake cryptocurrency and other investment apps.

Cyware News – Latest Cyber News – ​Read More

The Fight for Cybersecurity Awareness

The Fight for Cybersecurity Awareness

Investing in cybersecurity skills creates a safer digital world for everyone.

darkreading – ​Read More

Hackers can Use AI Hallucinations to Spread Malware

One security researcher investigating AI-hallucinated libraries said late last month that he found chatbots calling for a nonexistent Python package dubbed “huggingface-cli.”

Cyware News – Latest Cyber News – ​Read More

Healthcare IT Help Desk Employees Targeted in Payment-Hijacking Attacks

The US Department of Health warns of financially motivated social engineering attacks targeting healthcare organizations.

The post Healthcare IT Help Desk Employees Targeted in Payment-Hijacking Attacks appeared first on SecurityWeek.

SecurityWeek – ​Read More

Watch Out for ‘Latrodectus’ – This Malware Could Be In Your Inbox

Watch Out for ‘Latrodectus’ – This Malware Could Be In Your Inbox

Threat hunters have discovered a new malware called Latrodectus that has been distributed as part of email phishing campaigns since at least late November 2023.
“Latrodectus is an up-and-coming downloader with various sandbox evasion functionality,” researchers from Proofpoint and Team Cymru said in a joint analysis published last week, adding it’s designed to retrieve

The Hacker News – ​Read More

BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.