BackBox News

Latest news and insights on Security

COTI Announces Upcoming V2 Airdrop Campaign Worth +10M USD

By Owais Sultan

Web3 infrastructure leader COTI is excited to announce a significant community rewards initiative, with the platform airdropping up…

This is a post from HackRead.com Read the original post: COTI Announces Upcoming V2 Airdrop Campaign Worth +10M USD

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

Hackers Using Sneaky HTML Smuggling to Deliver Malware via Fake Google Sites

Hackers Using Sneaky HTML Smuggling to Deliver Malware via Fake Google Sites

Cybersecurity researchers have discovered a new malware campaign that leverages bogus Google Sites pages and HTML smuggling to distribute a commercial malware called AZORult in order to facilitate information theft.
“It uses an unorthodox HTML smuggling technique where the malicious payload is embedded in a separate JSON file hosted on an external website,” Netskope Threat Labs

The Hacker News – ​Read More

Human Risk Factors Remain Outside of Cybersecurity Pros’ Control

Concerns are especially high in the public sector, with 87% worrying about employee email and social media lapses damaging their institutions, according to a Mimecast report.

Cyware News – Latest Cyber News – ​Read More

Google researchers unveil ‘VLOGGER’, an AI that can bring still photos to life

Google researchers unveil ‘VLOGGER’, an AI that can bring still photos to life

Google researchers have developed ‘VLOGGER’, an AI system that generates realistic talking head videos from a single image, using advanced diffusion models, enabling new applications while raising concerns about deepfakes.Read More

Security News | VentureBeat – ​Read More

‘Gitgub’ Malware Campaign Targets GitHub Users with RisePro Info-Stealer

Multiple GitHub repositories were hosting cracked software designed to deliver the RisePro info-stealer, indicating a widespread campaign to distribute the malware. The repositories were taken down by GitHub, and all used the same download link.

Cyware News – Latest Cyber News – ​Read More

Key MITRE ATT&CK Techniques Used by Cyberattackers

In 2023, researchers identified new adversary techniques targeting macOS, Microsoft, and Linux users, including increased stealer activity in macOS environments, reflective code loading, and AppleScript abuse.

Cyware News – Latest Cyber News – ​Read More

PoC Published for Critical Fortra Code Execution Vulnerability

A critical directory traversal vulnerability in Fortra FileCatalyst Workflow could lead to remote code execution.

The post PoC Published for Critical Fortra Code Execution Vulnerability appeared first on SecurityWeek.

SecurityWeek – ​Read More

Audit Committees Rank Cybersecurity as Top Priority Amid SEC Crackdown

Audit committees rank cybersecurity as their top oversight priority, the Center for Audit Quality and Deloitte found in a survey conducted as the Securities and Exchange Commission pushed forward with strict rules on cyberattack disclosure.

Cyware News – Latest Cyber News – ​Read More

Get on CompTIA Certification Track With These $30 Study Guides

Kickstart a lucrative career in IT with this extensive bundle that includes 10 study guides on CompTIA and more of today’s leading IT certifications.

Security | TechRepublic – ​Read More

South African Government Pension Data Leak Fears Spark Probe

South African Government Pension Data Leak Fears Spark Probe

LockBit ransomware gang claims 668GB of data it dumped online was stolen from South Africa’s pension agency.

darkreading – ​Read More

BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.