BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
ToyMaker Uses LAGTOY to Sell Access to CACTUS Ransomware Gangs for Double Extortion
/in General NewsCybersecurity researchers have detailed the activities of an initial access broker (IAB) dubbed ToyMaker that has been observed handing over access to double extortion ransomware gangs like CACTUS.
The IAB has been assessed with medium confidence to be a financially motivated threat actor, scanning for vulnerable systems and deploying a custom malware called LAGTOY (aka HOLERUN).
“LAGTOY can be
The Hacker News – Read More
Pete Hegseth’s Signal Scandal Spirals Out of Control
/in General NewsPlus: Cybercriminals stole a record-breaking fortune from US residents and businesses in 2024, and Google performs its final flip-flop in its yearslong quest to kill tracking cookies.
Security Latest – Read More
If we want a passwordless future, let’s get our passkey story straight
/in General NewsPasswords and passkeys each involve a secret. The critical difference: How that secret gets handled.
Latest stories for ZDNET in Security – Read More
Browser Security Firm SquareX Raises $20 Million
/in General NewsSquareX offers what it has dubbed a “Browser Detection and Response (BDR)” solution.
The post Browser Security Firm SquareX Raises $20 Million appeared first on SecurityWeek.
SecurityWeek – Read More
Critical Commvault Flaw Allows Full System Takeover – Update NOW
/in General NewsEnterprises using Commvault Innovation Release are urged to patch immediately against CVE-2025-34028. This critical flaw allows attackers to…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
Why Developers Should Care About Generative AI (Even They Aren’t AI Expert)
/in General NewsSoftware development is about to undergo a generative change. What this means is that AI (Artificial Intelligence) has…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
Mobile Applications: A Cesspool of Security Issues
/in General NewsAn analysis of more than a half-million mobile apps find encryption problems, privacy issues, and known vulnerabilities in third-party code. What can users and developers do?
darkreading – Read More
Largest telecom in Africa warns of cyber incident exposing customer data
/in General NewsMTN Group said an “unknown third-party has claimed to have accessed data linked” to parts of its system and that the incident “resulted in unauthorised access to personal information of some MTN customers in certain markets.”
The Record from Recorded Future News – Read More
Interlock Ransomware Say It Stole 20TB of DaVita Healthcare Data
/in General NewsInterlock ransomware group claims it stole 20TB of sensitive patient data from DaVita Healthcare. While the group has…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
North Korean Hackers Spread Malware via Fake Crypto Firms and Job Interview Lures
/in General NewsNorth Korea-linked threat actors behind the Contagious Interview have set up front companies as a way to distribute malware during the fake hiring process.
“In this new campaign, the threat actor group is using three front companies in the cryptocurrency consulting industry—BlockNovas LLC (blocknovas[.] com), Angeloper Agency (angeloper[.]com), and SoftGlide LLC (softglide[.]co)—to spread
The Hacker News – Read More