BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
[wp-rss-aggregator feeds="kitploit" limit="10" pagination="off"]
Exploit DB
[wp-rss-aggregator feeds="exploit-db" limit="10" pagination="off"]
Latest news and insights on Security
Windows 11 KB5034204 Update Fixes Bluetooth Audio Issues, 24 bugs
/in General NewsKB5034204 also fixes an issue caused by a deadlock that prevents search from working on the Start menu for some users and addresses a bug affecting the OpenType font driver, affecting how text renders for third-party applications.
Cyware News – Latest Cyber News – Read More
VexTrio: The Uber of Cybercrime – Brokering Malware for 60+ Affiliates
/in General NewsVexTrio has been attributed to malicious campaigns that use domains generated by a dictionary domain generation algorithm (DDGA) to propagate scams, riskware, spyware, adware, potentially unwanted programs (PUPs), and pornographic content.
Cyware News – Latest Cyber News – Read More
Splunk fixed high-severity flaw impacting Windows versions
/in General NewsDeserialization of untrusted data can allow malicious code to be executed on the system. This is because the serialized data can contain instructions that the application will execute when it deserializes the data.
Cyware News – Latest Cyber News – Read More
Chrome 121 Patches 17 Vulnerabilities
/in General NewsGoogle releases Chrome 121 to the stable channel with 17 security fixes, including 11 reported by external researchers.
The post Chrome 121 Patches 17 Vulnerabilities appeared first on SecurityWeek.
SecurityWeek – Read More
Trello API Abused to Link Email Addresses to 15 Million Accounts
/in General NewsFor those concerned, the Trello leak has been added to the Have I Been Pwned data breach notification service, allowing anyone to check if they are among the 15 million leaked email addresses.
Cyware News – Latest Cyber News – Read More
GoAnywhere MFT Critical Flaw Lets Anyone Be Admin
/in General NewsAuthentication bypass in Fortra’s GoAnywhere MFT before 7.4.1 allows an unauthorized user to create an admin user via the administration portal,” Fortra said in an advisory released on January 22, 2024.
Cyware News – Latest Cyber News – Read More
Netskope Announces MSP-Friendly, Enterprise-Grade SASE Tailored for the Midmarket
/in General NewsPost Content
darkreading – Read More
US, UK, AU Officials Sanction 33-Year-Old Russian Medibank Hacker
/in General NewsAleksandr Ermakov, alongside other members of the REvil ransomware gang, are responsible for one of the biggest cyberattacks in Australia’s history.
darkreading – Read More
Google Chrome adds new AI features to boost productivity and creativity
/in General NewsGoogle Chrome introduces new AI features to help you organize tabs, create themes and write text on the web, and faces some challenges along the way.Read More
Security News | VentureBeat – Read More
Patch Your GoAnywhere MFT Immediately – Critical Flaw Lets Anyone Be Admin
/in General NewsA critical security flaw has been disclosed in Fortra’s GoAnywhere Managed File Transfer (MFT) software that could be abused to create a new administrator user.
Tracked as CVE-2024-0204, the issue carries a CVSS score of 9.8 out of 10.
“Authentication bypass in Fortra’s GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal,” Fortra&
The Hacker News – Read More