BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and More
/in General NewsEverything feels secure—until one small thing slips through. Even strong systems can break if a simple check is missed or a trusted tool is misused. Most threats don’t start with alarms—they sneak in through the little things we overlook. A tiny bug, a reused password, a quiet connection—that’s all it takes.
Staying safe isn’t just about reacting fast. It’s about catching these early signs
The Hacker News – Read More
Malware Surge Hits Android: Adware, Trojans and Crypto Theft Lead Q2 Threats
/in General NewsDr.Web reports Android malware surge in Q2 with adware, banking trojans and crypto theft hidden in fake apps, firmware and spyware targeting users.
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
TAG-140 Deploys DRAT V2 RAT, Targeting Indian Government, Defense, and Rail Sectors
/in General NewsA hacking group with ties other than Pakistan has been found targeting Indian government organizations with a modified variant of a remote access trojan (RAT) called DRAT.
The activity has been attributed by Recorded Future’s Insikt Group to a threat actor tracked as TAG-140, which it said overlaps with SideCopy, an adversarial collective assessed to be an operational sub-cluster within
The Hacker News – Read More
How Digital Executive Protection Shields Top Leaders from Modern Threats
/in General NewsCybersecurity threats have emerged so quickly that most companies struggle to keep up and executives are often the…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
Android May Soon Warn You About Fake Cell Towers
/in General NewsPlus: Iran-linked hackers threaten to release Trump campaign emails, Chinese hackers still in US telecoms networks, and an abusive deepfake website plans an expansion.
Security Latest – Read More
Taiwan NSB Alerts Public on Data Risks from TikTok, Weibo, and RedNote Over China Ties
/in General NewsTaiwan’s National Security Bureau (NSB) has warned that China-developed applications like RedNote (aka Xiaohongshu), Weibo, TikTok, WeChat, and Baidu Cloud pose security risks due to excessive data collection and data transfer to China.
The alert comes following an inspection of these apps carried out in coordination with the Ministry of Justice Investigation Bureau (MJIB) and the Criminal
The Hacker News – Read More
Alert: Exposed JDWP Interfaces Lead to Crypto Mining, Hpingbot Targets SSH for DDoS
/in General NewsThreat actors are weaponizing exposed Java Debug Wire Protocol (JDWP) interfaces to obtain code execution capabilities and deploy cryptocurrency miners on compromised hosts.
“The attacker used a modified version of XMRig with a hard-“coded configuration, allowing them to avoid suspicious command-line arguments that are often flagged by defenders,” Wiz researchers Yaara Shriki and Gili
The Hacker News – Read More
NightEagle APT Exploits Microsoft Exchange Flaw to Target China’s Military and Tech Sectors
/in General NewsCybersecurity researchers have shed light on a previously undocumented threat actor called NightEagle (aka APT-Q-95) that has been observed targeting Microsoft Exchange servers as a part of a zero-day exploit chain designed to target government, defense, and technology sectors in China.
According to QiAnXin’s RedDrip Team, the threat actor has been active since 2023 and has switched network
The Hacker News – Read More
Cisco Issues Emergency Fix for Critical Root Credential Flaw in Unified CM
/in General NewsCisco fixes critical root credential vulnerability in Unified CM rated CVSS 10 urging users to patch now to stop remote admin takeovers.
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
In Other News: Hacker Helps Kill Informants, Crylock Developer Sentenced, Ransomware Negotiator Probed
/in General NewsNoteworthy stories that might have slipped under the radar: drug cartel hires hacker to identify FBI informants, prison time for Russian ransomware developer, ransomware negotiator investigated.
The post In Other News: Hacker Helps Kill Informants, Crylock Developer Sentenced, Ransomware Negotiator Probed appeared first on SecurityWeek.
SecurityWeek – Read More