Cisco has issued a warning about critical remote code execution zero-days affecting the web-based management interface of the Small Business SPA 300 and SPA 500 series IP phones, which are no longer supported.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-08-10 09:06:382024-08-10 09:06:38Cisco Warns of Critical RCE Zero-Days in End of Life IP Phones
Cybersecurity analysts have uncovered critical details about the North Korean advanced persistent threat (APT) group Kimsuky, which has been targeting universities as part of its global espionage operations.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-08-10 08:06:392024-08-10 08:06:39North Korea Kimsuky Launch Phishing Attacks on Universities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has advised organizations to disable the legacy Cisco Smart Install (SMI) feature due to recent attacks exploiting it.
Russian spies hacked UK government systems earlier this year, stealing data and emails in a nation-state attack. The breach targeted the Home Office’s systems, which had not been previously reported.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-08-10 07:06:342024-08-10 07:06:34Russian Spies Hacked UK Government Systems Earlier This Year, Stole Data and Emails
Microsoft has disclosed an unpatched zero-day in Office that, if successfully exploited, could result in unauthorized disclosure of sensitive information to malicious actors.
The vulnerability, tracked as CVE-2024-38200 (CVSS score: 7.5), has been described as a spoofing flaw that affects the following versions of Office –
Microsoft Office 2016 for 32-bit edition and 64-bit editions
Microsoft
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-08-10 06:06:532024-08-10 06:06:53Microsoft Warns of Unpatched Office Vulnerability Leading to Data Breaches
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-08-09 23:06:342024-08-09 23:06:34Google Researchers Found Nearly a Dozen Flaws in Popular Qualcomm Software for Mobile GPUs
Cybersecurity researchers have discovered multiple critical flaws in Amazon Web Services (AWS) offerings that, if successfully exploited, could result in serious consequences.
“The impact of these vulnerabilities range between remote code execution (RCE), full-service user takeover (which might provide powerful administrative access), manipulation of AI modules, exposing sensitive data, data
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-08-09 23:06:342024-08-09 23:06:34Experts Uncover Severe AWS Flaws Leading to RCE, Data Theft, and Full-Service Takeovers
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-08-09 22:06:522024-08-09 22:06:52Intel has news – good, bad and ugly – about Raptor Lake bug patch. Here’s what to know
Businesses in China, the U.K. and the U.S. are using generative AI more than Australia. But the Aussies lead in understanding, planning for, and implementing generative AI use policies.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-08-09 20:06:432024-08-09 20:06:43Australian Enterprises Coming 4th in 2024 Global Survey of Generative AI Usage
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-08-09 20:06:432024-08-09 20:06:43Vectra AI Expands XDR Platform to Deliver a Real-Time View of Active Posture to Monitor Exposure to Attackers
BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
Cisco Warns of Critical RCE Zero-Days in End of Life IP Phones
/in General NewsCisco has issued a warning about critical remote code execution zero-days affecting the web-based management interface of the Small Business SPA 300 and SPA 500 series IP phones, which are no longer supported.
Cyware News – Latest Cyber News – Read More
North Korea Kimsuky Launch Phishing Attacks on Universities
/in General NewsCybersecurity analysts have uncovered critical details about the North Korean advanced persistent threat (APT) group Kimsuky, which has been targeting universities as part of its global espionage operations.
Cyware News – Latest Cyber News – Read More
CISA Warns of Hackers Abusing Cisco Smart Install Feature
/in General NewsThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has advised organizations to disable the legacy Cisco Smart Install (SMI) feature due to recent attacks exploiting it.
Cyware News – Latest Cyber News – Read More
Russian Spies Hacked UK Government Systems Earlier This Year, Stole Data and Emails
/in General NewsRussian spies hacked UK government systems earlier this year, stealing data and emails in a nation-state attack. The breach targeted the Home Office’s systems, which had not been previously reported.
Cyware News – Latest Cyber News – Read More
Microsoft Warns of Unpatched Office Vulnerability Leading to Data Breaches
/in General NewsMicrosoft has disclosed an unpatched zero-day in Office that, if successfully exploited, could result in unauthorized disclosure of sensitive information to malicious actors.
The vulnerability, tracked as CVE-2024-38200 (CVSS score: 7.5), has been described as a spoofing flaw that affects the following versions of Office –
Microsoft Office 2016 for 32-bit edition and 64-bit editions
Microsoft
The Hacker News – Read More
Google Researchers Found Nearly a Dozen Flaws in Popular Qualcomm Software for Mobile GPUs
/in General NewsThe vulnerabilities, which have been patched, may have novel appeal to attackers as an avenue to compromising phones.
Security Latest – Read More
Experts Uncover Severe AWS Flaws Leading to RCE, Data Theft, and Full-Service Takeovers
/in General NewsCybersecurity researchers have discovered multiple critical flaws in Amazon Web Services (AWS) offerings that, if successfully exploited, could result in serious consequences.
“The impact of these vulnerabilities range between remote code execution (RCE), full-service user takeover (which might provide powerful administrative access), manipulation of AI modules, exposing sensitive data, data
The Hacker News – Read More
Intel has news – good, bad and ugly – about Raptor Lake bug patch. Here’s what to know
/in General NewsUsers must download and install a BIOS update as the patch won’t be made available via Windows Update.
Latest stories for ZDNET in Security – Read More
Australian Enterprises Coming 4th in 2024 Global Survey of Generative AI Usage
/in General NewsBusinesses in China, the U.K. and the U.S. are using generative AI more than Australia. But the Aussies lead in understanding, planning for, and implementing generative AI use policies.
Security | TechRepublic – Read More
Vectra AI Expands XDR Platform to Deliver a Real-Time View of Active Posture to Monitor Exposure to Attackers
/in General NewsPost Content
darkreading – Read More