BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
Trump 2.0 Portends Big Shift in Cybersecurity Policies
/in General NewsChanges at CISA and promises of more public-private partnerships and deregulation are just a few ways the incoming administration could upend the feds’ role in cybersecurity.
darkreading – Read More
2025 NDAA Provides $3 Billion Funding for FCC’s Rip-and-Replace Program
/in General NewsThe 2025 National Defense Authorization Act (NDAA) has been signed into law and it authorizes several cyber-related initiatives.
The post 2025 NDAA Provides $3 Billion Funding for FCC’s Rip-and-Replace Program appeared first on SecurityWeek.
SecurityWeek – Read More
American Addiction Centers Data Breach Impacts 422,000 People
/in General NewsAmerican Addiction Centers says the personal information of more than 422,000 people was stolen in a data breach.
The post American Addiction Centers Data Breach Impacts 422,000 People appeared first on SecurityWeek.
SecurityWeek – Read More
Adobe Patches ColdFusion Flaw at High Risk of Exploitation
/in General NewsAdobe has released patches for a high-severity ColdFusion vulnerability for which proof-of-concept (PoC) code exists.
The post Adobe Patches ColdFusion Flaw at High Risk of Exploitation appeared first on SecurityWeek.
SecurityWeek – Read More
North Korean Hackers Pull Off $308M Bitcoin Heist from Crypto Firm DMM Bitcoin
/in General NewsJapanese and U.S. authorities have formerly attributed the theft of cryptocurrency worth $308 million from cryptocurrency company DMM Bitcoin in May 2024 to North Korean cyber actors.
“The theft is affiliated with TraderTraitor threat activity, which is also tracked as Jade Sleet, UNC4899, and Slow Pisces,” the agencies said. “TraderTraitor activity is often characterized by targeted social
The Hacker News – Read More
Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks
/in General NewsThe Apache Software Foundation (ASF) has released a security update to address an important vulnerability in its Tomcat server software that could result in remote code execution (RCE) under certain conditions.
The vulnerability, tracked as CVE-2024-56337, has been described as an incomplete mitigation for CVE-2024-50379 (CVSS score: 9.8), another critical security flaw in the same product that
The Hacker News – Read More
FCC ‘rip and replace’ provision for Chinese tech tops cyber provisions in defense bill
/in General NewsThe bill allocates $3 billion to a Federal Communications Commission program, commonly called “rip and replace,” to get rid of Chinese networking equipment due to national security concerns.
The Record from Recorded Future News – Read More
Neuro Nostalgia Hackathon 2024: A Retro Journey with Modern Twists
/in General NewsRelive the 90s web era! The Neuro Nostalgia Hackathon challenged teams to transform modern sites into retro masterpieces…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Non-Human Identities Gain Momentum, Requires Both Management, Security
/in General NewsThe number of Non-Human Identities (NHIs) in many organizations has exploded. Key trends, drivers, and market landscape in this fast-developing area are explored.
darkreading – Read More
Lazarus Group Targets Nuclear Industry with CookiePlus Malware
/in General NewsKEY SUMMARY POINTS Securelist by Kaspersky has published its latest threat intelligence report focused on the activities of…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More