BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
Google Releases Open Source Library for Software Composition Analysis
/in General NewsGoogle releases OSV-SCALIBR, an open source library for software composition analysis and file system scanning.
The post Google Releases Open Source Library for Software Composition Analysis appeared first on SecurityWeek.
SecurityWeek – Read More
US Announces Sanctions Against North Korean Fake IT Worker Network
/in General NewsThe US Treasury has sanctioned two individuals and four entities involved in the North Korean fake IT worker scheme.
The post US Announces Sanctions Against North Korean Fake IT Worker Network appeared first on SecurityWeek.
SecurityWeek – Read More
Industry Reactions to Biden’s Cybersecurity Executive Order: Feedback Friday
/in General NewsIndustry professionals comment on the Biden administration’s new executive order on cybersecurity.
The post Industry Reactions to Biden’s Cybersecurity Executive Order: Feedback Friday appeared first on SecurityWeek.
SecurityWeek – Read More
Researchers Warn of NTLMv1 Bypass in Active Directory Policy
/in General NewsSilverfort has discovered that a misconfiguration can bypass an Active Directory Group Policy designed to disable NTLMv1, allowing…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Vulnerabilities in SimpleHelp Remote Access Software May Lead to System Compromise
/in General NewsThree vulnerabilities in SimpleHelp could allow attackers to compromise the remote access software’s server and the client machine.
The post Vulnerabilities in SimpleHelp Remote Access Software May Lead to System Compromise appeared first on SecurityWeek.
SecurityWeek – Read More
European Privacy Group Sues TikTok and AliExpress for Illicit Data Transfers to China
/in General NewsAustrian privacy non-profit None of Your Business (noyb) has filed complaints accusing companies like TikTok, AliExpress, SHEIN, Temu, WeChat, and Xiaomi of violating data protection regulations in the European Union by unlawfully transferring users’ data to China.
The advocacy group is seeking an immediate suspension of such transfers, stating the companies in question cannot shield user data
The Hacker News – Read More
Russian APT Phishes Kazakh Gov’t for Strategic Intel
/in General NewsA highly targeted cyber-intelligence campaign adds fuel to the increasingly complex relationship between the two former Soviet states.
darkreading – Read More
CISA warns of exploited Fortinet bugs as Microsoft issues its biggest Patch Tuesday in years
/in General NewsThe federal government and multiple cybersecurity firms warned of a zero-day vulnerability in FortiGate firewalls that hackers are actively exploiting.
The Record from Recorded Future News – Read More
Hackers Likely Stole FBI Call Logs From AT&T That Could Compromise Informants
/in General NewsA breach of AT&T that exposed “nearly all” of the company’s customers may have included records related to confidential FBI sources, potentially explaining the bureau’s new embrace of end-to-end encryption.
Security Latest – Read More
Microsoft just built an AI that designs materials for the future. Here’s how it works.
/in General NewsMicrosoft researchers unveil MatterGen, a breakthrough AI system that generates novel materials for batteries and solar cells, accelerating scientific discovery 15 times faster than traditional methods while doubling success rates for stable compounds.Read More
Security News | VentureBeat – Read More