BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
Fortinet Fixed a Critical RCE Bug in FortiClientLinux
/in General NewsFortinet fixed a dozen vulnerabilities in multiple products, including a critical-severity remote code execution (RCE) issue, tracked as CVE-2023-45590 (CVSS score of 9.4), in FortiClientLinux.
Cyware News – Latest Cyber News – Read More
Apple Expands Spyware Alert System to Warn Users of Mercenary Attacks
/in General NewsApple on Wednesday revised its documentation pertaining to its mercenary spyware threat notification system to mention that it alerts users when they may have been individually targeted by such attacks.
It also specifically called out companies like NSO Group for developing commercial surveillance tools such as Pegasus that are used by state actors to pull off “individually targeted
The Hacker News – Read More
Fortinet Rolls Out Critical Security Patches for FortiClientLinux Vulnerability
/in General NewsFortinet has released patches to address a critical security flaw impacting FortiClientLinux that could be exploited to achieve arbitrary code execution.
Tracked as CVE-2023-45590, the vulnerability carries a CVSS score of 9.4 out of a maximum of 10.
“An Improper Control of Generation of Code (‘Code Injection’) vulnerability [CWE-94] in FortiClientLinux may allow an unauthenticated attacker to
The Hacker News – Read More
Japan, Philippines, & US Forge Cyber Threat Intel-Sharing Alliance
/in General NewsFollowing the Volt Typhoon attacks on critical infrastructure in the region by China, the US reportedly will share cybersecurity threat information with both countries.
darkreading – Read More
XZ Utils Scare Exposes Hard Truths About Software Security
/in General NewsMuch of the open source code embedded in enterprise software stacks comes from small, under-resourced, volunteer-run projects.
darkreading – Read More
National Security Agency Announces Dave Luber As Director of Cybersecurity
/in General NewsPost Content
darkreading – Read More
MedSec Launches Cybersecurity Program For Resource-Constrained Hospitals
/in General NewsPost Content
darkreading – Read More
Wiz Acquires Gem Security to Expand Cloud Detection and Response Offering
/in General NewsPost Content
darkreading – Read More
Selecting the Right Authentication Protocol for Your Business
/in General NewsPrioritizing security and user experience will help you build a robust and reliable authentication system for your business.
darkreading – Read More
Trump Loyalists Kill Vote on US Wiretap Program
/in General NewsAn attempt to reauthorize Section 702, the so-called crown jewel of US spy powers, failed for a third time in the House of Representatives after former president Donald Trump criticized the law.
Security Latest – Read More