While ransomware groups targeted a wide range of industries for profit, the demise of several groups in 2023 was attributed to increased pressure from law enforcement and cybersecurity organizations.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-02-09 14:06:452024-02-09 14:06:45Ransomware Leak Site Reports Rose by 49% in 2023, but There Is Good News
The threat actor maintained long-term access to the victim’s network, evading detection by using living-off-the-land binaries, side-loading backdoors, and leveraging open-source reverse proxy tools like Fast Reverse Proxy (FRP) and Venom.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-02-09 13:06:482024-02-09 13:06:48New Zardoor Backdoor Used in Long-Term Cyber Espionage Operation Targeting an Islamic Organization
Chinese state actors used a zero-day exploit in a Fortinet VPN to breach Dutch military systems—in early 2023—to deploy the Coathanger backdoor, revealed intelligence agencies. The malware conceals its activities by intercepting system functions that might expose it. Organizations are urged to enhance their cybersecurity measures by applying timely updates and patches.
Google is collaborating with the Singapore government to roll out a new security feature in Google Play Protect to block the installation of potentially risky side-loaded apps, aiming to protect Android users from malware-enabled scams.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-02-09 11:07:572024-02-09 11:07:57Google Will Block Android Users From Installing ‘Unsafe’ Apps in Fraud Protection Test
The group’s access to exploits for vulnerabilities, such as CVE-2023-36802 and CVE-2023-29360, suggests ties to sophisticated developers and the purchase of external 64-bit executables rather than in-house development.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-02-09 10:12:122024-02-09 10:12:12Raspberry Robin Actors are Buying Exploits for Faster Attacks
The criminal organization “Wail Crinal 213” claims to have accessed the bank’s server and is allegedly selling sensitive customer data, including emails, usernames, account details, and more.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-02-09 09:07:232024-02-09 09:07:23Emirates NBD Reportedly Involved in a Data Breach
ResumeLooters conducted a major cyber operation, compromising over 65 job search and retail websites across the Asia Pacific region and pilfering more than 2 million user records. The discovery of a new campaign serves as a reminder to secure databases and websites—which can be exploited by publicly available tools.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-02-09 08:06:522024-02-09 08:06:52ResumeLooters Steal Millions of Unique Emails from Multiple Sites
Cloud computing has innovated how organizations operate and manage IT operations, such as data storage, application deployment, networking, and overall resource management. The cloud offers scalability, adaptability, and accessibility, enabling businesses to achieve sustainable growth. However, adopting cloud technologies into your infrastructure presents various cybersecurity risks and
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-02-09 08:06:512024-02-09 08:06:51Wazuh in the Cloud Era: Navigating the Challenges of Cybersecurity
Ivanti has alerted customers of yet another high-severity security flaw in its Connect Secure, Policy Secure, and ZTA gateway devices that could allow attackers to bypass authentication.
The issue, tracked as CVE-2024-22024, is rated 8.3 out of 10 on the CVSS scoring system.
“An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti
CodeSignal Learn is a new platform that offers practice-based, mastery-oriented learning experiences for tech skills, powered by CodeSignal’s skill assessment engine.Read More
BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
Ransomware Leak Site Reports Rose by 49% in 2023, but There Is Good News
/in General NewsWhile ransomware groups targeted a wide range of industries for profit, the demise of several groups in 2023 was attributed to increased pressure from law enforcement and cybersecurity organizations.
Cyware News – Latest Cyber News – Read More
New Zardoor Backdoor Used in Long-Term Cyber Espionage Operation Targeting an Islamic Organization
/in General NewsThe threat actor maintained long-term access to the victim’s network, evading detection by using living-off-the-land binaries, side-loading backdoors, and leveraging open-source reverse proxy tools like Fast Reverse Proxy (FRP) and Venom.
Cyware News – Latest Cyber News – Read More
Chinese Threat Actors Found Spying on Dutch Defense Ministry Network
/in General NewsCyware News – Latest Cyber News – Read More
Google Will Block Android Users From Installing ‘Unsafe’ Apps in Fraud Protection Test
/in General NewsGoogle is collaborating with the Singapore government to roll out a new security feature in Google Play Protect to block the installation of potentially risky side-loaded apps, aiming to protect Android users from malware-enabled scams.
Cyware News – Latest Cyber News – Read More
Raspberry Robin Actors are Buying Exploits for Faster Attacks
/in General NewsThe group’s access to exploits for vulnerabilities, such as CVE-2023-36802 and CVE-2023-29360, suggests ties to sophisticated developers and the purchase of external 64-bit executables rather than in-house development.
Cyware News – Latest Cyber News – Read More
Emirates NBD Reportedly Involved in a Data Breach
/in General NewsThe criminal organization “Wail Crinal 213” claims to have accessed the bank’s server and is allegedly selling sensitive customer data, including emails, usernames, account details, and more.
Cyware News – Latest Cyber News – Read More
ResumeLooters Steal Millions of Unique Emails from Multiple Sites
/in General NewsCyware News – Latest Cyber News – Read More
Wazuh in the Cloud Era: Navigating the Challenges of Cybersecurity
/in General NewsCloud computing has innovated how organizations operate and manage IT operations, such as data storage, application deployment, networking, and overall resource management. The cloud offers scalability, adaptability, and accessibility, enabling businesses to achieve sustainable growth. However, adopting cloud technologies into your infrastructure presents various cybersecurity risks and
The Hacker News – Read More
Warning: New Ivanti Auth Bypass Flaw Affects Connect Secure and ZTA Gateways
/in General NewsIvanti has alerted customers of yet another high-severity security flaw in its Connect Secure, Policy Secure, and ZTA gateway devices that could allow attackers to bypass authentication.
The issue, tracked as CVE-2024-22024, is rated 8.3 out of 10 on the CVSS scoring system.
“An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti
The Hacker News – Read More
CodeSignal targets skills gap with ‘Learn’ platform amidst tech talent crunch
/in General NewsCodeSignal Learn is a new platform that offers practice-based, mastery-oriented learning experiences for tech skills, powered by CodeSignal’s skill assessment engine.Read More
Security News | VentureBeat – Read More