BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
No feed items found.
Exploit DB
- [remote] Vite 6.2.2 - Arbitrary File Read
- [remote] ProSSHD 1.2 - Denial of Service (DOS)
- [remote] SAP NetWeaver - 7.53 - HTTP Request Smuggling
- [webapps] ABB Cylon Aspect 3.08.01 - Arbitrary File Delete
- [webapps] ABB Cylon Aspect 3.08.01 - Remote Code Execution
- [webapps] Elaine's Realtime CRM Automation 6.18.17 - Reflected XSS
- [webapps] XWiki Standard 14.10 - Remote Code Execution (RCE)
- [local] Solstice Pod 6.2 - API Session Key Extraction via API Endpoint
- [webapps] Progress Telerik Report Server 2024 Q1 (10.0.24.305) - Authentication Bypass
- [webapps] Litespeed Cache 6.5.0.1 - Authentication Bypass
Google Patches Quick Share Vulnerability Enabling Silent File Transfers Without Consent
/in General NewsCybersecurity researchers have disclosed details of a new vulnerability impacting Google’s Quick Share data transfer utility for Windows that could be exploited to achieve a denial-of-service (DoS) or send arbitrary files to a target’s device without their approval.
The flaw, tracked as CVE-2024-10668 (CVSS score: 5.9), is a bypass for two of the 10 shortcomings that were originally disclosed by
The Hacker News – Read More
Google Released Second Fix for Quick Share Flaws After Patch Bypass
/in General NewsGoogle’s patches for Quick Share for Windows vulnerabilities leading to remote code execution were incomplete and could be easily bypassed.
The post Google Released Second Fix for Quick Share Flaws After Patch Bypass appeared first on SecurityWeek.
SecurityWeek – Read More
The big VPN choice: System-wide or just in the browser? How to decide
/in General NewsVPNs are a must for privacy, but should you protect your whole system or just use a VPN in your browser? Here’s the difference and how to decide which option is best for you.
Latest stories for ZDNET in Security – Read More
Triada Malware Preloaded on Counterfeit Android Phones Infects 2,600+ Devices
/in General NewsCounterfeit versions of popular smartphone models that are sold at reduced prices have been found to be preloaded with a modified version of an Android malware called Triada.
“More than 2,600 users in different countries have encountered the new version of Triada, the majority in Russia,” Kaspersky said in a report. The infections were recorded between March 13 and 27, 2025.
Triada is the
The Hacker News – Read More
Israel Enters ‘Stage 3’ of Cyber Wars With Iran Proxies
/in General NewsWhile Israel and Iranian proxies fight it out IRL, their conflict in cyberspace has developed in parallel. These days attacks have decelerated, but advanced in sophistication.
darkreading – Read More
Legacy Stripe API Exploited to Validate Stolen Payment Cards in Web Skimmer Campaign
/in General NewsThreat hunters are warning of a sophisticated web skimmer campaign that leverages a legacy application programming interface (API) from payment processor Stripe to validate stolen payment information prior to exfiltration.
“This tactic ensures that only valid card data is sent to the attackers, making the operation more efficient and potentially harder to detect,” Jscrambler researchers Pedro
The Hacker News – Read More
Europol Dismantles Kidflix With 72,000 CSAM Videos Seized in Major Operation
/in General NewsIn one of the largest coordinated law enforcement operations, authorities have dismantled Kidflix, a streaming platform that offered child sexual abuse material (CSAM).
“A total of 1.8 million users worldwide logged on to the platform between April 2022 and March 2025,” Europol said in a statement. “On March 11, 2025, the server, which contained around 72,000 videos at the time, was seized by
The Hacker News – Read More
How to Recover Deleted Photos from an iPhone
/in General NewsAccidentally deleted some photos from your iPhone? You’re definitely not alone; most iPhone users have done it at…
Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – Read More
Aura or LifeLock: Who Offers Better Identity Protection in 2025?
/in General NewsThe Growing Threat of Digital Identity Theft Identity theft is a continuous online threat that lurks behind every…
Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – Read More
In Salt Typhoon’s Wake, Congress Mulls Potential Options
/in General NewsWhile the House Committee on Government Reform was looking for retaliatory options, cybersecurity experts pointed them toward building better defenses.
darkreading – Read More