BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
[wp-rss-aggregator feeds="kitploit" limit="10" pagination="off"]
Exploit DB
[wp-rss-aggregator feeds="exploit-db" limit="10" pagination="off"]
Latest news and insights on Security
Mitigating AI Threats: Bridging the Gap Between AI and Legacy Security
/in General NewsAdopting a layered defense strategy that includes human-centric tools and updating security components.
The post Mitigating AI Threats: Bridging the Gap Between AI and Legacy Security appeared first on SecurityWeek.
SecurityWeek – Read More
OpenAI to Help DoD With Cyber Defense Under New $200 Million Contract
/in General NewsOpenAI has been awarded a $200 million contract for AI capabilities to help the Defense Department address national security challenges.
The post OpenAI to Help DoD With Cyber Defense Under New $200 Million Contract appeared first on SecurityWeek.
SecurityWeek – Read More
Chrome 137 Update Patches High-Severity Vulnerabilities
/in General NewsGoogle has released a Chrome 137 update to resolve two memory bugs in the browser’s V8 and Profiler components.
The post Chrome 137 Update Patches High-Severity Vulnerabilities appeared first on SecurityWeek.
SecurityWeek – Read More
Code Execution Vulnerabilities Patched in Veeam, BeyondTrust Products
/in General NewsVeeam and BeyondTrust have resolved several vulnerabilities that could be exploited for remote code execution.
The post Code Execution Vulnerabilities Patched in Veeam, BeyondTrust Products appeared first on SecurityWeek.
SecurityWeek – Read More
CISA Warns of Active Exploitation of Linux Kernel Privilege Escalation Vulnerability
/in General NewsThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday placed a security flaw impacting the Linux kernel in its Known Exploited Vulnerabilities (KEV) catalog, stating it has been actively exploited in the wild.
The vulnerability, CVE-2023-0386 (CVSS score: 7.8), is an improper ownership bug in the Linux kernel that could be exploited to escalate privileges on susceptible
The Hacker News – Read More
Data Breach at Healthcare Services Firm Episource Impacts 5.4 Million People
/in General NewsHackers have stolen personal and health information belonging to the customers of healthcare organizations served by Episource.
The post Data Breach at Healthcare Services Firm Episource Impacts 5.4 Million People appeared first on SecurityWeek.
SecurityWeek – Read More
Ex-CIA Analyst Sentenced to 37 Months for Leaking Top Secret National Defense Documents
/in General NewsA former U.S. Central Intelligence Agency (CIA) analyst has been sentenced to little more than three years in prison for unlawfully retaining and transmitting top secret National Defense Information (NDI) to people who were not entitled to receive them and for attempting to cover up the malicious activity.
Asif William Rahman, 34, of Vienna, has been sentenced today to 37 months on charges of
The Hacker News – Read More
Veeam Patches CVE-2025-23121: Critical RCE Bug Rated 9.9 CVSS in Backup & Replication
/in General NewsVeeam has rolled out patches to contain a critical security flaw impacting its Backup & Replication software that could result in remote code execution under certain conditions.
The security defect, tracked as CVE-2025-23121, carries a CVSS score of 9.9 out of a maximum of 10.0.
“A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user,” the
The Hacker News – Read More
Iran Slows Internet to Prevent Cyber Attacks Amid Escalating Regional Conflict
/in General NewsIran has throttled internet access in the country in a purported attempt to hamper Israel’s ability to conduct covert cyber operations, days after the latter launched an unprecedented attack on the country, escalating geopolitical tensions in the region.
Fatemeh Mohajerani, the spokesperson of the Iranian Government, and the Iranian Cyber Police, FATA, said the internet slowdown was designed to
The Hacker News – Read More
Indian Car-Sharing Firm Zoomcar Latest to Suffer Breach
/in General NewsThe company acknowledged that cybercriminals had taken sensitive information on more than 8 million users, including names, phone numbers, car registration numbers, addresses, and emails.
darkreading – Read More