BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
[wp-rss-aggregator feeds="kitploit" limit="10" pagination="off"]
Exploit DB
[wp-rss-aggregator feeds="exploit-db" limit="10" pagination="off"]
Latest news and insights on Security
Recent Apache ActiveMQ Vulnerability Exploited in the Wild
/in General NewsThe remote code execution vulnerability tracked as CVE-2026-34197 came to light in early April.
The post Recent Apache ActiveMQ Vulnerability Exploited in the Wild appeared first on SecurityWeek.
SecurityWeek – Read More
NIST Limits CVE Enrichment After 263% Surge in Vulnerability Submissions
/in General NewsThe National Institute of Standards and Technology (NIST) has announced changes to the way it handles cybersecurity vulnerabilities and exposures (CVEs) listed in its National Vulnerability Database (NVD), stating it will only enrich those that fulfil certain conditions owing to an explosion in CVE submissions.
“CVEs that do not meet those criteria will still be listed in the NVD but will not
The Hacker News – Read More
53 DDoS Domains Taken Down by Law Enforcement
/in General NewsAuthorities in 21 countries participated in a coordinated action against DDoS-for-hire services.
The post 53 DDoS Domains Taken Down by Law Enforcement appeared first on SecurityWeek.
SecurityWeek – Read More
Cursor AI Vulnerability Exposed Developer Devices
/in General NewsAn indirect prompt injection could be chained with a sandbox bypass and Cursor’s remote tunnel feature for shell access to machines.
The post Cursor AI Vulnerability Exposed Developer Devices appeared first on SecurityWeek.
SecurityWeek – Read More
Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation
/in General NewsA recently disclosed high-severity security flaw in Apache ActiveMQ Classic has come under active exploitation in the wild, per the U.S. Cybersecurity and Infrastructure Security Agency (CISA).
To that end, the agency has added the vulnerability, tracked as CVE-2026-34197 (CVSS score: 8.8), to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian
The Hacker News – Read More
AI-powered website builders have come a long way – here’s your best option in 2026
/in General NewsLast year, the best we could say about AI website builders is they had potential. This year, we found some that can actually do the job.
Latest news – Read More
I traded my Sonos Era 300 for Denon’s new home speaker – and see no reason to go back
/in General NewsThe Denon Home 400 is a worthy competitor to Sonos’ Era 300, with upgraded hardware, software, and a fresh look.
Latest news – Read More
I tried the new Gemini app for Mac – and it’s better than the website in one big way
/in General NewsBeyond being quick and convenient, Google’s Gemini app can access and analyze the content in any window you share from your Mac desktop. Here’s why that’s so useful.
Latest news – Read More
North Korea Uses ClickFix to Target macOS Users’ Data
/in General NewsSapphire Sleet uses fake job offers and phony Zoom updates to deliver ClickFix attacks that steal credentials and sensitive data from Macs.
darkreading – Read More
McGraw-Hill Confirms Data Exposure, Hackers Claim 45M Salesforce Records Leaked
/in General NewsMcGraw-Hill confirms a data exposure tied to a Salesforce misconfiguration as hackers claim 45M records, raising concerns over SaaS security risks.
The post McGraw-Hill Confirms Data Exposure, Hackers Claim 45M Salesforce Records Leaked appeared first on TechRepublic.
Security Archives – TechRepublic – Read More