BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
[wp-rss-aggregator feeds="kitploit" limit="10" pagination="off"]
Exploit DB
[wp-rss-aggregator feeds="exploit-db" limit="10" pagination="off"]
Latest news and insights on Security
Microsoft Warns Python Infostealers Target macOS via Fake Ads and Installers
/in General NewsMicrosoft has warned that information-stealing attacks are “rapidly expanding” beyond Windows to target Apple macOS environments by leveraging cross-platform languages like Python and abusing trusted platforms for distribution at scale.
The tech giant’s Defender Security Research Team said it observed macOS-targeted infostealer campaigns using social engineering techniques such as ClickFix since
The Hacker News – Read More
CISA Adds Actively Exploited SolarWinds Web Help Desk RCE to KEV Catalog
/in General NewsThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting SolarWinds Web Help Desk (WHD) to its Known Exploited Vulnerabilities (KEV) catalog, flagging it as actively exploited in attacks.
The vulnerability, tracked as CVE-2025-40551 (CVSS score: 9.8), is a untrusted data deserialization vulnerability that could pave the way for remote
The Hacker News – Read More
Chrome Add-On Caught Stealing Amazon Commissions
/in General NewsA Chrome extension posing as an Amazon ad blocker was caught hijacking affiliate links in the background, redirecting commissions without user consent.
The post Chrome Add-On Caught Stealing Amazon Commissions appeared first on TechRepublic.
Security Archives – TechRepublic – Read More
Eclipse Foundation Mandates Pre-Publish Security Checks for Open VSX Extensions
/in General NewsThe Eclipse Foundation, which maintains the Open VSX Registry, has announced plans to enforce security checks before Microsoft Visual Studio Code (VS Code) extensions are published to the open-source repository to combat supply chain threats.
The move marks a shift from a reactive to a proactive approach to ensure that malicious extensions don’t end up getting published on the Open VSX Registry.
The Hacker News – Read More
Samsung is slashing this 65-inch QLED TV and soundbar bundle by 50% for a limited time
/in General NewsSamsung will sell you a 65-inch QN1EF Neo QLED TV and HW-S700D soundbar for under $1,200 now, just in time for the Super Bowl and the Winter Olympics.
Latest news – Read More
Onboarding new AI hires calls for context engineering – here’s your 3-step action plan
/in General NewsYour company culture is the intangible knowledge new employees will absorb over time. But AI agents need all of it, all at once. Here’s how to engineer the context.
Latest news – Read More
I’m a Linux power user, and this distro made me rethink what an operating system can be
/in General NewsExperienced Linux users looking for a new approach should check out NixOS, which offers a thoughtful design and rich customization.
Latest news – Read More
How I speed up my Linux system for free while RAM prices are out of control
/in General NewsThe price of memory has shot through the roof. If you can’t afford to boost your Linux system with hardware, try this software approach.
Latest news – Read More
Russian Hackers Weaponize Microsoft Office Bug in Just 3 Days
/in General NewsAPT28’s attacks rely on specially crafted Microsoft Rich Text Format (RTF) documents to kick off a multistage infection chain to deliver malicious payloads.
darkreading – Read More
GlassWorm Malware Returns to Shatter Developer Ecosystems
/in General NewsThe self-replicating malware has poisoned a fresh set of Open VSX software components, leaving potential downstream victims with infostealer infections.
darkreading – Read More