BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
No feed items found.
Exploit DB
- [webapps] MoziloCMS 3.0 - Remote Code Execution (RCE)
- [webapps] KubeSphere 3.4.0 - Insecure Direct Object Reference (IDOR)
- [webapps] X2CRM 8.5 - Stored Cross-Site Scripting (XSS)
- [local] NVIDIA Container Toolkit 1.16.1 - Time-of-check Time-of-Use (TOCTOU)
- [remote] Microsoft Windows - NTLM Hash Leak Malicious Windows Theme
- [remote] Aztech DSL5005EN Router - 'sysAccess.asp' Admin Password Change (Unauthenticated)
- [webapps] TeamPass 3.0.0.21 - SQL Injection
- [webapps] Jasmin Ransomware - SQL Injection Login Bypass
- [webapps] FluxBB 1.5.11 - Stored Cross-Site Scripting (XSS)
- [webapps] JUX Real Estate 3.4.0 - SQL Injection
Offensive AI Startup Dreadnode Secures $14M to Stress-Test AI Systems
/in General NewsDreadnode is building “offensive machine learning” tools to safely simulate how AI models might be exploited in the wild.
The post Offensive AI Startup Dreadnode Secures $14M to Stress-Test AI Systems appeared first on SecurityWeek.
SecurityWeek – Read More
Skybox Security Shuts Down, Lays off Entire Workforce
/in General NewsThe sudden shutdown follows the sale of Skybox Security’s business and technology assets to rival Israeli cybersecurity firm Tufin.
The post Skybox Security Shuts Down, Lays off Entire Workforce appeared first on SecurityWeek.
SecurityWeek – Read More
Edera Banks $15M for Kubernetes Workload Isolation Tech
/in General NewsSeattle startup building technology to mitigate lateral movement and block “living off the land” techniques wins interest from investors.
The post Edera Banks $15M for Kubernetes Workload Isolation Tech appeared first on SecurityWeek.
SecurityWeek – Read More
Background check and drug testing provider DISA Global Solutions reports data breach
/in General NewsHouston-based employee screening company DISA Global Solutions says a 2024 data breach exposed the information of more than 3.3 million people.
The Record from Recorded Future News – Read More
Leader of North Korean Hackers Sanctioned by EU
/in General NewsThe EU has announced new sanctions against entities aiding Russia’s war against Ukraine, including an individual who leads North Korean hackers.
The post Leader of North Korean Hackers Sanctioned by EU appeared first on SecurityWeek.
SecurityWeek – Read More
Silver Fox APT Hides ValleyRAT in Trojanized Medical Imaging Software
/in General NewsChinese Silver Fox APT exploits trojanized medical imaging software to spread ValleyRAT malware, posing a serious threat to…
Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – Read More
Nine Threat Groups Active in OT Operations in 2024: Dragos
/in General NewsDragos has published its 2025 OT/ICS Cybersecurity Report, which provides information on the threats and trends observed in 2024.
The post Nine Threat Groups Active in OT Operations in 2024: Dragos appeared first on SecurityWeek.
SecurityWeek – Read More
‘OpenAI’ Job Scam Targeted International Workers Through Telegram
/in General NewsAn alleged job scam, led by “Aiden” from “OpenAI,” recruited workers in Bangladesh for months before disappearing overnight, according to FTC complaints obtained by WIRED.
Security Latest – Read More
Why Apple’s disabling of iCloud encryption in the UK is bad news for everyone
/in General NewsThe UK’s demand for an encryption backdoor in iCloud, and Apple’s response, have repercussions that go far beyond national borders, threatening user privacy and security worldwide.
Latest stories for ZDNET in Security – Read More
Why Android System SafetyCore is controversial – and how to get rid of it
/in General NewsGoogle didn’t tell Android phone users about this new picture-scanning service, and people are unhappy. Fortunately, you’re not stuck with it.
Latest stories for ZDNET in Security – Read More