BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
[wp-rss-aggregator feeds="kitploit" limit="10" pagination="off"]
Exploit DB
[wp-rss-aggregator feeds="exploit-db" limit="10" pagination="off"]
Latest news and insights on Security
Amazon Prime Day 2026 is likely coming earlier. Here’s everything to know so far
/in General NewsAmazon’s summer Prime Day event is on its way, but it may not be in July. Here’s what you need to know right now.
Latest news – Read More
Checkmarx Confirms Data Stolen in Supply Chain Attack
/in General NewsThe hackers exfiltrated the data from Checkmarx’s GitHub environment on March 30, a week after publishing malicious code.
The post Checkmarx Confirms Data Stolen in Supply Chain Attack appeared first on SecurityWeek.
SecurityWeek – Read More
CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV
/in General NewsThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting ConnectWise ScreenConnect and Microsoft Windows to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The vulnerabilities are listed below –
CVE-2024-1708 (CVSS score: 8.4) – A path traversal vulnerability in ConnectWise ScreenConnect
The Hacker News – Read More
Top AI-Powered Vendor Risk Management Platforms for SaaS Companies in 2026
/in General NewsTop AI-powered vendor risk platforms for SaaS companies in 2026, compare tools, features, and how to choose the…
Hackread – Cybersecurity News, Data Breaches, AI and More – Read More
Cursor AI IDE vulnerability allows code execution via hidden Git hooks
/in General NewsNovee researchers find high-severity CVE-2026-26268 flaw in Cursor AI, allowing hackers to run malicious code when developers clone repositories.
Hackread – Cybersecurity News, Data Breaches, AI and More – Read More
Critical GitHub Vulnerability Exposed Millions of Repositories
/in General NewsThe remote code execution flaw CVE-2026-3854 was found to impact GitHub.com and GitHub Enterprise Server.
The post Critical GitHub Vulnerability Exposed Millions of Repositories appeared first on SecurityWeek.
SecurityWeek – Read More
LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure
/in General NewsIn yet another instance of threat actors quickly jumping on the exploitation bandwagon, a newly disclosed critical security flaw in BerriAI’s LiteLLM Python package has come under active exploitation in the wild within 36 hours of the bug becoming public knowledge.
The vulnerability, tracked as CVE-2026-42208 (CVSS score: 9.3), is an SQL injection that could be exploited to modify the underlying
The Hacker News – Read More
NSA Chief During Snowden Affair Shares Regrets, Reflections 13 Years Later
/in General NewsChris Inglis was the head civilian in charge at the NSA when the Snowden leak exploded. He gets candid about mistakes the organization made, and what CISOs need to know about spotting potential threats, media disclosures, and “enculturation.”
darkreading – Read More
New DHL Phishing Scam Uses 11-Step Attack Chain to Steal Passwords
/in General NewsForcepoint’s X-Labs reports an 11-step DHL phishing scam that uses fake OTP codes and EmailJS to harvest user credentials and device telemetry.
Hackread – Cybersecurity News, Data Breaches, AI and More – Read More
ClickUp Data Leak Exposes Enterprise Emails for Over a Year
/in General NewsA hardcoded ClickUp API key exposed hundreds of corporate and government emails for over a year, raising new SaaS security concerns.
The post ClickUp Data Leak Exposes Enterprise Emails for Over a Year appeared first on TechRepublic.
Security Archives – TechRepublic – Read More