BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
[wp-rss-aggregator feeds="kitploit" limit="10" pagination="off"]
Exploit DB
[wp-rss-aggregator feeds="exploit-db" limit="10" pagination="off"]
Latest news and insights on Security
OttoKit WordPress Plugin with 100K+ Installs Hit by Exploits Targeting Multiple Flaws
/in General NewsA second security flaw impacting the OttoKit (formerly SureTriggers) WordPress plugin has come under active exploitation in the wild.
The vulnerability, tracked as CVE-2025-27007 (CVSS score: 9.8), is a privilege escalation bug impacting all versions of the plugin prior to and including version 1.0.82.
“This is due to the create_wp_connection() function missing a capability check and
The Hacker News – Read More
Infrastructure as Code: An IaC Guide to Cloud Security
/in General NewsIaC is powerful. It brings speed, scale, and structure to cloud infrastructure. But none of that matters if your security can’t keep up.
darkreading – Read More
US Sanctions Myanmar Militia Involved in Cyber Scams
/in General NewsThe US has sanctioned Myanmar warlord Saw Chit Thu and his militia for their roles in cyber scams causing billions in losses to American victims.
The post US Sanctions Myanmar Militia Involved in Cyber Scams appeared first on SecurityWeek.
SecurityWeek – Read More
Europol, Poland Bust Major DDoS-for-Hire Operation, Arrest 4
/in General NewsPolish authorities arrest 4 behind major DDoS-for-hire sites used in global attacks. Europol, US, Germany, and Dutch forces…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
SpyCloud Analysis Reveals 94% of Fortune 50 Companies Have Employee Data Exposed in Phishing Attacks
/in General NewsAustin, USA / Texas, 7th May 2025, CyberNewsWire
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
Critical Langflow Vulnerability (CVE-2025-3248) Actively Exploited, Warns CISA
/in General NewsCISA warns of active exploitation of critical Langflow vulnerability (CVE-2025-3248). Critical RCE flaw allows full server takeover. Patch…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
Spyware Maker NSO Ordered to Pay $167 Million Over WhatsApp Hack
/in General NewsMeta has won its WhatsApp hacking lawsuit against Israeli spyware company NSO Group in an “important step forward for privacy and security”.
The post Spyware Maker NSO Ordered to Pay $167 Million Over WhatsApp Hack appeared first on SecurityWeek.
SecurityWeek – Read More
SysAid Patches 4 Critical Flaws Enabling Pre-Auth RCE in On-Premise Version
/in General NewsCybersecurity researchers have disclosed multiple security flaw in the on-premise version of SysAid IT support software that could be exploited to achieve pre-authenticated remote code execution with elevated privileges.
The vulnerabilities, tracked as CVE-2025-2775, CVE-2025-2776, and CVE-2025-2777, have all been described as XML External Entity (XXE) injections, which occur when an attacker is
The Hacker News – Read More
AppSignal Raises $22 Million for Application Monitoring Solution
/in General NewsApplication performance monitoring provider AppSignal has raised $22 million in a Series A funding round led by Elsewhere Partners.
The post AppSignal Raises $22 Million for Application Monitoring Solution appeared first on SecurityWeek.
SecurityWeek – Read More
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day to Breach U.S. Organization
/in General NewsThreat actors with links to the Play ransomware family exploited a recently patched security flaw in Microsoft Windows as a zero-day as part of an attack targeting an unnamed organization in the United States.
The attack, per the Symantec Threat Hunter Team, part of Broadcom, leveraged CVE-2025-29824, a privilege escalation flaw in the Common Log File System (CLFS) driver. It was patched by
The Hacker News – Read More