BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
NordVPN maker’s new identity theft protection service will reimburse you
/in General NewsNordProtect includes ID recovery and restoration, secure credit monitoring, dark web monitoring, and cyber extortion protection. Here’s how to try it.
Latest stories for ZDNET in Security – Read More
Amazon confirms employee data stolen after hacker claims MOVEit breach
/in General NewsAmazon has confirmed that employee data was compromised after a “security event” at a third-party vendor. In a statement given to TechCrunch on Monday, Amazon spokesperson Adam Montgomery confirmed that employee information had been involved in a data breach. “Amazon and AWS systems remain secure, and we have not experienced a security event. We were […]
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More
Flexible Structure of Zip Archives Exploited to Hide Malware Undetected
/in General NewsAttackers abuse concatenation, a method that involves appending multiple zip archives into a single file, to deliver a variant of the SmokeLoader Trojan hidden in malicious attachments delivered via phishing
darkreading – Read More
Microsoft Bookings Flaw Enables Account Hijacking and Impersonation
/in General NewsA vulnerability in Microsoft Bookings can expose your organization to serious security risks. Learn how attackers can exploit…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Facebook Asks Supreme Court to Dismiss Cambridge Analytica Lawsuit
/in General NewsMeta has maintained that Facebook did not mislead investors by not including mention of the Cambridge Analytica scandal in its forward-looking risk disclosures, but the plaintiffs say it was a glaring omission.
darkreading – Read More
Sweet Security Announces Availability of its Cloud Native Detection & Response Platform on the AWS Marketplace
/in General NewsTEL AVIV, Israel, 11th November 2024, CyberNewsWire
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Open Source Security Incidents Aren’t Going Away
/in General NewsCompanies and organizations need to recognize the importance of investing in engineers who possess both the soft and hard skills required to secure open source software effectively.
darkreading – Read More
This mysterious iPhone upgrade protects your data from thieves
/in General NewsIs your iPhone rebooting after being inactive? Here’s why, and how it can help you.
Latest stories for ZDNET in Security – Read More
FBI Warns US Organizations of Fake Emergency Data Requests Made by Cybercriminals
/in General NewsThe FBI is seeing an increase in threat actors using fake emergency data requests to harvest information from US companies.
The post FBI Warns US Organizations of Fake Emergency Data Requests Made by Cybercriminals appeared first on SecurityWeek.
SecurityWeek – Read More
Exclusive: Northflank scores $22.3 million to make cloud infrastructure less of a nightmare for developers
/in General NewsNorthflank raises $22.3M to simplify cloud deployment, offering developers a third path between inflexible platforms and costly internal tools, with backing from Bain Capital Ventures.Read More
Security News | VentureBeat – Read More