BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [local] TP-Link VN020 F3v(T) TT_V6.2.1021) - DHCP Stack Buffer Overflow
- [webapps] WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation
- [webapps] Kentico Xperience 13.0.178 - Cross Site Scripting (XSS)
- [local] RDPGuard 9.9.9 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
Google Prevented 2.28 Million Malicious Apps from Reaching Play Store in 2023
/in General NewsGoogle on Monday revealed that almost 200,000 app submissions to its Play Store for Android were either rejected or remediated to address issues with access to sensitive data such as location or SMS messages over the past year.
The tech giant also said it blocked 333,000 bad accounts from the app storefront in 2023 for attempting to distribute malware or for repeated policy violations.
“In 2023,
The Hacker News – Read More
Ford’s hands-free driver system is under investigation after fatal crashes – what to know
/in General NewsAnother rough day for autonomous driving Just days after closing a Tesla investigation, Federal safety regulators are now looking into Ford’s driver-assistance system, BlueCruise.
Latest stories for ZDNET in Security – Read More
How TikTok Grew From a Fun App for Teens Into a Potential National Security Threat
/in General NewsHistory of TikTok and how it many view it as a national security threat.
The post How TikTok Grew From a Fun App for Teens Into a Potential National Security Threat appeared first on SecurityWeek.
SecurityWeek – Read More
CISA Rolls Out New Guidelines to Mitigate AI Risks to US Critical Infrastructure
/in General NewsNew CISA guidelines categorize AI risks into three significant types and pushes a four-part mitigation strategy.
The post CISA Rolls Out New Guidelines to Mitigate AI Risks to US Critical Infrastructure appeared first on SecurityWeek.
SecurityWeek – Read More
Should Cybersecurity Leadership Finally be Professionalized?
/in General NewsThe majority opinion is that a cybersecurity professional body is long overdue and would benefit cybersecurity and cybersecurity practitioners.
The post Should Cybersecurity Leadership Finally be Professionalized? appeared first on SecurityWeek.
SecurityWeek – Read More
Google Says it Blocked 2.28 Million Apps from Google Play Store
/in General NewsIn 2023, Google said it blocked 2.28 million bad applications from being published on Google Play and banned 333,000 developer accounts.
The post Google Says it Blocked 2.28 Million Apps from Google Play Store appeared first on SecurityWeek.
SecurityWeek – Read More
‘Muddling Meerkat’ Poses Nation-State DNS Mystery
/in General NewsLikely China-linked adversary has blanketed the Internet with DNS mail requests over the past five years via open resolvers, furthering Great Firewall of China ambitions. But the exact nature of its activity is unclear.
darkreading – Read More
91% of ransomware victims paid at least one ransom in the past year, survey finds
/in General NewsWith more than half of organizations experiencing at least six ransomware attack attempts over the past year, many want more budget to cope.
Latest stories for ZDNET in Security – Read More
Kaiser Permanente Discloses Data Breach Impacting 13.4 Million Patients
/in General NewsUS healthcare giant is warning millions of current and former patients that their personal information was exposed to third-party advertisers.
The post Kaiser Permanente Discloses Data Breach Impacting 13.4 Million Patients appeared first on SecurityWeek.
SecurityWeek – Read More
China-Linked ‘Muddling Meerkat’ Hijacks DNS to Map Internet on Global Scale
/in General NewsA previously undocumented cyber threat dubbed Muddling Meerkat has been observed undertaking sophisticated domain name system (DNS) activities in a likely effort to evade security measures and conduct reconnaissance of networks across the world since October 2019.
Cloud security firm Infoblox described the threat actor as likely affiliated with the
The Hacker News – Read More