BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Scrapling - An Undetectable, Powerful, Flexible, High-Performance Python Library That Makes Web Scraping Simple And Easy Again!
- VulnKnox - A Go-based Wrapper For The KNOXSS API To Automate XSS Vulnerability Testing
- Camtruder - Advanced RTSP Camera Discovery and Vulnerability Assessment Tool
- Frogy2.0 - An Automated External Reconnaissance And Attack Surface Management (ASM) Toolkit
- PEGASUS-NEO - A Comprehensive Penetration Testing Framework Designed For Security Professionals And Ethical Hackers. It Combines Multiple Security Tools And Custom Modules For Reconnaissance, Exploitation, Wireless Attacks, Web Hacking, And More
- Text4Shell-Exploit - A Custom Python-based Proof-Of-Concept (PoC) Exploit Targeting Text4Shell (CVE-2022-42889), A Critical Remote Code Execution Vulnerability In Apache Commons Text Versions < 1.10
- Ghost-Route - Ghost Route Detects If A Next JS Site Is Vulnerable To The Corrupt Middleware Bypass Bug (CVE-2025-29927)
- Bytesrevealer - Online Reverse Enginerring Viewer
- CentralizedFirewall - Provides A Firewall Manager API Designed To Centralize And Streamline The Management Of Firewall Configurations
- Maryam - Open-source Intelligence(OSINT) Framework
Exploit DB
- [local] Microsoft Windows 11 - Kernel Privilege Escalation
- [local] tar-fs 3.0.0 - Arbitrary File Write/Overwrite
- [remote] code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting (XSS)
- [remote] OpenSSH server (sshd) 9.8p1 - Race Condition
- [local] Microsoft Windows 11 23h2 - CLFS.sys Elevation of Privilege
- [webapps] WordPress Core 6.2 - Directory Traversal
- [remote] WonderCMS 3.4.2 - Remote Code Execution (RCE)
- [remote] Firefox ESR 115.11 - PDF.js Arbitrary JavaScript execution
- [webapps] FoxCMS 1.2.5 - Remote Code Execution (RCE)
- [webapps] Drupal 11.x-dev - Full Path Disclosure
Symantec Demonstrates OpenAI’s Operator Agent in PoC Phishing Attack
/in General NewsSymantec demonstrates OpenAI’s Operator Agent in PoC phishing attack, highlighting AI security risks and the need for proper cybersecurity.
Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – Read More
Threat Actor Tied to LockBit Ransomware Targets Fortinet Users
/in General NewsThe Mora_001 group uses similar post-exploitation patterns and ransomware customization originated by LockBit.
darkreading – Read More
Alleged Russian LockBit developer extradited from Israel, appears in New Jersey court
/in General NewsRostislav Panev, who was arrested in Israel in August 2024 on U.S. charges related to dozens of LockBit ransomware attacks, has been extradited and appeared in a New Jersey federal court, authorities said.
The Record from Recorded Future News – Read More
Why Apple’s RCS encryption move is a privacy game-changer for your texts
/in General NewsApple will add support for encrypted RCS messages in future updates to iOS, iPadOS, MacOS, and WatchOS.
Latest stories for ZDNET in Security – Read More
51 seconds to breach: How CISOs are countering AI-driven, lightning-fast deepfake, vishing and social engineering attacks
/in General NewsAttackers can breach a network in 51 seconds. CISOs fight back with zero-trust, AI-based threat detection & instant session token revocation.Read More
Security News | VentureBeat – Read More
Accused LockBit ransomware developer extradited to the US
/in General NewsThe U.S. Department of Justice announced that Rostislav Panev, who developed code and maintained infrastructure for LockBit, is now in U.S. custody.
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More
CISA Cuts $10M in ISAC Funding & 100s of Employees
/in General NewsPresident Trump has long complained about perceived threats to election security. Now his DHS has kneecapped the agencies designed to support it. Experts are worried about what comes next.
darkreading – Read More
GSMA Confirms End-to-End Encryption for RCS, Enabling Secure Cross-Platform Messaging
/in General NewsThe GSM Association (GSMA) has formally announced support for end-to-end encryption (E2EE) for securing messages sent via the Rich Communications Services (RCS) protocol, bringing much-needed security protections to cross-platform messages shared between Android and iOS platforms.
To that end, the new GSMA specifications for RCS include E2EE based on the Messaging Layer Security (MLS) protocol
The Hacker News – Read More
New Microsoft 365 Phishing Scam Tricks Users Into Calling Fake Support
/in General NewsNew Microsoft 365 phishing scam exploits fake support numbers to steal credentials. Learn how attackers bypass security and how to stay protected.
Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – Read More
Biggest Cyber Threats to the Healthcare Industry Today
/in General NewsHealthcare organizations must enhance their cybersecurity arsenal. Doing so can help them prevent financial, compliance, and reputational damage.
darkreading – Read More