BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
- Uro - Declutters Url Lists For Crawling/Pentesting
Exploit DB
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
- [webapps] Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF)
- [webapps] Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR)
- [local] Daikin Security Gateway 14 - Remote Password Reset
- [local] ZTE ZXV10 H201L - RCE via authentication bypass
CISO Corner: Breaking Staff Burnout, GPT-4 Exploits, Rebalancing NIST
/in General NewsSecOps highlights this week include the executive role in “cyber readiness;” Cisco’s Hypershield promise; and Middle East cyber ops heat up.
darkreading – Read More
FBI Director Wray Issues Dire Warning on China’s Cybersecurity Threat
/in General NewsChinese actors are ready and poised to do “devastating” damage to key US infrastructure services if needed, he said.
darkreading – Read More
Miggo Launches Application Detection and Response (ADR) Solution
/in General NewsPost Content
darkreading – Read More
Breakthrough in Quantum Cloud Computing Ensures its Security and Privacy
/in General NewsOxford University researchers used an approach dubbed “blind quantum computing” to connect two quantum computing entities in a way that is completely secure.
Security | TechRepublic – Read More
UNDP, City of Copenhagen Targeted in Data-Extortion Cyberattack
/in General NewsA ransomware gang claimed responsibility for the attack, though it is unknown if a ransom was demanded or paid.
darkreading – Read More
Multiple LastPass Users Lose Master Passwords to Ultra-Convincing Scam
/in General NewsCryptoChameleon attackers trade quantity for quality, dedicating time and resources to trick even the most diligent user into handing over their high-value credentials.
darkreading – Read More
Rethinking How You Work With Detection and Response Metrics
/in General NewsAirbnb’s Allyn Stott recommends adding the Human Maturity Model (HMM) and the SABRE framework to complement MITRE ATT&CK to improve security metrics analysis.
darkreading – Read More
BreachRx Raises $6.5M to Revamp Incident Response Reporting Systems
/in General NewsInvestors make an early-stage $6.5 million bet on BreachRx, a startup promising to shield cybersecurity executives from personal liability.
The post BreachRx Raises $6.5M to Revamp Incident Response Reporting Systems appeared first on SecurityWeek.
SecurityWeek – Read More
The Biggest Deepfake Porn Website Is Now Blocked in the UK
/in General NewsThe world’s most-visited deepfake website and another large competing site are stopping people in the UK from accessing them, days after the UK government announced a crackdown.
Security Latest – Read More
Fake Cheat Lures Gamers Into Spreading Infostealer Malware
/in General NewsA new info-stealing malware linked to Redline poses as a game cheat called ‘Cheat Lab,’ promising downloaders a free copy if they convince their friends to install it too.
Cyware News – Latest Cyber News – Read More