BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
- Uro - Declutters Url Lists For Crawling/Pentesting
- Wshlient - A Simple Tool To Interact With Web Shells And Command Injection Vulnerabilities
Exploit DB
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
- [webapps] Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF)
- [webapps] Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR)
- [local] Daikin Security Gateway 14 - Remote Password Reset
- [local] ZTE ZXV10 H201L - RCE via authentication bypass
4 Best Open Source Password Managers for Teams in 2024
/in General NewsFind the best open-source password managers to keep your sensitive information secure and easily accessible. Explore top options for protecting your passwords.
Security | TechRepublic – Read More
IMF: Financial Firms Lost $12 Billion to Cyberattacks in Two Decades
/in General NewsThe financial sector has suffered over 20,000 cyberattacks in two decades, causing more than $12 billion in losses.
The post IMF: Financial Firms Lost $12 Billion to Cyberattacks in Two Decades appeared first on SecurityWeek.
SecurityWeek – Read More
DuckDuckGo Is Taking Its Privacy Fight to Data Brokers
/in General NewsPrivacy-focused company DuckDuckGo is launching a tool to remove data from people-search websites, a VPN, and an identity theft restoration service.
Security Latest – Read More
Conservative Revolt in the House Blocks Effort to Reauthorize a Key US Spy Tool
/in General NewsA bill that would reauthorize Section 702 of the Foreign Intelligence Surveillance Act was blocked by a conservative revolt.
The post Conservative Revolt in the House Blocks Effort to Reauthorize a Key US Spy Tool appeared first on SecurityWeek.
SecurityWeek – Read More
Google Pays Out $41,000 for Three Serious Chrome Vulnerabilities
/in General NewsGoogle releases a Chrome 123 update to resolve three high-severity memory safety vulnerabilities.
The post Google Pays Out $41,000 for Three Serious Chrome Vulnerabilities appeared first on SecurityWeek.
SecurityWeek – Read More
New Technique Detected in an Open Source Supply Chain Attack
/in General NewsAttackers create malicious GitHub repositories with popular names and topics, using techniques like automated updates and fake stars to boost search rankings and deceive users.
Cyware News – Latest Cyber News – Read More
AI Data Security Startup Cyera Confirms $300M Raise at a $1.4B Valuation
/in General NewsThe lead investor for the Series C funding is Coatue, which is new to the startup’s cap table. Other new investors include Spark Capital, Georgian, and strategic backer AT&T Ventures.
Cyware News – Latest Cyber News – Read More
Rust Addresses Critical Vulnerability on Windows
/in General NewsThe vulnerability, which carries a perfect 10 base severity score, is tracked as CVE-2024-24576. It affects the Rust standard library, which was found to be improperly escaping arguments when invoking batch files on Windows using the Command API.
Cyware News – Latest Cyber News – Read More
Raspberry Robin Now Spreading Through Windows Script Files
/in General NewsFirst identified in late 2021, Raspberry Robin is a Windows worm initially seen targeting technology and manufacturing organizations. It has since grown to become one of the most prevalent threats facing enterprises.
Cyware News – Latest Cyber News – Read More
Palo Alto Networks Patches Vulnerabilities Allowing Firewall Disruption
/in General NewsPalo Alto Networks patches several high-severity vulnerabilities, including ones that allow DoS attacks against its firewalls.
The post Palo Alto Networks Patches Vulnerabilities Allowing Firewall Disruption appeared first on SecurityWeek.
SecurityWeek – Read More