BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Social Warfare WordPress Plugin 3.5.2 - Remote Code Execution (RCE)
- [remote] PX4 Military UAV Autopilot 1.12.3 - Denial of Service (DoS)
- [webapps] Pterodactyl Panel 1.11.11 - Remote Code Execution (RCE)
- [remote] OneTrust SDK 6.33.0 - Denial Of Service (DoS)
- [remote] freeSSHd 1.0.9 - Denial of Service (DoS)
- [remote] McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information
- [remote] Microsoft Excel 2024 Use after free - Remote Code Execution (RCE)
- [webapps] Sitecore 10.4 - Remote Code Execution (RCE)
- [local] Microsoft Excel LTSC 2024 - Remote Code Execution (RCE)
- [remote] FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse
500,000 Impacted by Ohio Lottery Ransomware Attack
/in General NewsThe Ohio Lottery cyberattack conducted by the DragonForce ransomware group has impacted more than 500,000 individuals.
The post 500,000 Impacted by Ohio Lottery Ransomware Attack appeared first on SecurityWeek.
SecurityWeek – Read More
RSA Conference 2024 – Announcements Summary (Day 4)
/in General NewsHundreds of companies are showcasing their products and services this week at the 2024 edition of the RSA Conference in San Francisco.
The post RSA Conference 2024 – Announcements Summary (Day 4) appeared first on SecurityWeek.
SecurityWeek – Read More
Singapore updates cybersecurity law to expand regulatory oversight
/in General NewsAmendments to the country’s cybersecurity bill aim to bolster its administration amid changes in the threat landscape.
Latest stories for ZDNET in Security – Read More
Researchers Uncover ‘LLMjacking’ Scheme Targeting Cloud-Hosted AI Models
/in General NewsCybersecurity researchers have discovered a novel attack that employs stolen cloud credentials to target cloud-hosted large language model (LLM) services with the goal of selling access to other threat actors.
The attack technique has been codenamed LLMjacking by the Sysdig Threat Research Team.
“Once initial access was obtained, they exfiltrated cloud credentials and gained
The Hacker News – Read More
CISA Courts Private Sector to Get Behind CIRCIA Reporting Rules
/in General NewsNew regulations will require the private sector to turn over incident data to CISA within three days or face enforcement. Here’s how the agency is presenting this as a benefit to the entire private sector.
darkreading – Read More
Dell Discloses Data Breach As Hacker Sells 49 Million Customer Data
/in General NewsBy Waqas
Dell has announced a data breach, while a hacker using the alias Menelik is selling 49 million Dell customer data on the notorious Breach Forums.
This is a post from HackRead.com Read the original post: Dell Discloses Data Breach As Hacker Sells 49 Million Customer Data
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
‘The Mask’ Espionage Group Resurfaces After 10-Year Hiatus
/in General NewsResearchers recently spotted the Spanish-speaking threat actor — with nearly 400 previous victims under its belt — in a new campaign in Latin America and Central Africa.
darkreading – Read More
2 (or 5) Bugs in F5 Asset Manager Allow Full Takeover, Hidden Accounts
/in General NewsF5 customers should patch immediately, though even that won’t protect them from every problem with their networked devices.
darkreading – Read More
CyberProof Announces Strategic Partnership With Google Cloud
/in General NewsPost Content
darkreading – Read More
87% of DDoS Attacks Targeted Windows OS Devices in 2023
/in General NewsPost Content
darkreading – Read More