BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover
- [remote] Microsoft PowerPoint 2019 - Remote Code Execution (RCE)
- [remote] ScriptCase 9.12.006 (23) - Remote Command Execution (RCE)
- [local] Sudo chroot 1.9.17 - Local Privilege Escalation
- [local] Sudo 1.9.17 Host Option - Elevation of Privilege
- [local] Microsoft Defender for Endpoint (MDE) - Elevation of Privilege
- [webapps] Discourse 3.2.x - Anonymous Cache Poisoning
- [remote] Microsoft Outlook - Remote Code Execution (RCE)
- [remote] Microsoft SharePoint 2019 - NTLM Authentication
- [remote] Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
Trump Signs Controversial Law Targeting Nonconsensual Sexual Content
/in General NewsThe Take It Down Act requires platforms to remove instances of “intimate visual depiction” within two days. Free speech advocates warn it could be weaponized to fuel censorship.
Security Latest – Read More
BreachRx Lands $15 Million as Investors Bet on Breach-Workflow Software
/in General NewsSan Francisco incident response coordination startup banks $15 million in a Series A funding round led by Ballistic Ventures.
The post BreachRx Lands $15 Million as Investors Bet on Breach-Workflow Software appeared first on SecurityWeek.
SecurityWeek – Read More
Microsoft just launched an AI that discovered a new chemical in 200 hours instead of years
/in General NewsMicrosoft launches Discovery platform that uses agentic AI to compress years of scientific research into days, transforming R&D across pharmaceuticals, materials science, and semiconductor industries.Read More
Security News | VentureBeat – Read More
Legal Aid Agency Warns Lawyers, Defendants on Data Breach
/in General NewsThe online service has since been shut down as the agency grapples with the cyberattack, though it assures the public that those most in need of legal assistance will still be able to access help.
darkreading – Read More
UK Legal Aid Agency Hit by Cyberattack, Sensitive Data Stolen
/in General NewsThe UK Legal Aid Agency has suffered a major cyberattack, with “significant” sensitive data, including criminal records, stolen.…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
A Silicon Valley VC Says He Got the IDF Starlink Access Within Days of October 7 Attack
/in General NewsSequoia Capital partner Shaun Maguire said in a webinar hosted by Israel’s Defense Ministry that he connected the IDF with SpaceX’s Starlink satellite internet far sooner than believed.
Security Latest – Read More
Man Behind SEC Bitcoin Hoax Tweet Sentenced in SIM Swap Hack
/in General NewsEric Council Jr. sentenced for 2024 SIM swap that led to fake Bitcoin ETF tweet from SEC’s X account, briefly impacting crypto markets.
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
Microsoft goes all in on Anthropic’s MCP standard for safer AI agent deployments
/in General NewsMicrosoft anounced support for the AI data connection standard across its platform at Build 2025.
Latest stories for ZDNET in Security – Read More
Ransomware Gangs Use Skitnet Malware for Stealthy Data Theft and Remote Access
/in General NewsSeveral ransomware actors are using a malware called Skitnet as part of their post-exploitation efforts to steal sensitive data and establish remote control over compromised hosts.
“Skitnet has been sold on underground forums like RAMP since April 2024,” Swiss cybersecurity company PRODAFT told The Hacker News. “However, since early 2025, we have observed multiple ransomware operators using it
The Hacker News – Read More
Pharma giant Regeneron to buy 23andMe and its customers’ data for $256M
/in General News23andMe was sold by bankruptcy auction, a year after the company had a massive data breach.
Security News | TechCrunch – Read More