BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover
- [remote] Microsoft PowerPoint 2019 - Remote Code Execution (RCE)
- [remote] ScriptCase 9.12.006 (23) - Remote Command Execution (RCE)
- [local] Sudo chroot 1.9.17 - Local Privilege Escalation
- [local] Sudo 1.9.17 Host Option - Elevation of Privilege
- [local] Microsoft Defender for Endpoint (MDE) - Elevation of Privilege
- [webapps] Discourse 3.2.x - Anonymous Cache Poisoning
- [remote] Microsoft Outlook - Remote Code Execution (RCE)
- [remote] Microsoft SharePoint 2019 - NTLM Authentication
- [remote] Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
Ransomware Gangs Use Skitnet Malware for Stealthy Data Theft and Remote Access
/in General NewsSeveral ransomware actors are using a malware called Skitnet as part of their post-exploitation efforts to steal sensitive data and establish remote control over compromised hosts.
“Skitnet has been sold on underground forums like RAMP since April 2024,” Swiss cybersecurity company PRODAFT told The Hacker News. “However, since early 2025, we have observed multiple ransomware operators using it
The Hacker News – Read More
Pharma giant Regeneron to buy 23andMe and its customers’ data for $256M
/in General News23andMe was sold by bankruptcy auction, a year after the company had a massive data breach.
Security News | TechCrunch – Read More
Reddit, Webflow, and Superhuman are already customers—now GrowthX has $12M to grow
/in General NewsGrowthX secures $12M in funding for its “service-as-software” platform that combines AI with human expertise to boost content marketing results by up to 300%.Read More
Security News | VentureBeat – Read More
SolarWinds security chief on the risks and rewards of being a CISO
/in General NewsAt the RSA Conference in San Francisco this year, Tim Brown talked about the protection CISOs need, Russia’s continued attempts to launch attacks and how companies can navigate the treacherous waters of cyber incidents.
The Record from Recorded Future News – Read More
Over 40,000 iOS Apps Found Exploiting Private Entitlements, Zimperium
/in General NewsA new report from Zimperium is alerting users about growing threats facing iOS devices, particularly those tied to…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
Official UK records confirm cyberattacks put NHS patients at risk of clinical harm
/in General NewsData obtained by Recorded Future News from the U.K.’s National Health Service show that two incidents last year put patients at risk of clinical harm.
The Record from Recorded Future News – Read More
Firefox Tests AI-Powered Perplexity Search Engine Directly in Browser
/in General NewsMozilla Firefox experiments with AI-powered Perplexity Search Engine in its address bar for version 139, signalling a potential…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
Salesforce just unveiled AI ‘digital teammates’ in Slack — and they’re coming for Microsoft Copilot
/in General NewsSalesforce launches Agentforce in Slack, transforming workplace productivity with specialized AI agents that operate as digital teammates, replacing one-size-fits-all AI assistants with purpose-built solutions.Read More
Security News | VentureBeat – Read More
Why CTEM is the Winning Bet for CISOs in 2025
/in General NewsContinuous Threat Exposure Management (CTEM) has moved from concept to cornerstone, solidifying its role as a strategic enabler for CISOs. No longer a theoretical framework, CTEM now anchors today’s cybersecurity programs by continuously aligning security efforts with real-world risk.
At the heart of CTEM is the integration of Adversarial Exposure Validation (AEV), an advanced, offensive
The Hacker News – Read More
480,000 Catholic Health Patients Impacted by Serviceaide Data Leak
/in General NewsServiceaide exposed a database containing personal and medical information belonging to Catholic Health patients.
The post 480,000 Catholic Health Patients Impacted by Serviceaide Data Leak appeared first on SecurityWeek.
SecurityWeek – Read More