BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover
- [remote] Microsoft PowerPoint 2019 - Remote Code Execution (RCE)
- [remote] ScriptCase 9.12.006 (23) - Remote Command Execution (RCE)
- [local] Sudo chroot 1.9.17 - Local Privilege Escalation
- [local] Sudo 1.9.17 Host Option - Elevation of Privilege
- [local] Microsoft Defender for Endpoint (MDE) - Elevation of Privilege
- [webapps] Discourse 3.2.x - Anonymous Cache Poisoning
- [remote] Microsoft Outlook - Remote Code Execution (RCE)
- [remote] Microsoft SharePoint 2019 - NTLM Authentication
- [remote] Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
For Tech Whistleblowers, There’s Safety in Numbers
/in General NewsAmber Scorah and Psst are building a “digital safe” to help people shine a light on the bad things their bosses are doing, without getting found out.
Security Latest – Read More
How to Win Followers and Scamfluence People
/in General NewsFormat Boy makes a living teaching Yahoo Boys, notorious West African scammers, how to use AI and deepfake technology to ensnare their next victims.
Security Latest – Read More
Hackers Earn Over $1 Million at Pwn2Own Berlin 2025
/in General NewsPwn2Own participants demonstrated exploits against VMs, AI, browsers, servers, containers, and operating systems.
The post Hackers Earn Over $1 Million at Pwn2Own Berlin 2025 appeared first on SecurityWeek.
SecurityWeek – Read More
Crypto elite increasingly worried about their personal safety
/in General NewsCryptocurrency executives and other investors with significant wealth from crypto holdings are getting more serious about personal security, according to stories this weekend in both the Wall Street Journal and Bloomberg. While cryptocurrencies have always created unique security risks, it seems there’s a rising threat of violent abduction due to the growing value of Bitcoin, […]
Security News | TechCrunch – Read More
Russia-Linked SpyPress Malware Exploits Webmails to Spy on Ukraine
/in General NewsESET reports on RoundPress, a cyber espionage campaign by Russia’s Fancy Bear (Sednit) targeting Ukraine-related organizations via webmail…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
FBI Warns of AI Voice Scams Impersonating US Govt Officials
/in General NewsFBI has warned about a sophisticated vishing and smishing campaign using AI-generated voice memos to impersonate senior US…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes
/in General NewsThe company behind the Signal clone used by at least one Trump administration official was breached earlier this month. The hacker says they got in thanks to a basic misconfiguration.
Security Latest – Read More
Coinbase Will Reimburse Customers Up to $400 Million After Data Breach
/in General NewsPlus: 12 more people are indicted over a $263 million crypto heist, and a former FBI director is accused of threatening Donald Trump thanks to an Instagram post of seashells.
Security Latest – Read More
HubSpot vs Salesforce: Which CRM Fits Your Business?
/in General NewsYou’ve got an important choice to make: HubSpot or Salesforce?
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
[Virtual Event] Strategic Security for the Modern Enterprise
/in General NewsPost Content
darkreading – Read More