BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover
- [remote] Microsoft PowerPoint 2019 - Remote Code Execution (RCE)
- [remote] ScriptCase 9.12.006 (23) - Remote Command Execution (RCE)
- [local] Sudo chroot 1.9.17 - Local Privilege Escalation
- [local] Sudo 1.9.17 Host Option - Elevation of Privilege
- [local] Microsoft Defender for Endpoint (MDE) - Elevation of Privilege
- [webapps] Discourse 3.2.x - Anonymous Cache Poisoning
- [remote] Microsoft Outlook - Remote Code Execution (RCE)
- [remote] Microsoft SharePoint 2019 - NTLM Authentication
- [remote] Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
Firefox Tests AI-Powered Perplexity Search Engine Directly in Browser
/in General NewsMozilla Firefox experiments with AI-powered Perplexity Search Engine in its address bar for version 139, signalling a potential…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
Salesforce just unveiled AI ‘digital teammates’ in Slack — and they’re coming for Microsoft Copilot
/in General NewsSalesforce launches Agentforce in Slack, transforming workplace productivity with specialized AI agents that operate as digital teammates, replacing one-size-fits-all AI assistants with purpose-built solutions.Read More
Security News | VentureBeat – Read More
Why CTEM is the Winning Bet for CISOs in 2025
/in General NewsContinuous Threat Exposure Management (CTEM) has moved from concept to cornerstone, solidifying its role as a strategic enabler for CISOs. No longer a theoretical framework, CTEM now anchors today’s cybersecurity programs by continuously aligning security efforts with real-world risk.
At the heart of CTEM is the integration of Adversarial Exposure Validation (AEV), an advanced, offensive
The Hacker News – Read More
480,000 Catholic Health Patients Impacted by Serviceaide Data Leak
/in General NewsServiceaide exposed a database containing personal and medical information belonging to Catholic Health patients.
The post 480,000 Catholic Health Patients Impacted by Serviceaide Data Leak appeared first on SecurityWeek.
SecurityWeek – Read More
For Tech Whistleblowers, There’s Safety in Numbers
/in General NewsAmber Scorah and Psst are building a “digital safe” to help people shine a light on the bad things their bosses are doing, without getting found out.
Security Latest – Read More
How to Win Followers and Scamfluence People
/in General NewsFormat Boy makes a living teaching Yahoo Boys, notorious West African scammers, how to use AI and deepfake technology to ensnare their next victims.
Security Latest – Read More
Hackers Earn Over $1 Million at Pwn2Own Berlin 2025
/in General NewsPwn2Own participants demonstrated exploits against VMs, AI, browsers, servers, containers, and operating systems.
The post Hackers Earn Over $1 Million at Pwn2Own Berlin 2025 appeared first on SecurityWeek.
SecurityWeek – Read More
Crypto elite increasingly worried about their personal safety
/in General NewsCryptocurrency executives and other investors with significant wealth from crypto holdings are getting more serious about personal security, according to stories this weekend in both the Wall Street Journal and Bloomberg. While cryptocurrencies have always created unique security risks, it seems there’s a rising threat of violent abduction due to the growing value of Bitcoin, […]
Security News | TechCrunch – Read More
Russia-Linked SpyPress Malware Exploits Webmails to Spy on Ukraine
/in General NewsESET reports on RoundPress, a cyber espionage campaign by Russia’s Fancy Bear (Sednit) targeting Ukraine-related organizations via webmail…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
FBI Warns of AI Voice Scams Impersonating US Govt Officials
/in General NewsFBI has warned about a sophisticated vishing and smishing campaign using AI-generated voice memos to impersonate senior US…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More