BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
- Uro - Declutters Url Lists For Crawling/Pentesting
Exploit DB
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
- [webapps] Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF)
- [webapps] Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR)
- [local] Daikin Security Gateway 14 - Remote Password Reset
- [local] ZTE ZXV10 H201L - RCE via authentication bypass
WiCyS and ISC2 Launch Spring Camp for Cybersecurity Certification
/in General NewsPost Content
darkreading – Read More
Saudi Arabia, UAE Top List of APT-Targeted Nations in the Middle East
/in General NewsGovernment, manufacturing, and the energy industry are the top targets of advanced, persistent threat actors, with phishing attacks and remote exploits the most common vectors.
darkreading – Read More
Flare Acquires Foretrace to Accelerate Threat Exposure Management Growth
/in General NewsPost Content
darkreading – Read More
Telegram Offers Premium Subscription in Exchange for Using Your Number to Send OTPs
/in General NewsIn June 2017, a study of more than 3,000 Massachusetts Institute of Technology (MIT) students published by the National Bureau for Economic Research (NBER) found that 98% of them were willing to give away their friends’ email addresses in exchange for free pizza.
“Whereas people say they care about privacy, they are willing to relinquish private data quite easily when
The Hacker News – Read More
Google TAG Reports Zero-Day Surge and Rise of State Hacker Threats
/in General NewsBy Waqas
Google’s Threat Analysis Group (TAG) reports a concerning rise in zero-day exploits and increased activity from state-backed hackers.…
This is a post from HackRead.com Read the original post: Google TAG Reports Zero-Day Surge and Rise of State Hacker Threats
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
DHS Proposes Critical Infrastructure Reporting Rules
/in General NewsCISA will administer the new reporting requirements for cyber incidents and ransomware payments.
darkreading – Read More
Zscaler finds enterprise AI adoption soars 600% in less than a year, putting data at risk
/in General NewsAccording to Zscaler’s report, manufacturing generates the most AI traffic, accounting for 20.9% of all AI/ML transactions, followed by finance and insurance (19.9%) and services (16.8%).Read More
Security News | VentureBeat – Read More
Leaked Documents Reveal Australia Targeted by Chinese APT31 Hackers
/in General NewsA Chinese cybersecurity company with links to the Communist Party government used its guns-for-hire hacking operation to target Australia, leaked documents from iSoon revealed.
Cyware News – Latest Cyber News – Read More
Code Execution Flaws Haunt NVIDIA ChatRTX for Windows
/in General NewsArtificial intelligence computing giant NVIDIA patches flaws in ChatRTX for Windows and warns of code execution and data tampering risks.
The post Code Execution Flaws Haunt NVIDIA ChatRTX for Windows appeared first on SecurityWeek.
SecurityWeek – Read More
Finnish Police Linked APT31 to the 2021 Parliament Attack
/in General NewsThe investigation relied on an international information exchange, the National Bureau of Investigation collaborated with international entities and the Finnish Security and Intelligence Service
Cyware News – Latest Cyber News – Read More