BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
- Uro - Declutters Url Lists For Crawling/Pentesting
- Wshlient - A Simple Tool To Interact With Web Shells And Command Injection Vulnerabilities
Exploit DB
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
- [webapps] Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF)
- [webapps] Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR)
- [local] Daikin Security Gateway 14 - Remote Password Reset
- [local] ZTE ZXV10 H201L - RCE via authentication bypass
Alert: New Phishing Attack Delivers Keylogger Disguised as Bank Payment Notice
/in General NewsA new phishing campaign has been observed leveraging a novel loader malware to deliver an information stealer and keylogger called Agent Tesla.
Trustwave SpiderLabs said it identified a phishing email bearing this attack chain on March 8, 2024. The message masquerades as a bank payment notification, urging the user to open an archive file attachment.
The archive (“Bank Handlowy w Warszawie
The Hacker News – Read More
Dubious NuGet Package May Portend Chinese Industrial Espionage
/in General News“SqzrFramework480” is a .NET dynamic link library (DLL) that seems to pertain to Bozhon Precision Industry Technology Co., a Chinese manufacturer of consumer electronics and various industrial technologies.
Cyware News – Latest Cyber News – Read More
Australian Government Doubles Down On Cybersecurity in Wake of Major Attacks
/in General NewsGovernment proposes more modern and comprehensive cybersecurity regulations for businesses, government, and critical infrastructures providers Down Under.
darkreading – Read More
Two Chinese APT Groups Ramp Up Cyber Espionage Against ASEAN Countries
/in General NewsTwo China-linked advanced persistent threat (APT) groups have been observed targeting entities and member countries affiliated with the Association of Southeast Asian Nations (ASEAN) as part of a cyber espionage campaign over the past three months.
This includes the threat actor known as Mustang Panda, which has been recently linked to cyber attacks against Myanmar as well as
The Hacker News – Read More
AI Generated Fake Obituary Websites Target Grieving Users
/in General NewsBy Waqas
Tributes turned toxic as crooks abuse AI.
This is a post from HackRead.com Read the original post: AI Generated Fake Obituary Websites Target Grieving Users
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Worldwide Agenda Ransomware Wave Targets VMware ESXi Servers
/in General NewsA new, improved variant on the group’s malware combines fileless infection, BYOVD, and more to cause havoc in virtual environments.
darkreading – Read More
Apple Security Bug Opens iPhone, iPad to RCE
/in General NewsCVE-2024-1580 allows remote attackers to execute arbitrary code on affected devices.
darkreading – Read More
Binarly Attracts $10.5M to Tackle Software Supply Chain Security
/in General NewsLos Angeles firmware and software supply chain firm banks $10.5 million in seed-stage funding led by Two Bear Capital.
The post Binarly Attracts $10.5M to Tackle Software Supply Chain Security appeared first on SecurityWeek.
SecurityWeek – Read More
New ShadowRay Campaign Targets Ray AI Framework in Global Attack
/in General NewsBy Waqas
An unpatched vulnerability is exposing the Ray AI framework to the “ShadowRay” attack!
This is a post from HackRead.com Read the original post: New ShadowRay Campaign Targets Ray AI Framework in Global Attack
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Researchers Discover 40,000-Strong EOL Router, IoT Botnet
/in General NewsMalware hunters sound an alarm after discovering a 40,000-strong botnet packed with end-of-life routers and IoT devices being used in cybercriminal activities.
The post Researchers Discover 40,000-Strong EOL Router, IoT Botnet appeared first on SecurityWeek.
SecurityWeek – Read More