BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [remote] Ingress-NGINX 4.11.0 - Remote Code Execution (RCE)
- [local] Microsoft Excel LTSC 2024 - Remote Code Execution (RCE)
- [remote] FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse
- [remote] Windows 11 SMB Client - Privilege Escalation & Remote Code Execution (RCE)
- [remote] PCMan FTP Server 2.0.7 - Buffer Overflow
- [webapps] Litespeed Cache WordPress Plugin 6.3.0.1 - Privilege Escalation
- [local] Parrot and DJI variants Drone OSes - Kernel Panic Exploit
- [webapps] PHP CGI Module 8.3.4 - Remote Code Execution (RCE)
- [remote] AirKeyboard iOS App 1.0.5 - Remote Input Injection
- [webapps] Skyvern 0.1.85 - Remote Code Execution (RCE) via SSTI
Godfather Banking Trojan Spawns 1.2K Samples Across 57 Countries
/in General NewsMobile malware-as-a-service operators are upping their game by automatically churning out hundreds of unique samples on a whim.
darkreading – Read More
North Korea’s Lazarus Group Deploys New Kaolin RAT via Fake Job Lures
/in General NewsThe North Korea-linked threat actor known as Lazarus Group employed its time-tested fabricated job lures to deliver a new remote access trojan called Kaolin RAT.
The malware could, “aside from standard RAT functionality, change the last write timestamp of a selected file and load any received DLL binary from [command-and-control] server,” Avast security researcher Luigino
The Hacker News – Read More
Digital Blitzkrieg: Unveiling Cyber-Logistics Warfare
/in General NewsCyberattacks on logistics are becoming increasingly common, and the potential impact is enormous.
darkreading – Read More
Women in Cybersecurity: ISC2 Survey Shows Pay Gap and Benefits of Inclusive Teams
/in General NewsAbout 23% of security teams include women, ISC2 found in its Cybersecurity Workforce Study.
Security | TechRepublic – Read More
Cisco Zero-Days Anchor ‘ArcaneDoor’ Cyber Espionage Campaign
/in General NewsAttacks by a previously unknown threat actor leveraged two bugs in firewall devices to install custom backdoors on several government networks globally.
darkreading – Read More
Predictive Security Startup BforeAI Raises $15 Million
/in General NewsPredictive attack intelligence and risk protection startup BforeAI has raised $15 million in a Series A funding round led by SYN Ventures.
The post Predictive Security Startup BforeAI Raises $15 Million appeared first on SecurityWeek.
SecurityWeek – Read More
How to turn on Private DNS Mode on Android (and why you should)
/in General NewsEnabling Private DNS Mode on Android means your searches and other DNS queries are encrypted and safe from prying eyes. Here’s everything else you need to know.
Latest stories for ZDNET in Security – Read More
Palo Alto Networks Shares Remediation Advice for Hacked Firewalls
/in General NewsPalo Alto Networks has shared remediation instructions for organizations whose firewalls have been hacked via CVE-2024-3400.
The post Palo Alto Networks Shares Remediation Advice for Hacked Firewalls appeared first on SecurityWeek.
SecurityWeek – Read More
NDR in the Modern Cybersecurity Landscape
/in General NewsBy Uzair Amir
The role of Network Detection and Response (NDR) in cybersecurity. Learn how NDR tools empower organizations to tackle evolving threats effectively.
This is a post from HackRead.com Read the original post: NDR in the Modern Cybersecurity Landscape
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Google Patches Critical Chrome Vulnerability and Additional Flaws
/in General NewsBy Waqas
Using Google Chrome? Update your browser to the latest version right now!
This is a post from HackRead.com Read the original post: Google Patches Critical Chrome Vulnerability and Additional Flaws
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More