BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
- Uro - Declutters Url Lists For Crawling/Pentesting
- Wshlient - A Simple Tool To Interact With Web Shells And Command Injection Vulnerabilities
Exploit DB
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
- [webapps] Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF)
- [webapps] Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR)
- [local] Daikin Security Gateway 14 - Remote Password Reset
- [local] ZTE ZXV10 H201L - RCE via authentication bypass
New Regulations Make D&O Insurance a Must for CISOs
/in General NewsCISOs currently hold all of the responsibility to stop cyberattacks yet have none of the authority to fund the technological defenses that regulations require.
darkreading – Read More
Name That Toon: Bridge the Gap
/in General NewsFeeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.
darkreading – Read More
Cyberattack Knocks Out Pensacola City Government Phone Lines
/in General NewsCity spokesperson Jason Wheeler told Recorded Future News that officials are experiencing phone issues across city departments that are causing delays in receiving service through the 311 Citizen Support system.
Cyware News – Latest Cyber News – Read More
‘PhantomBlu’ Cyberattackers Backdoor Microsoft Office Users via OLE
/in General NewsThe cyber campaign uses social engineering and sophisticated evasion tactics, including a novel malware-delivery method, to compromise hundreds of Microsoft Office users.
darkreading – Read More
Mintlify Says Customer GitHub Tokens Exposed in Data Breach
/in General NewsIn a blog post on Monday, Mintlify blamed its March 1 incident on a vulnerability in its own systems but said 91 of its customers had their GitHub tokens compromised as a result.
Cyware News – Latest Cyber News – Read More
Nations Direct Mortgage Alerts 83,000 to Personal Data Breach From December 2023 Cyberattack
/in General NewsIn filings with regulators in Maine and California, the company said it discovered a cybersecurity incident on December 30 that prompted an investigation. Law enforcement and other governmental agencies were notified of the cyberattack.
Cyware News – Latest Cyber News – Read More
Chinese APT Hacks 48 Government Organizations
/in General NewsEarth Krahang, likely a penetration team of Chinese government contractor I-Soon, has compromised 48 government entities worldwide.
The post Chinese APT Hacks 48 Government Organizations appeared first on SecurityWeek.
SecurityWeek – Read More
Nations Direct Mortgage Data Breach Impacts 83,000 Individuals
/in General NewsNations Direct informs 83,000 individuals that their personal information was compromised in a data breach.
The post Nations Direct Mortgage Data Breach Impacts 83,000 Individuals appeared first on SecurityWeek.
SecurityWeek – Read More
‘Conversation Overflow’ Cyberattacks Bypass AI Security to Target Execs
/in General NewsCredential-stealing emails are getting past artificial intelligence’s “known good” email security controls by cloaking malicious payloads within seemingly benign emails. The tactic poses a significant threat to enterprise networks.
darkreading – Read More
Hackers Exploiting Popular Document Publishing Sites for Phishing Attacks
/in General NewsThreat actors are leveraging digital document publishing (DDP) sites hosted on platforms like FlipSnack, Issuu, Marq, Publuu, RelayTo, and Simplebooklet for carrying out phishing, credential harvesting, and session token theft, once again underscoring how threat actors are repurposing legitimate services for malicious ends.
“Hosting phishing lures on DDP sites increases the likelihood
The Hacker News – Read More