BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] WP Publications WordPress Plugin 1.2 - Stored XSS
- [local] Microsoft Graphics Component Windows 11 Pro (Build 26100+) - Local Elevation of Privileges
- [remote] Keras 2.15 - Remote Code Execution (RCE)
- [local] Microsoft Brokering File System Windows 11 Version 22H2 - Elevation of Privilege
- [webapps] PivotX 3.0.0 RC3 - Remote Code Execution (RCE)
- [hardware] TOTOLINK N300RB 8.54 - Command Execution
- [webapps] SugarCRM 14.0.0 - SSRF/Code Injection
- [webapps] Langflow 1.2.x - Remote Code Execution (RCE)
- [remote] NodeJS 24.x - Path Traversal
- [remote] MikroTik RouterOS 7.19.1 - Reflected XSS
Citrix Addresses High-Severity Flaw in NetScaler ADC and Gateway
/in General NewsThe flaw was nearly identical to last year’s CitrixBleed flaw, though not as severe.
darkreading – Read More
Supply Chain Breaches Up 68% Year Over Year, According to DBIR
/in General NewsAs Verizon Business redefines “supply chain breach,” it could either help organizations address third-party risk holistically or just conflate and confuse.
darkreading – Read More
Cuckoo Mac Malware Mimics Music Converter to Steals Passwords and Crypto
/in General NewsBy Deeba Ahmed
Cuckoo malware targets macOS users, stealing passwords, browsing history, crypto wallet details & more. Disguised as a music converter, it poses a major security risk. Learn how to protect yourself from this sophisticated infostealer.
This is a post from HackRead.com Read the original post: Cuckoo Mac Malware Mimics Music Converter to Steals Passwords and Crypto
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
LLMs & Malicious Code Injections: ‘We Have to Assume It’s Coming’
/in General NewsLarge language models promise to enhance secure software development life cycles, but there are unintended risks as well, CISO warns at RSAC.
darkreading – Read More
BigID Launches Industry-First Hybrid Scanning for Cloud Native Workloads
/in General NewsPost Content
darkreading – Read More
Introducing the NetBeacon Institute: Empowering a Safer Web
/in General NewsPost Content
darkreading – Read More
AXA XL Introduces Endorsement to Help Public Companies Address SEC Cyber Reporting Costs
/in General NewsPost Content
darkreading – Read More
AttackIQ Partners With Cyber Poverty Line Institute to Provide Academy Courses to Underserved Communities
/in General NewsPost Content
darkreading – Read More
RSA: Google Enhances its Enterprise SecOps Offerings With Gemini AI
/in General NewsIn this RSA roundup, we also cover AI news about IBM, AWS and Proofpoint, as well as details about Cisco Hypershield.
Security | TechRepublic – Read More
Top 7 Multicloud Security Providers for 2024
/in General NewsThere are a lot of considerations when adopting a multicloud infrastructure. Use our guide to compare the top multicloud security providers.
Security | TechRepublic – Read More