BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [remote] Ingress-NGINX 4.11.0 - Remote Code Execution (RCE)
- [local] Microsoft Excel LTSC 2024 - Remote Code Execution (RCE)
- [remote] FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse
- [remote] Windows 11 SMB Client - Privilege Escalation & Remote Code Execution (RCE)
- [remote] PCMan FTP Server 2.0.7 - Buffer Overflow
- [webapps] Litespeed Cache WordPress Plugin 6.3.0.1 - Privilege Escalation
- [local] Parrot and DJI variants Drone OSes - Kernel Panic Exploit
- [webapps] PHP CGI Module 8.3.4 - Remote Code Execution (RCE)
- [remote] AirKeyboard iOS App 1.0.5 - Remote Input Injection
- [webapps] Skyvern 0.1.85 - Remote Code Execution (RCE) via SSTI
Phishing Platform LabHost Shut Down by Law Enforcement
/in General NewsLabHost, a major phishing-as-a-service platform, has been shut down as part of a major law enforcement operation.
The post Phishing Platform LabHost Shut Down by Law Enforcement appeared first on SecurityWeek.
SecurityWeek – Read More
Possible Chinese Hackers Use OpenMetadata for Cryptomining
/in General NewsHackers who appear to be Chinese are exploiting vulnerabilities in the OpenMetadata platform running as workloads on Kubernetes clusters to download cryptomining software, warns Microsoft.
Cyware News – Latest Cyber News – Read More
UnitedHealth Expects Up to $1.6B Hit From Change Healthcare Cyberattack This Year
/in General NewsThe hit comes from direct response efforts like recovering Change’s clearinghouse platform and paying higher medical costs after its insurance arm suspended some utilization management processes, in addition to the loss of Change’s revenue.
Cyware News – Latest Cyber News – Read More
Cybersecurity Pros Urge US Congress to Help NIST Restore NVD Operation
/in General NewsA group of 50 cybersecurity professionals signed an open letter that was sent on April 12 to the US Secretary of Commerce, Gina Raimondo, and several members of the US Congress.
Cyware News – Latest Cyber News – Read More
Cisco Warns of a Command Injection and Privilege Escalation Flaw in Its IMC
/in General NewsA local, authenticated attacker can exploit the vulnerability, tracked as CVE-2024-20295, to conduct command injection attacks on the underlying operating system and elevate privileges to root.
Cyware News – Latest Cyber News – Read More
Food and Agriculture Sector Hit with More Than 160 Ransomware Attacks Last Year
/in General NewsIn its first annual report, the Food and Agriculture-Information Sharing and Analysis Center (Food and Ag-ISAC) said the industry was the seventh most targeted sector in the country, behind manufacturing, financial services, and others.
Cyware News – Latest Cyber News – Read More
Sneaky Shellcode: Windows Fibers Offer EDR-Proof Code Execution
/in General NewsTwo new code-execution techniques, Poison Fiber and Phantom Thread, take advantage of a little-known Windows OS workhorse to sneak shellcode and other malware onto victim machines.
darkreading – Read More
Cisco Unveils AI-Native Enterprise Security Solution Hypershield
/in General NewsCisco announces Hypershield, an AI-native and cloud-native enterprise security solution with a wide range of capabilities.
The post Cisco Unveils AI-Native Enterprise Security Solution Hypershield appeared first on SecurityWeek.
SecurityWeek – Read More
Nigeria & Romania Ranked Among Top Cybercrime Havens
/in General NewsA survey of cybercrime experts assessing the top cybercrime-producing nations results in some expected leaders — Russia, Ukraine, and China — but also some surprises.
darkreading – Read More
6 Phone Management Tips When Traveling Abroad
/in General NewsBy Owais Sultan
Phones are a major reason why travelling is more accepted and comfortable than ever before. First of all,…
This is a post from HackRead.com Read the original post: 6 Phone Management Tips When Traveling Abroad
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More