BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
- Uro - Declutters Url Lists For Crawling/Pentesting
- Wshlient - A Simple Tool To Interact With Web Shells And Command Injection Vulnerabilities
Exploit DB
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
- [webapps] Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF)
- [webapps] Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR)
- [local] Daikin Security Gateway 14 - Remote Password Reset
- [local] ZTE ZXV10 H201L - RCE via authentication bypass
Tax-Related Scams Escalate as Filing Deadline Approaches
/in General NewsScammers are taking advantage of the rush to file personal federal income tax returns, using tactics such as impersonation, phone calls, tax identity theft, phishing scams, and unethical tax return preparers.
Cyware News – Latest Cyber News – Read More
EquiLend Ransomware Attack Leads to Data Breach
/in General NewsEquiLend is informing its employees that their personal information was compromised in a January ransomware attack.
The post EquiLend Ransomware Attack Leads to Data Breach appeared first on SecurityWeek.
SecurityWeek – Read More
French Government Agencies Hit by Cyberattacks of ‘Unprecedented Intensity’
/in General NewsIn response to the cyberattacks, a crisis cell has been activated to deploy countermeasures, reducing the impact on most public services and restoring access to state websites.
Cyware News – Latest Cyber News – Read More
Google’s Gemini AI Vulnerable to Content Manipulation
/in General NewsLike ChatGPT and other GenAI tools, Gemini is susceptible to attacks that can cause it to divulge system prompts, reveal sensitive information, and execute potentially malicious actions.
darkreading – Read More
Broadcom Axes Carbon Black Sale, to Merge Unit with Symantec
/in General NewsThis decision came after offers to purchase Carbon Black fell short of expectations, resulting in Broadcom’s strategic shift to retain the company and merge it with Symantec.
Cyware News – Latest Cyber News – Read More
British Authorities Have Never Detected a Breach of Ransomware Sanctions — But is That Good or Bad News?
/in General NewsAside from frustrating ransomware payments, the sanctions regime is used by law enforcement agencies to hamper the ability of cyber threat actors to monetize their criminal activities and sow discord within certain groups.
Cyware News – Latest Cyber News – Read More
Roku Cancels Unauthorized Subscriptions and Provides Refunds for 15K Breached Accounts
/in General NewsRoku canceled unauthorized subscriptions, refunded affected user accounts, and reset passwords after discovering a breach involving hacked username and password combinations.
Cyware News – Latest Cyber News – Read More
Update: Third-Party Breach and Missing MFA Led to British Library Attack
/in General NewsThe attackers successfully copied a significant amount of data, including personal details of Library users and staff, leading to a deep and extensive impact on the institution.
Cyware News – Latest Cyber News – Read More
Binance’s Top Crypto Crime Investigator Is Being Detained in Nigeria
/in General NewsTigran Gambaryan, a former crypto-focused US federal agent, and a second Binance executive, Nadeem Anjarwalla, have been held in Abuja without passports for two weeks.
Security Latest – Read More
The French Government Says It’s Being Targeted by Unusual Intense Cyberattacks
/in General NewsA group of hackers called Anonymous Sudan, considered by cybersecurity experts as pro-Russia, claimed responsibility for the attacks in online posts.
The post The French Government Says It’s Being Targeted by Unusual Intense Cyberattacks appeared first on SecurityWeek.
SecurityWeek – Read More