BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
- Uro - Declutters Url Lists For Crawling/Pentesting
- Wshlient - A Simple Tool To Interact With Web Shells And Command Injection Vulnerabilities
Exploit DB
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
- [webapps] Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF)
- [webapps] Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR)
- [local] Daikin Security Gateway 14 - Remote Password Reset
- [local] ZTE ZXV10 H201L - RCE via authentication bypass
Update: BlackCat Ransomware Gang Claims They Stole 6TB of Change Healthcare Data
/in General NewsThe BlackCat/ALPHV ransomware gang claimed responsibility for a cyberattack on Optum, affecting the Change Healthcare platform and potentially compromising sensitive data of millions of individuals and organizations.
Cyware News – Latest Cyber News – Read More
RoboForm Free vs. Paid: Which Plan Is Best For You?
/in General NewsExplore the differences between RoboForm’s free and paid versions, and decide which one is the right fit for your organization.
Security | TechRepublic – Read More
LockBit Ransomware Returns to Attacks With New Encryptors, Servers
/in General NewsLockBit has set up new data leak and negotiation sites, and is actively recruiting experienced pentesters to join their operation, indicating a potential increase in future attacks.
Cyware News – Latest Cyber News – Read More
Free VPN vs Paid VPN: Which One Is Right for You?
/in General NewsDiscover the key differences between a free VPN and a paid VPN and determine which one is right for your online privacy and security needs.
Security | TechRepublic – Read More
Biden Administration Will Investigate National Security Risks Posed by Chinese-Made ‘Smart Cars’
/in General NewsGovernment probe could lead to new regulations aimed at preventing China from using sophisticated technology in connected vehicles to track drivers and their personal information.
The post Biden Administration Will Investigate National Security Risks Posed by Chinese-Made ‘Smart Cars’ appeared first on SecurityWeek.
SecurityWeek – Read More
German Steelmaker Thyssenkrupp Confirms Ransomware Attack
/in General NewsGerman steelmaking conglomerate Thyssenkrupp confirms one of its automotive units was disrupted by a ransomware attack.
The post German Steelmaker Thyssenkrupp Confirms Ransomware Attack appeared first on SecurityWeek.
SecurityWeek – Read More
Report: Ads for Zero-Day Exploit Sales Surge 70% Annually
/in General NewsThreat actors are increasingly using zero-day exploits to enhance the success of advanced targeted attacks, with a 70% increase in public ads selling zero-day exploits observed between 2022 and 2023, according to Group-IB.
Cyware News – Latest Cyber News – Read More
Meta Patches Facebook Account Takeover Vulnerability
/in General NewsMeta has patched a critical vulnerability that could have been exploited to take over any Facebook account via a brute-force attack.
The post Meta Patches Facebook Account Takeover Vulnerability appeared first on SecurityWeek.
SecurityWeek – Read More
Meet ‘XHelper,’ the All-in-One Android App for Global Money Laundering
/in General NewsUser-friendly apps allow anybody to serve as traffickers for cybercrime syndicates.
darkreading – Read More
Russia Attacked Ukraine’s Power Grid at Least 66 Times to ‘Freeze It Into Submission’
/in General NewsSeveral of the strikes occurred far from the front lines of the conflict, indicating possible war crimes. Researchers say the attacks likely had devastating impacts on civilians.
Security Latest – Read More