BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
- Uro - Declutters Url Lists For Crawling/Pentesting
- Wshlient - A Simple Tool To Interact With Web Shells And Command Injection Vulnerabilities
Exploit DB
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
- [webapps] Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF)
- [webapps] Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR)
- [local] Daikin Security Gateway 14 - Remote Password Reset
- [local] ZTE ZXV10 H201L - RCE via authentication bypass
Kaspersky Finds Attacks on Mobile Devices Significantly Increased in 2023
/in General NewsPost Content
darkreading – Read More
Change Healthcare Ransomware Attack: BlackCat Hackers Quickly Returned After FBI Bust
/in General NewsTwo months ago, the FBI “disrupted” the BlackCat ransomware group. They’re already back—and their latest attack is causing delays at pharmacies across the US.
Security Latest – Read More
Cybersecurity Agencies Warn Ubiquiti EdgeRouter Users of APT28’s MooBot Threat
/in General NewsIn a new joint advisory, cybersecurity and intelligence agencies from the U.S. and other countries are urging users of Ubiquiti EdgeRouter to take protective measures, weeks after a botnet comprising infected routers was felled by law enforcement as part of an operation codenamed Dying Ember.
The botnet, named MooBot, is said to have been used by a Russia-linked threat actor known as
The Hacker News – Read More
New Variant of AMOS Stealer Targets Safari Cookies and Crypto Wallets
/in General NewsBy Waqas
macOS users watch out for the new variant aiming at your crypto funds!
This is a post from HackRead.com Read the original post: New Variant of AMOS Stealer Targets Safari Cookies and Crypto Wallets
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
4 Ways Organizations Can Drive Demand for Software Security Training
/in General NewsDeveloper-driven security programs place the development team at the center of reducing vulnerabilities.
darkreading – Read More
Safe Data Sharing Practices: How to Avoid Data Leaks
/in General NewsBy Owais Sultan
The Internet offers a convenient platform for sharing data, but it also brings the risk of data leaks.…
This is a post from HackRead.com Read the original post: Safe Data Sharing Practices: How to Avoid Data Leaks
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Update: LoanDepot Says About 17M Customers Had Personal Data and SSNs Stolen During Cyberattack
/in General NewsThe cyberattack left LoanDepot’s customers unable to make payments or access their online accounts, and the company expects the incident to impact its fiscal first quarter earnings by $12 to $17 million.
Cyware News – Latest Cyber News – Read More
Zyxel Issues Security Advisory for Multiple Vulnerabilities in Firewalls and APs
/in General NewsZyxel has identified and patched four critical vulnerabilities in its firewall and access point products, including flaws that could lead to remote code execution and denial-of-service attacks.
Cyware News – Latest Cyber News – Read More
Black Basta, Bl00dy Ransomware Exploiting Recent ScreenConnect Flaws
/in General NewsThe Black Basta and Bl00dy ransomware gangs have started exploiting two vulnerabilities in ConnectWise ScreenConnect.
The post Black Basta, Bl00dy Ransomware Exploiting Recent ScreenConnect Flaws appeared first on SecurityWeek.
SecurityWeek – Read More
What Companies & CISOs Should Know About Rising Legal Threats
/in General NewsLitigation and regulatory enforcement are increasing risks for companies and cybersecurity leaders. Something must be done to protect the profession.
darkreading – Read More