BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
- Uro - Declutters Url Lists For Crawling/Pentesting
- Wshlient - A Simple Tool To Interact With Web Shells And Command Injection Vulnerabilities
Exploit DB
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
- [webapps] Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF)
- [webapps] Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR)
- [local] Daikin Security Gateway 14 - Remote Password Reset
- [local] ZTE ZXV10 H201L - RCE via authentication bypass
Gulf Region Accelerates Adoption of Zero Trust
/in General NewsUnited Arab Emirates will likely be one of the first in the region to implement zero-trust security due to its heavy adoption of cloud technologies.
darkreading – Read More
Linked Oculus Accounts Trigger Facebook and Instagram Suspension
/in General NewsBy Deeba Ahmed
META is suspending accounts of users on Facebook and Instagram, potentially linked to malicious Vietnamese activity involving META’s Oculus.
This is a post from HackRead.com Read the original post: Linked Oculus Accounts Trigger Facebook and Instagram Suspension
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Russian Cyberspies Targeting Cloud Infrastructure via Dormant Accounts
/in General NewsUS government and allies expose TTPs used by notorious Russian hacking teams and warn of the targeting of dormant cloud accounts.
The post Russian Cyberspies Targeting Cloud Infrastructure via Dormant Accounts appeared first on SecurityWeek.
SecurityWeek – Read More
HHS OCR Tells Congress it Needs More Funding for HIPAA Work
/in General NewsThe number of reported health data breaches and HIPAA complaints has been increasing, posing a significant challenge for the Department of Health and Human Services’ Office for Civil Rights to keep up with their workload.
Cyware News – Latest Cyber News – Read More
Microsoft Releases PyRIT – A Red Teaming Tool for Generative AI
/in General NewsThe tool can be used to assess the robustness of large language model (LLM) endpoints against various harm categories, such as fabrication, misuse, prohibited content, security harms, and privacy harms.
Cyware News – Latest Cyber News – Read More
CISA, EPA, FBI Publish Top Cyber Steps for Water System Operators
/in General NewsWater and wastewater systems need to enhance their cybersecurity measures to protect against potential cyberattacks due to vulnerabilities in their operational technology (OT) and information technology (IT) systems.
Cyware News – Latest Cyber News – Read More
How a Right-Wing Controversy Could Sabotage US Election Security
/in General NewsRepublicans who run elections are split over whether to keep working with the Cybersecurity and Infrastructure Security Agency to fight hackers, online falsehoods, and polling-place threats.
Security Latest – Read More
LockBit Ransomware Operation Relaunches Dark Web Leak Site
/in General NewsThe Russian-speaking ransomware group LockBit has announced its return to hacking after a law enforcement operation, Operation Cronos, targeted the group. The group’s leader, LockBitSupp, has vowed to continue hacking despite the takedown.
Cyware News – Latest Cyber News – Read More
Hackers Leak 2.5 Million Private Plane Owners’ Data Linked to LA International Airport Breach
/in General NewsIntelBroker successfully breached the Los Angeles International Airport’s CRM system, obtaining 2.5 million sensitive records, highlighting the critical need for organizations to strengthen cybersecurity measures against skilled hackers.
Cyware News – Latest Cyber News – Read More
Cybersecurity Fears Drive a Return to On-Premise Infrastructure From Cloud Computing
/in General NewsAccording to Citrix, 42% of organizations surveyed in the US are considering or already have moved at least half of their cloud-based workloads back to on-premises infrastructures, a phenomenon known as cloud repatriation.
Cyware News – Latest Cyber News – Read More