BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover
- [remote] Microsoft PowerPoint 2019 - Remote Code Execution (RCE)
- [remote] ScriptCase 9.12.006 (23) - Remote Command Execution (RCE)
- [local] Sudo chroot 1.9.17 - Local Privilege Escalation
- [local] Sudo 1.9.17 Host Option - Elevation of Privilege
- [local] Microsoft Defender for Endpoint (MDE) - Elevation of Privilege
- [webapps] Discourse 3.2.x - Anonymous Cache Poisoning
- [remote] Microsoft Outlook - Remote Code Execution (RCE)
- [remote] Microsoft SharePoint 2019 - NTLM Authentication
- [remote] Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
Unlocking the Power of Portfolio Analysis – A Comprehensive Guide
/in General NewsBy Owais Sultan
In banking and business, you need to know how your investments are doing and what they are made…
This is a post from HackRead.com Read the original post: Unlocking the Power of Portfolio Analysis – A Comprehensive Guide
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Akira Ransomware Made Over $42 Million in One Year: Agencies
/in General NewsAkira ransomware has hit over 250 organizations worldwide and received over $42 million in ransom payments.
The post Akira Ransomware Made Over $42 Million in One Year: Agencies appeared first on SecurityWeek.
SecurityWeek – Read More
Hacking the Floodgates: US Dams Face Growing Cyber Threats
/in General NewsCould a hacker seize control of America’s dams, unleashing floods and chaos across vulnerable communities? Cybersecurity analysts and leading lawmakers warn it’s possible.
Cyware News – Latest Cyber News – Read More
Trust in Cyber Takes a Knock as CNI Budgets Flatline
/in General NewsTrust in cybersecurity tools has become one of the biggest challenges facing critical national infrastructure (CNI) providers as sophisticated nation-state attacks proliferate, according to a new report from Bridewell.
Cyware News – Latest Cyber News – Read More
CISA, FBI, Europol Say Akira Ransomware Raked in $42 Million From Over 250 Victims
/in General NewsAccording to a joint advisory from the FBI, CISA, Europol’s EC3, and the Netherlands’ NCSC-NL, the Akira ransomware operation has breached the networks of over 250 organizations and raked in roughly $42 million in ransom payments.
Cyware News – Latest Cyber News – Read More
Ransomware Victims Who Pay a Ransom Drops to Record Low
/in General NewsThat downward trend comes thanks to “enterprises large and small” being “increasingly able to withstand an encryption attack, and restore their operations without the need for a threat actor decryption key,” Coveware said.
Cyware News – Latest Cyber News – Read More
Google Ad Impersonates Whales Market to Push Wallet Drainer Malware
/in General NewsA legitimate-looking Google Search advertisement for the crypto trading platform ‘Whales Market’ redirects visitors to a wallet-draining phishing site that steals all of your assets.
Cyware News – Latest Cyber News – Read More
Quishing Attacks Jump Tenfold, Attachment Payloads Halve
/in General NewsThe figures come from the latest Egress report, which also suggests a notable decrease in attachment-based payloads, which halved from 72.7% to 35.7% over the same period.
Cyware News – Latest Cyber News – Read More
Cybercriminals Pose as LastPass Staff to Hack Password Vaults
/in General NewsThe attacker combines multiple social engineering techniques that involve contacting the potential victim (voice phishing) and pretending to be a LastPass employee trying to help with securing the account following unauthorized access.
Cyware News – Latest Cyber News – Read More
92% of Enterprises Unprepared for AI Security Challenges
/in General NewsMost industries continue to run almost two or more months behind in patching software vulnerabilities, endpoints remain vulnerable to threats, and most enterprise PCs must be replaced to support AI-based technologies, according to a new report.
Cyware News – Latest Cyber News – Read More