BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
- Uro - Declutters Url Lists For Crawling/Pentesting
- Wshlient - A Simple Tool To Interact With Web Shells And Command Injection Vulnerabilities
- Pulsegram - Integrated Keylogger With Telegram
Exploit DB
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
- [webapps] Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR)
- [webapps] Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF)
- [local] Daikin Security Gateway 14 - Remote Password Reset
- [local] Microsoft Windows - XRM-MS File NTLM Information Disclosure Spoofing
- [local] Microsoft - NTLM Hash Disclosure Spoofing (library-ms)
- [local] ZTE ZXV10 H201L - RCE via authentication bypass
- [local] unzip-stream 0.3.1 - Arbitrary File Write
- [remote] OpenSSH server (sshd) 9.8p1 - Race Condition
- [local] tar-fs 3.0.0 - Arbitrary File Write/Overwrite
Russian Hackers Hit Mail Servers in Europe for Political and Military Intel
/in General NewsBy Deeba Ahmed
Email servers compromised in 80 organizations as Russian-linked TAG-70 group targets European governments.
This is a post from HackRead.com Read the original post: Russian Hackers Hit Mail Servers in Europe for Political and Military Intel
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
New Google Chrome Feature Blocks Attacks Against Home Networks
/in General NewsGoogle is testing a new feature called “Private Network Access protections” in Chrome 123 to prevent malicious websites from attacking devices and services on a user’s private network.
Cyware News – Latest Cyber News – Read More
Gmail & Yahoo DMARC Rollout: When Cyber Compliance Gives a Competitive Edge
/in General NewsDMARC compliance offers businesses a competitive advantage through improved email deliverability and enhanced security posture, leading to better engagement rates and revenue growth.
Cyware News – Latest Cyber News – Read More
NSO Group Adds ‘MMS Fingerprinting’ Zero-Click Attack to Spyware Arsenal
/in General NewsThe purveyor of the infamous Pegasus mobile spyware now has a new method for obtaining critical information from target iPhones and other mobile devices.
darkreading – Read More
Ukrainian Raccoon Infostealer Operator Extradited to US
/in General NewsAlleged Raccoon Infostealer operator Mark Sokolovsky is awaiting trial in the US, after being extradited from the Netherlands.
The post Ukrainian Raccoon Infostealer Operator Extradited to US appeared first on SecurityWeek.
SecurityWeek – Read More
Exploring the Phenomenal Rise of Ethereum as a Digital Asset
/in General NewsBy Uzair Amir
In this exploration, we delve into the multifaceted layers of Ethereum’s meteoric rise, dissecting the technological breakthroughs, the…
This is a post from HackRead.com Read the original post: Exploring the Phenomenal Rise of Ethereum as a Digital Asset
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Q&A: The Cybersecurity Training Gap in Industrial Networks
/in General NewsCyberattacks and threats increasingly are honed in on ICS/OT networks, but security training for operators of these critical infrastructure environments is perilously scarce.
darkreading – Read More
RCE Vulnerabilities Fixed in Solarwinds Enterprise Solutions
/in General NewsSolarWinds has patched critical vulnerabilities in its Access Rights Manager (ARM) and (Orion) Platform that could allow attackers to execute code, emphasizing the importance of promptly updating to the fixed versions.
Cyware News – Latest Cyber News – Read More
Massive Utility Scam Campaign Spreads via Online Ads
/in General NewsScammers create multiple fraudulent domains and use scare tactics to pressure victims into making hasty decisions, such as disclosing personal details or making immediate payments.
Cyware News – Latest Cyber News – Read More
Russian-Linked Hackers Target 80+ Organizations via Roundcube Flaws
/in General NewsThreat actors operating with interests aligned to Belarus and Russia have been linked to a new cyber espionage campaign that likely exploited cross-site scripting (XSS) vulnerabilities in Roundcube webmail servers to target over 80 organizations.
These entities are primarily located in Georgia, Poland, and Ukraine, according to Recorded Future, which attributed the intrusion set to a threat
The Hacker News – Read More