BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
- Uro - Declutters Url Lists For Crawling/Pentesting
- Wshlient - A Simple Tool To Interact With Web Shells And Command Injection Vulnerabilities
- Pulsegram - Integrated Keylogger With Telegram
Exploit DB
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
- [webapps] Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR)
- [webapps] Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF)
- [local] Daikin Security Gateway 14 - Remote Password Reset
- [local] Microsoft Windows - XRM-MS File NTLM Information Disclosure Spoofing
- [local] Microsoft - NTLM Hash Disclosure Spoofing (library-ms)
- [local] ZTE ZXV10 H201L - RCE via authentication bypass
- [local] unzip-stream 0.3.1 - Arbitrary File Write
- [remote] OpenSSH server (sshd) 9.8p1 - Race Condition
- [local] tar-fs 3.0.0 - Arbitrary File Write/Overwrite
Russian APT ‘Winter Vivern’ Targets European Government, Military
/in General NewsTAG-70’s sophisticated espionage campaign targeted a range of geopolitical targets, suggesting a highly capable and well-funded state-backed threat actor.
darkreading – Read More
Alpha Ransomware Emerges From NetWalker Ashes
/in General NewsThe Alpha ransomware operation appears to be linked to the previously inactive NetWalker ransomware, suggesting a potential revival or acquisition of the original payload.
Cyware News – Latest Cyber News – Read More
CISA Warns of Akira Ransomware Exploiting Cisco ASA/FTD Vulnerability
/in General NewsThe information disclosure vulnerability, known as CVE-2020-3259, is being exploited by the Akira ransomware group to compromise susceptible Cisco Anyconnect SSL VPN appliances.
Cyware News – Latest Cyber News – Read More
North Korean Hackers Now Launder Stolen Crypto via YoMix Tumbler
/in General NewsYoMix saw a significant increase in funds in 2023, with about one-third of inflows originating from wallets associated with crypto hacks, demonstrating the adaptability of sophisticated threat actors.
Cyware News – Latest Cyber News – Read More
What Using Security to Regulate AI Chips Could Look Like
/in General NewsAn exploratory research proposal is recommending regulation of AI chips and stronger governance measures to keep up with the rapid technical innovations in artificial intelligence.
darkreading – Read More
CISO Corner: CIO Convergence, 10 Critical Security Metrics, & Ivanti Fallout
/in General NewsAlso in this issue: Mideast investment, new FCC breach notification rules, and how Dark Reading readers use GenAI tools in their cybersecurity apparatus.
darkreading – Read More
SpaceX Launched Military Satellites Designed to Track Hypersonic Missiles
/in General NewsThe prototype satellites hitched a ride on a Falcon 9 rocket.
Security Latest – Read More
OpenAI’s Sora Generates Photorealistic Videos
/in General NewsSora is in red teamers’ and selected artists’ hands for now, as OpenAI tries to prevent AI video from being used for misinformation or offensive content.
Security | TechRepublic – Read More
Leak of Russian ‘Threat’ Part of a Bid to Kill US Surveillance Reform, Sources Say
/in General NewsA surprise disclosure of a national security threat by the House Intelligence chair was part of an effort to block legislation that aimed to limit cops and spies from buying Americans’ private data.
Security Latest – Read More
SpyNote Android Spyware Poses as Legit Crypto Wallets, Steals Funds
/in General NewsBy Deeba Ahmed
From Banking Apps to Crypto Wallets: SpyNote Malware Evolves for Financial Gain.
This is a post from HackRead.com Read the original post: SpyNote Android Spyware Poses as Legit Crypto Wallets, Steals Funds
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More