BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Moodle 4.4.0 - Authenticated Remote Code Execution
- [remote] Microsoft SharePoint 2019 - NTLM Authentication
- [remote] gogs 0.13.0 - Remote Code Execution (RCE)
- [remote] Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
- [remote] OneTrust SDK 6.33.0 - Denial Of Service (DoS)
- [remote] PX4 Military UAV Autopilot 1.12.3 - Denial of Service (DoS)
- [webapps] Pterodactyl Panel 1.11.11 - Remote Code Execution (RCE)
- [remote] freeSSHd 1.0.9 - Denial of Service (DoS)
- [remote] McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information
- [remote] Microsoft Excel 2024 Use after free - Remote Code Execution (RCE)
What your tools miss at 2:13 AM: How gen AI attack chains exploit telemetry lag – Part 1
/in General NewsExplore a strategic 2025 roadmap for cybersecurity leaders to tackle gen AI, insider risks, and team burnout with actionable guidance.Read More
Security News | VentureBeat – Read More
LockBit Ransomware Gang Hacked, Operations Data Leaked
/in General NewsExposed data from LockBit’s affiliate panel includes Bitcoin addresses, private chats with victim organizations, and user information such as credentials.
darkreading – Read More
Cyber Then & Now: Inside a 2-Decade Industry Evolution
/in General NewsOn Dark Reading’s 19-year anniversary, Editor-in-Chief Kelly Jackson Higgins stops by Informa TechTarget’s RSAC 2025 Broadcast Alley studio to discuss how things have changed since the early days of breaking Windows and browsers, lingering challenges, and what’s next beyond AI.
darkreading – Read More
German operation shuts down crypto mixer eXch, seizes millions in assets
/in General NewsInfrastructure and digital assets from the cryptocurrency mixer eXch — believed to be involved with the laundering of funds from the ByBit hack — are now in the hands of German authorities.
The Record from Recorded Future News – Read More
Three Russians, one Kazakhstani charged in takedown of Anyproxy and 5socks botnets
/in General NewsU.S. prosecutors charged four foreign nationals and said a law enforcement operation seized internet domains associated with two powerful botnets.
The Record from Recorded Future News – Read More
Hackers hijack Japanese financial accounts to conduct nearly $2 billion in trades
/in General NewsJapanese finance regulators said that in April alone, nine securities firms reported 2,746 fraudulent transactions conducted through nearly 5,000 accounts that were breached by hackers.
The Record from Recorded Future News – Read More
FBI and Dutch police seize and shut down botnet of hacked routers
/in General NewsU.S. authorities indicted three Russians and one Kazakhstan national for hacking and selling access to a botnet made of vulnerable internet-connected devices.
Security News | TechCrunch – Read More
US Customs and Border Protection Plans to Photograph Everyone Exiting the US by Car
/in General NewsA CBP spokesperson tells WIRED that the agency plans to expand its program for real-time face recognition at the border, potentially aiding Trump administration efforts to track people who self-deport.
Security Latest – Read More
Commvault: Vulnerability Patch Works as Intended
/in General NewsThe security researcher who questioned the effectiveness of a patch for recently disclosed bug in Commvault Command Center did not test patched version, the company says.
darkreading – Read More
Insight Partners Data Breach: Bigger Impact Than Anticipated
/in General NewsThe investigation is ongoing, but the VC giant intends to inform affected customers on a rolling basis as more of the breach details come to light.
darkreading – Read More