BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- CentralizedFirewall - Provides A Firewall Manager API Designed To Centralize And Streamline The Management Of Firewall Configurations
- Maryam - Open-source Intelligence(OSINT) Framework
- TruffleHog Explorer - A User-Friendly Web-Based Tool To Visualize And Analyze Data Extracted Using TruffleHog
- PANO - Advanced OSINT Investigation Platform Combining Graph Visualization, Timeline Analysis, And AI Assistance To Uncover Hidden Connections In Data
- Wappalyzer-Next - Python library that uses Wappalyzer extension (and its fingerprints) to detect technologies
- Telegram-Checker - A Python Tool For Checking Telegram Accounts Via Phone Numbers Or Usernames
- Torward - An Improved Version Based On The Torghost-Gn And Darktor Scripts, Designed To Enhance Anonymity On The Internet
- Instagram-Brute-Force-2024 - Instagram Brute Force 2024 Compatible With Python 3.13 / X64 Bit / Only Chrome Browser
- QuickResponseC2 - A Command & Control Server That Leverages QR Codes To Send Commands And Receive Results From Remote Systems
- Telegram-Scraper - A Powerful Python Script That Allows You To Scrape Messages And Media From Telegram Channels Using The Telethon Library
Exploit DB
- [webapps] FoxCMS 1.2.5 - Remote Code Execution (RCE)
- [webapps] Drupal 11.x-dev - Full Path Disclosure
- [webapps] Apache Commons Text 1.10.0 - Remote Code Execution
- [webapps] Hunk Companion Plugin 1.9.0 - Unauthenticated Plugin Installation
- [webapps] Tatsu 3.3.11 - Unauthenticated RCE
- [remote] Langflow 1.3.0 - Remote Code Execution (RCE)
- [webapps] UJCMS 9.6.3 - User Enumeration via IDOR
- [webapps] Inventio Lite 4 - SQL Injection
- [webapps] KiviCare Clinic & Patient Management System (EHR) 3.6.4 - Unauthenticated SQL Injection
- [hardware] ABB Cylon Aspect 3.08.02 (deployStart.php) - Unauthenticated Command Execution
Microsoft Busts Hackers Selling Illegal Azure AI Access
/in General NewsLLMjacking operation leveraged illicit access GenAI services to produce explicit celebrity images and other harmful content, Microsoft’s digital crimes unit says.
darkreading – Read More
Over 350 High-Profile Websites Hit by 360XSS Attack
/in General News360XSS campaign exploits Krpano XSS to hijack search results & distribute spam ads on 350+ sites, including government,…
Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – Read More
Amnesty Finds Cellebrite’s Zero-Day Used to Unlock Serbian Activist’s Android Phone
/in General NewsA 23-year-old Serbian youth activist had their Android phone targeted by a zero-day exploit developed by Cellebrite to unlock the device, according to a new report from Amnesty International.
“The Android phone of one student protester was exploited and unlocked by a sophisticated zero-day exploit chain targeting Android USB drivers, developed by Cellebrite,” the international non-governmental
The Hacker News – Read More
The biggest data breaches of 2025 — so far
/in General NewsSchool student records. Federal government data. Health records and more. Expect an unprecedented year for data breaches.
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More
Top 10 Most Probable Ways a Company Can Be Hacked
/in General NewsHow to win the battle with root cause analysis and a data-driven approach.
darkreading – Read More
Global crackdown on AI-generated child sexual abuse material leads to 25 arrests
/in General News“Operation Cumberland,” led by Danish law enforcement, included the arrests of more than two dozen suspected members of a group distributing sexual images of minors generated by artificial intelligence.
The Record from Recorded Future News – Read More
Belgium investigating alleged cyberattack on intelligence agency by China-linked hackers
/in General NewsThe hackers reportedly exploited a flaw in US cybersecurity firm Barracuda’s software to access VSSE’s email server
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More
In Other News: Krispy Kreme Breach Cost, Pwn2Own Berlin, Disney Hack Story
/in General NewsNoteworthy stories that might have slipped under the radar: Krispy Kreme data breach costs $11M, Pwn2Own moves to Berlin, the story of the 2024 Disney hack.
The post In Other News: Krispy Kreme Breach Cost, Pwn2Own Berlin, Disney Hack Story appeared first on SecurityWeek.
SecurityWeek – Read More
Hacker behind over 90 high-profile data leaks worldwide arrested in Thailand
/in General NewsAuthorities said they arrested a 39-year-old in Bangkok who was the hacker responsible for dozens of high-profile extortion cases.
The Record from Recorded Future News – Read More
Vo1d Botnet Evolves as It Ensnares 1.6 Million Android TV Boxes
/in General NewsThe Vo1d botnet is now powered by 1.6 million Android TV devices, up from 1.3 million half a year ago.
The post Vo1d Botnet Evolves as It Ensnares 1.6 Million Android TV Boxes appeared first on SecurityWeek.
SecurityWeek – Read More