BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover
- [remote] Microsoft PowerPoint 2019 - Remote Code Execution (RCE)
- [remote] ScriptCase 9.12.006 (23) - Remote Command Execution (RCE)
- [local] Sudo chroot 1.9.17 - Local Privilege Escalation
- [local] Sudo 1.9.17 Host Option - Elevation of Privilege
- [local] Microsoft Defender for Endpoint (MDE) - Elevation of Privilege
- [webapps] Discourse 3.2.x - Anonymous Cache Poisoning
- [remote] Microsoft Outlook - Remote Code Execution (RCE)
- [remote] Microsoft SharePoint 2019 - NTLM Authentication
- [remote] Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
US Government on High Alert as Russian Hackers Steal Critical Correspondence From Microsoft
/in General NewsThe US government says Midnight Blizzard’s compromise of Microsoft corporate email accounts “presents a grave and unacceptable risk to federal agencies.”
The post US Government on High Alert as Russian Hackers Steal Critical Correspondence From Microsoft appeared first on SecurityWeek.
SecurityWeek – Read More
Apple Warns Users in 150 Countries of Mercenary Spyware Attacks
/in General NewsIn new threat notification information, Apple singled out Pegasus vendor NSO Group as a culprit in mercenary spyware attacks.
darkreading – Read More
Expired Redis Service Abused to Use Metasploit Meterpreter Maliciously
/in General NewsAttackers have compromised an 8-year-old version of the cloud platform to distribute various malware that can take over infected systems.
darkreading – Read More
Zscaler to Acquire Network Segmentation Tech Startup Airgap Networks
/in General NewsZscaler announces plans to acquire Airgap Networks, a venture-backed startup selling network segmentation and secure access technologies.
The post Zscaler to Acquire Network Segmentation Tech Startup Airgap Networks appeared first on SecurityWeek.
SecurityWeek – Read More
Instagram plans to blur nudes DMed to teens, hoping to fight sextortion scams
/in General NewsThe goal is not only to stop unwanted nudity in direct messages but to protect teenagers from scammers aiming to trick them into sharing their own nude photos.
Latest stories for ZDNET in Security – Read More
Data Access Platform PVML Launches With $8 Million in Funding
/in General NewsTel Aviv startup banks seed funding for technology to help organizations connect, secure, and provide access to multiple data sources.
The post Data Access Platform PVML Launches With $8 Million in Funding appeared first on SecurityWeek.
SecurityWeek – Read More
Sisense Data Breach Triggers CISA Alert and Urgent Calls for Credential Resets
/in General NewsThe US government issues a red-alert for what appears to be a massive supply chain breach at Sisense, a company that sells big-data analytics tools.
The post Sisense Data Breach Triggers CISA Alert and Urgent Calls for Credential Resets appeared first on SecurityWeek.
SecurityWeek – Read More
X Fixes URL Blunder That Could Enable Social Media Phishing
/in General NewsUsers started noticing on Monday that X’s programmers implemented a rule on its iOS app that auto-changed Twitter.com links that appeared in Xeets (tweets) to X.com links.
Cyware News – Latest Cyber News – Read More
The Best Personal Safety Devices, Apps, and Wearables (2024)
/in General NewsYour smartphone or wearable could help you out in a truly dangerous situation. Here are some options to consider.
Security Latest – Read More
Simbian Emerges From Stealth With $10 Million to Build Autonomous AI-Based Security Platform
/in General NewsSimbian aims to build a fully autonomous security platform that lets humans make the strategic decisions while AI implements those decisions.
The post Simbian Emerges From Stealth With $10 Million to Build Autonomous AI-Based Security Platform appeared first on SecurityWeek.
SecurityWeek – Read More