BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Discourse 3.2.x - Anonymous Cache Poisoning
- [remote] Microsoft PowerPoint 2019 - Remote Code Execution (RCE)
- [remote] ScriptCase 9.12.006 (23) - Remote Command Execution (RCE)
- [local] Sudo chroot 1.9.17 - Local Privilege Escalation
- [local] Sudo 1.9.17 Host Option - Elevation of Privilege
- [remote] Microsoft Outlook - Remote Code Execution (RCE)
- [webapps] Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover
- [local] Microsoft Defender for Endpoint (MDE) - Elevation of Privilege
- [remote] gogs 0.13.0 - Remote Code Execution (RCE)
- [remote] Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
New Spectre v2 Attack Impacts Linux Systems Running on Intel CPUs
/in General NewsResearchers have demonstrated the “first native Spectre v2 exploit” for a new speculative execution side-channel flaw that impacts Linux systems running on many modern Intel processors.
Cyware News – Latest Cyber News – Read More
Why MLBOMs Are Useful for Securing the AI/ML Supply Chain
/in General NewsA machine learning bill of materials (MLBOM) framework can bring transparency, auditability, control, and forensic insight into AI and ML supply chains.
darkreading – Read More
Inside AWS’s Crusade Against IP Spoofing and DDoS Attacks
/in General NewsSecurityWeek speaks to Tom Scholl, VP and distinguished engineer at AWS, on how the organization tackles IP Spoofing and DDoS attacks.
The post Inside AWS’s Crusade Against IP Spoofing and DDoS Attacks appeared first on SecurityWeek.
SecurityWeek – Read More
US Cyber Force Assisted Foreign Governments 22 Times in 2023
/in General NewsUSCYBERCOM’s Cyber National Mission Force participated in 22 foreign hunt forward operations in 2023.
The post US Cyber Force Assisted Foreign Governments 22 Times in 2023 appeared first on SecurityWeek.
SecurityWeek – Read More
Analyzing Bitcoin Price Trends and Crypto Scalping Methods
/in General NewsBy Uzair Amir
Are you interested in cryptocurrency trading but unsure where to start? Have you heard about crypto scalping but…
This is a post from HackRead.com Read the original post: Analyzing Bitcoin Price Trends and Crypto Scalping Methods
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
CISO Role Shows Significant Gains Amid Corporate Recognition of Cyber Risk
/in General NewsCISOs and other management-level cybersecurity executives are gaining more influence and importance as companies have begun to recognize the need for strong cyber governance and oversight, according to a report from Moody’s Ratings.
Cyware News – Latest Cyber News – Read More
UK’s Attitude to Security Spotlit by Government Figures
/in General NewsThe report from the Department for Science, Innovation and Technology (DSIT), painted security as more of an afterthought for UK businesses, especially when considering the figures about how breaches are handled.
Cyware News – Latest Cyber News – Read More
Zambia Busts 77 People in China-Backed Cybercrime Operation
/in General NewsPhony call center company conducted online fraud and other Internet scams.
darkreading – Read More
Wiz Buys Startup Gem Security for $350M to Spot Cloud Issues
/in General NewsWiz purchased a cloud detection and response startup founded by a longtime Israeli Military Intelligence leader to address security operations and incident response use cases.
Cyware News – Latest Cyber News – Read More
Python’s PyPI Reveals Its Secrets
/in General NewsGitGuardian is famous for its annual State of Secrets Sprawl report. In their 2023 report, they found over 10 million exposed passwords, API keys, and other credentials exposed in public GitHub commits. The takeaways in their 2024 report did not just highlight 12.8 million new exposed secrets in GitHub, but a number in the popular Python package repository PyPI.
PyPI,
The Hacker News – Read More