BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
- Uro - Declutters Url Lists For Crawling/Pentesting
Exploit DB
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
- [webapps] Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF)
- [webapps] Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR)
- [local] Daikin Security Gateway 14 - Remote Password Reset
- [local] ZTE ZXV10 H201L - RCE via authentication bypass
Is Your Crypto Safe? XPhase Clipper Malware Steals Coins with a Click
/in General NewsThe malware is spread through deceptive websites impersonating legitimate cryptocurrency platforms, with a noticeable emphasis on targeting Indian cryptocurrency enthusiasts.
Cyware News – Latest Cyber News – Read More
MacOS Targeted by New Backdoor Linked to ALPHV Ransomware
/in General NewsMacOS data exfiltration malware poses as an update for Visual Studio code editor.
darkreading – Read More
Ransomware Groups Claim Hits on Hyundai Motor Europe and a California Union
/in General NewsThe unrelated cyberattacks both occurred in January.
darkreading – Read More
CISO Corner: DoD Regs, Neurodiverse Talent & Tel Aviv’s Light Rail
/in General NewsAlso in this issue: How the SEC’s reporting rules are being weaponized, quishing attacks plaguing execs, and tabletop exercises making a comeback.
darkreading – Read More
Shim vulnerability exposes most Linux systems to attack
/in General NewsThis low-level software is the glue that enables Linux to run on Secure Boot PCs, and it has a nasty problem.
Latest stories for ZDNET in Security – Read More
Middle East Cybersecurity Teams Want More Budget
/in General NewsMeanwhile, cyber threats are spiking in the region.
darkreading – Read More
Deepfake Democracy: AI Technology Complicates Election Security
/in General NewsWhile cybersecurity risks to the democratic process have been pervasive for many years now, the prevalence of AI now represents new threats.
darkreading – Read More
Bitwarden Free vs. Premium: Which Plan Is Best For You?
/in General NewsLearn about the differences between Bitwarden’s Free and Premium versions and decide which one is the right fit for your password management needs.
Security | TechRepublic – Read More
Lawmakers Want Clampdown on American VCs Funding Chinese Tech Companies
/in General NewsA congressional investigation finds that US venture capital firms invested billions in Chinese technology companies in semiconductor, AI and cybersecurity, sectors that are a threat to national security.
The post Lawmakers Want Clampdown on American VCs Funding Chinese Tech Companies appeared first on SecurityWeek.
SecurityWeek – Read More
Kenya Detected Over 1B Cyber Threats in Q4
/in General NewsOfficials attribute the massive volume to the nation’s enhanced cyber threat monitoring capabilities.
darkreading – Read More