BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Wappalyzer-Next - Python library that uses Wappalyzer extension (and its fingerprints) to detect technologies
- Telegram-Checker - A Python Tool For Checking Telegram Accounts Via Phone Numbers Or Usernames
- Torward - An Improved Version Based On The Torghost-Gn And Darktor Scripts, Designed To Enhance Anonymity On The Internet
- Instagram-Brute-Force-2024 - Instagram Brute Force 2024 Compatible With Python 3.13 / X64 Bit / Only Chrome Browser
- QuickResponseC2 - A Command & Control Server That Leverages QR Codes To Send Commands And Receive Results From Remote Systems
- Telegram-Scraper - A Powerful Python Script That Allows You To Scrape Messages And Media From Telegram Channels Using The Telethon Library
- Moukthar - Android Remote Administration Tool
- Lobo Guará - Cyber Threat Intelligence Platform
- Telegram-Story-Scraper - A Python Script That Allows You To Automatically Scrape And Download Stories From Your Telegram Friends
- gitGRAB - This Tool Is Designed To Interact With The GitHub API And Retrieve Specific User Details, Repository Information, And Commit Emails For A Given User
Exploit DB
- [remote] TP-Link VN020 F3v(T) TT_V6.2.1021 - Denial Of Service (DOS)
- [remote] TP-Link VN020 F3v(T) TT_V6.2.1021 - Buffer Overflow Memory Corruption
- [remote] WebMethods Integration Server 10.15.0.0000-0092 - Improper Access on Login Page
- [hardware] ABB Cylon Aspect 4.00.00 (factorySaved.php) - Unauthenticated XSS
- [webapps] ProConf 6.0 - Insecure Direct Object Reference (IDOR)
- [webapps] phpMyFAQ 3.2.10 - Unintended File Download Triggered by Embedded Frames
- [hardware] ABB Cylon Aspect 3.08.03 (webServerDeviceLabelUpdate.php) - File Write DoS
- [hardware] ABB Cylon Aspect 4.00.00 (factorySetSerialNum.php) - Remote Code Execution
- [webapps] Teedy 1.11 - Account Takeover via Stored Cross-Site Scripting (XSS)
- [webapps] phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS)
Why Red Teams Can’t Answer Defenders’ Most Important Questions
/in General NewsRed-team assessments aren’t very good at validating that defenses are working, so defenders don’t have a realistic sense of how strong their defenses are.
darkreading – Read More
Crypto Wallet Founder Loses $125,000 to Fake Airdrop Website
/in General NewsBill Lou, co-founder of Nest Wallet, a cryptocurrency wallet startup, lost $125,000 to a crypto scam. He fell victim to a phishing attack after visiting a fraudulent website that appeared to be a legitimate crypto airdrop platform.
Cyware News – Latest Cyber News – Read More
New ‘SpectralBlur’ macOS Backdoor Linked to North Korea
/in General NewsSpectralBlur is a new macOS backdoor that shows similarities with North Korean hacking group’s KandyKorn malware.
The post New ‘SpectralBlur’ macOS Backdoor Linked to North Korea appeared first on SecurityWeek.
SecurityWeek – Read More
US Says 19 People Charged Following 2019 Takedown of xDedic Cybercrime Marketplace
/in General NewsJustice Department says 19 people involved in the xDedic cybercrime marketplace have been charged to date following its 2019 takedown.
The post US Says 19 People Charged Following 2019 Takedown of xDedic Cybercrime Marketplace appeared first on SecurityWeek.
SecurityWeek – Read More
Orrick, Herrington & Sutcliffe Data Breach Exposes Information of Over 600,000 Individuals
/in General NewsThe stolen data included a wide range of information such as names, dates of birth, addresses, government-issued identification numbers, medical treatment details, insurance claims information, and credit/debit card numbers.
Cyware News – Latest Cyber News – Read More
Security Vulnerabilities Addressed in Firefox 121
/in General NewsMozilla’s latest release of Firefox 121 addresses critical vulnerabilities, including a heap buffer overflow bug and a vulnerability in rendering Network Security Services (NSS) NIST curves.
Cyware News – Latest Cyber News – Read More
In Airtags Stalking Lawsuit, Federal Judge Says Apple Likely Negligent
/in General NewsA federal judge in San Francisco has indicated that he is leaning towards denying Apple’s motion to dismiss a class action lawsuit brought by stalking victims who claim that the company’s AirTags tracking product enabled their abusers.
Cyware News – Latest Cyber News – Read More
Airbus Looks to Acquire Atos Cybersecurity Unit for Nearly $2 Billion
/in General NewsOne of the world’s largest aerospace companies is eyeing a cybersecurity upgrade.
darkreading – Read More
Threat Group Using Rare Data Transfer Tactic in New RemcosRAT Campaign
/in General NewsUNC-0050 is targeting government agencies in Ukraine in what appears to be a politically motivated intelligence-gathering operation.
darkreading – Read More
C3 Complete Acquires Information Security Business Unit of Compliance Solutions Inc.
/in General NewsPost Content
darkreading – Read More