BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Moodle 4.4.0 - Authenticated Remote Code Execution
- [remote] Microsoft SharePoint 2019 - NTLM Authentication
- [remote] gogs 0.13.0 - Remote Code Execution (RCE)
- [remote] Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
- [webapps] Sitecore 10.4 - Remote Code Execution (RCE)
- [remote] PX4 Military UAV Autopilot 1.12.3 - Denial of Service (DoS)
- [webapps] Pterodactyl Panel 1.11.11 - Remote Code Execution (RCE)
- [remote] OneTrust SDK 6.33.0 - Denial Of Service (DoS)
- [remote] freeSSHd 1.0.9 - Denial of Service (DoS)
- [remote] McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information
SEXi Ransomware Desires VMware Hypervisors in Ongoing Campaign
/in General NewsA Babuk variant has been involved in at least four attacks on VMware EXSi servers in the last six weeks, in one case demanding $140 million from a Chilean data center company.
darkreading – Read More
Ivanti Pledges Security Overhaul the Day After 4 More Vulns Disclosed
/in General NewsSo far this year, Ivanti has disclosed a total of 11 flaws — many of them critical — in its remote access products.
darkreading – Read More
Malicious Latrodectus Downloader Picks Up Where QBot Left Off
/in General NewsInitial access brokers are using the new downloader malware, which emerged just after QBot’s 2023 disruption.
darkreading – Read More
Google survey: 63% of IT and security pros believe AI will improve corporate cybersecurity
/in General NewsMeanwhile, 36% were either neutral or disagreed that AI would play an important role in improving their cybersecurity.
Latest stories for ZDNET in Security – Read More
Action1 Unveils ‘School Defense’ Program To Help Small Educational Institutions Thwart Cyberattacks
/in General NewsPost Content
darkreading – Read More
New Latrodectus Downloader Malware Linked to IcedID and Qbot Creators
/in General NewsBy Waqas
Another day, another malware threat!
This is a post from HackRead.com Read the original post: New Latrodectus Downloader Malware Linked to IcedID and Qbot Creators
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Thousands of Australian Businesses Targeted With ‘Reliable’ Agent Tesla RAT
/in General NewsLatest campaign underscores wide-ranging functionality and staying power of a decade-old piece of information-stealing malware.
darkreading – Read More
Ivanti CEO Vows Cybersecurity Makeover After Zero-Day Blitz
/in General NewsIvanti releases a carefully scripted YouTube video and an open letter from chief executive Jeff Abbott vowing to fix the entire security organization.
The post Ivanti CEO Vows Cybersecurity Makeover After Zero-Day Blitz appeared first on SecurityWeek.
SecurityWeek – Read More
5 Best Crypto Marketing Agencies for Web3 Security Brands in 2024
/in General NewsBy Uzair Amir
It seems each week brings news of another attack – millions drained from DeFi protocols, NFTs swiped, and…
This is a post from HackRead.com Read the original post: 5 Best Crypto Marketing Agencies for Web3 Security Brands in 2024
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Vietnam-Based Hackers Steal Financial Data Across Asia with Malware
/in General NewsA suspected Vietnamese-origin threat actor has been observed targeting victims in several Asian and Southeast Asian countries with malware designed to harvest valuable data since at least May 2023.
Cisco Talos is tracking the cluster under the name CoralRaider, describing it as financially motivated. Targets of the campaign include India, China, South Korea, Bangladesh, Pakistan, Indonesia,
The Hacker News – Read More