BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Skyvern 0.1.85 - Remote Code Execution (RCE) via SSTI
- [remote] PCMan FTP Server 2.0.7 - Buffer Overflow
- [webapps] Litespeed Cache WordPress Plugin 6.3.0.1 - Privilege Escalation
- [local] Parrot and DJI variants Drone OSes - Kernel Panic Exploit
- [remote] Windows 11 SMB Client - Privilege Escalation & Remote Code Execution (RCE)
- [remote] AirKeyboard iOS App 1.0.5 - Remote Input Injection
- [webapps] PHP CGI Module 8.3.4 - Remote Code Execution (RCE)
- [remote] WebDAV Windows 10 - Remote Code Execution (RCE)
- [local] Microsoft Excel Use After Free - Local Code Execution
- [remote] Windows File Explorer Windows 10 Pro x64 - TAR Extraction
Expand your IT and cybersecurity skills with this $35 learning bundle
/in General NewsEnhance your career from home.
Latest stories for ZDNET in Security – Read More
FCC Approves Voluntary Cyber Trust Labels for Consumer IoT Products
/in General NewsHere’s what IoT device manufacturers need to know to earn a cybersecurity stamp of approval from the government.
darkreading – Read More
Nissan Confirms Data Breach Affected 100,000 Customers and Employees
/in General NewsBy Deeba Ahmed
The data breach is linked to a December 2023 cyberattack.
This is a post from HackRead.com Read the original post: Nissan Confirms Data Breach Affected 100,000 Customers and Employees
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Alabama Under DDoS Cyberattack by Russian-Backed Hacktivists
/in General NewsThe hacktivist group Anonymous Sudan claims credit for a cyberattack that disrupted Alabama state government earlier this week.
darkreading – Read More
Get 408 hours of cybersecurity training with this $60 bundle
/in General NewsSave hundreds on this comprehensive IT skills training package, with topics like CompTIA certifications, Azure, Cisco, Python, risk management, and more.
Latest stories for ZDNET in Security – Read More
TikTok Ban Raises Data Security, Control Questions
/in General NewsApproved by the House and moving on to the Senate, the potential ban points up the porousness of governmental control in the digital age.
darkreading – Read More
Threat Actors Leverage Document Publishing Sites for Ongoing Credential and Session Token Theft
/in General NewsThreat actors are exploiting legitimate digital document publishing (DDP) sites to host phishing lures, making it harder for traditional security controls to detect and block these attacks.
Cyware News – Latest Cyber News – Read More
French Unemployment Agency Data Breach Impacts 43 Million People
/in General NewsThe stolen data includes sensitive personal details such as full name, date of birth, social security number, and contact information, posing a significant risk of identity theft and phishing.
Cyware News – Latest Cyber News – Read More
Chrome’s Standard Safe Browsing Now Has Real-Time URL Protection
/in General NewsChrome’s standard Safe Browsing protections now provide real-time malicious site detection and Password Checkup on iOS now flags weak passwords.
The post Chrome’s Standard Safe Browsing Now Has Real-Time URL Protection appeared first on SecurityWeek.
SecurityWeek – Read More
The Effects of Law Enforcement Takedowns on the Ransomware Landscape
/in General NewsFollowing the disruption of the Qakbot botnet in August 2023, ransomware affiliates have transitioned to exploiting vulnerabilities as the primary method of delivering malware.
Cyware News – Latest Cyber News – Read More