BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [local] TP-Link VN020 F3v(T) TT_V6.2.1021) - DHCP Stack Buffer Overflow
- [webapps] WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation
- [webapps] Kentico Xperience 13.0.178 - Cross Site Scripting (XSS)
- [local] RDPGuard 9.9.9 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
How 2023 Broke Long-Running Records for Health Data Breaches
/in General NewsThe healthcare sector experienced a record-breaking number of major data breaches in 2023, affecting over 135 million individuals, highlighting the urgent need for enhanced cybersecurity measures.
Cyware News – Latest Cyber News – Read More
Exposed Docker APIs Under Attack in ‘Commando Cat’ Cryptojacking Campaign
/in General NewsThe attackers use evasion techniques such as using memory-backed temporary file stores and Base64-encoded scripts to make forensics harder and eliminate competing miner processes on infected machines.
Cyware News – Latest Cyber News – Read More
Netherlands Fines Uber Over Data Protection
/in General NewsDutch regulators impose a 10 million euro ($10.8 million) fine on ride-hailing app Uber for lack of transparency in treating the personal data of its drivers.
The post Netherlands Fines Uber Over Data Protection appeared first on SecurityWeek.
SecurityWeek – Read More
White House Seeks Ideas on Boosting AI Privacy
/in General NewsThe Office of Management and Budget is soliciting feedback on how federal agencies should identify and mitigate privacy risks related to AI and commercially available information.
Cyware News – Latest Cyber News – Read More
Russian Spies Impersonating Western Researchers in Ongoing Hacking Campaign
/in General NewsThe hackers, believed to be state-sponsored, have successfully compromised researchers by using sophisticated techniques to solicit feedback on academic articles and harvest credentials through fake Google Drive links.
Cyware News – Latest Cyber News – Read More
Multiple Malware Used in Attacks Exploiting Ivanti VPn Flaws
/in General NewsThe attackers exploit known vulnerabilities to execute arbitrary commands and have been observed using various malware, including a custom web shell and open-source tools for post-exploitation activities.
Cyware News – Latest Cyber News – Read More
DarkGate Malware Delivered via Microsoft Teams
/in General NewsCyware News – Latest Cyber News – Read More
Albania’s Institute of Statistics Suffers Cyberattack, Some Systems Affected
/in General NewsAlbania’s Institute of Statistics (INSTAT) suffered a cyberattack which affected some of its systems.
The post Albania’s Institute of Statistics Suffers Cyberattack, Some Systems Affected appeared first on SecurityWeek.
SecurityWeek – Read More
Meet the UC Berkeley professor tracking election deepfakes
/in General NewsDeepfakes are being weaponized in politics. This professor is on a mission to catalog — and stop — AI-generated misinformation.Read More
Security News | VentureBeat – Read More
‘Commando Cat’ Is Second Campaign of the Year Targeting Docker
/in General NewsThe threat actor behind the campaign is still unknown, but it shares some similarities with other cyptojacking groups.
darkreading – Read More