BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Moodle 4.4.0 - Authenticated Remote Code Execution
- [remote] Microsoft SharePoint 2019 - NTLM Authentication
- [remote] gogs 0.13.0 - Remote Code Execution (RCE)
- [remote] Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
- [webapps] Sitecore 10.4 - Remote Code Execution (RCE)
- [remote] PX4 Military UAV Autopilot 1.12.3 - Denial of Service (DoS)
- [webapps] Pterodactyl Panel 1.11.11 - Remote Code Execution (RCE)
- [remote] OneTrust SDK 6.33.0 - Denial Of Service (DoS)
- [remote] freeSSHd 1.0.9 - Denial of Service (DoS)
- [remote] McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information
Top 3 Cybersecurity Tools to Protect Business Data
/in General NewsBy Uzair Amir
Discover the top three cybersecurity tools designed to safeguard your business data from online threats and breaches, ensuring secure data transfer.
This is a post from HackRead.com Read the original post: Top 3 Cybersecurity Tools to Protect Business Data
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Prudential Financial Data Breach Impacts 36,000
/in General NewsPrudential Financial says the names, addresses, and ID numbers of over 36,000 were stolen in a February data breach.
The post Prudential Financial Data Breach Impacts 36,000 appeared first on SecurityWeek.
SecurityWeek – Read More
Data Leak at Shopping Platform PandaBuy Impacts 1.3 Million Users
/in General News“The data was stolen by exploiting several critical vulnerabilities in the platform’s API and other bugs were identified allowing access to the internal service of the website,” the threat actor named ‘Sanggiero’ said.
Cyware News – Latest Cyber News – Read More
Heartbleed is 10 Years Old – Farewell Heartbleed, Hello QuantumBleed!
/in General NewsHeartbleed made most certificates vulnerable. The future problem is that quantum decryption will make all certificates and everything else using RSA encryption vulnerable to everyone.
The post Heartbleed is 10 Years Old – Farewell Heartbleed, Hello QuantumBleed! appeared first on SecurityWeek.
SecurityWeek – Read More
OWASP Data Breach Caused by Server Misconfiguration
/in General NewsThe OWASP Foundation says a wiki misconfiguration exposed resumes filed over a decade ago by aspiring members.
The post OWASP Data Breach Caused by Server Misconfiguration appeared first on SecurityWeek.
SecurityWeek – Read More
Advanced Cybersecurity Strategies Boost Shareholder Returns
/in General NewsCompanies demonstrating advanced cybersecurity performance generate a shareholder return that is 372% higher than their peers with basic cybersecurity performance, according to a new report from Diligent and Bitsight.
Cyware News – Latest Cyber News – Read More
AI Abuse and Misinformation Campaigns Threaten Financial Institutions
/in General NewsThough generative AI offers financial firms remarkable business and cybersecurity utility, cyber threats relating to GenAI in financial services are a consistent concern, according to FS-ISAC.
Cyware News – Latest Cyber News – Read More
Update: Prudential Insurance Says Data of 36,000 Exposed During February Cyberattack
/in General News“Through the investigation, we learned that the unauthorized third party gained access to our network on February 4, 2024, and removed a small percentage of personal information from our systems,” the breach notification letters said.
Cyware News – Latest Cyber News – Read More
Boat Dealer MarineMax Confirms Data Breach
/in General NewsMarineMax confirms suffering a data breach as a result of a recent ransomware attack, with the attackers claiming to have obtained 180,000 files.
The post Boat Dealer MarineMax Confirms Data Breach appeared first on SecurityWeek.
SecurityWeek – Read More
Skyflow Raises $30M in Extended Series B
/in General NewsSkyflow, a Palo Alto, CA-based data privacy vault company, raised $30M in Extended Series B funding. The round was led by Khosla Ventures with participation from Mouro Capital, Foundation Capital, and Canvas Ventures.
Cyware News – Latest Cyber News – Read More