BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [local] TightVNC 2.8.83 - Control Pipe Manipulation
- [remote] ProSSHD 1.2 20090726 - Denial of Service (DoS)
- [webapps] Laravel Pulse 1.3.1 - Arbitrary Code Injection
- [local] Microsoft Windows 11 Version 24H2 Cross Device Service - Elevation of Privilege
- [remote] ABB Cylon Aspect 3.08.04 DeploySource - Remote Code Execution (RCE)
- [remote] Grandstream GSD3710 1.0.11.13 - Stack Overflow
- [webapps] CloudClassroom PHP Project 1.0 - SQL Injection
- [remote] Microsoft Windows Server 2025 JScript Engine - Remote Code Execution (RCE)
- [local] macOS LaunchDaemon iOS 17.2 - Privilege Escalation
- [remote] Apache Tomcat 10.1.39 - Denial of Service (DoS)
Alpha Ransomware Emerges From NetWalker Ashes
/in General NewsThe Alpha ransomware operation appears to be linked to the previously inactive NetWalker ransomware, suggesting a potential revival or acquisition of the original payload.
Cyware News – Latest Cyber News – Read More
CISA Warns of Akira Ransomware Exploiting Cisco ASA/FTD Vulnerability
/in General NewsThe information disclosure vulnerability, known as CVE-2020-3259, is being exploited by the Akira ransomware group to compromise susceptible Cisco Anyconnect SSL VPN appliances.
Cyware News – Latest Cyber News – Read More
North Korean Hackers Now Launder Stolen Crypto via YoMix Tumbler
/in General NewsYoMix saw a significant increase in funds in 2023, with about one-third of inflows originating from wallets associated with crypto hacks, demonstrating the adaptability of sophisticated threat actors.
Cyware News – Latest Cyber News – Read More
What Using Security to Regulate AI Chips Could Look Like
/in General NewsAn exploratory research proposal is recommending regulation of AI chips and stronger governance measures to keep up with the rapid technical innovations in artificial intelligence.
darkreading – Read More
CISO Corner: CIO Convergence, 10 Critical Security Metrics, & Ivanti Fallout
/in General NewsAlso in this issue: Mideast investment, new FCC breach notification rules, and how Dark Reading readers use GenAI tools in their cybersecurity apparatus.
darkreading – Read More
SpaceX Launched Military Satellites Designed to Track Hypersonic Missiles
/in General NewsThe prototype satellites hitched a ride on a Falcon 9 rocket.
Security Latest – Read More
OpenAI’s Sora Generates Photorealistic Videos
/in General NewsSora is in red teamers’ and selected artists’ hands for now, as OpenAI tries to prevent AI video from being used for misinformation or offensive content.
Security | TechRepublic – Read More
Leak of Russian ‘Threat’ Part of a Bid to Kill US Surveillance Reform, Sources Say
/in General NewsA surprise disclosure of a national security threat by the House Intelligence chair was part of an effort to block legislation that aimed to limit cops and spies from buying Americans’ private data.
Security Latest – Read More
SpyNote Android Spyware Poses as Legit Crypto Wallets, Steals Funds
/in General NewsBy Deeba Ahmed
From Banking Apps to Crypto Wallets: SpyNote Malware Evolves for Financial Gain.
This is a post from HackRead.com Read the original post: SpyNote Android Spyware Poses as Legit Crypto Wallets, Steals Funds
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Washington County Pays $350,000 Ransom After Cyberattack
/in General NewsThe Washington County Board of Commissioners voted to pay a $350,000 ransom to Russian cybercriminals after a cyberattack shut down county services. The decision was made in an emergency meeting due to the deadline set by the hackers.
Cyware News – Latest Cyber News – Read More