BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover
- [remote] Microsoft PowerPoint 2019 - Remote Code Execution (RCE)
- [remote] ScriptCase 9.12.006 (23) - Remote Command Execution (RCE)
- [local] Sudo chroot 1.9.17 - Local Privilege Escalation
- [local] Sudo 1.9.17 Host Option - Elevation of Privilege
- [local] Microsoft Defender for Endpoint (MDE) - Elevation of Privilege
- [webapps] Discourse 3.2.x - Anonymous Cache Poisoning
- [remote] Microsoft Outlook - Remote Code Execution (RCE)
- [remote] Microsoft SharePoint 2019 - NTLM Authentication
- [remote] Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
Red Canary Announces Full Coverage of All Major Cloud Providers
/in General NewsPost Content
darkreading – Read More
Expel Releases Updated Toolkit in Response to NIST 2.0
/in General NewsPost Content
darkreading – Read More
Nozomi Networks Secures $100M Investment to Defend Critical Infrastructure
/in General NewsPost Content
darkreading – Read More
Malicious Ads Targeting Chinese Users with Fake Notepad++ and VNote Installers
/in General NewsChinese users looking for legitimate software such as Notepad++ and VNote on search engines like Baidu are being targeted with malicious ads and bogus links to distribute trojanized versions of the software and ultimately deploy Geacon, a Golang-based implementation of Cobalt Strike.
“The malicious site found in the notepad++ search is distributed through an advertisement block,” Kaspersky
The Hacker News – Read More
Expand your IT and cybersecurity skills with this $35 learning bundle
/in General NewsEnhance your career from home.
Latest stories for ZDNET in Security – Read More
FCC Approves Voluntary Cyber Trust Labels for Consumer IoT Products
/in General NewsHere’s what IoT device manufacturers need to know to earn a cybersecurity stamp of approval from the government.
darkreading – Read More
Nissan Confirms Data Breach Affected 100,000 Customers and Employees
/in General NewsBy Deeba Ahmed
The data breach is linked to a December 2023 cyberattack.
This is a post from HackRead.com Read the original post: Nissan Confirms Data Breach Affected 100,000 Customers and Employees
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Alabama Under DDoS Cyberattack by Russian-Backed Hacktivists
/in General NewsThe hacktivist group Anonymous Sudan claims credit for a cyberattack that disrupted Alabama state government earlier this week.
darkreading – Read More
Get 408 hours of cybersecurity training with this $60 bundle
/in General NewsSave hundreds on this comprehensive IT skills training package, with topics like CompTIA certifications, Azure, Cisco, Python, risk management, and more.
Latest stories for ZDNET in Security – Read More
TikTok Ban Raises Data Security, Control Questions
/in General NewsApproved by the House and moving on to the Senate, the potential ban points up the porousness of governmental control in the digital age.
darkreading – Read More