BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [remote] Apache Tomcat 10.1.39 - Denial of Service (DoS)
- [remote] Grandstream GSD3710 1.0.11.13 - Stack Overflow
- [webapps] CloudClassroom PHP Project 1.0 - SQL Injection
- [remote] Microsoft Windows Server 2025 JScript Engine - Remote Code Execution (RCE)
- [remote] ABB Cylon Aspect 3.08.04 DeploySource - Remote Code Execution (RCE)
- [local] macOS LaunchDaemon iOS 17.2 - Privilege Escalation
- [remote] Automic Agent 24.3.0 HF4 - Privilege Escalation
- [remote] Fortra GoAnywhere MFT 7.4.1 - Authentication Bypass
- [webapps] WordPress Digits Plugin 8.4.6.1 - Authentication Bypass via OTP Bruteforcing
- [remote] SolarWinds Serv-U 15.4.2 HF1 - Directory Traversal
Cybercrooks Target Docker Containers With Novel Pageview Generator
/in General NewsCyberattackers are exploiting Docker instances to drop the bot-tastic 9hits Web traffic generator and “earn” valuable credits that can be turned into cash.
darkreading – Read More
Google: Russia’s ColdRiver APT Unleashes Custom ‘Spica’ Malware
/in General NewsJust in time for the US election season, one of the Kremlin’s favorite hack-and-leak spy groups — Star Blizzard — has developed its very first custom backdoor.
darkreading – Read More
Threat Actors Team Up for Post-Holiday Phishing Email Surge
/in General NewsJust like you and me, cyberattackers returned from winter break and immediately started sending thousands of emails.
darkreading – Read More
Citrix Discovers 2 Vulnerabilities, Both Exploited in the Wild
/in General NewsThese vulnerabilities are the second and third for Citrix but are not expected to be as detrimental as “CitrixBleed.”
darkreading – Read More
Attackers Could Eavesdrop on AI Conversations on Apple, AMD, Imagination and Qualcomm GPUs
/in General NewsSecurity researchers from Trail of Bits identified a GPU memory vulnerability they called LeftoverLocals. Some affected GPU vendors have issued fixes.
Security | TechRepublic – Read More
Malicious Extortion Bot Targets Publicly Exposed PostgreSQL and MySQL Databases
/in General NewsThe bot gains access to the databases, deletes all tables and databases, and leaves a ransom note demanding payment for data recovery. However, the bot only saves a small portion of the data, even if the ransom is paid.
Cyware News – Latest Cyber News – Read More
Weaponized AWS SES Accounts Anchor Massive Stealth Attack
/in General NewsIn today’s cloud, it seems, every convenience for customers is equally convenient to those who’d abuse these services for malicious purposes.
darkreading – Read More
TA866 Returns with a Large Email Campaign
/in General NewsThe new campaign by TA866 involved a large volume of emails with attached PDFs containing OneDrive URLs that initiated a multi-step infection chain leading to malware payload.
Cyware News – Latest Cyber News – Read More
What is a TPM, and why does your PC need one?
/in General NewsWindows 11 requires a Trusted Platform Module. Here’s why.
Latest stories for ZDNET in Security – Read More
Report: 75% of Organizations Hit by Ransomware in 2023
/in General NewsCyberattacks are the leading cause of technology outages for 40% of organizations, emphasizing the need for comprehensive disaster preparation beyond just cybersecurity measures, according to Veeam.
Cyware News – Latest Cyber News – Read More