BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Moodle 4.4.0 - Authenticated Remote Code Execution
- [remote] Microsoft SharePoint 2019 - NTLM Authentication
- [remote] gogs 0.13.0 - Remote Code Execution (RCE)
- [remote] Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
- [webapps] Sitecore 10.4 - Remote Code Execution (RCE)
- [remote] PX4 Military UAV Autopilot 1.12.3 - Denial of Service (DoS)
- [webapps] Pterodactyl Panel 1.11.11 - Remote Code Execution (RCE)
- [remote] OneTrust SDK 6.33.0 - Denial Of Service (DoS)
- [remote] freeSSHd 1.0.9 - Denial of Service (DoS)
- [remote] McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information
Detecting and Mitigating the “Greatness” Phishing Kit Threat
/in General NewsThe “Greatness” phishing tool poses a significant threat to Microsoft 365 accounts and has the capability to outmaneuver multi-factor authentication, increasing the potential for cybercrime.
Cyware News – Latest Cyber News – Read More
Update: Secret Service Recovers Nearly $3 Million Stolen From North Carolina Housing Authority in BEC Scam
/in General NewsThe scam involved a request to update payment information for a private company contracting with the agency, resulting in the transfer of funds to an illegitimate account.
Cyware News – Latest Cyber News – Read More
New Mispadu Banking Trojan Exploiting Windows SmartScreen Flaw
/in General NewsThe threat actors behind the Mispadu banking Trojan have become the latest to exploit a now-patched Windows SmartScreen security bypass flaw to compromise users in Mexico.
The attacks entail a new variant of the malware that was first observed in 2019, Palo Alto Networks Unit 42 said in a report published last week.
Propagated via phishing mails, Mispadu is a Delphi-based information stealer
The Hacker News – Read More
General Timothy Haugh Takes Lead of NSA and Cyber Command
/in General NewsGeneral Timothy D. Haugh assumed command of NSA and USCYBERCOM on February 2, 2024, taking over the role from General Paul M. Nakasone.
The post General Timothy Haugh Takes Lead of NSA and Cyber Command appeared first on SecurityWeek.
SecurityWeek – Read More
Thousands of Stolen AnyDesk Login Credentials Sold on Dark Web
/in General NewsBy Waqas
It’s crucial to note that this sale of compromised AnyDesk accounts isn’t connected to the security breach incident disclosed by the company on February 2, 2024.
This is a post from HackRead.com Read the original post: Thousands of Stolen AnyDesk Login Credentials Sold on Dark Web
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
China’s Hackers Keep Targeting US Water and Electricity Supplies
/in General NewsPlus: Russia was likely behind widespread GPS outages, Vault 7 leaker was sentenced, police claim to trace Monero cryptocurrency, and more.
Security Latest – Read More
AnyDesk Urges Password Change Amid Security Breach
/in General NewsBy Deeba Ahmed
Another day, another security breach.
This is a post from HackRead.com Read the original post: AnyDesk Urges Password Change Amid Security Breach
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
In Other News: Palo Alto Loses Patent Lawsuit, Identity Firms Get Funding, Government Hackers
/in General NewsNoteworthy stories that might have slipped under the radar: Palo Alto Networks ordered to pay $150 million in patent lawsuit, identity solutions firms get big funding, government hacker techniques.
The post In Other News: Palo Alto Loses Patent Lawsuit, Identity Firms Get Funding, Government Hackers appeared first on SecurityWeek.
SecurityWeek – Read More
Iran-Linked Hackers Claim Attack on Albania’s Institute of Statistics
/in General NewsThe hackers claimed to have accessed over 100 terabytes of Albania’s geographic information system and population data, although the institute denied that recent census data was compromised.
Cyware News – Latest Cyber News – Read More
South African Railways Lost Over $1M in Phishing Scam
/in General NewsThe Passenger Rail Agency of South Africa (PRASA) reported a loss of 30.6 million rand due to a phishing scam, with only half of the stolen money recovered. Insider threats, such as ghost email accounts, are suspected.
Cyware News – Latest Cyber News – Read More