BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover
- [remote] Microsoft PowerPoint 2019 - Remote Code Execution (RCE)
- [remote] ScriptCase 9.12.006 (23) - Remote Command Execution (RCE)
- [local] Sudo chroot 1.9.17 - Local Privilege Escalation
- [local] Sudo 1.9.17 Host Option - Elevation of Privilege
- [local] Microsoft Defender for Endpoint (MDE) - Elevation of Privilege
- [webapps] Discourse 3.2.x - Anonymous Cache Poisoning
- [remote] Microsoft Outlook - Remote Code Execution (RCE)
- [remote] Microsoft SharePoint 2019 - NTLM Authentication
- [remote] Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
Qilin Leads April 2025 Ransomware Spike with 45 Breaches Using NETXLOADER Malware
/in General NewsThreat actors with ties to the Qilin ransomware family have leveraged malware known as SmokeLoader along with a previously undocumented .NET compiled loader codenamed NETXLOADER as part of a campaign observed in November 2024.
“NETXLOADER is a new .NET-based loader that plays a critical role in cyber attacks,” Trend Micro researchers Jacob Santos, Raymart Yambot, John Rainier Navato, Sarah Pearl
The Hacker News – Read More
How Google’s AI combats new scam tactics – and how you can stay one step ahead
/in General NewsGoogle is trying to lock down Search, Chrome, and Android, but ultimately, you’re the last line of defense.
Latest stories for ZDNET in Security – Read More
Europol Announces More DDoS Service Takedowns, Arrests
/in General NewsFour people have been arrested in Poland and several websites associated with DDoS-for-hire services have been shut down.
The post Europol Announces More DDoS Service Takedowns, Arrests appeared first on SecurityWeek.
SecurityWeek – Read More
Possible Zero-Day Patched in SonicWall SMA Appliances
/in General NewsSonicWall patches three SMA 100 vulnerabilities, including a potential zero-day, that could be chained to execute arbitrary code remotely.
The post Possible Zero-Day Patched in SonicWall SMA Appliances appeared first on SecurityWeek.
SecurityWeek – Read More
Fake AI Tools Push New Noodlophile Stealer Through Facebook Ads
/in General NewsScammers are using fake AI tools and Facebook ads to spread Noodlophile Stealer malware, targeting users with a…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
Countries Begin NATO’s Locked Shields Cyber Defense Exercise
/in General NewsThe NATO-run live cyber exercise event helps countries test and develop defenses against current and emerging cyber threats including disinformation, quantum, and AI.
darkreading – Read More
VC firm Insight Partners confirms personal data stolen during January hack
/in General NewsThe venture capital firm has over $90 billion in assets under management, including cybersecurity giants.
Security News | TechCrunch – Read More
Security Tools Alone Don’t Protect You — Control Effectiveness Does
/in General News61% of security leaders reported suffering a breach due to failed or misconfigured controls over the past 12 months. This is despite having an average of 43 cybersecurity tools in place.
This massive rate of security failure is clearly not a security investment problem. It is a configuration problem. Organizations are beginning to understand that a security control installed or deployed is not
The Hacker News – Read More
Google Finds Data Theft Malware Used by Russian APT in Select Cases
/in General NewsRussia-linked APT Star Blizzard is using the ClickFix technique in recent attacks distributing the LostKeys malware.
The post Google Finds Data Theft Malware Used by Russian APT in Select Cases appeared first on SecurityWeek.
SecurityWeek – Read More
Improperly Patched Samsung MagicINFO Vulnerability Exploited by Botnet
/in General NewsThe patches for an exploited Samsung MagicINFO vulnerability are ineffective and a Mirai botnet has started targeting it.
The post Improperly Patched Samsung MagicINFO Vulnerability Exploited by Botnet appeared first on SecurityWeek.
SecurityWeek – Read More