BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover
- [remote] Microsoft PowerPoint 2019 - Remote Code Execution (RCE)
- [remote] ScriptCase 9.12.006 (23) - Remote Command Execution (RCE)
- [local] Sudo chroot 1.9.17 - Local Privilege Escalation
- [local] Sudo 1.9.17 Host Option - Elevation of Privilege
- [local] Microsoft Defender for Endpoint (MDE) - Elevation of Privilege
- [webapps] Discourse 3.2.x - Anonymous Cache Poisoning
- [remote] Microsoft Outlook - Remote Code Execution (RCE)
- [remote] Microsoft SharePoint 2019 - NTLM Authentication
- [remote] Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
Peru denies it was hit by ransomware attack following Rhysida claims
/in General NewsThe prolific ransomware gang claimed to have taken over the Peruvian government’s domain.
The Record from Recorded Future News – Read More
Phony Hacktivist Pleads Guilty to Disney Data Leak
/in General NewsAfter stealing sensitive data from Disney, Ryan Mitchell Kramer claimed to be part of a Russian hacktivist group protecting artists’ rights and ensuring they receive fair compensation for their work.
darkreading – Read More
Hackers launch ‘serious’ attacks against Georgia school district, New Mexico university
/in General NewsMultiple school districts and a university in New Mexico are suffering from cyberattacks wreaking havoc as the end of the school year approaches.
The Record from Recorded Future News – Read More
GlobalX, airline used for Trump deportations, gets hacked: report
/in General NewsHackers claiming to be part of the hacktivist group Anonymous claimed the data breach.
Security News | TechCrunch – Read More
Wormable AirPlay Flaws Enable Zero-Click RCE on Apple Devices via Public Wi-Fi
/in General NewsCybersecurity researchers have disclosed a series of now-patched security vulnerabilities in Apple’s AirPlay protocol that, if successfully exploited, could enable an attacker to take over susceptible devices supporting the proprietary wireless technology.
The shortcomings have been collectively codenamed AirBorne by Israeli cybersecurity company Oligo.
“These vulnerabilities can be chained by
The Hacker News – Read More
Myanmar militia leader sanctioned by US over cyber scam connections
/in General NewsThe U.S. government sanctioned the Karen National Army, a militia group, and Saw Chit Thu, its leader, for their purported connections to the cyber fraud industry in Myanmar.
The Record from Recorded Future News – Read More
Visa launches ‘Intelligent Commerce’ platform, letting AI agents swipe your card—safely, it says
/in General NewsVisa launches Intelligent Commerce platform enabling AI assistants to make secure purchases with your credit card, transforming online shopping with personalized automation and consumer-controlled spending limits.Read More
Security News | VentureBeat – Read More
Chinese Group TheWizards Exploits IPv6 to Drop WizardNet Backdoor
/in General NewsESET has discovered Spellbinder, a new tool used by the China-linked cyber espionage group TheWizards to conduct AitM…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
A whopping 94% of leaked passwords are not unique – will you people ever learn?
/in General NewsYour lazy passwords are putting you and your company at risk.
Latest stories for ZDNET in Security – Read More
White House Proposal Slashes Half-Billion from CISA Budget
/in General NewsThe proposed $491 million cut is being positioned as a “refocusing”of CISA on its core mission “while eliminating weaponization and waste.”
The post White House Proposal Slashes Half-Billion from CISA Budget appeared first on SecurityWeek.
SecurityWeek – Read More