BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover
- [remote] Microsoft PowerPoint 2019 - Remote Code Execution (RCE)
- [remote] ScriptCase 9.12.006 (23) - Remote Command Execution (RCE)
- [local] Sudo chroot 1.9.17 - Local Privilege Escalation
- [local] Sudo 1.9.17 Host Option - Elevation of Privilege
- [local] Microsoft Defender for Endpoint (MDE) - Elevation of Privilege
- [webapps] Discourse 3.2.x - Anonymous Cache Poisoning
- [remote] Microsoft Outlook - Remote Code Execution (RCE)
- [remote] Microsoft SharePoint 2019 - NTLM Authentication
- [remote] Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
U.S. Charges Yemeni Hacker Behind Black Kingdom Ransomware Targeting 1,500 Systems
/in General NewsThe U.S. Department of Justice (DoJ) on Thursday announced charges against a 36-year-old Yemeni national for allegedly deploying the Black Kingdom ransomware against global targets, including businesses, schools, and hospitals in the United States.
Rami Khaled Ahmed of Sana’a, Yemen, has been charged with one count of conspiracy, one count of intentional damage to a protected computer, and one
The Hacker News – Read More
RSAC 2025: Why the AI agent era means more demand for CISOS
/in General NewsRSAC 2025 made one thing clear: AI agents are entering security workflows, but boards want proof they work.Read More
Security News | VentureBeat – Read More
What NYDFS Rules Mean for Businesses (Inside & Outside of NY)
/in General NewsStarting this month, finance companies operating in New York must implement a variety of protections against unauthorized access to IT systems.
darkreading – Read More
UK Retailers Reeling From Likely Ransomware Attacks
/in General NewsA series of cyberattacks have struck multiple major British retailers in recent weeks, and a ransomware gang has reportedly claimed responsibility.
darkreading – Read More
US indicts Yemeni man in Black Kingdom ransomware attacks
/in General NewsThe U.S. Attorney’s Office for the Central District of California announced charges against Rami Khaled Ahmed for allegedly helping to develop and deploy Black Kingdom, which infected “approximately 1,500 computer systems.”
The Record from Recorded Future News – Read More
Mike Waltz Has Somehow Gotten Even Worse at Using Signal
/in General NewsA photo taken this week showed Mike Waltz using an app that looks like—but is not—Signal to communicate with top officials. “I don’t even know where to start with this,” says one expert.
Security Latest – Read More
Police Seize Dark Web Shop Pygmalion, Access User Data from 7K Orders
/in General NewsGerman police seized the dark web shop Pygmalion, gaining access to customer data linked to over 7,000 drug…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
Dating app Raw exposed users’ location data and personal information
/in General NewsThe app claims it uses end-to-end encryption, but spilled its users’ dating preferences and granular location data to the open web.
Security News | TechCrunch – Read More
Attackers Ramp Up Efforts Targeting Developer Secrets
/in General NewsSoftware teams need to follow security best practices to eliminate the leak of secrets, as threat actors increase their scanning for configuration and repository files.
darkreading – Read More
UK Luxury Retailer Harrods Hit by Cyber Attack After M&S, Co-op
/in General NewsLuxury retailer Harrods confirms a cyber attack attempt, restricting internet access but keeping its online store running. Learn…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More