BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Moodle 4.4.0 - Authenticated Remote Code Execution
- [remote] Microsoft SharePoint 2019 - NTLM Authentication
- [remote] gogs 0.13.0 - Remote Code Execution (RCE)
- [remote] Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
- [webapps] Sitecore 10.4 - Remote Code Execution (RCE)
- [remote] PX4 Military UAV Autopilot 1.12.3 - Denial of Service (DoS)
- [webapps] Pterodactyl Panel 1.11.11 - Remote Code Execution (RCE)
- [remote] OneTrust SDK 6.33.0 - Denial Of Service (DoS)
- [remote] freeSSHd 1.0.9 - Denial of Service (DoS)
- [remote] McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information
Best Data Anonymization Tools in 2025
/in General NewsTop Data Anonymization Tools of 2025 to protect sensitive information, ensure compliance, and maintain performance across industries.
Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – Read More
Lawmakers warn of impact HHS firings will have on medical device cybersecurity efforts
/in General NewsAs thousands were laid off from the Department of Health and Human Services on Tuesday morning, Congress held a hearing on medical device cybersecurity where experts raised concerns about the ramifications of the firings.
The Record from Recorded Future News – Read More
As CISA Downsizes, Where Can Enterprises Get Support?
/in General NewsIn this roundtable, cybersecurity experts — including two former CISA executives — weigh in on alternate sources for threat intel, incident response, and other essential cybersecurity services.
darkreading – Read More
Developers Wanted: OpenAI Seeks Feedback About Open Model That Will Be Revealed ‘In the Coming Months’
/in General NewsFind out how to provide OpenAI with your input about its upcoming open language model, which Sam Altman stated will be a “reasoning” model like OpenAI o1.
Security | TechRepublic – Read More
Check Point Disputes Hacker’s Breach Claims
/in General NewsThe security vendor counters that none of the information came directly from its systems but rather was acquired over a period of time by targeting individuals.
darkreading – Read More
Hackers Could Unleash Chaos Through Backdoor in China-Made Robot Dogs
/in General NewsAn undocumented remote access backdoor in the Unitree Go1 Robot Dog allows remote control over the tunnel network and use of the vision cameras to see through their eyes.
The post Hackers Could Unleash Chaos Through Backdoor in China-Made Robot Dogs appeared first on SecurityWeek.
SecurityWeek – Read More
Oracle Hit with Lawsuit Over Alleged Cloud Breach Affecting Millions
/in General NewsOracle faces a class action lawsuit filed in Texas over a cloud data breach exposing sensitive data of 6M+ users; plaintiff alleges negligence and delays.
Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – Read More
Japan Bolsters Cybersecurity Safeguards With Cyber Defense Bill
/in General NewsThe bill will allow Japan to implement safeguards and strategies that have been in use by other countries for some time.
darkreading – Read More
Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign
/in General NewsExposed PostgreSQL instances are the target of an ongoing campaign designed to gain unauthorized access and deploy cryptocurrency miners.
Cloud security firm Wiz said the activity is a variant of an intrusion set that was first flagged by Aqua Security in August 2024 that involved the use of a malware strain dubbed PG_MEM. The campaign has been attributed to a threat actor Wiz tracks as
The Hacker News – Read More
European Commission takes aim at end-to-end encryption and proposes Europol become an EU FBI
/in General NewsThe Commission said it would create roadmaps regarding both the “lawful and effective access to data for law enforcement” and on encryption.
The Record from Recorded Future News – Read More