BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [local] TP-Link VN020 F3v(T) TT_V6.2.1021) - DHCP Stack Buffer Overflow
- [webapps] WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation
- [webapps] Kentico Xperience 13.0.178 - Cross Site Scripting (XSS)
- [local] RDPGuard 9.9.9 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
Hiring For Tech Positions: Balancing Experience And Potential
/in General NewsExplore diverse tech positions blending seasoned expertise and fresh talent. Discover how top companies balance experience and innovation…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
EagerBee Backdoor Takes Flight Against Mideast ISPs, Government Targets
/in General NewsThe malware, operated by China-backed cyberattackers, has been significantly fortified with new evasive and post-infection capabilities.
darkreading – Read More
CISA says ‘no indication’ of wider government hack beyond Treasury
/in General NewsU.S. Treasury officials confirmed a cyberattack on its systems in early December 2024.
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More
McAfee’s new AI tool detects email and text scams before you fall for them
/in General NewsCurrent McAfee customers won’t have to do a thing to utilize the new feature, introduced this week at CES 2025.
Latest stories for ZDNET in Security – Read More
Hackers reportedly compromise Argentina’s airport security payroll system
/in General NewsThe hackers gained access to the airport security police’s payroll records and deducted small amounts from employee salaries.
The Record from Recorded Future News – Read More
OpenAI’s red teaming innovations define new essentials for security leaders in the AI era
/in General NewsRed teaming has become the go-to technique for iteratively testing AI models to simulate diverse, lethal, unpredictable attacks.Read More
Security News | VentureBeat – Read More
Anticipating the Cyber Frontier: Top Predictions for 2025
/in General NewsThe cybersecurity landscape in 2025 will demand a careful balance between robust defense mechanisms and adaptive resilience.
The post Anticipating the Cyber Frontier: Top Predictions for 2025 appeared first on SecurityWeek.
SecurityWeek – Read More
How a Chrome extension malware scare ruined my day – and what I did next
/in General NewsWhen Chrome flagged an extension for malware, it triggered hours of cleanup. Learn how to check your extensions, clear malware, and keep your browser secure for the future.
Latest stories for ZDNET in Security – Read More
India Proposes Digital Data Rules with Tough Penalties and Cybersecurity Requirements
/in General NewsThe Indian government has published a draft version of the Digital Personal Data Protection (DPDP) Rules for public consultation.
“Data fiduciaries must provide clear and accessible information about how personal data is processed, enabling informed consent,” India’s Press Information Bureau (PIB) said in a statement released Sunday.
“Citizens are empowered with rights to demand data erasure,
The Hacker News – Read More
Wallet Drainer Malware Used to Steal $500 Million in Cryptocurrency in 2024
/in General NewsClose to $500 million in cryptocurrency from over 332,000 addresses was stolen in 2024 using wallet drainer malware.
The post Wallet Drainer Malware Used to Steal $500 Million in Cryptocurrency in 2024 appeared first on SecurityWeek.
SecurityWeek – Read More