BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
AT&T Breach Linked to American Hacker, Telecom Giant Paid $370k Ransom: Reports
/in General NewsThe massive AT&T breach has been linked to an American hacker living in Turkey and reports say the telecom giant paid a $370,000 ransom.
The post AT&T Breach Linked to American Hacker, Telecom Giant Paid $370k Ransom: Reports appeared first on SecurityWeek.
SecurityWeek – Read More
Crypto Scammer Returns $9.27 Million Out of $24M Crypto Theft
/in General NewsCrypto scammer sensationally returns $9.27 million to a victim after $24 million theft. Unprecedented move in crypto crime.…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Zeus Banking Malware Player Gets Nine-Year Prison Term
/in General NewsVyacheslav Igorevich Penchukov, a criminal who used Zeus and IcedID malware to steal millions of dollars from victims, has been sentenced to almost a decade in prison and ordered to pay $73 million in restitution by a Nebraska federal court judge.
Cyware News – Latest Cyber News – Read More
Palo Alto Networks Fixed a Critical Bug in the Expedition Tool
/in General NewsPalo Alto Networks has released security updates to address five vulnerabilities in its products, including a critical flaw in the Expedition tool that could enable admin account takeover.
Cyware News – Latest Cyber News – Read More
Microsoft Says Windows Not Impacted by regreSSHion as Second OpenSSH Bug Is Found
/in General NewsA second remote code execution vulnerability, tracked as CVE-2024-6409, was found in OpenSSH during an analysis of the regreSSHion flaw.
The post Microsoft Says Windows Not Impacted by regreSSHion as Second OpenSSH Bug Is Found appeared first on SecurityWeek.
SecurityWeek – Read More
Google Reportedly in Talks to Acquire Cloud Security Company Wiz for $23B
/in General NewsAlphabet, Google’s parent company, is in advanced talks to acquire cloud security provider Wiz for around $23 billion. Wiz recently raised $1 billion at a $12 billion valuation and has a total of $1.9 billion in funding.
Cyware News – Latest Cyber News – Read More
Time for businesses to move past generative AI hype and find real value
/in General NewsOrganizations must focus on digital resilience to embrace the transformational potential of emerging technology.
Latest news – Read More
CRYSTALRAY Hackers Infect Over 1,500 Victims Using Network Mapping Tool
/in General NewsA threat actor that was previously observed using an open-source network mapping tool has greatly expanded their operations to infect over 1,500 victims.
Sysdig, which is tracking the cluster under the name CRYSTALRAY, said the activities have witnessed a 10x surge, adding it includes “mass scanning, exploiting multiple vulnerabilities, and placing backdoors using multiple [open-source software]
The Hacker News – Read More
Match Systems’ CEO Andrei Kutin Provides Insight on DMM Bitcoin Breach
/in General NewsDubai, UAE, 15th July 2024, CyberNewsWire
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Netgear Warns Users to Patch Auth Bypass, XSS Router Flaws
/in General NewsNetgear released firmware patches to fix stored XSS and authentication bypass flaws in the XR1000 Nighthawk gaming router and CAX30 Nighthawk AX6 6-Stream cable modem routers, respectively.
Cyware News – Latest Cyber News – Read More