BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] WP Publications WordPress Plugin 1.2 - Stored XSS
- [local] Microsoft Graphics Component Windows 11 Pro (Build 26100+) - Local Elevation of Privileges
- [remote] Keras 2.15 - Remote Code Execution (RCE)
- [local] Microsoft Brokering File System Windows 11 Version 22H2 - Elevation of Privilege
- [webapps] PivotX 3.0.0 RC3 - Remote Code Execution (RCE)
- [hardware] TOTOLINK N300RB 8.54 - Command Execution
- [webapps] SugarCRM 14.0.0 - SSRF/Code Injection
- [webapps] Langflow 1.2.x - Remote Code Execution (RCE)
- [remote] NodeJS 24.x - Path Traversal
- [remote] MikroTik RouterOS 7.19.1 - Reflected XSS
Mistral Small 3 brings open source AI to the masses—smaller, faster, and cheaper
/in General NewsFrench AI startup Mistral unveils a breakthrough 24B parameter language model that matches the performance of models three times its size, challenging tech giants with faster speeds and lower computing costs while targeting enterprise deployments.Read More
Security News | VentureBeat – Read More
Taming Shadow AI: Valence Security, Endor Labs Unveil New Protections to Counter Hidden AI Threats
/in General NewsValence Security and Endor Labs have introduced extensions to their existing platforms specifically to tackle the invisibility and wrongful use of Shadow AI.
The post Taming Shadow AI: Valence Security, Endor Labs Unveil New Protections to Counter Hidden AI Threats appeared first on SecurityWeek.
SecurityWeek – Read More
Backline Emerges From Stealth With $9M in Funding for Vulnerability Remediation Platform
/in General NewsBackline has emerged from stealth mode with an autonomous security remediation platform and $9 million in seed funding.
The post Backline Emerges From Stealth With $9M in Funding for Vulnerability Remediation Platform appeared first on SecurityWeek.
SecurityWeek – Read More
Cyber Insights 2025: Cyberinsurance – The Debate Continues
/in General NewsBetter risk management could lead to reduced premiums on top of value for money, making cyberinsurance a silent driver for improved cybersecurity.
The post Cyber Insights 2025: Cyberinsurance – The Debate Continues appeared first on SecurityWeek.
SecurityWeek – Read More
Google: Over 57 Nation-State Threat Groups Using AI for Cyber Operations
/in General NewsOver 57 distinct threat actors with ties to China, Iran, North Korea, and Russia have been observed using artificial intelligence (AI) technology powered by Google to further enable their malicious cyber and information operations.
“Threat actors are experimenting with Gemini to enable their operations, finding productivity gains but not yet developing novel capabilities,” Google Threat
The Hacker News – Read More
Cerebras becomes the world’s fastest host for DeepSeek R1, outpacing Nvidia GPUs by 57x
/in General NewsCerebras Systems launches DeepSeek’s R1-70B AI model on its wafer-scale processor, delivering 57x faster speeds than GPU solutions and challenging Nvidia’s AI chip dominance with U.S.-based inference processing.Read More
Security News | VentureBeat – Read More
New Jailbreaks Allow Users to Manipulate GitHub Copilot
/in General NewsWhether by intercepting its traffic or just giving it a little nudge, GitHub’s AI assistant can be made to do malicious things it isn’t supposed to.
darkreading – Read More
Microsoft’s latest optional patch is a bug-fix bonanza for Windows 11 24H2
/in General NewsThe new preview update resolves some persistent and annoying problems with Windows 24H2, but you may need to download and install it manually.
Latest stories for ZDNET in Security – Read More
Seraphic Attracts $29M Investment to Chase Enterprise Browser Business
/in General NewsSeraphic Security banks $29 million investment as VCs remain bullish on startups with security-themed browsers for corporate defenders.
The post Seraphic Attracts $29M Investment to Chase Enterprise Browser Business appeared first on SecurityWeek.
SecurityWeek – Read More
Riffusion’s free AI music platform could be the Spotify of the future
/in General NewsRiffusion launches a free AI music generation platform that creates original songs from text and audio prompts, challenging tech giants with personalized learning features and backing from The Chainsmokers.Read More
Security News | VentureBeat – Read More