BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Moodle 4.4.0 - Authenticated Remote Code Execution
- [remote] Microsoft SharePoint 2019 - NTLM Authentication
- [remote] gogs 0.13.0 - Remote Code Execution (RCE)
- [remote] Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
- [webapps] Sitecore 10.4 - Remote Code Execution (RCE)
- [remote] PX4 Military UAV Autopilot 1.12.3 - Denial of Service (DoS)
- [webapps] Pterodactyl Panel 1.11.11 - Remote Code Execution (RCE)
- [remote] OneTrust SDK 6.33.0 - Denial Of Service (DoS)
- [remote] freeSSHd 1.0.9 - Denial of Service (DoS)
- [remote] McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information
Ukrainian hackers take credit for hacking Russian ISP that wiped out servers and caused internet outages
/in General NewsThe Russian ISP blamed the Ukrainian hackers for causing a “complete failure” across its internet infrastructure.
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More
Education software firm’s hack exposes personal data for students, teachers nationwide
/in General NewsAn education software company which stores data belonging to more than 60 million K-12 students and teachers on Tuesday said it had been hacked.
The Record from Recorded Future News – Read More
Telegram Shared Data of Thousands of Users After CEO’s Arrest
/in General NewsAfter its CEO was arrested last summer, Telegram has been increasingly sharing user data at the request of authorities.
The post Telegram Shared Data of Thousands of Users After CEO’s Arrest appeared first on SecurityWeek.
SecurityWeek – Read More
Always On Guard: The Mental Health Cost of Cyber Threat Awareness
/in General NewsTwo years ago, I joined the cybersecurity field. I began on my own, but then pursued it as a career change, coming from development and tech lead role. What I completely did not foresee was how this decision would reshape my daily life. Not through the technical challenges, they were easy to predict, but through the constant stream of threat intelligence that now fills my days.
Source
TechSplicer – Read More
Russian internet provider confirms its network was ‘destroyed’ following attack claimed by Ukrainian hackers
/in General NewsIn a statement on the Russian social media platform VKontakte, the St. Petersburg-based company said the “planned” attack “destroyed” its infrastructure overnight. Nodex added that it was working to restore systems from backups but could not provide a timeline for when operations would fully resume.
The Record from Recorded Future News – Read More
Update Chrome and Firefox now to patch these critical security flaws
/in General NewsThe latest updates for both browsers squash several high-severity security bugs. Here’s how to grab them.
Latest stories for ZDNET in Security – Read More
Best Practices & Risks Considerations in LCNC and RPA Automation
/in General NewsLow-code/no-code (LCNC) and robotic process automation (RPA) technologies allow companies to speed up development processes and reduce costs, but security is often overlooked. When this happens, the risks can outweigh the benefits.
darkreading – Read More
Edtech giant PowerSchool says hackers accessed personal data of students and teachers
/in General NewsThe Bain Capital-owned edtech giant says hackers accessed its customer support portal using a “compromised credential.”
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More
Japan Links Chinese Hacker MirrorFace to Dozens of Cyberattacks Targeting Security and Tech Data
/in General NewsJapan says China-linked cyberattacks were systematic attacks with an aim of stealing data on Japanese national security and advanced technology.
The post Japan Links Chinese Hacker MirrorFace to Dozens of Cyberattacks Targeting Security and Tech Data appeared first on SecurityWeek.
SecurityWeek – Read More
EU court fines European Commission for breaching its own data privacy laws
/in General NewsThe EU court said the bloc’s executive authority violated a citizen’s rights by transferring some of his personal data to the U.S. without proper safeguards.
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More