BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
DarkGate: Dancing the Samba With Alluring Excel Files
/in General NewsCampaigns distributing DarkGate malware use various methods like email attachments and malicious ads. A campaign in March-April 2024 used Samba file shares hosting malicious files for DarkGate infections.
Cyware News – Latest Cyber News – Read More
3 ways to interact with Gemini from the MacOS desktop
/in General NewsIf Gemini is your go-to AI and MacOS is your operating system of choice, you’ll be glad to know there are ways to interact with Google’s AI from Apple’s desktop.
Latest news – Read More
Smishing Triad Targets India with Fraud Surge
/in General NewsWarnings have been issued in India regarding a rise in fraudulent smishing attacks, with scammers impersonating India Post to deceive people into giving personal information or clicking on malicious links.
Cyware News – Latest Cyber News – Read More
Train for Entry-Level or Advanced IT Positions for Just $50
/in General NewsTrain at your own pace for valuable IT certifications to start or further your IT career with courses for absolute novices to advanced cybersecurity modules.
Security | TechRepublic – Read More
Samsung Galaxy Watch Ultra hands-on: Key specs, features, and everything you should know
/in General NewsSamsung’s answer to the Apple Watch Ultra is loaded with sensors at a more affordable price.
Latest news – Read More
Samsung’s new Galaxy Buds 3 look nearly identical to Apple AirPods – and that’s a good thing
/in General NewsSamsung’s latest wireless earbuds debut with several new features, plus an unexpected but welcomed redesign.
Latest news – Read More
Every product Samsung unveiled at Unpacked July 2024: Galaxy Z Fold 6, Watch Ultra, Ring, more
/in General NewsAt Unpacked yesterday, Samsung unveiled several new products, including two foldable phones, smartwatches, earbuds, and a smart ring that competes with Oura.
Latest news – Read More
Microsoft’s Partnership With Middle East AI Firm Under Scrutiny
/in General NewsThe US government worries that Group 42 Holdings, an AI firm based in the United Arab Emirates, could become a backdoor for technology leaks to China.
darkreading – Read More
PHP Vulnerability Exploited to Spread Malware and Launch DDoS Attacks
/in General NewsMultiple threat actors have been observed exploiting a recently disclosed security flaw in PHP to deliver remote access trojans, cryptocurrency miners, and distributed denial-of-service (DDoS) botnets.
The vulnerability in question is CVE-2024-4577 (CVSS score: 9.8), which allows an attacker to remotely execute malicious commands on Windows systems using Chinese and Japanese language locales. It
The Hacker News – Read More
Amazon updates AI enterprise solutions with guardrails at AWS Summit
/in General NewsThe cloud provider launched several enterprise tools for the generative AI era while emphasizing its security track record.
Latest news – Read More