BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Campcodes Online Hospital Management System 1.0 - SQL Injection
- [webapps] WordPress Digits Plugin 8.4.6.1 - Authentication Bypass via OTP Bruteforcing
- [remote] Fortra GoAnywhere MFT 7.4.1 - Authentication Bypass
- [remote] Automic Agent 24.3.0 HF4 - Privilege Escalation
- [remote] SolarWinds Serv-U 15.4.2 HF1 - Directory Traversal
- [remote] Windows File Explorer Windows 11 (23H2) - NTLM Hash Disclosure
- [remote] Grandstream GSD3710 1.0.11.13 - Stack Buffer Overflow
- [webapps] WordPress User Registration & Membership Plugin 4.1.2 - Authentication Bypass
- [local] Microsoft Windows Server 2016 - Win32k Elevation of Privilege
- [remote] Windows 2024.15 - Unauthenticated Desktop Screenshot Capture
IBM Patches RCE Vulnerabilities in Data Virtualization Manager, Security SOAR
/in General NewsIBM has released patches for two high-severity remote code execution vulnerabilities in Data Virtualization Manager and Security SOAR.
The post IBM Patches RCE Vulnerabilities in Data Virtualization Manager, Security SOAR appeared first on SecurityWeek.
SecurityWeek – Read More
Major UK, US stores face ongoing disruption after ransomware attack hits supply chain giant Blue Yonder
/in General NewsThe Arizona-based firm said it has “no timeline” for restoration, following a cyberattack that caused disruption at companies around the world.
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More
Chinese Hackers Exploiting Critical Vulnerability in Array Networks Gateways
/in General NewsCISA warns about attacks exploiting CVE-2023-28461, a critical vulnerability in Array Networks AG and vxAG secure access gateways.
The post Chinese Hackers Exploiting Critical Vulnerability in Array Networks Gateways appeared first on SecurityWeek.
SecurityWeek – Read More
Starbucks Shifts to Manual Processes After Contractor Ransomware Attack
/in General NewsRansomware attack cripples Starbucks operations, forcing the coffee giant to rely on manual processes for employee scheduling and…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
British hospital group declares ‘major incident’ following cyberattack
/in General NewsSeveral hospitals in northwest England are struggling to care for patients after an unspecified cybersecurity incident.
The Record from Recorded Future News – Read More
Tips and Tools for Social Media Safety
/in General NewsProtect your social media presence with tools like privacy checkups, monitoring services, and digital footprint scanners. Stay secure by avoiding oversharing, limiting third-party app permissions, and using strong passwords.
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
New York Fines Geico and Travelers $11 Million Over Data Breaches
/in General NewsNew York has announced $11 million settlements with Geico and Travelers over data breaches affecting 120,000 people.
The post New York Fines Geico and Travelers $11 Million Over Data Breaches appeared first on SecurityWeek.
SecurityWeek – Read More
Emergency Vehicle Lights Can Screw Up a Car’s Automated Driving System
/in General NewsNewly published research finds that the flashing lights on police cruisers and ambulances can cause “digital epileptic seizures” in image-based automated driving systems, potentially risking wrecks.
Security Latest – Read More
Critical Vulnerabilities Found in Anti-Spam Plugin Used by 200,000 WordPress Sites
/in General NewsTwo vulnerabilities in the Anti-Spam by CleanTalk WordPress plugin allowed attackers to execute arbitrary code remotely.
The post Critical Vulnerabilities Found in Anti-Spam Plugin Used by 200,000 WordPress Sites appeared first on SecurityWeek.
SecurityWeek – Read More
Starbucks, Grocery Stores Hit by Blue Yonder Ransomware Attack
/in General NewsSupply chain management software provider Blue Yonder has been targeted in a ransomware attack that caused significant disruptions for some customers.
The post Starbucks, Grocery Stores Hit by Blue Yonder Ransomware Attack appeared first on SecurityWeek.
SecurityWeek – Read More