BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Campcodes Online Hospital Management System 1.0 - SQL Injection
- [webapps] WordPress Digits Plugin 8.4.6.1 - Authentication Bypass via OTP Bruteforcing
- [remote] Fortra GoAnywhere MFT 7.4.1 - Authentication Bypass
- [remote] Automic Agent 24.3.0 HF4 - Privilege Escalation
- [remote] SolarWinds Serv-U 15.4.2 HF1 - Directory Traversal
- [remote] Windows File Explorer Windows 11 (23H2) - NTLM Hash Disclosure
- [remote] Grandstream GSD3710 1.0.11.13 - Stack Buffer Overflow
- [webapps] WordPress User Registration & Membership Plugin 4.1.2 - Authentication Bypass
- [local] Microsoft Windows Server 2016 - Win32k Elevation of Privilege
- [remote] Windows 2024.15 - Unauthenticated Desktop Screenshot Capture
Why New York is a Prime Location for Leading Mobile Development Agencies
/in General NewsNew York, the city that never sleeps, is renowned as a global epicentre for innovation, creativity, and business…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Andrew Tate’s University Breach: 1 Million User Records and Chats Leaked
/in General NewsAndrew Tate’s “The Real World” platform has been breached, again, leaking user data including emails and private chat…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Russia’s Ballistic Missile Attack on Ukraine Is an Alarming First
/in General NewsThis is the first time Russia has used its so-called Oreshnik intermediate-range ballistic missile in combat. The launch also serves as a warning to the West.
Security Latest – Read More
The rise and fall of the ‘Scattered Spider’ hackers
/in General NewsThe prolific hacking group broke into Caesars Entertainment, Coinbase, DoorDash, Mailchimp, Riot Games, Twilio (twice), and dozens more.
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More
Meet three incoming EU lawmakers in charge of key tech policy areas
/in General NewsThe European Union looks to have clinched political agreement on the team of 26 commissioners who will be implementing President Ursula von der Leyen’s policy plan for the next five years. A final vote is still pending next week, but on Thursday, Politico’s Brussels Playbook newsletter reported a deal in the European Parliament on the […]
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More
North Korean Hackers Steal $10M with AI-Driven Scams and Malware on LinkedIn
/in General NewsThe North Korea-linked threat actor known as Sapphire Sleet is estimated to have stolen more than $10 million worth of cryptocurrency as part of social engineering campaigns orchestrated over a six-month period.
These findings come from Microsoft, which said that multiple threat activity clusters with ties to the country have been observed creating fake profiles on LinkedIn, posing as both
The Hacker News – Read More
Google Exposes GLASSBRIDGE: A Pro-China Influence Network of Fake News Sites
/in General NewsGovernment agencies and non-governmental organizations in the United States have become the target of a nascent China state threat actor known as Storm-2077.
The adversary, believed to be active since at least January 2024, has also conducted cyber attacks against the Defense Industrial Base (DIB), aviation, telecommunications, and financial and legal services across the world, Microsoft said.
The Hacker News – Read More
Andrew Tate’s ‘Educational Platform’ Was Hacked
/in General NewsPlus: The worst telecom hack in US history rolls on, iPhones are harder to break into, and more of the week’s top security news.
Security Latest – Read More
RSA Conference to invest $5 million in sandbox contest finalists
/in General NewsThe owner of the RSA Conference announced it’s investing $50 million in finalists for the Innovation Sandbox (ISB) contest, which has helped dozens of cybersecurity companies get off the ground.
The Record from Recorded Future News – Read More
Faux ChatGPT, Claude API Packages Deliver JarkaStealer
/in General NewsAttackers are betting that the hype around generative AI (GenAI) is attracting less technical, less cautious developers who might be more inclined to download an open source Python code package for free access, without vetting it or thinking twice.
darkreading – Read More