BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
Apple CocoaPods Bugs Expose Millions of Apps to Code Injection
/in General NewsCritical dependency manager supply chain vulnerabilities have exposed millions and millions of devices to arbitrary malware for the better part of decade.
darkreading – Read More
HubSpot Warns of Ongoing Cyberattacks Targeting Customer Accounts
/in General NewsHubSpot is “actively investigating and blocking attempts” to hack into customer accounts but some targets have already been compromised.
The post HubSpot Warns of Ongoing Cyberattacks Targeting Customer Accounts appeared first on SecurityWeek.
SecurityWeek – Read More
Hacker Conversations: Chris Evans, Hacker and CISO
/in General NewsChris Evans, CISO and chief hacking officer at HackerOne, challenges the common perception of both hackers and their motivation.
The post Hacker Conversations: Chris Evans, Hacker and CISO appeared first on SecurityWeek.
SecurityWeek – Read More
Startup Odaseva Raises $54M to Bolster Global Expansion, R&D
/in General NewsThe Series C funding will allow San Francisco-based Odaseva to provide more robust support to clients dealing with stringent data residency regulations and evolving privacy laws around the globe, according to founder and CEO Sovan Bin.
Cyware News – Latest Cyber News – Read More
Russian Hacker Wanted for Crippling Cyberattacks on Ukraine, $10M Reward
/in General NewsA Russian hacker is indicted for crippling cyberattacks on Ukraine before the 2022 invasion. He’s accused of working…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
TeamViewer Says Russia’s ‘Cozy Bear’ Hackers Attacked Corporate IT System
/in General NewsRemote access solution provider TeamViewer confirmed that the Russian hacking group APT29 breached its corporate IT environment. The hack on TeamViewer was traced back to an employee account.
Cyware News – Latest Cyber News – Read More
Google Offering $250,000 for Full VM Escape in New KVM Bug Bounty Program
/in General NewsGoogle has announced a new KVM bug bounty program named kvmCTF with rewards of up to $250,000 for a full VM escape.
The post Google Offering $250,000 for Full VM Escape in New KVM Bug Bounty Program appeared first on SecurityWeek.
SecurityWeek – Read More
Thinking About Security, Fast & Slow
/in General NewsTo be effective, managing risk demands both fast responses and strategic thinking.
darkreading – Read More
Name That Edge Toon: Cyber Cloudburst
/in General NewsFeeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.
darkreading – Read More
Landmark Admin Discloses Data Breach Impacting Personal, Medical Information
/in General NewsLife insurance company Landmark Admin says personal, medical, and insurance information was compromised in a May data breach.
The post Landmark Admin Discloses Data Breach Impacting Personal, Medical Information appeared first on SecurityWeek.
SecurityWeek – Read More