BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [local] TP-Link VN020 F3v(T) TT_V6.2.1021) - DHCP Stack Buffer Overflow
- [webapps] WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation
- [webapps] Kentico Xperience 13.0.178 - Cross Site Scripting (XSS)
- [local] RDPGuard 9.9.9 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
Stream.Security Secures $30 Million Series B
/in General NewsStream.Security (formerly Lightlytics) has raised a total of $55 million since launching in 2020 with a cloud data security product.
The post Stream.Security Secures $30 Million Series B appeared first on SecurityWeek.
SecurityWeek – Read More
Critical Vulnerabilities Expose mbNET.mini, Helmholz Industrial Routers to Attacks
/in General NewsCritical and high-severity vulnerabilities that can lead to full device compromise have been found in mbNET.mini and Helmholz industrial routers.
The post Critical Vulnerabilities Expose mbNET.mini, Helmholz Industrial Routers to Attacks appeared first on SecurityWeek.
SecurityWeek – Read More
NordVPN Review (2024): Is NordVPN Worth the Cost?
/in General NewsIs NordVPN worth it? How much does it cost and is it safe to use? Read our NordVPN review to learn about pricing, features, security, and more.
Security | TechRepublic – Read More
BlackCat Ransomware Successor Cicada3301 Emerges
/in General NewsThe Cicada3301 ransomware shows multiple similarities with BlackCat and is believed to mark the reemergence of the threat.
The post BlackCat Ransomware Successor Cicada3301 Emerges appeared first on SecurityWeek.
SecurityWeek – Read More
Latrodectus Malware Increasingly Used by Cybercriminals
/in General NewsLatrodectus malware has been increasingly used by cybercriminals, with recent campaigns targeting the financial, automotive and healthcare sectors.
The post Latrodectus Malware Increasingly Used by Cybercriminals appeared first on SecurityWeek.
SecurityWeek – Read More
Palo Alto Networks Adds New Capabilities to OT Security Solution
/in General NewsPalo Alto Networks has added new remote access, virtual patching and firewall capabilities to its OT Security solution.
The post Palo Alto Networks Adds New Capabilities to OT Security Solution appeared first on SecurityWeek.
SecurityWeek – Read More
Pharma Giant Johnson & Johnson Discloses Data Breach
/in General NewsJohnson & Johnson has disclosed a data breach impacting the personal information of thousands of people.
The post Pharma Giant Johnson & Johnson Discloses Data Breach appeared first on SecurityWeek.
SecurityWeek – Read More
VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability
/in General NewsVMware has released software updates to address an already patched security flaw in vCenter Server that could pave the way for remote code execution.
The vulnerability, tracked as CVE-2024-38812 (CVSS score: 9.8), concerns a case of heap-overflow vulnerability in the implementation of the DCE/RPC protocol.
“A malicious actor with network access to vCenter Server may trigger this vulnerability by
The Hacker News – Read More
CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack
/in General NewsThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security flaw impacting ScienceLogic SL1 to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation as a zero-day.
The vulnerability in question, tracked as CVE-2024-9537 (CVSS v4 score: 9.3), refers to a bug involving an unspecified third-party component that could
The Hacker News – Read More
Russia-Linked Hackers Attack Japan’s Govt, Ports
/in General NewsRussia-linked hackers have taken aim at Japan, following its ramping up of military exercises with regional allies and the increase of its defense budget.
darkreading – Read More