BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Camtruder - Advanced RTSP Camera Discovery and Vulnerability Assessment Tool
- Frogy2.0 - An Automated External Reconnaissance And Attack Surface Management (ASM) Toolkit
- PEGASUS-NEO - A Comprehensive Penetration Testing Framework Designed For Security Professionals And Ethical Hackers. It Combines Multiple Security Tools And Custom Modules For Reconnaissance, Exploitation, Wireless Attacks, Web Hacking, And More
- Text4Shell-Exploit - A Custom Python-based Proof-Of-Concept (PoC) Exploit Targeting Text4Shell (CVE-2022-42889), A Critical Remote Code Execution Vulnerability In Apache Commons Text Versions < 1.10
- Ghost-Route - Ghost Route Detects If A Next JS Site Is Vulnerable To The Corrupt Middleware Bypass Bug (CVE-2025-29927)
- Bytesrevealer - Online Reverse Enginerring Viewer
- CentralizedFirewall - Provides A Firewall Manager API Designed To Centralize And Streamline The Management Of Firewall Configurations
- Maryam - Open-source Intelligence(OSINT) Framework
- TruffleHog Explorer - A User-Friendly Web-Based Tool To Visualize And Analyze Data Extracted Using TruffleHog
- PANO - Advanced OSINT Investigation Platform Combining Graph Visualization, Timeline Analysis, And AI Assistance To Uncover Hidden Connections In Data
Exploit DB
- [local] Microsoft Windows 11 - Kernel Privilege Escalation
- [local] tar-fs 3.0.0 - Arbitrary File Write/Overwrite
- [remote] code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting (XSS)
- [remote] OpenSSH server (sshd) 9.8p1 - Race Condition
- [local] Microsoft Windows 11 23h2 - CLFS.sys Elevation of Privilege
- [webapps] WordPress Core 6.2 - Directory Traversal
- [remote] WonderCMS 3.4.2 - Remote Code Execution (RCE)
- [remote] Firefox ESR 115.11 - PDF.js Arbitrary JavaScript execution
- [webapps] FoxCMS 1.2.5 - Remote Code Execution (RCE)
- [webapps] Drupal 11.x-dev - Full Path Disclosure
PCI DSS 4.0.1: A Cybersecurity Blueprint by the Industry, for the Industry
/in General NewsAs PCI DSS 4.0.1 comes into force, it shows the power of industry collaboration in cybersecurity.
The post PCI DSS 4.0.1: A Cybersecurity Blueprint by the Industry, for the Industry appeared first on SecurityWeek.
SecurityWeek – Read More
Australian regulator pulls licenses of 95 companies in effort to crack down on investment scams
/in General NewsA federal judge approved the immediate deregistration of 93 of the companies in an order on March 21. Two others will be wound up over time because they have “meaningful” assets.
The Record from Recorded Future News – Read More
Russia arrests CEO of tech company linked to Doppelgänger disinformation campaign
/in General NewsTwo other employees at the St. Petersburg-based hosting provider Azea Group were arrested. The company has alleged links to state-sponsored disinformation campaigns and cybercriminal infrastructure.
The Record from Recorded Future News – Read More
Scattered Spider’s ‘King Bob’ Pleads Guilty to Cyber Charges
/in General NewsThe 20-year-old was arrested in January 2024 alongside four other group members who carried out related cybercriminal acts, earning them similar charges.
darkreading – Read More
Scattered Spider member pleads guilty to identity theft, wire fraud charges
/in General NewsNoah Urban, one of five Scattered Spider suspects identified by U.S. authorities, pleaded guilty in Florida to charges related to the cybercrime operation.
The Record from Recorded Future News – Read More
Hackers are pretending to be drone companies and state agencies to spy on Ukrainian victims
/in General NewsThe hackers have targeted Ukraine’s armed forces, law enforcement agencies and local government bodies — especially those near the country’s eastern border, which is close to Russia.
The Record from Recorded Future News – Read More
Brothers Behind Rydox Dark Web Market Extradited to US
/in General NewsUSA secures extradition of criminals from 9 countries, including two brothers behind Rydox, a dark web market for stolen data and hacking tools.
Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – Read More
Everest ransomware group’s darknet site offline following defacement
/in General NewsThe darknet leak site used by the ransomware gang Everest went offline Monday after being apparently hacked and defaced over the weekend.
The Record from Recorded Future News – Read More
UK’s demand for Apple backdoor should not be heard in secret, says court
/in General NewsA UK surveillance court said the backdoor order targeting Apple iCloud can be heard partly in public.
Security News | TechCrunch – Read More
Google Pushing ‘Sec-Gemini’ AI Model for Threat-Intel Workflows
/in General NewsExperimental Sec-Gemini v1 touts a combination of Google’s Gemini LLM capabilities with real-time security data and tooling from Mandiant.
The post Google Pushing ‘Sec-Gemini’ AI Model for Threat-Intel Workflows appeared first on SecurityWeek.
SecurityWeek – Read More