BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [local] TP-Link VN020 F3v(T) TT_V6.2.1021) - DHCP Stack Buffer Overflow
- [webapps] WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation
- [webapps] Kentico Xperience 13.0.178 - Cross Site Scripting (XSS)
- [local] RDPGuard 9.9.9 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
Serious Adversaries Circle Ivanti CSA Zero-Day Flaws
/in General NewsSuspected nation-state actors are spotted stringing together three different zero-days in the Ivanti Cloud Services Application to gain persistent access to a targeted system.
darkreading – Read More
Intel Broker Claims Cisco Breach, Selling Stolen Data from Major Firms
/in General NewsIntel Broker claims a major data breach at Cisco, allegedly stealing source codes, confidential documents, and credentials from…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Microsoft: Schools Grapple With Thousands of Cyberattacks Weekly
/in General NewsEducation, including K-12 schools and universities, has become the third most targeted sector due to the high variety of sensitive data it stores in its databases.
darkreading – Read More
Pokémon Gaming Company Employee Info Leaked in Hack
/in General NewsThe gaming company reports that the server has been rebuilt after the leak, but has not confirmed what kind of information was compromised.
darkreading – Read More
Gmail users, beware of new AI scam that looks very authentic
/in General NewsA spoofed phone number, an email address plus an AI voice are all it takes to steal your Google credentials. Here’s what to look out for, just in case, you happen to find yourself in such a situation.
Latest stories for ZDNET in Security – Read More
Central Tickets Confirms Data Breach as Hacker Leaks Data of 1 Million Users
/in General NewsAnother day, another ticketing platform breached!
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Iran-linked hackers increasingly spy on governments in Gulf region, researchers say
/in General NewsAn Iran-linked cyberespionage group has stepped up its attacks in recent months against government agencies in the United Arab Emirates (UAE) and the broader Gulf region, according to a new report.
The Record from Recorded Future News – Read More
The biggest data breaches in 2024: 1 billion stolen records and rising
/in General NewsSome of the largest, most damaging breaches of 2024 already account for over a billion stolen records. Plus, some special shout-outs.
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More
ConfusedPilot Attack Can Manipulate RAG-Based AI Systems
/in General NewsAttackers can introduce a malicious document in systems such as Microsoft 365 Copilot to confuse the system, potentially leading to widespread misinformation and compromised decision-making processes.
darkreading – Read More
Internet Archive’s Wayback Machine is back up after data breach – with a catch
/in General NewsThe site is accessible but with a few limitations. Here’s why.
Latest stories for ZDNET in Security – Read More