BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [remote] Apache Tomcat 10.1.39 - Denial of Service (DoS)
- [remote] Grandstream GSD3710 1.0.11.13 - Stack Overflow
- [webapps] CloudClassroom PHP Project 1.0 - SQL Injection
- [remote] Microsoft Windows Server 2025 JScript Engine - Remote Code Execution (RCE)
- [remote] ABB Cylon Aspect 3.08.04 DeploySource - Remote Code Execution (RCE)
- [local] macOS LaunchDaemon iOS 17.2 - Privilege Escalation
- [remote] Automic Agent 24.3.0 HF4 - Privilege Escalation
- [remote] Fortra GoAnywhere MFT 7.4.1 - Authentication Bypass
- [webapps] WordPress Digits Plugin 8.4.6.1 - Authentication Bypass via OTP Bruteforcing
- [remote] SolarWinds Serv-U 15.4.2 HF1 - Directory Traversal
Colorado Accidentally Put Voting System Passwords Online, but Officials Say Election Is Secure
/in General NewsVoting system passwords were mistakenly put on the Colorado Secretary of State’s website for several months before being spotted and taken down.
The post Colorado Accidentally Put Voting System Passwords Online, but Officials Say Election Is Secure appeared first on SecurityWeek.
SecurityWeek – Read More
WhiteRabbitNeo: High-Powered Potential of Uncensored AI Pentesting for Attackers and Defenders
/in General NewsVersion 2.5 of WhiteRabbitNeo is designed to think like a seasoned red team expert, capable of identifying and exploiting vulnerabilities with remarkable speed and precision.
The post WhiteRabbitNeo: High-Powered Potential of Uncensored AI Pentesting for Attackers and Defenders appeared first on SecurityWeek.
SecurityWeek – Read More
CyberNews Digest: French ISP, Windows Vulnerability, Henry Schein Breach
/in General NewsOne year later, Henry Schein has disclosed a databreach from that was claimed by by BlackCat Randsomware gang. BlackCat (ALPHV) claming they’ve aquired 35TB of sensitive data. In this breach more than 160000 people got their personal information stolen. Source Alon Leviev shared recently a research project…
Source
TechSplicer – Read More
Master IT Fundamentals With This CompTIA Certification Prep Bundle
/in General NewsPrepare for a successful IT career with lifetime access to expert-led courses covering CompTIA A+, Network+, Security+, and Cloud+ certification prep.
Security | TechRepublic – Read More
Back to the Future, Securing Generative AI
/in General NewsWhile there are similar security challenges that parallel traditional security, we must understand that AI requires new ways to approach security.
The post Back to the Future, Securing Generative AI appeared first on SecurityWeek.
SecurityWeek – Read More
Recent Version of LightSpy iOS Malware Packs Destructive Capabilities
/in General NewsA newer version of the LightSpy malware for iOS includes over a dozen new plugins, many with destructive capabilities.
The post Recent Version of LightSpy iOS Malware Packs Destructive Capabilities appeared first on SecurityWeek.
SecurityWeek – Read More
Google Patches Critical Chrome Vulnerability Reported by Apple
/in General NewsGoogle has patched CVE-2024-10487, a critical Chrome vulnerability, and Mozilla has patched high-severity flaws in Firefox.
The post Google Patches Critical Chrome Vulnerability Reported by Apple appeared first on SecurityWeek.
SecurityWeek – Read More
Synology, QNAP, TrueNAS Address Vulnerabilities Exploited at Pwn2Own Ireland
/in General NewsSynology, QNAP and TrueNAS have started patching and mitigating the vulnerabilities exploited recently at Pwn2Own Ireland 2024.
The post Synology, QNAP, TrueNAS Address Vulnerabilities Exploited at Pwn2Own Ireland appeared first on SecurityWeek.
SecurityWeek – Read More
Best Antivirus Software for Small Businesses in 2024
/in General NewsBitdefender is our overall pick for the best antivirus software for small businesses, while Norton offers 24/7 support, and ESET provides scalability.
Security | TechRepublic – Read More
Italian Politicians Express Alarm at Latest Data Breach Allegedly Affecting 800,000 Citizens
/in General NewsProsecutors say the data of at least 800,000 Italians was compromised in breaches dating from 2022 by a private investigative agency.
The post Italian Politicians Express Alarm at Latest Data Breach Allegedly Affecting 800,000 Citizens appeared first on SecurityWeek.
SecurityWeek – Read More