BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
- Uro - Declutters Url Lists For Crawling/Pentesting
- Wshlient - A Simple Tool To Interact With Web Shells And Command Injection Vulnerabilities
Exploit DB
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
- [webapps] Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF)
- [webapps] Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR)
- [local] Daikin Security Gateway 14 - Remote Password Reset
- [local] ZTE ZXV10 H201L - RCE via authentication bypass
Researcher Says Healthcare Facility’s Doors Hackable for Over a Year
/in General NewsA researcher analyzing building access control vulnerabilities says a US healthcare facility has yet to patch security holes one year after being notified.
The post Researcher Says Healthcare Facility’s Doors Hackable for Over a Year appeared first on SecurityWeek.
SecurityWeek RSS Feed – Read More
DefectDojo Raises $7 Million for Application Security Platform
/in General NewsApplication security and vulnerability management platform DefectDojo has raised $7 million in Series A funding.
The post DefectDojo Raises $7 Million for Application Security Platform appeared first on SecurityWeek.
SecurityWeek – Read More
India-Linked Hackers Targeting Pakistani Government, Law Enforcement
/in General NewsThe India-linked threat actor SloppyLemming has been targeting government, law enforcement, and other entities in Pakistan.
The post India-Linked Hackers Targeting Pakistani Government, Law Enforcement appeared first on SecurityWeek.
SecurityWeek – Read More
Expert Tips on How to Spot a Phishing Link
/in General NewsPhishing attacks are becoming more advanced and harder to detect, but there are still telltale signs that can help you spot them before it’s too late. See these key indicators that security experts use to identify phishing links:1. Check Suspicious URLs
Phishing URLs are often long, confusing, or filled with random characters. Attackers use these to disguise the link’s true destination
The Hacker News – Read More
Agentic AI in SOCs: A Solution to SOAR’s Unfulfilled Promises
/in General NewsSecurity Orchestration, Automation, and Response (SOAR) was introduced with the promise of revolutionizing Security Operations Centers (SOCs) through automation, reducing manual workloads and enhancing efficiency. However, despite three generations of technology and 10 years of advancements, SOAR hasn’t fully delivered on its potential, leaving SOCs still grappling with many of the same
The Hacker News – Read More
Third Recent Ivanti Vulnerability Exploited in the Wild
/in General NewsCVE-2024-7593 is the third Ivanti product vulnerability patched in recent months that has been exploited in the wild.
The post Third Recent Ivanti Vulnerability Exploited in the Wild appeared first on SecurityWeek.
SecurityWeek – Read More
Webinar Today: Shield Your Data, Secure Your Future: A Multi-Layered Approach to Operational Resilience
/in General NewsJoin the webinar to gain insights and learn actionable steps to enhance your organization’s data security and resilience.
The post Webinar Today: Shield Your Data, Secure Your Future: A Multi-Layered Approach to Operational Resilience appeared first on SecurityWeek.
SecurityWeek – Read More
ChatGPT macOS Flaw Could’ve Enabled Long-Term Spyware via Memory Function
/in General NewsA now-patched security vulnerability in OpenAI’s ChatGPT app for macOS could have made it possible for attackers to plant long-term persistent spyware into the artificial intelligence (AI) tool’s memory.
The technique, dubbed SpAIware, could be abused to facilitate “continuous data exfiltration of any information the user typed or responses received by ChatGPT, including any future chat sessions
The Hacker News – Read More
Iran Was Behind Thousands of Text Messages Calling for Revenge Over Quran Burnings, Sweden Says
/in General NewsSweden is accusing Iran of hacking SMS service and sending out thousands of text messages calling for revenge over Quran burnings.
The post Iran Was Behind Thousands of Text Messages Calling for Revenge Over Quran Burnings, Sweden Says appeared first on SecurityWeek.
SecurityWeek – Read More
Transportation Companies Hit by Cyberattacks Using Lumma Stealer and NetSupport Malware
/in General NewsTransportation and logistics companies in North America are the target of a new phishing campaign that delivers a variety of information stealers and remote access trojans (RATs).
The activity cluster, per Proofpoint, makes use of compromised legitimate email accounts belonging to transportation and shipping companies so as to inject malicious content into existing email conversations.
As many
The Hacker News – Read More