BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
- Uro - Declutters Url Lists For Crawling/Pentesting
- Wshlient - A Simple Tool To Interact With Web Shells And Command Injection Vulnerabilities
Exploit DB
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
- [webapps] Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF)
- [webapps] Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR)
- [local] Daikin Security Gateway 14 - Remote Password Reset
- [local] ZTE ZXV10 H201L - RCE via authentication bypass
Ban Sought for Chinese, Russian Software and Hardware Used in Autonomous Vehicles on US Roads
/in General NewsIn extreme situations, a foreign adversary could shut down or take simultaneous control of multiple vehicles operating in the United States, causing crashes and blocking roads.
The post Ban Sought for Chinese, Russian Software and Hardware Used in Autonomous Vehicles on US Roads appeared first on SecurityWeek.
SecurityWeek – Read More
Hackers Posed as Google Support to Steal $243 Million in Crypto
/in General NewsHackers stole $243M from a single victim by posing as Google and Gemini support, resetting 2FA to access…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
CERT/CC Warns of Unpatched Critical Vulnerability in Microchip ASF
/in General NewsMicrochip Advanced Software Framework (ASF) 3 is affected by a critical vulnerability that could lead to remote code execution.
The post CERT/CC Warns of Unpatched Critical Vulnerability in Microchip ASF appeared first on SecurityWeek.
SecurityWeek – Read More
What Is Threat Hunting In Cybersecurity?
/in General NewsCyber threat hunting involves taking proactive measures to detect potential threats or malicious activities. Learn about threat-hunting techniques and how they work.
Security | TechRepublic – Read More
Versa Networks Patches Vulnerability Exposing Authentication Tokens
/in General NewsVersa Networks has released patches for a Versa Director vulnerability for which proof-of-concept (PoC) code exists.
The post Versa Networks Patches Vulnerability Exposing Authentication Tokens appeared first on SecurityWeek.
SecurityWeek – Read More
Keycloak Vulnerability Puts SAML Authentication at Risk
/in General NewsThe vulnerability lies in Keycloak’s XMLSignatureUtil class, which incorrectly verifies SAML signatures, disregarding the vital “Reference” element that specifies the signed portion of the document.
Cyware News – Latest Cyber News – Read More
US DoJ Charged Two Men With Stealing and Laundering $230 Million Worth of Cryptocurrency
/in General NewsTwo suspects, Malone Lam and Jeandiel Serrano, were arrested by the US Department of Justice for stealing and laundering over $230 million worth of cryptocurrency in Miami.
Cyware News – Latest Cyber News – Read More
Picus Security Raises $45M in Funding
/in General NewsPicus Security, a San Francisco, CA-based security validation company, raised $45M in funding. The round, which brought total funds raised to $80M, was led by Riverwood Capital, with participation from existing investor Earlybird Digital East Fund.
Cyware News – Latest Cyber News – Read More
Cybersecurity Products Conking Out After macOS Sequoia Update
/in General NewsmacOS Sequoia updates are causing cybersecurity software failures and breaking network connectivity for many.
The post Cybersecurity Products Conking Out After macOS Sequoia Update appeared first on SecurityWeek.
SecurityWeek – Read More
Lumma Stealer Malware Campaign Exploits Fake CAPTCHA Pages
/in General NewsThe Lumma Stealer malware is being distributed through deceptive human verification pages that trick Windows users into running malicious PowerShell commands, leading to sensitive information theft.
Cyware News – Latest Cyber News – Read More