BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
Woman Accused of Helping North Korean IT Workers Infiltrate Hundreds of US Firms
/in General NewsThe US government has announced charges, seizures, arrests and rewards as part of an effort to disrupt a scheme that generates revenue for North Korea.
The post Woman Accused of Helping North Korean IT Workers Infiltrate Hundreds of US Firms appeared first on SecurityWeek.
SecurityWeek – Read More
Unsafe Software Development Practices Persist, Despite CISA’s Push
/in General NewsDespite repeated efforts by the CISA to eliminate common software vulnerabilities, unsafe software development practices continue to persist across the industry, highlighting the challenges in driving change in coding practices.
Cyware News – Latest Cyber News – Read More
Restore Damaged Files & Save Your Business for Only $50
/in General NewsRegardless of how badly your files, or their formats, are damaged, EaseUS Fixo can restore your office files, videos and photos, even in batches. Get a lifetime subscription for $49.99 at TechRepublic Academy.
Security | TechRepublic – Read More
C/side Emerges From Stealth Mode With $1.7 Million Investment
/in General NewsC/side has emerged from stealth mode with $1.7 million in pre-seed funding from Scribble Ventures and angel investors
The post C/side Emerges From Stealth Mode With $1.7 Million Investment appeared first on SecurityWeek.
SecurityWeek – Read More
Us Offers $5 Million for Info on North Korean IT Workers Involved in Job Fraud
/in General NewsThe U.S. government is offering a $5 million reward for information on a network of North Korean IT workers who allegedly scammed U.S. companies out of nearly $7 million through a job fraud scheme.
Cyware News – Latest Cyber News – Read More
Threat Actors Misusing Quick Assist in Social Engineering Attacks Leading to Ransomware
/in General NewsCybercriminals are exploiting Microsoft’s Quick Assist tool to conduct social engineering attacks and deliver ransomware like Black Basta to target users across various industries.
Cyware News – Latest Cyber News – Read More
Ongoing Malvertising Campaign leads to Ransomware
/in General NewsCybercriminals have weaponized popular software tools like WinSCP and PuTTY to deliver ransomware, tricking users into downloading malicious installers that infect their systems with a Sliver beacon and other malicious payloads.
Cyware News – Latest Cyber News – Read More
CISA Warns of Actively Exploited D-Link Router Vulnerabilities – Patch Now
/in General NewsThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting D-Link routers to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The list of vulnerabilities is as follows –
CVE-2014-100005 – A cross-site request forgery (CSRF) vulnerability impacting D-Link DIR-600 routers that allows an
The Hacker News – Read More
Flaw in Wi-Fi-Standard can Enable SSID Confusion Attacks
/in General NewsA design flaw in the IEEE 802.11 Wi-Fi standard allows attackers to trick victims into connecting to a less secure wireless network than the one they intended to connect to, exposing them to higher risks of traffic interception and manipulation.
Cyware News – Latest Cyber News – Read More
Efficient Document Merging Strategies for Professionals
/in General NewsBy Uzair Amir
Discover time-saving document merging strategies for professionals. Learn how to streamline workflows, enhance collaboration, and protect document integrity for increased productivity and peace of mind.
This is a post from HackRead.com Read the original post: Efficient Document Merging Strategies for Professionals
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More