BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
UK: NCSC to Defend ‘High-Risk’ Political Candidates from Cyberattacks
/in General NewsThe Personal Internet Protection (PIP) service aims to provide an additional layer of security to individuals at “high-risk” of cyberattacks like spear-phishing, malware and other threats, ahead of the upcoming election year.
Cyware News – Latest Cyber News – Read More
Palo Alto Networks is Buying Security Assets From IBM to Expand Customer Base
/in General NewsPalo Alto Networks is acquiring IBM’s QRadar cloud security software assets and migrating existing customers to its own Cortex XSIAM platform, as part of a broader partnership that will give Palo Alto access to consultants and a larger customer base.
Cyware News – Latest Cyber News – Read More
North Korean Hackers Exploit Facebook Messenger in Targeted Malware Campaign
/in General NewsThe North Korea-linked Kimsuky hacking group has been attributed to a new social engineering attack that employs fictitious Facebook accounts to targets via Messenger and ultimately delivers malware.
“The threat actor created a Facebook account with a fake identity disguised as a public official working in the North Korean human rights field,” South Korean cybersecurity company Genians
The Hacker News – Read More
Android to Add New Anti-Theft and Data Protection Features
/in General NewsGoogle is adding new anti-theft and data protection features for Android, including AI-powered screen locks, remote locking, and improved factory reset protection to secure users’ data if devices are lost or stolen.
Cyware News – Latest Cyber News – Read More
Alkira Raises $100 Million for Secure Network Infrastructure Platform
/in General NewsNetwork infrastructure as-a-service Alkira has raised $100 million in a Series C funding round led by Tiger Global Management.
The post Alkira Raises $100 Million for Secure Network Infrastructure Platform appeared first on SecurityWeek.
SecurityWeek – Read More
FCC Reveals ‘Royal Tiger’ Robocall Campaign
/in General NewsIn a first-ever move, the commission’s enforcement bureau has high hopes that official classification will allow law enforcement partners to better combat these kinds of threats.
darkreading – Read More
Nissan Data Breach Impacts 53,000 Employees
/in General NewsNissan North America determined recently that a ransomware attack launched last year resulted in employee personal information compromise.
The post Nissan Data Breach Impacts 53,000 Employees appeared first on SecurityWeek.
SecurityWeek – Read More
Cisco’s Splunk Acquisition Should Help Security Pros See Threats Sooner in Australia and New Zealand
/in General NewsCisco’s Splunk acquisition was finalised in March 2024. Splunk’s Craig Bates says the combined offering could enhance observability and put data to work for security professionals in an age of AI threat defence.
Security | TechRepublic – Read More
Researchers Discover 11 Vulnerabilities in GE Ultrasound Devices
/in General NewsResearchers identified 11 security flaws in certain GE HealthCare ultrasound devices, including the Invenia ABUS 2.0, that could allow malicious actors with physical access to the devices to implant ransomware or access and manipulate patient data.
Cyware News – Latest Cyber News – Read More
Legacy of Wisdom: Security Lessons Inspired by My Father
/in General NewsHonoring my father by translating his timeless life lessons into practical wisdom for the cybersecurity profession.
The post Legacy of Wisdom: Security Lessons Inspired by My Father appeared first on SecurityWeek.
SecurityWeek – Read More