BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [remote] CrushFTP 11.3.1 - Authentication Bypass
- [remote] Invision Community 5.0.6 - Remote Code Execution (RCE)
- [local] Zyxel USG FLEX H series uOS 1.31 - Privilege Escalation
- [local] RDPGuard 9.9.9 - Privilege Escalation
- [webapps] Kentico Xperience 13.0.178 - Cross Site Scripting (XSS)
- [local] TP-Link VN020 F3v(T) TT_V6.2.1021) - DHCP Stack Buffer Overflow
- [webapps] WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [local] VirtualBox 7.0.16 - Privilege Escalation
Fake OnlyFans Tool Backstabs Cybercriminals, Steals Passwords
/in General NewsA fake OnlyFans tool circulating among hackers promises to help steal accounts but actually infects them with the Lumma stealer malware, as discovered by Veriti Research.
Cyware News – Latest Cyber News – Read More
Apache OFBiz Update Fixes High-Severity Flaw Leading to Remote Code Execution
/in General NewsA new security flaw has been addressed in the Apache OFBiz open-source enterprise resource planning (ERP) system that, if successfully exploited, could lead to unauthenticated remote code execution on Linux and Windows.
The high-severity vulnerability, tracked as CVE-2024-45195 (CVSS score: 7.5), affects all versions of the software before 18.12.16.
“An attacker with no valid
The Hacker News – Read More
Pavel Durov Criticizes Outdated Laws After Arrest Over Telegram Criminal Activity
/in General NewsTelegram CEO Pavel Durov has broken his silence nearly two weeks after his arrest in France, stating the charges are misguided.
“If a country is unhappy with an internet service, the established practice is to start a legal action against the service itself,” Durov said in a 600-word statement on his Telegram account.
“Using laws from the pre-smartphone era to charge a CEO with crimes committed
The Hacker News – Read More
RansomHub Claims Planned Parenthood Hack, Steals 93GB of Sensitive Data
/in General NewsRansomHub claims to have breached Intermountain Planned Parenthood, stealing 93GB of data. The healthcare provider is investigating the…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
What is the Shared Fate Model?
/in General NewsNew threats, an overburdened workforce, and regulatory pressures mean cloud service providers need a more resilient model than the shared responsibility framework. That’s where “shared fate” comes in.
darkreading – Read More
Kiteworks Bolsters Its Secure Data Collection Capabilities With 123FormBuilder Acquisition
/in General NewsPost Content
darkreading – Read More
Palo Alto Networks® Closes Acquisition of IBM’s QRadar SaaS Assets
/in General NewsPost Content
darkreading – Read More
How AI can help fix this global healthcare challenge
/in General NewsSingapore’s health minister discusses aging populations and how AI can prepare nations for the inevitable.
Latest stories for ZDNET in Security – Read More
HackerOne Appoints Kara Sprague As CEO
/in General NewsPost Content
darkreading – Read More
Malvertising Campaign Builds a Phish for Lowe’s Employees
/in General NewsRetail employees are being duped into divulging their credentials by typosquatting malvertisements.
darkreading – Read More