BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] SOPlanning 1.52.01 (Simple Online Planning Tool) - Remote Code Execution (RCE) (Authenticated)
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
VMware Struggles to Fix Flaw Exploited at Chinese Hacking Contest
/in General NewsFor the second time in as many months, VMware patches a remote code execution vulnerability first exploited at a Chinese hacking contest in June.
The post VMware Struggles to Fix Flaw Exploited at Chinese Hacking Contest appeared first on SecurityWeek.
SecurityWeek – Read More
Internet Archive (Archive.org) Hacked for Second Time in a Month
/in General NewsThe Internet Archive (Archive.org) suffered a second security breach in October 2024, exposing support tickets through unrotated Zendesk…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Japanese watchmaker Casio warns of delivery delays after ransomware attack
/in General NewsThe company said the October 5 cyberattack has caused “significant delays in the delivery of items requested for repair” and expects systems by the end of November.
The Record from Recorded Future News – Read More
ISC2 Security Congress 2024: The Landscape of Nation-State Cyber Attacks
/in General NewsCISA advisor Nicole Perlroth closed out ISC2 Security Congress’ keynotes with a wake-up call for security teams to watch for nation-state-sponsored attacks.
Security | TechRepublic – Read More
Apple Offering Hackable iPhones to Universities
/in General NewsApple expands its Security Research Device Program to put hackable iPhones in the hands of select educators at the university level.
The post Apple Offering Hackable iPhones to Universities appeared first on SecurityWeek.
SecurityWeek – Read More
Cyprus’ critical infrastructure targeted by coordinated cyberattacks linked to pro-Palestine groups
/in General NewsCyprus’ critical infrastructure and government websites were targeted in a series of coordinated cyberattacks claimed by several pro-Palestine hacker groups.
The Record from Recorded Future News – Read More
Internet Archive hacker claims to still have access, responds to Zendesk support tickets
/in General NewsA few days after the Internet Archive said services were returning to normal following a breach, someone who appears to be outside the nonprofit organization has been responding to messages on its customer service email platform.
The Record from Recorded Future News – Read More
Gartner: 2025 will see the rise of AI agents (and other top trends)
/in General NewsAlso keep an eye on AI governance tools, hybrid computing, disinformation security, post-quantum cryptography and even more out-there tech.Read More
Security News | VentureBeat – Read More
Hacker Advertises “Top Secret US Space Force Military Technology Archive”
/in General NewsA hacker known as “TAINTU” is advertising a “Top Secret U.S. Space Force Military Technology Archive” for sale,…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Anti-Bot Services Help Cybercrooks Bypass Google ‘Red Page’
/in General NewsThe emergence of novel anti-detection kits for sale on the Dark Web limit the effectiveness of a Chrome browser feature that warns users that they have reached a phishing page.
darkreading – Read More