BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] WP Publications WordPress Plugin 1.2 - Stored XSS
- [local] Microsoft Graphics Component Windows 11 Pro (Build 26100+) - Local Elevation of Privileges
- [remote] Keras 2.15 - Remote Code Execution (RCE)
- [local] Microsoft Brokering File System Windows 11 Version 22H2 - Elevation of Privilege
- [webapps] PivotX 3.0.0 RC3 - Remote Code Execution (RCE)
- [hardware] TOTOLINK N300RB 8.54 - Command Execution
- [webapps] SugarCRM 14.0.0 - SSRF/Code Injection
- [webapps] Langflow 1.2.x - Remote Code Execution (RCE)
- [remote] NodeJS 24.x - Path Traversal
- [remote] MikroTik RouterOS 7.19.1 - Reflected XSS
Healthcare Organizations Warned of Trinity Ransomware Attacks
/in General NewsThe Department of Health and Human Services warns of Trinity ransomware attacks targeting the healthcare sector.
The post Healthcare Organizations Warned of Trinity Ransomware Attacks appeared first on SecurityWeek.
SecurityWeek – Read More
macOS Sequoia Update Fixes Security Software Compatibility Issues
/in General NewsApple has released a macOS Sequoia software update to resolve compatibility issues with multiple security tools.
The post macOS Sequoia Update Fixes Security Software Compatibility Issues appeared first on SecurityWeek.
SecurityWeek – Read More
Physical Security Firm ADT Hacked Again
/in General NewsADT has detected unauthorized access to its network for the second time in recent months and again some data has been stolen.
The post Physical Security Firm ADT Hacked Again appeared first on SecurityWeek.
SecurityWeek – Read More
Ukrainian Malware Operator Pleads Guilty in US Court
/in General NewsUkrainian national Mark Sokolovsky has pleaded guilty in a US court to operating the malware named Raccoon Infostealer.
The post Ukrainian Malware Operator Pleads Guilty in US Court appeared first on SecurityWeek.
SecurityWeek – Read More
MoneyGram Says Personal Information Stolen in Recent Cyberattack
/in General NewsHackers stole personal information from MoneyGram’s systems during a three-day attack in September 2024.
The post MoneyGram Says Personal Information Stolen in Recent Cyberattack appeared first on SecurityWeek.
SecurityWeek – Read More
Qualcomm Alerted to Possible Zero-Day Exploited in Targeted Attacks
/in General NewsGoogle and Amnesty have seen evidence that a Qualcomm chipset vulnerability tracked as CVE-2024-43047 may be exploited in the wild.
The post Qualcomm Alerted to Possible Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek.
SecurityWeek – Read More
Android’s October 2024 Update Patches 26 Vulnerabilities
/in General NewsGoogle ships patches for 26 high-severity vulnerabilities as part of Android’s October 2024 security update.
The post Android’s October 2024 Update Patches 26 Vulnerabilities appeared first on SecurityWeek.
SecurityWeek – Read More
Telegram Already Shares Data of Over 100 U.S. Users with Law Enforcement
/in General NewsTelegram, the messaging platform known for its strong stance on user privacy, has shared data of more than 100 U.S. users with law enforcement agencies. This shouldn’t come as a surprise since reporting on it’s shift in privacy, to help law enforcement. The Numbers According to a recent report from independent investigative website 404 Media, Telegram has responded to multiple law…
Source
TechSplicer – Read More
Mideast, Turkey Cyber Threats Spike, Prompting Defense Changes
/in General NewsThe vast majority of organizations in the region saw more attacks in the past year, but most don’t feel prepared for future incidents.
darkreading – Read More
Pro-Ukrainian Hackers Strike Russian State TV on Putin’s Birthday
/in General NewsUkraine has claimed responsibility for a cyber attack that targeted Russia state media company VGTRK and disrupted its operations, according to reports from Bloomberg and Reuters.
The incident took place on the night of October 7, VGTRK confirmed, describing it as an “unprecedented hacker attack.” However, it said “no significant damage” was caused and that everything was working normally
The Hacker News – Read More