BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
AXA XL Introduces Endorsement to Help Public Companies Address SEC Cyber Reporting Costs
/in General NewsPost Content
darkreading – Read More
AttackIQ Partners With Cyber Poverty Line Institute to Provide Academy Courses to Underserved Communities
/in General NewsPost Content
darkreading – Read More
RSA: Google Enhances its Enterprise SecOps Offerings With Gemini AI
/in General NewsIn this RSA roundup, we also cover AI news about IBM, AWS and Proofpoint, as well as details about Cisco Hypershield.
Security | TechRepublic – Read More
Top 7 Multicloud Security Providers for 2024
/in General NewsThere are a lot of considerations when adopting a multicloud infrastructure. Use our guide to compare the top multicloud security providers.
Security | TechRepublic – Read More
Google Steps Up The Battle Against Gmail Spam
/in General NewsAdditional enforcement means non-compliant email may be delivered to spam folders. Here’s what Google Workspace administrators and Gmail users need to know.
Security | TechRepublic – Read More
HijackLoader Evolves with New Evasion Techniques
/in General NewsHijackLoader is a modular malware loader that is used to deliver second-stage payloads including Amadey, Lumma Stealer, Racoon Stealer v2, and Remcos RAT. HijackLoader decrypts and parses a PNG image to load the next stage.
Cyware News – Latest Cyber News – Read More
NiceCurl and TameCat Custom Backdoors Leveraged by Damselfly APT
/in General NewsThe Damselfly Advanced Persistent Threat (APT) group, also known as APT42, has been actively using custom backdoor variants, NiceCurl and TameCat, to infiltrate Windows machines.
Cyware News – Latest Cyber News – Read More
Belgium’s Aikido Lands $17M Series A for its Security Platform Aimed at Developers
/in General NewsAikido, a startup based in Ghent, Belgium, has secured a $17 million Series A funding to develop its innovative security platform tailored for developers. The round was led by Singular, with participation from Notion Capital and Connect Ventures.
Cyware News – Latest Cyber News – Read More
Russian GRU Hackers Compromised German, Czech Targets
/in General NewsThe German and Czech governments have publicly disclosed that Russian military intelligence hackers, known as APT28, have been involved in an espionage campaign targeting political parties and critical infrastructure in both countries.
Cyware News – Latest Cyber News – Read More
Microsoft Previews Feature to Block Malicious OAuth Apps
/in General NewsMicrosoft is previewing new AI and machine learning capabilities in Defender XDR that will help detect and block malicious OAuth applications.
darkreading – Read More