BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
No feed items found.
Exploit DB
- [webapps] FluxBB 1.5.11 - Stored Cross-Site Scripting (XSS)
- [webapps] JUX Real Estate 3.4.0 - SQL Injection
- [webapps] Loaded Commerce 6.6 - Client-Side Template Injection(CSTI) (AngularJS)
- [webapps] Extensive VC Addons for WPBakery page builder 1.9.0 - Remote Code Execution (RCE)
- [webapps] TranzAxis 3.2.41.10.26 - Stored Cross-Site Scripting (XSS) (Authenticated)
- [webapps] Gitea 1.24.0 - HTML Injection
- [local] VeeVPN 1.6.1 - Unquoted Service Path
- [webapps] Chamilo LMS 1.11.24 - Remote Code Execution (RCE)
Develop Valuable Security and Risk Management Skills for Just $30 Through 7/21
/in General NewsWith cyberthreats and cyberattacks always on the rise, developing security and risk management skills could be one of the best moves for your business or career.
Security | TechRepublic – Read More
Nearly 10 Billion Passwords Leaked in Biggest Compilation of All Time
/in General NewsNearly 10 billion passwords have been leaked on a popular hacking forum, according to Cybernews.
Security | TechRepublic – Read More
Hackers Exploiting Jenkins Script Console for Cryptocurrency Mining Attacks
/in General NewsCybersecurity researchers have found that it’s possible for attackers to weaponize improperly configured Jenkins Script Console instances to further criminal activities such as cryptocurrency mining.
“Misconfigurations such as improperly set up authentication mechanisms expose the ‘/script’ endpoint to attackers,” Trend Micro’s Shubham Singh and Sunil Bharti said in a technical write-up
The Hacker News – Read More
Scammers Double-Dip by Offering Prior Victims Help to Recover Stolen Funds
/in General NewsThe scammers identify previous scam victims and pose as trusted entities such as government agencies, cybersecurity firms, or fund recovery services, asking for upfront fees or personal information to supposedly help with the recovery process.
Cyware News – Latest Cyber News – Read More
New Golang Botnet “Zergeca” Discovered, Delivers Brutal DDoS Attacks
/in General NewsNew Golang botnet “Zergeca” evades detection and launches DDoS attacks. Ensure your IoT devices are fully patched against…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
The 6 Best Governance, Risk & Compliance (GRC) Tools for 2024
/in General NewsCompare the best governance, risk and compliance tools 2024 has to offer. Discover the best GRC solution for your business’s needs.
Security | TechRepublic – Read More
How to add more eye candy to the GNOME desktop
/in General NewsIf you’d like to spice up your desktop with special effects, the GNOME desktop environment has plenty to offer.
Latest news – Read More
GuardZoo Malware Targets Over 450 Middle Eastern Military Personnel
/in General NewsMilitary personnel from Middle East countries are the target of an ongoing surveillanceware operation that delivers an Android data-gathering tool called GuardZoo.
The campaign, believed to have commenced as early as October 2019, has been attributed to a Houthi-aligned threat actor based on the application lures, command-and-control (C2) server logs, targeting footprint, and the attack
The Hacker News – Read More
Global Coalition Blames China’s APT40 for Hacking Government Networks
/in General NewsSeven nations are backing Australia in calling out a China-linked hacking group for compromising government networks.
The post Global Coalition Blames China’s APT40 for Hacking Government Networks appeared first on SecurityWeek.
SecurityWeek – Read More
How to use Copilot Pro to write, edit, and analyze your Word documents
/in General NewsHere’s how to call on Microsoft’s Copilot Pro to assist you with your Microsoft Word documents.
Latest news – Read More