BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] SOPlanning 1.52.01 (Simple Online Planning Tool) - Remote Code Execution (RCE) (Authenticated)
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
CISA Warns of Critical Vulnerability in Chirp Smart Locks
/in General NewsSome smart locks controlled by Chirp Systems’ software can be remotely unlocked by strangers thanks to a critical security vulnerability. This remote exploitation is possible due to passwords and private keys being hard-coded in Chirp’s Android app.
Cyware News – Latest Cyber News – Read More
Cyber Operations Intensify in Middle East, With Israel the Main Target
/in General NewsCyberattacks tripled over the past year in Israel, making it the most targeted nation in 2023, as cyber operations become a standard part of military conflicts and global protests.
darkreading – Read More
IntelBroker Claims Space-Eyes Breach, Targeting US National Security Data
/in General NewsBy Waqas
Hacker “IntelBroker” claims to have breached Space-Eyes, a geospatial intelligence firm, exposing US national security data. Authorities investigate the claim that could impact sensitive government operations.
This is a post from HackRead.com Read the original post: IntelBroker Claims Space-Eyes Breach, Targeting US National Security Data
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Roku Mandates 2FA for Customers After Credential-Stuffing Compromise
/in General NewsRoku assures customers that no financial information was stolen and that any purchases made through user accounts have been reimbursed.
darkreading – Read More
Defense Award Launches Purdue Project to Strengthen Cyber-Physical Systems
/in General NewsPost Content
darkreading – Read More
Cisco Duo’s Multifactor Authentication Service Breached
/in General NewsA third-party telephony service provider for Cisco Duo falls prey to social engineering, and the company advises customer vigilance against subsequent phishing attacks.
darkreading – Read More
Palo Alto Network Issues Hotfixes for Zero-Day Bug in Its Firewall OS
/in General NewsA sophisticated threat actor is leveraging the bug to deploy a Python backdoor for stealing data and executing other malicious actions.
darkreading – Read More
Collaborative Scheduling: Enhancing Team Coordination With Open-Source Tools
/in General NewsBy Uzair Amir
In the rapidly evolving work environment of today, collaborative scheduling stands out as a foundational pillar for effective…
This is a post from HackRead.com Read the original post: Collaborative Scheduling: Enhancing Team Coordination With Open-Source Tools
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Palo Alto Patches 0-Day (CVE-2024-3400) Exploited by Python Backdoor
/in General NewsBy Deeba Ahmed
Firewall on fire!
This is a post from HackRead.com Read the original post: Palo Alto Patches 0-Day (CVE-2024-3400) Exploited by Python Backdoor
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Cisco Duo Says Hack at Telephony Supplier Exposed MFA SMS Logs
/in General NewsCisco Duo warns that breach exposed phone numbers, phone carriers, metadata and other logs that could lead to downstream social engineering attacks.
The post Cisco Duo Says Hack at Telephony Supplier Exposed MFA SMS Logs appeared first on SecurityWeek.
SecurityWeek – Read More