BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] SOPlanning 1.52.01 (Simple Online Planning Tool) - Remote Code Execution (RCE) (Authenticated)
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
Zambia Busts 77 People in China-Backed Cybercrime Operation
/in General NewsPhony call center company conducted online fraud and other Internet scams.
darkreading – Read More
Wiz Buys Startup Gem Security for $350M to Spot Cloud Issues
/in General NewsWiz purchased a cloud detection and response startup founded by a longtime Israeli Military Intelligence leader to address security operations and incident response use cases.
Cyware News – Latest Cyber News – Read More
Python’s PyPI Reveals Its Secrets
/in General NewsGitGuardian is famous for its annual State of Secrets Sprawl report. In their 2023 report, they found over 10 million exposed passwords, API keys, and other credentials exposed in public GitHub commits. The takeaways in their 2024 report did not just highlight 12.8 million new exposed secrets in GitHub, but a number in the popular Python package repository PyPI.
PyPI,
The Hacker News – Read More
TA547 Phishing Attack Hits German Firms with Rhadamanthys Stealer
/in General NewsA threat actor tracked as TA547 has targeted dozens of German organizations with an information stealer called Rhadamanthys as part of an invoice-themed phishing campaign.
“This is the first time researchers observed TA547 use Rhadamanthys, an information stealer that is used by multiple cybercriminal threat actors,” Proofpoint said. “Additionally, the actor appeared to
The Hacker News – Read More
New Google Workspace Feature Prevents Sensitive Security Changes if Two Admins Don’t Approve Them
/in General NewsIf the feature is enabled, certain sensitive admin actions can be taken only if approved by an admin who did not initiate them and thus, in theory, preventing accidental or unauthorized changes made by either malicious insiders or outsiders
Cyware News – Latest Cyber News – Read More
4 Best Open Source Password Managers for Teams in 2024
/in General NewsFind the best open-source password managers to keep your sensitive information secure and easily accessible. Explore top options for protecting your passwords.
Security | TechRepublic – Read More
IMF: Financial Firms Lost $12 Billion to Cyberattacks in Two Decades
/in General NewsThe financial sector has suffered over 20,000 cyberattacks in two decades, causing more than $12 billion in losses.
The post IMF: Financial Firms Lost $12 Billion to Cyberattacks in Two Decades appeared first on SecurityWeek.
SecurityWeek – Read More
DuckDuckGo Is Taking Its Privacy Fight to Data Brokers
/in General NewsPrivacy-focused company DuckDuckGo is launching a tool to remove data from people-search websites, a VPN, and an identity theft restoration service.
Security Latest – Read More
Conservative Revolt in the House Blocks Effort to Reauthorize a Key US Spy Tool
/in General NewsA bill that would reauthorize Section 702 of the Foreign Intelligence Surveillance Act was blocked by a conservative revolt.
The post Conservative Revolt in the House Blocks Effort to Reauthorize a Key US Spy Tool appeared first on SecurityWeek.
SecurityWeek – Read More
Google Pays Out $41,000 for Three Serious Chrome Vulnerabilities
/in General NewsGoogle releases a Chrome 123 update to resolve three high-severity memory safety vulnerabilities.
The post Google Pays Out $41,000 for Three Serious Chrome Vulnerabilities appeared first on SecurityWeek.
SecurityWeek – Read More