BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
Oil & Gas Sector Falls for Fake Car Accident Phishing Emails
/in General NewsEffective Rhadamanthys phishing campaign spoofs nonexistent “Federal Bureau of Transportation” to compromise recipients, analysts discover.
darkreading – Read More
Omni Hotel IT Outage Disrupts Reservations, Digital Key Systems
/in General NewsGuests affected by the companywide disruption vented their frustrations on social media.
darkreading – Read More
The Biggest Mistake Security Teams Make When Buying Tools
/in General NewsSecurity teams often confuse tool purchasing with program management. They should focus on what a security program means to them, and what they are trying to accomplish.
darkreading – Read More
Victoria VR Becomes First Virtual Reality Developer to Integrate OpenAI
/in General NewsBy Owais Sultan
Virtual reality developer Victoria VR has announced that it is integrating OpenAI into its builder. The move makes…
This is a post from HackRead.com Read the original post: Victoria VR Becomes First Virtual Reality Developer to Integrate OpenAI
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Google Warns: Android Zero-Day Flaws in Pixel Phones Exploited by Forensic Companies
/in General NewsGoogle has disclosed that two Android security flaws impacting its Pixel smartphones have been exploited in the wild by forensic companies.
The high-severity zero-day vulnerabilities are as follows –
CVE-2024-29745 – An information disclosure flaw in the bootloader component
CVE-2024-29748 – A privilege escalation flaw in the firmware component
“There are indications that the [
The Hacker News – Read More
Google Cloud/Cloud Security Alliance Report: IT and Security Pros Are ‘Cautiously Optimistic’ About AI
/in General NewsOf the IT and security professionals surveyed, 63% said AI will improve security within their organization.
Security | TechRepublic – Read More
Expand your IT and cybersecurity skills with this $28 learning bundle
/in General NewsEnhance your career from home with these cybersecurity courses.
Latest stories for ZDNET in Security – Read More
Feds to Microsoft: Clean Up Your Cloud Security Act Now
/in General NewsA federal review board demanded that the tech giant prioritize its “inadequate” security posture, putting the blame solely on the company for last year’s Microsoft 365 breach that allowed China’s Storm-0558 to hack the email accounts of key government officials.
darkreading – Read More
Sophos Reveals Ransomware Attacks Are Now Targeting Backups
/in General NewsBy Waqas
Storing a backup of your data is a wise decision, but have you considered keeping a backup of your backup?
This is a post from HackRead.com Read the original post: Sophos Reveals Ransomware Attacks Are Now Targeting Backups
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
U.S. Cyber Safety Board Slams Microsoft Over Breach by China-Based Hackers
/in General NewsThe U.S. Cyber Safety Review Board (CSRB) has criticized Microsoft for a series of security lapses that led to the breach of nearly two dozen companies across Europe and the U.S. by a China-based nation-state group called Storm-0558 last year.
The findings, released by the Department of Homeland Security (DHS) on Tuesday, found that the intrusion was preventable, and that it became successful
The Hacker News – Read More