BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
Alabama Under DDoS Cyberattack by Russian-Backed Hacktivists
/in General NewsThe hacktivist group Anonymous Sudan claims credit for a cyberattack that disrupted Alabama state government earlier this week.
darkreading – Read More
Get 408 hours of cybersecurity training with this $60 bundle
/in General NewsSave hundreds on this comprehensive IT skills training package, with topics like CompTIA certifications, Azure, Cisco, Python, risk management, and more.
Latest stories for ZDNET in Security – Read More
TikTok Ban Raises Data Security, Control Questions
/in General NewsApproved by the House and moving on to the Senate, the potential ban points up the porousness of governmental control in the digital age.
darkreading – Read More
Threat Actors Leverage Document Publishing Sites for Ongoing Credential and Session Token Theft
/in General NewsThreat actors are exploiting legitimate digital document publishing (DDP) sites to host phishing lures, making it harder for traditional security controls to detect and block these attacks.
Cyware News – Latest Cyber News – Read More
French Unemployment Agency Data Breach Impacts 43 Million People
/in General NewsThe stolen data includes sensitive personal details such as full name, date of birth, social security number, and contact information, posing a significant risk of identity theft and phishing.
Cyware News – Latest Cyber News – Read More
Chrome’s Standard Safe Browsing Now Has Real-Time URL Protection
/in General NewsChrome’s standard Safe Browsing protections now provide real-time malicious site detection and Password Checkup on iOS now flags weak passwords.
The post Chrome’s Standard Safe Browsing Now Has Real-Time URL Protection appeared first on SecurityWeek.
SecurityWeek – Read More
The Effects of Law Enforcement Takedowns on the Ransomware Landscape
/in General NewsFollowing the disruption of the Qakbot botnet in August 2023, ransomware affiliates have transitioned to exploiting vulnerabilities as the primary method of delivering malware.
Cyware News – Latest Cyber News – Read More
Microsoft Copilot for Security Official Launch Date Announced
/in General NewsMicrosoft announces that its Copilot for Security generative AI security solution will become generally available on April 1.
The post Microsoft Copilot for Security Official Launch Date Announced appeared first on SecurityWeek.
SecurityWeek – Read More
Report: Investment Scams Grow, 13,000 Domains Detected in January 2024
/in General NewsData from the Federal Trade Commission (FTC) revealed that investment scams resulted in over $4.6 billion in fraud losses in the United States in 2023, marking a troubling 21% rise from the previous year.
Cyware News – Latest Cyber News – Read More
Shadow AI – Should I be Worried?
/in General NewsOverzealous policies and blanket bans on AI tools risk forcing users underground to use unknown tools with unknown consequences.
The post Shadow AI – Should I be Worried? appeared first on SecurityWeek.
SecurityWeek – Read More