BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] Gitea 1.22.0 - Stored XSS
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Aurba 501 - Authenticated RCE
- [webapps] HughesNet HT2000W Satellite Modem - Password Reset
Atomic Stealer Rings in the New Year With Updated Version
/in General NewsAtomic Stealer, a popular malware among criminals, has recently been updated with payload encryption to evade detection and has been distributed through malvertising campaigns and cracked software.
Cyware News – Latest Cyber News – Read More
Cisco Fixes High-Risk Vulnerability Impacting Unity Connection Software
/in General NewsCisco has released software updates to address a critical security flaw impacting Unity Connection that could permit an adversary to execute arbitrary commands on the underlying system.
Tracked as CVE-2024-20272 (CVSS score: 7.3), the vulnerability is an arbitrary file upload bug residing in the web-based management interface and is the result of a lack of authentication in a specific
The Hacker News – Read More
Attacker Targets Hadoop YARN, Flint Servers in Stealthy Campaign
/in General NewsThe adversary is exploiting two known misconfigurations in the big data technologies to drop a Monero cryptominer.
darkreading – Read More
CES 2024: Will the Coolest New AI Gadgets Protect Your Privacy?
/in General NewsConsumer electronics manufacturers are innovating fast. Regulators are slow to keep up. Data privacy is in the balance.
darkreading – Read More
Mandiant’s X Account Was Hacked Using Brute-Force Attack
/in General NewsThe compromise of Mandiant’s X (formerly Twitter) account last week was likely the result of a “brute-force password attack,” attributing the hack to a drainer-as-a-service (DaaS) group.
“Normally, [two-factor authentication] would have mitigated this, but due to some team transitions and a change in X’s 2FA policy, we were not adequately protected,” the threat intelligence firm said
The Hacker News – Read More
Chinese Hackers Exploit Zero-Day Flaws in Ivanti Connect Secure and Policy Secure
/in General NewsA pair of zero-day flaws identified in Ivanti Connect Secure (ICS) and Policy Secure have been chained by suspected China-linked nation-state actors to breach less than 10 customers.
Cybersecurity firm Volexity, which identified the activity on the network of one of its customers in the second week of December 2023, attributed it to a hacking group it tracks under the name UTA0178
The Hacker News – Read More
Mullvad VPN Review (2023): Features, Pricing, Security & Speed
/in General NewsWhile its small server suite may be a dealbreaker, Mullvad VPN’s strong focus on privacy sets it apart from other VPNs on the market. Read more below.
Security | TechRepublic – Read More
Job hunter’s guide to the top cybersecurity companies hiring in 2024
/in General NewsThere’s a growing disconnect between the reality of finding a new job in cybersecurity and the double-digit growth rates that typify cybersecurity job forecasts that predict a hiring crisis.Read More
Security News | VentureBeat – Read More
Bitcoin Prices Spike After SEC X Account Hack
/in General NewsA fraudulent post was taken down in less than 20 minutes, but that didn’t stop it from gaining over 1 million views in that short period of time.
darkreading – Read More
ExtraHop Banks $100M in Growth Funding, Adds New Execs
/in General NewsSeattle network detection and response firm secures $100 million in growth funding and adds to its executive team.
The post ExtraHop Banks $100M in Growth Funding, Adds New Execs appeared first on SecurityWeek.
SecurityWeek – Read More