BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
Badge and CyberArk Announce Partnership to Redefine Privacy in PAM and Secrets Management
/in General NewsSan Francisco, CA, 8th October 2024, CyberNewsWire
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Your IT Systems Are Being Attacked. Are You Prepared?
/in General NewsCompany leadership needs to ensure technology teams are managing continuous monitoring, automated testing, and alignment with business needs across their enterprise.
darkreading – Read More
SecurityWeek to Offer Industrial Cybersecurity Training in Atlanta on October 21
/in General NewsPremier Industrial Cybersecurity Conference offers 75+ sessions and hands-on training to tackle critical infrastructure cyber threats.
The post SecurityWeek to Offer Industrial Cybersecurity Training in Atlanta on October 21 appeared first on SecurityWeek.
SecurityWeek – Read More
Storm-1575 Threat Actor Deploys New Login Panels for Phishing Infrastructure
/in General NewsThe Storm-1575 group is known for frequently rebranding its phishing infrastructure. Recently, ANY.RUN analysts identified the deployment of…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
MoneyGram says customer information stolen during September attack
/in General NewsIn a September incident, hackers were able to access customer information, MoneyGram said, and in some cases it included transaction data.
The Record from Recorded Future News – Read More
Healthcare Organizations Warned of Trinity Ransomware Attacks
/in General NewsThe Department of Health and Human Services warns of Trinity ransomware attacks targeting the healthcare sector.
The post Healthcare Organizations Warned of Trinity Ransomware Attacks appeared first on SecurityWeek.
SecurityWeek – Read More
macOS Sequoia Update Fixes Security Software Compatibility Issues
/in General NewsApple has released a macOS Sequoia software update to resolve compatibility issues with multiple security tools.
The post macOS Sequoia Update Fixes Security Software Compatibility Issues appeared first on SecurityWeek.
SecurityWeek – Read More
Physical Security Firm ADT Hacked Again
/in General NewsADT has detected unauthorized access to its network for the second time in recent months and again some data has been stolen.
The post Physical Security Firm ADT Hacked Again appeared first on SecurityWeek.
SecurityWeek – Read More
Ukrainian Malware Operator Pleads Guilty in US Court
/in General NewsUkrainian national Mark Sokolovsky has pleaded guilty in a US court to operating the malware named Raccoon Infostealer.
The post Ukrainian Malware Operator Pleads Guilty in US Court appeared first on SecurityWeek.
SecurityWeek – Read More
MoneyGram Says Personal Information Stolen in Recent Cyberattack
/in General NewsHackers stole personal information from MoneyGram’s systems during a three-day attack in September 2024.
The post MoneyGram Says Personal Information Stolen in Recent Cyberattack appeared first on SecurityWeek.
SecurityWeek – Read More