BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
I tried two passwordless password managers, and was seriously impressed by one
/in General NewsDashlane and 1Password are now offering options that allow you to set up a new account without a master password. Here’s what I found when I tested them both.
Latest stories for ZDNET in Security – Read More
Exploring Imgly SDK Alternatives for Ultimate Flexibility
/in General NewsBy Owais Sultan
Imgly SDK has been a popular choice for developers seeking reliable image processing and manipulation solutions. However, in…
This is a post from HackRead.com Read the original post: Exploring Imgly SDK Alternatives for Ultimate Flexibility
Hackread – Latest Cybersecurity News, Press Releases & Technology Today – Read More
Cyberattack Targets Albanian Parliament’s Data System, Halting Its Work
/in General NewsAlbania’s Parliament said it had suffered a cyberattack with hackers trying to get into its data system, resulting in a temporary halt in its services.
The post Cyberattack Targets Albanian Parliament’s Data System, Halting Its Work appeared first on SecurityWeek.
SecurityWeek – Read More
Palo Alto Networks Completes Acquisition of Talon
/in General NewsPalo Alto Networks completed the acquisition of Talon Cyber Security, an Israeli startup selling a secure browser technology to enterprise customers.
The post Palo Alto Networks Completes Acquisition of Talon appeared first on SecurityWeek.
SecurityWeek – Read More
New Rugmi Malware Loader Surges with Hundreds of Daily Detections
/in General NewsThe malware is sold as a service and can be obtained through malvertising, fake browser updates, and cracked software installations. It has also been found that the malware is being spread through Discord’s content delivery network.
Cyware News – Latest Cyber News – Read More
In Cybersecurity and Fashion, What’s Old Is New Again
/in General NewsWhat a recent rise in DDoS attacks portends — and how to prepare for 2024.
darkreading – Read More
Apple’s iPhone Hack Attack Warnings Spark Political Firestorm in India
/in General NewsBy Waqas
Big Tech vs. Big Brother: Apple Defies India Pressure over iPhone Hacking Alerts.
This is a post from HackRead.com Read the original post: Apple’s iPhone Hack Attack Warnings Spark Political Firestorm in India
Hackread – Latest Cybersecurity News, Press Releases & Technology Today – Read More
Google Cloud Resolves Privilege Escalation Flaw Impacting Kubernetes Service
/in General NewsGoogle Cloud has addressed a medium-severity security flaw in its platform that could be abused by an attacker who already has access to a Kubernetes cluster to escalate their privileges.
“An attacker who has compromised the Fluent Bit logging container could combine that access with high privileges required by Anthos Service Mesh (on clusters that have enabled it) to
The Hacker News – Read More
Trinidad and Tobago Social Security Agency Discloses Post-Christmas Ransomware Attack
/in General NewsThe National Insurance Board in Trinidad and Tobago has been hit by a ransomware attack, leading to the closure of its offices and limiting its operations for an extended period.
Cyware News – Latest Cyber News – Read More
Skynet Ahoy? What to Expect for Next-Gen AI Security Risks
/in General NewsThe innovation that ChatGPT and other LLMs demonstrate is a good thing, but safeguards and other security frameworks must keep pace.
darkreading – Read More