BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Skyvern 0.1.85 - Remote Code Execution (RCE) via SSTI
- [remote] PCMan FTP Server 2.0.7 - Buffer Overflow
- [webapps] Litespeed Cache WordPress Plugin 6.3.0.1 - Privilege Escalation
- [local] Parrot and DJI variants Drone OSes - Kernel Panic Exploit
- [remote] Windows 11 SMB Client - Privilege Escalation & Remote Code Execution (RCE)
- [remote] AirKeyboard iOS App 1.0.5 - Remote Input Injection
- [webapps] PHP CGI Module 8.3.4 - Remote Code Execution (RCE)
- [remote] WebDAV Windows 10 - Remote Code Execution (RCE)
- [local] Microsoft Excel Use After Free - Local Code Execution
- [remote] Windows File Explorer Windows 10 Pro x64 - TAR Extraction
Ransomware Gangs Invest in Custom Data Stealing Malware
/in General NewsRansomware gangs are now creating custom data-stealing malware instead of just encrypting files. Mature crime organizations are investing in bespoke data theft tools, according to a Cisco Talos report on the top 14 ransomware groups.
Cyware News – Latest Cyber News – Read More
Veeam Flaw Becomes Ransomware Vector a Year After Patching
/in General NewsA new ransomware gang known as EstateRansomware is exploiting a Veeam vulnerability that was patched over a year ago to spread file-encrypting malware and demand ransom payments.
Cyware News – Latest Cyber News – Read More
Cytactic Raises $16M in Seed Funding
/in General NewsCytactic, an Israel-based provider of a platform pioneering cyber crisis readiness and management, raised $16M in a seed funding round led by Evolution Equity Partners. It intends to use the funds to expand operations and development efforts.
Cyware News – Latest Cyber News – Read More
How to use ChatGPT to digitize your handwritten notes for free
/in General NewsThis is easily the most underrated GPT-4o feature.
Latest news – Read More
Exploring Compiled V8 JavaScript Usage in Malware
/in General NewsCompiled V8 JavaScript in Google’s engine converts JavaScript into low-level bytecode, making analysis and detection difficult. Attacks using this bytecode ensure compatibility with the V8 engine for successful execution.
Cyware News – Latest Cyber News – Read More
Akira Ransomware: Lightning-Fast Data Exfiltration in 2-Ish Hours
/in General NewsThe gang’s time from initial access to draining data out of a Veeam server is shockingly fast; after which the attackers went on to deploy actual ransomware in less than a day.
darkreading – Read More
How to use Google’s AI-powered NotebookLM to organize your research
/in General NewsGoogle’s NotebookLM can collect and collate your notes, documents, research, and sources to help you make sense of it all.
Latest news – Read More
The best Apple Watches of 2024: Expert tested and reviewed
/in General NewsI’ve tested every Apple Watch model released. These are the best Apple Watches for tracking your health and accessing quick info and apps.
Latest news – Read More
The best cheap tablets of 2024: Expert tested and reviewed
/in General NewsWe went hands-on with the top cheap tablets under $400 that offer high-end features at lower prices from Apple, Amazon, and more.
Latest news – Read More
BlastRADIUS Vulnerability Discovered in RADIUS Protocol Used in Corporate Networks and Cloud
/in General NewsExploiting the BlastRADIUS vulnerability leverages a man-in-the-middle attack on the RADIUS authentication process.
Security | TechRepublic – Read More