BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
Fidelity National Financial Subsidiary Says 1.3 Million Affected by November Cyberattack
/in General NewsThe cyberattack on Fidelity National Financial was claimed by the AlphV/Blackcat ransomware gang, causing disruption to hundreds of home purchases and leading to the seizure of the gang’s leak site by law enforcement agencies.
Cyware News – Latest Cyber News – Read More
Kazakhstan to Extradite Russian Hacker to Moscow
/in General NewsA Russian man accused by the United States of trafficking in a hacked database of online credentials will apparently evade American courts after the Russian government said it had succeeded in extraditing him.
Cyware News – Latest Cyber News – Read More
Rhysida Ransomware Group Hacked Abdali Hospital in Jordan
/in General NewsThe Rhysida ransomware group has claimed responsibility for hacking Abdali Hospital in Jordan. The group has published proof of the hack, including stolen documents, and is now auctioning off the sensitive data for 10 BTC.
Cyware News – Latest Cyber News – Read More
This Clever New Idea Could Fix AirTag Stalking While Maximizing Privacy
/in General NewsApple updated its location-tracking system in an attempt to cut down on AirTag abuse while still preserving privacy. Researchers think they’ve found a better balance.
Security Latest – Read More
Hackers Steal Customer Data From Europe’s Largest Parking App Operator
/in General NewsEasyPark Group, the owner of brands including RingGo and ParkMobile, said customer names, phone numbers, addresses, email addresses, and parts of credit card numbers had been taken but said parking data had not been compromised in the cyberattack.
Cyware News – Latest Cyber News – Read More
Chinese Hackers Deliver Malware to Barracuda Email Security Appliances via New Zero-Day
/in General NewsChinese hackers exploited a zero-day tracked as CVE-2023-7102 to deliver malware to Barracuda Email Security Gateway (ESG) appliances.
The post Chinese Hackers Deliver Malware to Barracuda Email Security Appliances via New Zero-Day appeared first on SecurityWeek.
SecurityWeek – Read More
Poorly Secured Linux SSH Servers Under Attack for Cryptocurrency Mining
/in General NewsLinux SSH servers with poor security are being targeted by cybercriminals to install port scanners and dictionary attack tools. The attackers aim to compromise other vulnerable servers and use them for cryptocurrency mining and DDoS attacks.
Cyware News – Latest Cyber News – Read More
LockBit Gang Claims to Have Breached Accountancy Firm Xeinadin
/in General NewsThe LockBit ransomware group has targeted Xeinadin, an accountancy firm with over 60,000 clients, and threatens to leak 1.5 terabytes of stolen customer data if not contacted by the company.
Cyware News – Latest Cyber News – Read More
AI moves from theory to practice, zero trust gets real, and other 2024 predictions from Dell CTO
/in General NewsWhat does 2024 have in store? Improved gen AI ecosystems, next-level security, ‘common edge’ — plus, how quantum will support AI.Read More
Security News | VentureBeat – Read More
Warning: Poorly Secured Linux SSH Servers Under Attack for Cryptocurrency Mining
/in General NewsPoorly secured Linux SSH servers are being targeted by bad actors to install port scanners and dictionary attack tools with the goal of targeting other vulnerable servers and co-opting them into a network to carry out cryptocurrency mining and distributed denial-of-service (DDoS) attacks.
“Threat actors can also choose to install only scanners and sell the breached IP and account credentials on
The Hacker News – Read More