BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
GorillaBot Goes Ape With 300K Cyberattacks Worldwide
/in General NewsAmong those affected by all this monkeying around with DDoS in September were some 4,000 organizations in the US.
darkreading – Read More
American Water Confirms Hack: Customer Portal and Billing Services Suspended
/in General NewsThe largest U.S. water utility disconnects customer portal and suspends billing services following a cyberattack.
The post American Water Confirms Hack: Customer Portal and Billing Services Suspended appeared first on SecurityWeek.
SecurityWeek – Read More
Recently spotted Trinity ransomware spurs federal warning to healthcare industry
/in General NewsTrinity ransomware, which bears similarities to previously spotted strains known as 2023Lock and Venus, appears to be an immediate threat to healthcare entities, according to the Department of Health and Human Services’ cyber coordination office.
The Record from Recorded Future News – Read More
Timeline: Top 15 Notable Cyberattacks and Data Breaches
/in General NewsThese 15 cyber attacks or data breaches impacted large swaths of users across the United States and changed what was possible in cybersecurity.
Security | TechRepublic – Read More
Salt Typhoon APT Subverts Law Enforcement Wiretapping: Report
/in General NewsThe Chinese state-sponsored cyberattack threat managed to infiltrate the “lawful intercept” network connections that police use in criminal investigations.
darkreading – Read More
MFA Isn’t Failing, But It’s Not Succeeding: Why a Trusted Security Tool Still Falls Short
/in General NewsMulti-factor authentication is a necessary safeguard, but its limitations show why organizations can’t rely on it alone to prevent breaches.
The post MFA Isn’t Failing, But It’s Not Succeeding: Why a Trusted Security Tool Still Falls Short appeared first on SecurityWeek.
SecurityWeek – Read More
Apple fixes bugs in macOS Sequoia that broke some cybersecurity tools
/in General NewsApple said the new macOS release “improves compatibility with third-party security software,” after the first operating systems release broke several cybersecurity tools.
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More
Smart TV Surveillance? How Samsung and LG’s ACR Technology Tracks What You Watch
/in General NewsResearchers find Smart TVs from Samsung and LG use a Shazam-like tracker to monitor what you watch. Opting out is complex and time-consuming.
The post Smart TV Surveillance? How Samsung and LG’s ACR Technology Tracks What You Watch appeared first on SecurityWeek.
SecurityWeek – Read More
American Water Works believes no water, wastewater facilities affected by cyberattack
/in General NewsThe company, which serves about 14 million Americans across more than a dozen states, said that the attack disrupted certain online services and appointments must be rescheduled.
The Record from Recorded Future News – Read More
American Water warns of billing outages after finding hackers in its systems
/in General NewsThe company said it discovered “unauthorized activity” within its networks on October 3 and promptly moved to disconnect affected systems.
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More