BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
- [webapps] Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF)
- [webapps] Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR)
- [local] Daikin Security Gateway 14 - Remote Password Reset
- [local] ZTE ZXV10 H201L - RCE via authentication bypass
Legacy Stripe API Exploited to Validate Stolen Payment Cards in Web Skimmer Campaign
/in General NewsThreat hunters are warning of a sophisticated web skimmer campaign that leverages a legacy application programming interface (API) from payment processor Stripe to validate stolen payment information prior to exfiltration.
“This tactic ensures that only valid card data is sent to the attackers, making the operation more efficient and potentially harder to detect,” Jscrambler researchers Pedro
The Hacker News – Read More
Europol Dismantles Kidflix With 72,000 CSAM Videos Seized in Major Operation
/in General NewsIn one of the largest coordinated law enforcement operations, authorities have dismantled Kidflix, a streaming platform that offered child sexual abuse material (CSAM).
“A total of 1.8 million users worldwide logged on to the platform between April 2022 and March 2025,” Europol said in a statement. “On March 11, 2025, the server, which contained around 72,000 videos at the time, was seized by
The Hacker News – Read More
How to Recover Deleted Photos from an iPhone
/in General NewsAccidentally deleted some photos from your iPhone? You’re definitely not alone; most iPhone users have done it at…
Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – Read More
Aura or LifeLock: Who Offers Better Identity Protection in 2025?
/in General NewsThe Growing Threat of Digital Identity Theft Identity theft is a continuous online threat that lurks behind every…
Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – Read More
In Salt Typhoon’s Wake, Congress Mulls Potential Options
/in General NewsWhile the House Committee on Government Reform was looking for retaliatory options, cybersecurity experts pointed them toward building better defenses.
darkreading – Read More
DPRK ‘IT Workers’ Pivot to Europe for Employment Scams
/in General NewsBy using fake references and building connections with recruiters, some North Korean nationals are landing six-figure jobs that replenish DPRK coffers.
darkreading – Read More
79 Arrested as Dark Web’s Largest Child Abuse Network ‘Kidflix’ Busted
/in General NewsDark web child abuse hub ‘Kidflix’ dismantled in global operation. 1.8M users, 91,000+ CSAM videos exposed. 79 arrests, 39 children rescued.
Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – Read More
Native tribe in Minnesota says cyber incident knocked out healthcare, casino systems
/in General NewsThe Lower Sioux Indian Community warned residents on Wednesday that a cyberattack caused disruptions for the local healthcare facility, government center and casino.
The Record from Recorded Future News – Read More
Still Using an Older Version of iOS or iPadOS? Update Now to Patch These Critical Security Vulnerabilities
/in General NewsApple has also fixed vulnerabilities in iPadOS 17.7.6, macOS Sonoma 14.7.5, and macOS Ventura 13.7.5, as well as its recently released iOS 18.4.
Security | TechRepublic – Read More
Hacker Leaks 144GB of Royal Mail Group Data, Blames Supplier Spectos
/in General NewsHacker leaks 144GB of sensitive Royal Mail Group data, including customer info and internal files, claiming access came via supplier Spectos. Investigation underway!
Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – Read More