BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
Salt Typhoon APT Subverts Law Enforcement Wiretapping: Report
/in General NewsThe Chinese state-sponsored cyberattack threat managed to infiltrate the “lawful intercept” network connections that police use in criminal investigations.
darkreading – Read More
MFA Isn’t Failing, But It’s Not Succeeding: Why a Trusted Security Tool Still Falls Short
/in General NewsMulti-factor authentication is a necessary safeguard, but its limitations show why organizations can’t rely on it alone to prevent breaches.
The post MFA Isn’t Failing, But It’s Not Succeeding: Why a Trusted Security Tool Still Falls Short appeared first on SecurityWeek.
SecurityWeek – Read More
Apple fixes bugs in macOS Sequoia that broke some cybersecurity tools
/in General NewsApple said the new macOS release “improves compatibility with third-party security software,” after the first operating systems release broke several cybersecurity tools.
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More
Smart TV Surveillance? How Samsung and LG’s ACR Technology Tracks What You Watch
/in General NewsResearchers find Smart TVs from Samsung and LG use a Shazam-like tracker to monitor what you watch. Opting out is complex and time-consuming.
The post Smart TV Surveillance? How Samsung and LG’s ACR Technology Tracks What You Watch appeared first on SecurityWeek.
SecurityWeek – Read More
American Water Works believes no water, wastewater facilities affected by cyberattack
/in General NewsThe company, which serves about 14 million Americans across more than a dozen states, said that the attack disrupted certain online services and appointments must be rescheduled.
The Record from Recorded Future News – Read More
American Water warns of billing outages after finding hackers in its systems
/in General NewsThe company said it discovered “unauthorized activity” within its networks on October 3 and promptly moved to disconnect affected systems.
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More
Learn Cybersecurity Essentials for Just $40 from Home
/in General NewsGain a comprehensive understanding of cybersecurity with this 12-hour, 5-course bundle that covers everything from foundational concepts to advanced strategies.
Security | TechRepublic – Read More
Stealthy ‘Perfctl’ Malware Infects Thousands of Linux Servers
/in General NewsThe perfctl malware has been targeting vulnerabilities and misconfigurations in millions of Linux systems, likely infecting thousands.
The post Stealthy ‘Perfctl’ Malware Infects Thousands of Linux Servers appeared first on SecurityWeek.
SecurityWeek – Read More
Russian state media company operation disrupted by ‘unprecedented’ cyberattack
/in General NewsRussian state television and radio broadcasting company VGTRK was hit by a cyberattack on Monday that disrupted its operations, the company confirmed in a statement to local news agencies.
The Record from Recorded Future News – Read More
Multi-cloud Strategies Making DDI and DNS Cumbersome to Manage
/in General NewsInfoblox’s Universal DDI solution could help stop cyber threat actors earlier.
Security | TechRepublic – Read More