BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] WP Publications WordPress Plugin 1.2 - Stored XSS
- [local] Microsoft Graphics Component Windows 11 Pro (Build 26100+) - Local Elevation of Privileges
- [remote] Keras 2.15 - Remote Code Execution (RCE)
- [local] Microsoft Brokering File System Windows 11 Version 22H2 - Elevation of Privilege
- [webapps] PivotX 3.0.0 RC3 - Remote Code Execution (RCE)
- [hardware] TOTOLINK N300RB 8.54 - Command Execution
- [webapps] SugarCRM 14.0.0 - SSRF/Code Injection
- [webapps] Langflow 1.2.x - Remote Code Execution (RCE)
- [remote] NodeJS 24.x - Path Traversal
- [remote] MikroTik RouterOS 7.19.1 - Reflected XSS
China Issues Warrants for Alleged Taiwanese Hackers and Bans a Business for Pro-Independence Links
/in General NewsChina issued warrants for 20 Taiwanese people it said carried out hacking missions in the Chinese mainland on behalf of the island’s ruling party.
The post China Issues Warrants for Alleged Taiwanese Hackers and Bans a Business for Pro-Independence Links appeared first on SecurityWeek.
SecurityWeek – Read More
Critical Cisco ISE Auth Bypass Flaw Impacts Cloud Deployments on AWS, Azure, and OCI
/in General NewsCisco has released security patches to address a critical security flaw impacting the Identity Services Engine (ISE) that, if successfully exploited, could allow unauthenticated actors to carry out malicious actions on susceptible systems.
The security defect, tracked as CVE-2025-20286, carries a CVSS score of 9.9 out of 10.0. It has been described as a static credential vulnerability.
“A
The Hacker News – Read More
Vodafone Germany Fined $51 Million Over Privacy, Security Failures
/in General NewsGermany fined Vodafone $51 million for failing to protect user data from partners and unauthorized third-parties.
The post Vodafone Germany Fined $51 Million Over Privacy, Security Failures appeared first on SecurityWeek.
SecurityWeek – Read More
Cybersecurity Training in Africa Aims to Bolster Professionals’ Ranks
/in General NewsThe United Nations, Carnegie Mellon University, and private organizations are all aiming to train the next generation of cybersecurity experts, boost economies, and disrupt pipelines to armed groups.
darkreading – Read More
Feds Seize BidenCash Carding Market and Its Crypto Profits
/in General NewsAfter three years of peddling stolen data, BidenCash, one of the web’s most brazen cybercrime hubs is offline, and authorities say they’re just getting started.
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
ICE Quietly Scales Back Rules for Courthouse Raids
/in General NewsA requirement that ICE agents ensure courthouse arrests don’t clash with state and local laws has been rescinded by the agency. ICE declined to explain what that means for future enforcement.
Security Latest – Read More
35K Solar Devices Vulnerable to Potential Hijacking
/in General NewsA little more than three-quarters of these exposed devices are located in Europe, followed by Asia, with 17%.
darkreading – Read More
Vishing Crew Targets Salesforce Data
/in General NewsA group Google is tracking as UNC6040 has been tricking users into installing a malicious version of a Salesforce app to gain access to and steal data from the platform.
darkreading – Read More
Ransomware gang claims responsibility for Kettering Health hack
/in General NewsA group of cybercriminals known as Interlock is advertising stolen data from Kettering Health, which includes patients’ data.
Security News | TechCrunch – Read More
BidenCash darknet forum taken down by US, Dutch law enforcement
/in General NewsThe FBI and Dutch national police were among the law enforcement agencies that took down 145 domains linked to BidenCash, a cybercrime marketplace linked to millions of dollars in fraud since late 2022.
The Record from Recorded Future News – Read More