BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
Apple Issues Urgent Security Patches for Zero-Day Vulnerabilities
/in General NewsBy Waqas
Immediate Action Required: Update Your Apple Devices, Including iPads, MacBooks, and iPhones, NOW!
This is a post from HackRead.com Read the original post: Apple Issues Urgent Security Patches for Zero-Day Vulnerabilities
Hackread – Latest Cybersecurity News, Press Releases & Technology Today – Read More
Law Firms & Legal Departments Singled Out for Cyberattacks
/in General NewsCybercriminals use legal search terms to ensnare unwitting victims, then launch ransomware or business email compromise attacks.
darkreading – Read More
Okta Breach Widens to Affect 100% of Customer Base
/in General NewsEarly disclosures related to September compromise insisted less than 1% of Okta customers were impacted; now, the company says it was all of them.
darkreading – Read More
Google Workspace Security: DeleFriend Vulnerability Could Allow Unwanted Access to APIs
/in General NewsHunters researchers noted the vulnerability could lead to privilege escalation. Google said the report “does not identify an underlying security issue in our products.”
Security | TechRepublic – Read More
Associated Press, ESPN, CBS among top sites serving fake virus alerts
/in General NewsThreat actors dabbles in obfuscation and evasion techniques. However, as previously detailed by Confiant, they are using much more advanced tricks. Their JavaScript uses obfuscation with changing variable names, making identification harder.
Cyware News – Latest Cyber News – Read More
Apple Patches WebKit Flaws Exploited on Older iPhones
/in General NewsCupertino’s security response team said it was aware of a report the flaws were already exploited against versions of iOS before iOS 16.7.1.
The post Apple Patches WebKit Flaws Exploited on Older iPhones appeared first on SecurityWeek.
SecurityWeek – Read More
68% of US Websites Exposed to Bot Attacks
/in General NewsBy Deeba Ahmed
The conclusion was reached after researchers evaluated over 9,500 of the largest transactional websites in terms of traffic,…
This is a post from HackRead.com Read the original post: 68% of US Websites Exposed to Bot Attacks
Hackread – Latest Cybersecurity News, Press Releases & Technology Today – Read More
Feds Seize ‘Sinbad’ Crypto Mixer Used by North Korea’s Lazarus
/in General NewsThe prolific threat actor has laundered hundreds of millions of dollars in stolen virtual currency through the service.
darkreading – Read More
Google Fixes a Seventh Zero-Day Flaw in Chrome—Update Now
/in General NewsPlus: Major security patches from Microsoft, Mozilla, Atlassian, Cisco, and more.
Security Latest – Read More
Deluge of Nearly 300 Fake Apps Floods Iranian Banking Sector
/in General NewsNo Iranian bank customers are safe from financially motivated cybercriminals wielding convincing but fake mobile apps.
darkreading – Read More