BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
Hybrid Analysis Utilizes Criminal IP’s Robust Domain Data for Better Malware Detection
/in General NewsTorrance, United States / California, 7th October 2024, CyberNewsWire
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
What the White House Should Do Next for Cyber Regulation
/in General NewsCreating a new office of cyber-regulation strategy is the government’s best opportunity to improve security and to protect Americans in an increasingly dangerous world.
darkreading – Read More
Comcast says customer data stolen in ransomware attack on debt collection agency
/in General NewsThe ransomware attack on a U.S. debt collection agency also affects customers of CF Medical and Truist Bank.
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More
ICS Cybersecurity Conference to Take Place October 21-24 in Atlanta
/in General NewsWith 75+ sessions, the conference brings together hundreds of delegates to explore cutting-edge strategies and solutions to fortify OT environments and enhance resilience.
The post ICS Cybersecurity Conference to Take Place October 21-24 in Atlanta appeared first on SecurityWeek.
SecurityWeek – Read More
MITRE Announces AI Incident Sharing Project
/in General NewsMITRE’s AI Incident Sharing initiative helps organizations receive and hand out data on real-world AI incidents.
The post MITRE Announces AI Incident Sharing Project appeared first on SecurityWeek.
SecurityWeek – Read More
Vulnerable APIs and Bot Attacks Costing Businesses Up to $186 Billion Annually
/in General NewsOrganizations are losing between $94 – $186 billion annually to vulnerable or insecure APIs (Application Programming Interfaces) and automated abuse by bots. That’s according to The Economic Impact of API and Bot Attacks report from Imperva, a Thales company. The report highlights that these security threats account for up to 11.8% of global cyber events and losses, emphasizing the escalating
The Hacker News – Read More
Personal Information Compromised in Universal Music Data Breach
/in General NewsUniversal Music Group is informing hundreds of individuals about a recent data breach impacting personal information.
The post Personal Information Compromised in Universal Music Data Breach appeared first on SecurityWeek.
SecurityWeek – Read More
Critical Vulnerabilities Expose Nearly 1 Million DrayTek Routers Globally
/in General NewsCritical security vulnerabilities exposed in DrayTek Vigor routers: Discover how to protect your network from these serious flaws.…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
New Gorilla Botnet Launches Over 300,000 DDoS Attacks Across 100 Countries
/in General NewsCybersecurity researchers have discovered a new botnet malware family called Gorilla (aka GorillaBot) that is a variant of the leaked Mirai botnet source code.
Cybersecurity firm NSFOCUS, which identified the activity last month, said the botnet “issued over 300,000 attack commands, with a shocking attack density” between September 4 and September 27, 2024. No less than 20,000 commands designed
The Hacker News – Read More
Okta Tells Users to Check for Potential Exploitation of Newly Patched Vulnerability
/in General NewsOkta has resolved a vulnerability that could have allowed attackers to bypass sign-on policies and gain access to applications.
The post Okta Tells Users to Check for Potential Exploitation of Newly Patched Vulnerability appeared first on SecurityWeek.
SecurityWeek – Read More