BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
No feed items found.
Exploit DB
- [webapps] MoziloCMS 3.0 - Remote Code Execution (RCE)
- [webapps] KubeSphere 3.4.0 - Insecure Direct Object Reference (IDOR)
- [webapps] X2CRM 8.5 - Stored Cross-Site Scripting (XSS)
- [local] NVIDIA Container Toolkit 1.16.1 - Time-of-check Time-of-Use (TOCTOU)
- [remote] Microsoft Windows - NTLM Hash Leak Malicious Windows Theme
- [remote] Aztech DSL5005EN Router - 'sysAccess.asp' Admin Password Change (Unauthenticated)
- [webapps] TeamPass 3.0.0.21 - SQL Injection
- [webapps] Jasmin Ransomware - SQL Injection Login Bypass
- [webapps] FluxBB 1.5.11 - Stored Cross-Site Scripting (XSS)
- [webapps] JUX Real Estate 3.4.0 - SQL Injection
Prompt Hacking, Private GPTs, Zero-Day Exploits and Deepfakes: Report Reveals the Impact of AI on Cyber Security Landscape
/in General NewsA new report by cyber security firm Radware identifies the four main impacts of AI on the threat landscape emerging this year.
Security | TechRepublic – Read More
Google Ad for Facebook Redirects to Scam
/in General NewsResearchers observed a malicious ad campaign targeting Facebook users via Google search. The ad, which appears at the top of Google search results for the keyword “Facebook,” redirects users to a scam page.
Cyware News – Latest Cyber News – Read More
North Korea APT Triumvirate Spied on South Korean Defense Industry For Years
/in General NewsLazarus, Kimsuky, and Andariel all got in on the action, stealing “important” data from firms responsible for defending their southern neighbors (from them).
darkreading – Read More
KnowBe4 Plans to Acquire Egress for Email Security Tech
/in General NewsKnowBe4 boasts that the merger will create “the largest, advanced AI-driven cybersecurity platform for managing human risk.”
The post KnowBe4 Plans to Acquire Egress for Email Security Tech appeared first on SecurityWeek.
SecurityWeek – Read More
Iran Dupes US Military Contractors, Gov’t Agencies in Cyber Campaign
/in General NewsAn Iranian state-sponsored hacking group successfully infiltrated hundreds of thousands of employee accounts at US companies and government agencies, including the US Treasury and State Department, as part of a five-year cyber espionage campaign.
Cyware News – Latest Cyber News – Read More
Google yet again delays killing third-party cookies in Chrome. Here’s what you need to know
/in General NewsGoogle now hopes to start phasing out third-party cookies in early 2025, instead of late 2024 as previously planned.
Latest stories for ZDNET in Security – Read More
‘ArcaneDoor’ Cyberspies Hacked Cisco Firewalls to Access Government Networks
/in General NewsSources suspect China is behind the targeted exploitation of two zero-day vulnerabilities in Cisco’s security appliances.
Security Latest – Read More
North Korean Hackers Hijack Antivirus Updates for Malware Delivery
/in General NewsA North Korea-linked threat actor hijacked the update mechanism of eScan antivirus to deploy backdoors and cryptocurrency miners.
The post North Korean Hackers Hijack Antivirus Updates for Malware Delivery appeared first on SecurityWeek.
SecurityWeek – Read More
Iran Dupes US Military Contractors, Gov’t Agencies in Years-Long Cyber Campaign
/in General NewsA state-sponsored hacking team employed a clever masquerade and elaborate back-end infrastructure as part of a five-year info-stealing campaign that compromised the US State and Treasury Departments, and hundreds of thousands of accounts overall.
darkreading – Read More
2023: A ‘Good’ Year for OT Cyberattacks
/in General NewsAttacks increased by “only” 19% last year. But that number is expected to grow significently.
darkreading – Read More