BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [remote] CrushFTP 11.3.1 - Authentication Bypass
- [remote] Invision Community 5.0.6 - Remote Code Execution (RCE)
- [local] Zyxel USG FLEX H series uOS 1.31 - Privilege Escalation
- [local] RDPGuard 9.9.9 - Privilege Escalation
- [webapps] Kentico Xperience 13.0.178 - Cross Site Scripting (XSS)
- [local] TP-Link VN020 F3v(T) TT_V6.2.1021) - DHCP Stack Buffer Overflow
- [webapps] WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [local] VirtualBox 7.0.16 - Privilege Escalation
Palo Alto Networks and IBM to Jointly Provide AI-Powered Security Offerings
/in General NewsPost Content
darkreading – Read More
Notice of a Data Breach
/in General NewsPost Content
darkreading – Read More
Scammers Fake DocuSign Templates to Blackmail & Steal From Companies
/in General NewsCybercriminals are trafficking DocuSign assets that allow for easy extortion and business email compromise.
darkreading – Read More
FBI, DoJ Shut Down BreachForums, Launch Investigation
/in General NewsInstead of online contraband, the website now asks anyone with information that could help with the investigation to contact authorities.
darkreading – Read More
Alkira Raises $100M in Series C Funding to Simplify, Secure and Scale Critical Network Infrastructure
/in General NewsPost Content
darkreading – Read More
FBI Seizes BreachForums Again, Urges Users to Report Criminal Activity
/in General NewsLaw enforcement agencies have officially seized control of the notorious BreachForums platform, an online bazaar known for peddling stolen data, for the second time within a year.
The website (“breachforums[.]st”) has been replaced by a seizure banner stating the clearnet cybercrime forum is under the control of the Federal Bureau of Investigation (FBI).
The operation is the
The Hacker News – Read More
Google Launches AI-Powered Theft and Data Protection Features for Android Devices
/in General NewsGoogle has announced a slew of privacy and security features in Android, including a suite of advanced protection features to help secure users’ devices and data in the event of a theft.
These features aim to help protect data before, during and after a theft attempt, the tech giant said, adding they are expected to be available via an update to Google Play services for devices running
The Hacker News – Read More
Google unveils new Android 15 security updates: What you need to know
/in General NewsGoogle’s helping you fight scammers and snoops.
Latest stories for ZDNET in Security – Read More
Android 15 Rolls Out Advanced Features to Protect Users from Scams and Malicious Apps
/in General NewsGoogle is unveiling a set of new features in Android 15 to prevent malicious apps installed on the device from capturing sensitive data.
This constitutes an update to the Play Integrity API that third-party app developers can take advantage of to secure their applications against malware.
“Developers can check if there are other apps running that could be capturing the screen, creating
The Hacker News – Read More
Thoma Bravo-owned LogRhythm Announces Merger with Rival Exabeam
/in General NewsFinancial terms were not released but the price tag is expected to be hefty with Exabeam’s most recent valuation pegged at $2.5 billion.
The post Thoma Bravo-owned LogRhythm Announces Merger with Rival Exabeam appeared first on SecurityWeek.
SecurityWeek – Read More