BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [webapps] Moodle 4.4.0 - Authenticated Remote Code Execution
- [remote] Microsoft SharePoint 2019 - NTLM Authentication
- [remote] gogs 0.13.0 - Remote Code Execution (RCE)
- [remote] Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
- [webapps] Sitecore 10.4 - Remote Code Execution (RCE)
- [remote] PX4 Military UAV Autopilot 1.12.3 - Denial of Service (DoS)
- [webapps] Pterodactyl Panel 1.11.11 - Remote Code Execution (RCE)
- [remote] OneTrust SDK 6.33.0 - Denial Of Service (DoS)
- [remote] freeSSHd 1.0.9 - Denial of Service (DoS)
- [remote] McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information
Over 40,000 iOS Apps Found Exploiting Private Entitlements, Zimperium
/in General NewsA new report from Zimperium is alerting users about growing threats facing iOS devices, particularly those tied to…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
Official UK records confirm cyberattacks put NHS patients at risk of clinical harm
/in General NewsData obtained by Recorded Future News from the U.K.’s National Health Service show that two incidents last year put patients at risk of clinical harm.
The Record from Recorded Future News – Read More
Firefox Tests AI-Powered Perplexity Search Engine Directly in Browser
/in General NewsMozilla Firefox experiments with AI-powered Perplexity Search Engine in its address bar for version 139, signalling a potential…
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
Salesforce just unveiled AI ‘digital teammates’ in Slack — and they’re coming for Microsoft Copilot
/in General NewsSalesforce launches Agentforce in Slack, transforming workplace productivity with specialized AI agents that operate as digital teammates, replacing one-size-fits-all AI assistants with purpose-built solutions.Read More
Security News | VentureBeat – Read More
Why CTEM is the Winning Bet for CISOs in 2025
/in General NewsContinuous Threat Exposure Management (CTEM) has moved from concept to cornerstone, solidifying its role as a strategic enabler for CISOs. No longer a theoretical framework, CTEM now anchors today’s cybersecurity programs by continuously aligning security efforts with real-world risk.
At the heart of CTEM is the integration of Adversarial Exposure Validation (AEV), an advanced, offensive
The Hacker News – Read More
480,000 Catholic Health Patients Impacted by Serviceaide Data Leak
/in General NewsServiceaide exposed a database containing personal and medical information belonging to Catholic Health patients.
The post 480,000 Catholic Health Patients Impacted by Serviceaide Data Leak appeared first on SecurityWeek.
SecurityWeek – Read More
For Tech Whistleblowers, There’s Safety in Numbers
/in General NewsAmber Scorah and Psst are building a “digital safe” to help people shine a light on the bad things their bosses are doing, without getting found out.
Security Latest – Read More
How to Win Followers and Scamfluence People
/in General NewsFormat Boy makes a living teaching Yahoo Boys, notorious West African scammers, how to use AI and deepfake technology to ensnare their next victims.
Security Latest – Read More
Hackers Earn Over $1 Million at Pwn2Own Berlin 2025
/in General NewsPwn2Own participants demonstrated exploits against VMs, AI, browsers, servers, containers, and operating systems.
The post Hackers Earn Over $1 Million at Pwn2Own Berlin 2025 appeared first on SecurityWeek.
SecurityWeek – Read More
Crypto elite increasingly worried about their personal safety
/in General NewsCryptocurrency executives and other investors with significant wealth from crypto holdings are getting more serious about personal security, according to stories this weekend in both the Wall Street Journal and Bloomberg. While cryptocurrencies have always created unique security risks, it seems there’s a rising threat of violent abduction due to the growing value of Bitcoin, […]
Security News | TechCrunch – Read More