BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Maryam - Open-source Intelligence(OSINT) Framework
- TruffleHog Explorer - A User-Friendly Web-Based Tool To Visualize And Analyze Data Extracted Using TruffleHog
- PANO - Advanced OSINT Investigation Platform Combining Graph Visualization, Timeline Analysis, And AI Assistance To Uncover Hidden Connections In Data
- Wappalyzer-Next - Python library that uses Wappalyzer extension (and its fingerprints) to detect technologies
- Telegram-Checker - A Python Tool For Checking Telegram Accounts Via Phone Numbers Or Usernames
- Torward - An Improved Version Based On The Torghost-Gn And Darktor Scripts, Designed To Enhance Anonymity On The Internet
- Instagram-Brute-Force-2024 - Instagram Brute Force 2024 Compatible With Python 3.13 / X64 Bit / Only Chrome Browser
- QuickResponseC2 - A Command & Control Server That Leverages QR Codes To Send Commands And Receive Results From Remote Systems
- Telegram-Scraper - A Powerful Python Script That Allows You To Scrape Messages And Media From Telegram Channels Using The Telethon Library
- Moukthar - Android Remote Administration Tool
Exploit DB
- [webapps] FoxCMS 1.2.5 - Remote Code Execution (RCE)
- [webapps] Drupal 11.x-dev - Full Path Disclosure
- [webapps] Apache Commons Text 1.10.0 - Remote Code Execution
- [webapps] Hunk Companion Plugin 1.9.0 - Unauthenticated Plugin Installation
- [webapps] Tatsu 3.3.11 - Unauthenticated RCE
- [remote] Langflow 1.3.0 - Remote Code Execution (RCE)
- [webapps] UJCMS 9.6.3 - User Enumeration via IDOR
- [webapps] Inventio Lite 4 - SQL Injection
- [webapps] KiviCare Clinic & Patient Management System (EHR) 3.6.4 - Unauthenticated SQL Injection
- [hardware] ABB Cylon Aspect 3.08.02 (deployStart.php) - Unauthenticated Command Execution
Anthropic quietly scrubs Biden-era responsible AI commitment from its website
/in General NewsAI companies continue to reduce evidence of Biden-era AI safety policy from their communications as attitudes shift under Trump.
Latest stories for ZDNET in Security – Read More
‘Spearwing’ RaaS Group Ruffles Feathers in Cyber Threat Scene
/in General NewsThe group is using the Medusa malware and taking up space once held by other notable ransomware groups like LockBot, increasing its victim list to 400 and demanding astoundingly high ransoms.
darkreading – Read More
Malicious use of Cobalt Strike down 80% after crackdown, Fortra says
/in General NewsAn effort launched in 2023 to curb the longstanding issue of pirated Cobalt Strike software being used by cybercriminals appears to have borne fruit.
The Record from Recorded Future News – Read More
Static Scans, Red Teams and Frameworks Aim to Find Bad AI Models
/in General NewsWith hundreds of AI models found to harbor malicious code, cybersecurity firms are releasing technology to help companies manage their AI development and deployment efforts.
darkreading – Read More
Women in Cyber Security on the Rise, But Facing More Layoffs and Budget Cuts Than Men
/in General NewsIn 2024, women accounted for 22% of global security teams on average, compared to 17% in 2023, according to ISC2.
Security | TechRepublic – Read More
Zero-Days Put Tens of 1,000s of Orgs at Risk for VM Escape Attacks
/in General NewsMore than 41,000 ESXi instances remain vulnerable to a critical VMware vulnerability, one of three that Broadcom disclosed earlier this week.
darkreading – Read More
Cybercrime’s Cobalt Strike Use Plummets 80% Worldwide
/in General NewsFortra, Microsoft, and Health-ISAC have combined forces to claw back one of hackers’ most prized attack tools, with massive takedowns.
darkreading – Read More
Taylor Swift Ticket Thieves Charged in Court for Resale Operation
/in General NewsThe pair found a loophole through StubHub’s services, allowing them to steal tickets and resell them for personal profit, amassing hundreds of thousands of dollars.
darkreading – Read More
US Seize Garantex in Cryptocurrency Money Laundering Bust
/in General NewsTwo men linked to Garantex are accused of facilitating multi-billion dollar money laundering and sanctions violations.
The post US Seize Garantex in Cryptocurrency Money Laundering Bust appeared first on SecurityWeek.
SecurityWeek – Read More
Home appliance company Presto says cyberattack causing delivery delays
/in General NewsIn a filing with federal regulators, Wisconsin-based National Presto Industries — known for appliances like air fryers and pressure cookers — said a cyberattack had disrupted operations.
The Record from Recorded Future News – Read More