BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [local] TP-Link VN020 F3v(T) TT_V6.2.1021) - DHCP Stack Buffer Overflow
- [webapps] WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation
- [webapps] Kentico Xperience 13.0.178 - Cross Site Scripting (XSS)
- [local] RDPGuard 9.9.9 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
Hacker Claims Breach of Check Point Cybersecurity Firm, Sells Access
/in General NewsHacker claims breach of Israeli cybersecurity firm Check Point, offering network access and sensitive data for sale; company denies any recent incident.
Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – Read More
OpenAI to release open-source model as AI economics force strategic shift
/in General NewsOpenAI plans to release its first open-weight AI model since 2019 as economic pressures mount from competitors like DeepSeek and Meta, marking a significant strategic reversal for the company behind ChatGPT.Read More
Security News | VentureBeat – Read More
Oracle Cloud Users Urged to Take Action
/in General NewsAlthough Oracle has denied its cloud infrastructure services were breached, security experts recommend Oracle customers independently verify if they were affected and take measures to reduce exposure to potential fallout.
darkreading – Read More
CoffeeLoader Malware Is Stacked With Vicious Evasion Tricks
/in General NewsNext-level malware represents a new era of malicious code developed specifically to get around modern security software like digital forensics tools and EDR, new research warns.
darkreading – Read More
Canadian hacker arrested for allegedly stealing data from Texas Republican Party
/in General NewsThe prominent hacker Aubrey Cottle is accused of hacking into a third-party hosting company for the websites for the Texas Republican Party and the Texas Right to Life anti-abortion group.
The Record from Recorded Future News – Read More
DoJ Seizes Over $8M from Sprawling Pig Butchering Scheme
/in General NewsThe department was able to trace the stolen funds to three main cryptocurrency accounts after being routed through a series of other platforms.
darkreading – Read More
Cybersecurity Professor Mysteriously Disappears as FBI Raids His Homes
/in General NewsXiaofeng Wang, a longtime computer science professor at Indiana University, has disappeared along with his wife, and their profiles on the school’s website were wiped ahead of recent FBI raids.
Security Latest – Read More
Runway Gen-4 solves AI video’s biggest problem: character consistency across scenes
/in General NewsRunway’s new Gen-4 AI creates consistent characters across entire videos from a single reference image, challenging OpenAI’s viral Ghibli trend and potentially transforming how Hollywood makes films.Read More
Security News | VentureBeat – Read More
Oracle under fire for its handling of separate security incidents
/in General NewsOracle has denied at least one breach, despite evidence to the contrary, as it begins notifying healthcare customers of a separate patient data breach.
Security News | TechCrunch – Read More
CISA Warns of Resurge Malware Connected to Ivanti Vuln
/in General NewsThreat actors are exploiting a vulnerability in Ivanti Connect Secure first disclosed by the vendor in January.
darkreading – Read More