Ethical Hacking & AI-Driven Cyber Operations
Joined June 2026
- Tweets21
- Following21
- Followers7
- Likes11
BackBox Labs retweeted
Due notti, lo stesso copione: refrigerazione manomessa in centinaia di supermercati francesi (11-12 ottobre), poi in circa 170 siti europei, Italia compresa (1-2 novembre). Nessun malware, nessuna rivendicazione.
L'indagine OSINT con BackBox AI: backbox.dev/it/blog/osint-sa…
Two nights, one playbook: refrigeration controllers tampered with in hundreds of French supermarkets (11-12 Oct), then in about 170 sites across Europe (1-2 Nov). No malware, no claim, no attribution.
Our OSINT investigation with BackBox AI: backbox.dev/en/blog/osint-co…
BackBox Labs retweeted
OSINT su una crisi in corso: come @backbox_labs ha monitorato le proteste di ottobre in Francia e Italia con BackBox AI Threat Hunter.
Metodo, risultati, limiti delle fonti aperte e dashboard dell’indagine.
backbox.dev/it/blog/osint-pr…
October's protests in France and Italy, followed with BackBox AI on open sources only. No common command observed, mostly domestic disinformation, predictions checked against events.
Article: backbox.dev/en/blog/osint-eu…
Dashboard: backbox.dev/en/dashboards/eu…
BackBox AI built a complete Chrome 152 exploit chain against @Google's v8CTF target, from a web page to RCE and a file read.
Three V8 bugs, a sandbox escape, WebAssembly and ROP.
We break down how it works and what the patch gap means for defenders.
backbox.dev/en/blog/v8ctf-ch…
We put BackBox AI to the test on @hackthebox_eu Season 11.
13 machines. Easy to Insane. How far could it get on its own?
We share what our agent achieved, where it struggled, and what we learned about autonomous offensive security.
backbox.dev/en/blog/htb-seas…
0-day in @nopCommerce
BackBox AI discovered a stored XSS that bypasses both nopCommerce's HTML sanitizer and a fronting WAF using an SVG `animate onbegin` vector.
The vulnerability remains unpatched through version 4.90.6.
Full advisory: backbox.dev/en/blog/nopcomme…
The future of AI-powered cybersecurity isn't about owning the best model. It's about building the best AI harness.
Read why: backbox.dev/en/blog/ai-harne…
New @netbird 0day discovered!
Our research found a local privilege escalation affecting NetBird Linux clients (≤ 0.75.0), allowing local users to gain root via IPC design flaws.
Technical analysis: backbox.dev/en/blog/netbird-…
BackBox Labs retweeted
Discovered a zero-day vulnerability affecting a modern zero-trust mesh networking implementation. Responsible disclosure is underway. Technical details will be shared soon.
backbox.dev/en/research.html
This summer, leave your laptop behind.
BackBox AI is available on mobile. All you need is a
smartphone and an internet connection.
Try it:
backbox.dev/en/backbox-ai.ht…
BackBox AI analyzed a live Android RAT from a single APK, extracting the implant, uncovering obfuscated C2 infrastructure, and producing evidence-backed attribution through adaptive AI-driven reasoning.
Read the full technical analysis:
backbox.dev/en/blog/ai-malwa…
La sovranità tecnologica nell'era dell'AI non è un tema futuro. È una scelta di oggi.
Modelli aperti, controllo dei dati e libertà di scelta: la nostra direzione.
backbox.dev/it/blog/sovranit…
New security advisory: Bettercap LPE affecting Debian, Ubuntu, Arch and derivatives.
Not a Bettercap code flaw, but an insecure service packaging issue.
backbox.dev/en/blog/betterca…
New security advisory: BackBox AI found a memory exhaustion DoS in Binwalk's CSMAN parser. A crafted file could trigger unbounded decompression during a normal scan. The issue was responsibly disclosed and fixed upstream.
backbox.dev/en/blog/binwalk-…
Security Advisory: Header Trust Issues in SearXNG
BackBox AI identified two header trust vulnerabilities in SearXNG, including a Host header injection that could lead to open redirect and cache poisoning, and an X-Forwarded-For based rate limiter bypass.
backbox.dev/en/blog/searxng-…
BackBox Labs retweeted
Hey pentesting distro maintainers (@kalilinux, @ParrotSec and others), DM us.
We identified a default package inherited from Ubuntu/Debian/Arch that allows local privilege escalation.
Details available privately for coordinated disclosure.
Smarter, Not Bigger: how we built BackBox AI.
We prioritize system design over model size, building AI for real security workflows.
We also work pro bono with open source maintainers to surface vulnerabilities and strengthen critical infrastructure.
backbox.dev/en/blog/smarter-…
BackBox Labs retweeted
BackBox AI vs @AikidoSecurity vs @Xbow on Photoview, scored against @Doyensec 's independent review:
Same 6 High/Critical findings as Aikido, with 31% fewer submissions (22 vs 32). XBOW caught one chain we missed. Signal over noise, gaps and all.
backbox.dev/en/blog/photovie…
BackBox Labs retweeted
Following the launch of BackBox Labs, we also use Hack The Box to validate BackBox AI in benchmark scenarios.
Season 11: 5/5 challenges completed.
backbox.dev/en/backbox-ai.ht…
