A Free Open Source Community Project
Italia
Joined December 2008
- Tweets508
- Following5
- Followers3.2K
- Likes41
BackBox.org retweeted
OSINT su una crisi in corso: come @backbox_labs ha monitorato le proteste di ottobre in Francia e Italia con BackBox AI Threat Hunter.
Metodo, risultati, limiti delle fonti aperte e dashboard dell’indagine.
backbox.dev/it/blog/osint-pr…
BackBox.org retweeted
October's protests in France and Italy, followed with BackBox AI on open sources only. No common command observed, mostly domestic disinformation, predictions checked against events.
Article: backbox.dev/en/blog/osint-eu…
Dashboard: backbox.dev/en/dashboards/eu…
BackBox.org retweeted
BackBox AI built a complete Chrome 152 exploit chain against @Google's v8CTF target, from a web page to RCE and a file read.
Three V8 bugs, a sandbox escape, WebAssembly and ROP.
We break down how it works and what the patch gap means for defenders.
backbox.dev/en/blog/v8ctf-ch…
BackBox.org retweeted
We put BackBox AI to the test on @hackthebox_eu Season 11.
13 machines. Easy to Insane. How far could it get on its own?
We share what our agent achieved, where it struggled, and what we learned about autonomous offensive security.
backbox.dev/en/blog/htb-seas…
BackBox.org retweeted
0-day in @nopCommerce
BackBox AI discovered a stored XSS that bypasses both nopCommerce's HTML sanitizer and a fronting WAF using an SVG `animate onbegin` vector.
The vulnerability remains unpatched through version 4.90.6.
Full advisory: backbox.dev/en/blog/nopcomme…
BackBox.org retweeted
The future of AI-powered cybersecurity isn't about owning the best model. It's about building the best AI harness.
Read why: backbox.dev/en/blog/ai-harne…
BackBox.org retweeted
New @netbird 0day discovered!
Our research found a local privilege escalation affecting NetBird Linux clients (≤ 0.75.0), allowing local users to gain root via IPC design flaws.
Technical analysis: backbox.dev/en/blog/netbird-…
BackBox.org retweeted
Discovered a zero-day vulnerability affecting a modern zero-trust mesh networking implementation. Responsible disclosure is underway. Technical details will be shared soon.
backbox.dev/en/research.html
BackBox.org retweeted
OpenAI's incident involving Hugging Face shows that AI agents can discover vulnerabilities. This is not new.
Open models can be equally effective in offensive security with the right architecture and tools.
The future is secure agent design.
BackBox.org retweeted
This summer, leave your laptop behind.
BackBox AI is available on mobile. All you need is a
smartphone and an internet connection.
Try it:
backbox.dev/en/backbox-ai.ht…
BackBox.org retweeted
BackBox AI analyzed a live Android RAT from a single APK, extracting the implant, uncovering obfuscated C2 infrastructure, and producing evidence-backed attribution through adaptive AI-driven reasoning.
Read the full technical analysis:
backbox.dev/en/blog/ai-malwa…
BackBox.org retweeted
La sovranità tecnologica nell'era dell'AI non è un tema futuro. È una scelta di oggi.
Modelli aperti, controllo dei dati e libertà di scelta: la nostra direzione.
backbox.dev/it/blog/sovranit…
BackBox.org retweeted
New security advisory: Bettercap LPE affecting Debian, Ubuntu, Arch and derivatives.
Not a Bettercap code flaw, but an insecure service packaging issue.
backbox.dev/en/blog/betterca…
BackBox.org retweeted
New security advisory: BackBox AI found a memory exhaustion DoS in Binwalk's CSMAN parser. A crafted file could trigger unbounded decompression during a normal scan. The issue was responsibly disclosed and fixed upstream.
backbox.dev/en/blog/binwalk-…
BackBox.org retweeted
Security Advisory: Header Trust Issues in SearXNG
BackBox AI identified two header trust vulnerabilities in SearXNG, including a Host header injection that could lead to open redirect and cache poisoning, and an X-Forwarded-For based rate limiter bypass.
backbox.dev/en/blog/searxng-…
BackBox.org retweeted
Hey pentesting distro maintainers (@kalilinux, @ParrotSec and others), DM us.
We identified a default package inherited from Ubuntu/Debian/Arch that allows local privilege escalation.
Details available privately for coordinated disclosure.
BackBox.org retweeted
Smarter, Not Bigger: how we built BackBox AI.
We prioritize system design over model size, building AI for real security workflows.
We also work pro bono with open source maintainers to surface vulnerabilities and strengthen critical infrastructure.
backbox.dev/en/blog/smarter-…
BackBox.org retweeted
BackBox AI vs @AikidoSecurity vs @Xbow on Photoview, scored against @Doyensec 's independent review:
Same 6 High/Critical findings as Aikido, with 31% fewer submissions (22 vs 32). XBOW caught one chain we missed. Signal over noise, gaps and all.
backbox.dev/en/blog/photovie…
BackBox.org retweeted
Following the launch of BackBox Labs, we also use Hack The Box to validate BackBox AI in benchmark scenarios.
Season 11: 5/5 challenges completed.
backbox.dev/en/backbox-ai.ht…
We’re launching BackBox Labs (backbox.dev), a new cybersecurity company built on years of experience from the BackBox open source ecosystem.
BackBox.org remains an independent community-driven open source project.
blog.backbox.org/2026/06/22/…
