BackBox Labs: Research

BackBox Labs: Research Research, threat intelligence and cybersecurity insights from BackBox Labs. https://backbox.dev/en/blog.html en Thu, 12 Nov 2026 00:00:00 GMT <![CDATA[Bomb Threats Without Bombs: BackBox AI's OSINT Investigation into Europe's Hoax Waves]]> https://backbox.dev/en/blog/osint-bomb-threats-europe-threat-hunter.html https://backbox.dev/en/blog/osint-bomb-threats-europe-threat-hunter.html Wed, 11 Nov 2026 00:00:00 GMT <![CDATA[The Cold Chain Under Attack: BackBox AI's OSINT Investigation into Refrigeration Sabotage]]> https://backbox.dev/en/blog/osint-cold-chain-sabotage-threat-hunter.html https://backbox.dev/en/blog/osint-cold-chain-sabotage-threat-hunter.html Tue, 03 Nov 2026 00:00:00 GMT <![CDATA[OSINT on a Developing Crisis: How BackBox AI Followed Europe's October Unrest]]> https://backbox.dev/en/blog/osint-european-unrest-threat-hunter.html https://backbox.dev/en/blog/osint-european-unrest-threat-hunter.html Sat, 24 Oct 2026 00:00:00 GMT <![CDATA[Breaking Chrome 152: A Complete V8 Sandbox Escape and Renderer RCE]]> https://backbox.dev/en/blog/v8ctf-chrome-152-v8-sandbox-escape-renderer-rce.html https://backbox.dev/en/blog/v8ctf-chrome-152-v8-sandbox-escape-renderer-rce.html Mon, 21 Sep 2026 00:00:00 GMT <![CDATA[Hack The Box Season 11: What Thirteen Machines Taught Us About Autonomous Agents]]> https://backbox.dev/en/blog/htb-season-11-autonomous-agents.html https://backbox.dev/en/blog/htb-season-11-autonomous-agents.html Tue, 01 Sep 2026 00:00:00 GMT <![CDATA[Security Advisory: Stored XSS in nopCommerce via an SVG animate Handler That Slips Past the HtmlFormatter Blocklist]]> https://backbox.dev/en/blog/nopcommerce-stored-xss-svg-animate-htmlformatter-bypass.html https://backbox.dev/en/blog/nopcommerce-stored-xss-svg-animate-htmlformatter-bypass.html Thu, 20 Aug 2026 00:00:00 GMT <![CDATA[The AI Harness: Why Agentic Cybersecurity Is Won by the System, Not the Model]]> https://backbox.dev/en/blog/ai-harness-agentic-cybersecurity.html https://backbox.dev/en/blog/ai-harness-agentic-cybersecurity.html Wed, 19 Aug 2026 00:00:00 GMT <![CDATA[Security Advisory: From Local User to Root, Chaining IPC Misconfigurations into a Full Privilege Escalation in NetBird]]> https://backbox.dev/en/blog/netbird-ipc-local-privilege-escalation.html https://backbox.dev/en/blog/netbird-ipc-local-privilege-escalation.html Tue, 28 Jul 2026 00:00:00 GMT <![CDATA[AI Malware Analysis: Reasoning Through the Glitch SPY Android RAT]]> https://backbox.dev/en/blog/ai-malware-analysis-glitch-spy-android-rat.html https://backbox.dev/en/blog/ai-malware-analysis-glitch-spy-android-rat.html Wed, 15 Jul 2026 00:00:00 GMT <![CDATA[Technological Sovereignty in the Age of AI: Why Independence Became a Strategic Question]]> https://backbox.dev/en/blog/technological-sovereignty-ai-era.html https://backbox.dev/en/blog/technological-sovereignty-ai-era.html Sun, 12 Jul 2026 00:00:00 GMT <![CDATA[Security Advisory: When Packaging Becomes the Vulnerability, Local Privilege Escalation via Bettercap's systemd Service]]> https://backbox.dev/en/blog/bettercap-service-packaging-local-privilege-escalation.html https://backbox.dev/en/blog/bettercap-service-packaging-local-privilege-escalation.html Sat, 11 Jul 2026 00:00:00 GMT <![CDATA[Security Advisory: CSMAN Decompression Bomb in Binwalk Leads to Memory-Exhaustion DoS]]> https://backbox.dev/en/blog/binwalk-csman-decompression-bomb-dos.html https://backbox.dev/en/blog/binwalk-csman-decompression-bomb-dos.html Fri, 10 Jul 2026 00:00:00 GMT <![CDATA[Security Advisory: Header Trust Issues in SearXNG (Open Redirect, Cache Poisoning, Rate-Limiter Bypass)]]> https://backbox.dev/en/blog/searxng-header-trust-open-redirect-rate-limiter-bypass.html https://backbox.dev/en/blog/searxng-header-trust-open-redirect-rate-limiter-bypass.html Thu, 09 Jul 2026 00:00:00 GMT <![CDATA[Smarter, Not Bigger: How We Built BackBox AI, and How We Partner with Open Source]]> https://backbox.dev/en/blog/smarter-not-bigger-backbox-ai-open-source-partnership.html https://backbox.dev/en/blog/smarter-not-bigger-backbox-ai-open-source-partnership.html Mon, 06 Jul 2026 00:00:00 GMT <![CDATA[Photoview Benchmark: BackBox AI vs Aikido and XBOW, Severity Quality Over Finding Count]]> https://backbox.dev/en/blog/photoview-backbox-vs-aikido-xbow-benchmark.html https://backbox.dev/en/blog/photoview-backbox-vs-aikido-xbow-benchmark.html Thu, 25 Jun 2026 00:00:00 GMT <![CDATA[MedPortal Benchmark: BackBox AI vs Neo Vulnerability and False Positive Analysis]]> https://backbox.dev/en/blog/medportal-backbox-vs-neo-pd-benchmark.html https://backbox.dev/en/blog/medportal-backbox-vs-neo-pd-benchmark.html Tue, 21 Apr 2026 00:00:00 GMT <![CDATA[Multimodal AI Visual Reasoning: PCB Analysis in HTB Critical Flight]]> https://backbox.dev/en/blog/ai-visual-reasoning-pcb-critical-flight-htb.html https://backbox.dev/en/blog/ai-visual-reasoning-pcb-critical-flight-htb.html Fri, 17 Apr 2026 00:00:00 GMT <![CDATA[Autonomous AI Exploitation: Solving HTB Snapped with a Full CVE Chain]]> https://backbox.dev/en/blog/ai-autonomous-exploitation-htb-snapped-cve-chain.html https://backbox.dev/en/blog/ai-autonomous-exploitation-htb-snapped-cve-chain.html Thu, 09 Apr 2026 00:00:00 GMT <![CDATA[BackBox AI vs XBOW Benchmark: Compromising a SOAP Service with XXE and Default Credentials]]> https://backbox.dev/en/blog/backbox-ai-xbow-nice-soap-xxe-default-credentials.html https://backbox.dev/en/blog/backbox-ai-xbow-nice-soap-xxe-default-credentials.html Tue, 10 Feb 2026 00:00:00 GMT <![CDATA[Threat Led Penetration Testing: Enhancing Cyber Resilience]]> https://backbox.dev/en/blog/threat-led-penetration-testing-tlpt.html https://backbox.dev/en/blog/threat-led-penetration-testing-tlpt.html Sat, 19 Jul 2025 00:00:00 GMT