FusterCluck is a POC script for attacking failover clusters via the cluster API over RPC. The tool allows
The post FusterCluck PoC: Script Exploits RPC to Achieve Lateral Movement in Failover Clusters appeared first on Penetration Testing Tools.
Two Android vulnerabilities were actively exploited as zero-days before patches became available, according to Google’s December Android Security
The post URGENT Patch: Google Fixes Two Actively Exploited Android Zero-Day Vulnerabilities appeared first on Penetration Testing Tools.
The Glassworm campaign targeting popular Visual Studio Code extensions has entered yet another phase — researchers are now
The post Glassworm Strikes Again: Third Wave of Malicious VS Code Extensions Bypasses Moderation appeared first on Penetration Testing Tools.
In the third quarter of 2025, Beazley Security Labs recorded a sharp surge in the activity of major
The post Q3 Cyber Threat: Akira, Qilin, INC Dominate 65% of Attacks; Infostealers Pivot to Endpoints appeared first on Penetration Testing Tools.
Apple has no intention of complying with the Indian government’s demand to preinstall the state-mandated “cybersecurity” app Sanchar
The post Apple Refuses India’s Mandatory App Order, Citing Mass Surveillance Risks appeared first on Penetration Testing Tools.
Cyberattacks on decentralized finance projects strike DAOs far harder than the value of stolen assets suggests. A new
The post DeFi Attacks: Token Collapse Adds $1.3 Billion Loss Beyond Direct Asset Theft appeared first on Penetration Testing Tools.
One of the most popular unofficial YouTube clients for Android TV has been compromised — a malicious build
The post SmartTube Hack: Android TV App Compromised with Spyware via Stolen Signing Key appeared first on Penetration Testing Tools.
The Dutch authorities have released new data indicating that adolescents’ involvement in digital wrongdoing is typically fleeting. An
The post Hacking is a Phase: Study Finds 96% of Youth Digital Crime Fades By Age 20 appeared first on Penetration Testing Tools.
Europol, in cooperation with international partners, has dismantled the cryptocurrency mixer Cryptomixer and seized the equivalent of €25
The post Europol Shuts Down CryptoMixer, Seizes €25 Million and 12 TB of Data appeared first on Penetration Testing Tools.
Veteran developer Dave Plummer, who spent many years at Microsoft, has urged the company to slow its relentless
The post Windows Veteran Dave Plummer Urges Microsoft to Halt AI Push and Fix Windows 11 Bugs appeared first on Penetration Testing Tools.
BamboozlEDR A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes. BamboozlEDR
The post BamboozlEDR: New Tool Generates Realistic ETW Events to Test EDR Detection appeared first on Penetration Testing Tools.
For the PostHog team, developers of an open-source analytics platform, the recent npm-based attack has become the most
The post PostHog Hacked: Shai-Hulud 2.0 Worm Steals 25,000+ Developer Secrets via npm appeared first on Penetration Testing Tools.
The Israel Defense Forces (IDF) have prohibited senior commanders from using Android smartphones for official communications — from
The post Standardizing Security: IDF Bans Android, Mandates iPhone for Senior Commanders appeared first on Penetration Testing Tools.
The People’s Bank of China has once again made it unmistakably clear that its hardline stance on suppressing
The post PBOC Formally Classifies Stablecoins as Illegal Virtual Currency, Confirms Total Crypto Ban appeared first on Penetration Testing Tools.
Digital calendars have long been a convenient way to stay organized amid daily routines, yet new research from
The post 4 Million iOS Users at Risk: Abandoned Domains Weaponized for iCalendar Phishing appeared first on Penetration Testing Tools.
The American manufacturer of aerospace and defense components ADC Aerospace has come under scrutiny following a potential cyberattack:
The post Play Ransomware Claims Breach of Defense Contractor ADC Aerospace, Stealing Client Data appeared first on Penetration Testing Tools.
North Korea’s Contagious Interview malware campaign continues to escalate its pressure on the JavaScript-development ecosystem. Threat actors affiliated
The post N. Korea’s Contagious Interview Campaign Targets Job Seekers with 197 Malicious npm Packages appeared first on Penetration Testing Tools.
North Korea’s Lazarus hacking collective is intensifying its targeted phishing campaigns against cryptocurrency platforms and individual investors, amassing
The post Lazarus Group Stole $1.4B in Crypto; Will Use AI & Deepfakes for 2026 Attacks appeared first on Penetration Testing Tools.
The GrapheneOS mobile operating-system project has announced that it is severing ties with OVHcloud, expressing concern that French
The post GrapheneOS Ditches OVHcloud, Citing French Jurisdiction and Encryption Backdoor Pressure appeared first on Penetration Testing Tools.
Police in South Korea have detained four individuals in connection with the hacking of more than 120,000 IP
The post South Korea Arrests 4 for Hacking 120,000 IP Cameras to Mass-Produce Illegal Videos appeared first on Penetration Testing Tools.
