The APT group Silver Fox has integrated a previously unknown vulnerable driver, WatchDog Antimalware, signed by Microsoft, into
The post Silver Fox APT Exploits a Microsoft-Signed Driver to Bypass Security appeared first on Penetration Testing Tools.
Taylor Otwell, the creator and long-standing steward of Laravel, has issued a cautionary note: the growing fascination with
The post Laravel’s Creator Warns Against Unnecessary Complexity appeared first on Penetration Testing Tools.
Cisco Talos specialists have uncovered more than 1,100 instances of Ollama—a framework designed for running LLM models locally—exposed
The post Warning: Over 1,100 Ollama AI Servers Found Exposed to the Internet appeared first on Penetration Testing Tools.
Low-profile droppers, long considered auxiliary tools in the arsenals of Android banking trojans and RATs, are undergoing a
The post The New Threat to Android: Why Malware Droppers Are Getting Smarter appeared first on Penetration Testing Tools.
Researchers at Socket have uncovered a malicious npm package named nodejs-smtp, masquerading as the widely used nodemailer library
The post Warning: Fake npm Package Hijacks Crypto Wallets appeared first on Penetration Testing Tools.
A large-scale theft of authentication tokens from Salesloft, developer of the corporate chatbot platform, has triggered a chain
The post Salesloft Breach Triggers Global Threat Cascade appeared first on Penetration Testing Tools.
A security researcher uncovered critical vulnerabilities in the admin panel of Pudu Robotics, China’s largest supplier of commercial
The post Robot Takeover? Critical Flaw in Pudu Robots Exposed appeared first on Penetration Testing Tools.
Experts at Truesec have reported a large-scale malicious campaign in which attackers promoted a fake PDF-editing application, AppSuite
The post Beware: Fake PDF Editor Spreads Dangerous Infostealer via Google Ads appeared first on Penetration Testing Tools.
What is it Pyramid is a set of Python scripts and module dependencies that can be used to
The post Pyramid: Python scripts to evade EDRs appeared first on Penetration Testing Tools.
OnionC2 is a command and control (C2) framework with communications over Tor network. It’s packed with privacy &
The post OnionC2: The New C&C Framework for Anonymous Cyber Operations appeared first on Penetration Testing Tools.
Researchers at Stripe OLT’s SOC have uncovered a large-scale, targeted phishing campaign aimed at senior executives and top
The post Warning: A New Phishing Campaign Is Targeting Senior Executives appeared first on Penetration Testing Tools.
Researchers at Kaspersky Lab have reported the resurgence of ransomware operations by the group OldGremlin, which has once
The post OldGremlin Ransomware Returns to Haunt Russian Businesses appeared first on Penetration Testing Tools.
The North Korean threat group APT37 (also known as ScarCruft, InkySquid, Reaper, and Ricochet Chollima) has launched a
The post North Korean Hackers Launch Widespread Cyberespionage Campaign appeared first on Penetration Testing Tools.
Between June and July 2025, researchers recorded hundreds of thousands of password brute-force attempts targeting SSL VPN and
The post Anatomy of an Attack: Inside a Massive Brute-Force Campaign appeared first on Penetration Testing Tools.
On August 26, China hosted the 2025 China Operating System Industry Conference, jointly organized by the China Copyright
The post China Unveils a New Operating System to Challenge Windows and macOS appeared first on Penetration Testing Tools.
Entrepreneur Dan Shapiro encountered an unexpected obstacle: a popular AI chatbot refused to transcribe business documents, citing copyright
The post Call Me an Idiot: How to Persuade an AI to Break Its Rules appeared first on Penetration Testing Tools.
Austria’s Federal Ministry of the Interior (BMI) has fallen victim to a targeted cyberattack, details of which emerged
The post Austria’s Ministry of the Interior Hit by Targeted Cyberattack appeared first on Penetration Testing Tools.
On July 24, 2025, the cryptocurrency platform WOO X suffered a sophisticated targeted attack in which $14 million
The post Lazarus Group’s New Target: How North Korean Hackers Stole $14M from WOO X appeared first on Penetration Testing Tools.
Amnesty International has released a new report titled Breaking up with Big Tech, calling on governments to curb
The post Amnesty International Calls for Big Tech to Be Broken Up appeared first on Penetration Testing Tools.
Vesta Vesta is a static analysis of vulnerabilities, Docker, and Kubernetes cluster configuration detect toolkit. It inspects Kubernetes
The post vesta: Docker and Kubernetes cluster configuration detect toolkit appeared first on Penetration Testing Tools.
