Cl0p struck a blow against Oracle by exploiting a critical zero-day vulnerability in the E-Business Suite. Researchers report
The post Cl0p Zero-Day Hits Oracle E-Business Suite (CVE-2025-61882), Compromising Global Giants appeared first on Penetration Testing Tools.
Google has disclosed a years-long intelligence operation revealing that APT24, a China-linked threat group, had been deploying a
The post APT24 Used ‘BadAudio’ Malware in 3-Year Espionage Campaign Hitting 1,000+ Sites appeared first on Penetration Testing Tools.
Two founders of the cryptocurrency service Samourai Wallet have received actual prison sentences for laundering more than $237
The post Samourai Wallet Founders Sentenced to Prison for Laundering $237 Million in Crypto appeared first on Penetration Testing Tools.
BitlockMove Lateral Movement via Bitlocker DCOM & COM Hijacking. This Proof of Concept (PoC) for Lateral Movement abuses
The post BitlockMove: New PoC for Covert Lateral Movement via BitLocker DCOM Hijacking appeared first on Penetration Testing Tools.
AMD has begun adding support for new graphics cards to the AMDGPU Linux driver, but the identity of
The post AMD Patches Hint at Next-Gen RDNA 5 or Enhanced GPU Architecture in Linux Driver appeared first on Penetration Testing Tools.
Microsoft is introducing native Sysmon support in Windows, marking a significant shift in the security landscape. Capabilities that
The post Microsoft Integrates Sysmon Natively into Windows 11 & Server 2025 appeared first on Penetration Testing Tools.
A widespread infection of outdated ASUS routers has become the focal point of a new covert campaign that
The post Operation WrtHug: 50,000+ Outdated ASUS Routers Hacked for Covert Botnet appeared first on Penetration Testing Tools.
In recent days it has become apparent that FortiWeb had been accumulating issues the manufacturer chose not to
The post FortiWeb Alert: New Authenticated Command Injection Flaw (CVE-2025-58034) Actively Exploited appeared first on Penetration Testing Tools.
A recently disclosed vulnerability in the 7-Zip archiver is already being weaponized in real-world attacks, according to a
The post Urgent Patch: 7-Zip Flaw (CVE-2025-11001) Actively Exploited for Code Execution appeared first on Penetration Testing Tools.
A new wave of attacks targeting infrastructure built around modern machine-learning systems has been uncovered by the Oligo
The post ShadowRay 2.0: AI Orchestration Framework Ray Hacked for Autonomous Cryptojacking appeared first on Penetration Testing Tools.
Experts in cybersecurity report the emergence of a new automated credential-theft toolkit whose sophistication continues to evolve. In
The post Sneaky 2FA Toolkit Upgraded: Uses ‘Browser-in-the-Browser’ to Steal Credentials appeared first on Penetration Testing Tools.
Major battery manufacturers are increasingly coming under pressure from extortionist groups, and new reports confirm that criminal interest
The post LG Energy Solution Hacked: Akira Group Claims Theft of 1.7 TB of Data appeared first on Penetration Testing Tools.
A debate over privacy has once again ignited around several budget Samsung smartphones. The controversy stems from the
The post Samsung AppCloud Sparks Privacy Fear: Accused of Being ‘Undeletable Spyware’ appeared first on Penetration Testing Tools.
A major outage in Cloudflare’s infrastructure became an unexpected test of resilience for countless companies. On 18 November,
The post Cloudflare Outage: Internal Failure Shuts Down Sites, Exposing Hidden Security Gaps appeared first on Penetration Testing Tools.
The Xubuntu team has released detailed information about the October incident during which the downloads page at https://xubuntu.org/download/
The post Xubuntu Download Page Hacked: Malicious File Distributed for Several Days appeared first on Penetration Testing Tools.
Cybersecurity experts have detailed a newly identified Android banking trojan called Sturnus, engineered to steal credentials and seize
The post New Sturnus Android Trojan Bypasses Signal/WhatsApp Encryption, Seizes Full Control appeared first on Penetration Testing Tools.
A series of patches proposing a MEMINSPECT mechanism for memory analysis and debugging has been submitted to the
The post MEMINSPECT Proposed for Linux Kernel: Simplifies Memory Debugging & Post-Mortem Analysis appeared first on Penetration Testing Tools.
Google has unexpectedly done what many had already given up hoping for: Android and AirDrop can now, at
The post Google Cracks AirDrop: Pixel 10 Enables Seamless File Sharing with iPhone appeared first on Penetration Testing Tools.
COMmander is a tool written in C# that can enrich defensive telemetry around RPC and COM. For a
The post COMmander: Lightweight C# Tool Boosts Defensive RPC/COM Telemetry appeared first on Penetration Testing Tools.
The scale of digital communication expands with each passing year, and the techniques of social manipulation evolve alongside
The post Bypassing Filters: LinkedIn is the New Vector for Phishing and Targeted Attacks appeared first on Penetration Testing Tools.
