Researchers at SquareX have published a comprehensive report on a newly discovered vulnerability known as AI Sidebar Spoofing—a
The post AI Sidebar Spoofing: New Attack Hides Phishing in Fake Browser Extensions appeared first on Penetration Testing Tools.
The malicious modification of Telegram X, discovered by specialists at Doctor Web, turned out to be far more
The post Baohuo Backdoor Hijacks 58,000 Telegram X Accounts for Covert Takeover appeared first on Penetration Testing Tools.
Trend Research has detailed a new wave of attacks carried out by the Agenda ransomware group, which has
The post Agenda Ransomware Deploys Linux Variant on Windows for Stealth Attack appeared first on Penetration Testing Tools.
Amid the declining effectiveness of traditional malware delivery channels, cybercriminals are increasingly turning to platforms never intended for
The post YouTube Ghost Network: 3,000 Fake Videos Used to Spread Malware appeared first on Penetration Testing Tools.
The South Korean government has announced a sweeping inspection of 1,600 IT systems across the sectors of public
The post South Korea Orders Massive Security Audit of 1,600 Critical IT Systems appeared first on Penetration Testing Tools.
The U.S. Department of Justice has charged 31 individuals, including alleged members of organized crime and former NBA
The post NBA Players Linked to $7M Poker Scam Exploiting Hacked Card Shufflers appeared first on Penetration Testing Tools.
Hackers have begun actively exploiting a newly disclosed vulnerability in the Windows Server Update Services (WSUS) component. The
The post Windows Server WSUS Flaw Under Active Attack (CVE-2025-59287, CVSS 9.8) with Public PoC appeared first on Penetration Testing Tools.
The Unit 42 team at Palo Alto Networks has released an in-depth investigation into a new international cybercrime
The post Jingle Thief: Cloud-Native Fraud Ring Steals Millions via Microsoft 365 Gift Cards appeared first on Penetration Testing Tools.
Group-IB’s Threat Intelligence team has published a detailed analysis of a new cyber-espionage campaign very likely attributable to
The post High-Value Targets: MuddyWater APT Used Compromised VPN Mailbox in Stealth Campaign appeared first on Penetration Testing Tools.
Beginning November 3, 2025, all developers submitting new Firefox extensions will be required to specify in their manifest.json
The post Mozilla Demands New Firefox Extensions Disclose Data Collection Practices appeared first on Penetration Testing Tools.
Beginning with the October 2025 Windows security updates, File Explorer now automatically blocks the preview of files downloaded
The post Windows Blocks File Previews to Stop NTLM Credential Leaks appeared first on Penetration Testing Tools.
Amazon has published a comprehensive technical report detailing the outage that paralyzed major online platforms and triggered a
The post The Global Cascade: AWS Outage Caused by Automated DNS Race Condition appeared first on Penetration Testing Tools.
The Fedora community has officially adopted a comprehensive policy governing the use of artificial intelligence in the creation
The post Fedora Adopts Groundbreaking AI Policy: Full Accountability for Code Contributions appeared first on Penetration Testing Tools.
StegoScan.py is a powerful, next-generation tool for automated steganography detection in websites, web servers, and local directories, integrating
The post StegoScan.py: The AI-Powered Tool That Finds Secrets Hidden in Files and Websites appeared first on Penetration Testing Tools.
On October 22, 2025, OpenBSD 7.8 was released —the project’s 59th stable edition, once again featuring the pufferfish
The post OpenBSD 7.8 Released: Massive Performance Boost with Parallel TCP Stack and Raspberry Pi 5 Support appeared first on Penetration Testing Tools.
In April of this year, a cyberattack crippled the operations of Juan F. Luis Hospital in the U.S.
The post $800K Weekly: Hospital Cyberattack Forces 5 Months of Manual Operation appeared first on Penetration Testing Tools.
Researchers from Team Z3 have withdrawn their planned demonstration of a WhatsApp vulnerability at the Pwn2Own Ireland 2025
The post $1M WhatsApp Zero-Click Exploit Withdrawn at Pwn2Own, Shared with Meta appeared first on Penetration Testing Tools.
Jewett-Cameron Trading, a manufacturer of metal and wooden fencing, has informed the U.S. Securities and Exchange Commission (SEC)
The post Ransomware Steals Meeting Videos and Financial Data Ahead of SEC Filing appeared first on Penetration Testing Tools.
The electronic display boards of Los Angeles’s public transit network were hacked and used to broadcast alarming messages.
The post Transit Terror: LA Metro Displays Hacked to Broadcast Bomb Warning appeared first on Penetration Testing Tools.
On the second day of Pwn2Own Ireland 2025, participants delivered an impressive display of skill, uncovering 56 new
The post Hacker Teams Win $792K as Samsung Galaxy S25 is Hacked at Pwn2Own appeared first on Penetration Testing Tools.
