The group Lunar Spider—also known under the aliases Gold SwathMore and Elara—has ramped up a new malicious campaign
The post Lunar Spider Campaign: FakeCAPTCHA Used to Exploit CORS Flaws and Deliver Latrodectus Loader appeared first on Penetration Testing Tools.
A hacker collective known as UAT-8099 is presently conducting an active campaign to promote malicious content in search
The post Cisco Talos Exposes UAT-8099: Chinese Group Uses BadIIS Malware on Compromised Servers for SEO Fraud and Credential Theft appeared first on Penetration Testing Tools.
The vulnerability rewards platform HackerOne has announced that over the past twelve months, white-hat hackers around the world
The post HackerOne Payouts Hit $81 Million: AI Vulnerability Reports Soar by Over 200% appeared first on Penetration Testing Tools.
In September 2025, Microsoft began gradually discontinuing support for embedded SVG images in Outlook for the web and
The post Microsoft Discontinues Embedded SVG Support in Outlook for Enhanced Security appeared first on Penetration Testing Tools.
Windows 11 has received another major update — version 25H2, officially known as Windows 11 2025 Update. This
The post Windows 11 2025 Update (25H2) Focuses on Security and Legacy Component Removal appeared first on Penetration Testing Tools.
Amid the ongoing duel between Linux kernel developers and authors of malicious modules, each kernel release reshuffles the
The post FlipSwitch Rootkit Bypasses Linux Kernel 6.9 Defenses with Surgical Bytecode Hooking appeared first on Penetration Testing Tools.
The final release of OpenSSL 3.6 has been officially published — the culmination of the collective efforts of
The post OpenSSL 3.6 Released: Major Cryptography Update Adds LMS Signatures and NIST PKEY Support appeared first on Penetration Testing Tools.
On September 29, the Intermediate People’s Court of Wenzhou delivered a verdict in the high-profile case of the
The post China Sentences 11 Members of Myanmar’s Min Clan Crime Syndicate to Death appeared first on Penetration Testing Tools.
BBC journalist Joe Tidy found himself entangled in a scenario that ordinarily lurks in the shadows of the
The post BBC Journalist Targeted in $100M Ransomware Scam, Offered Bitcoin Payout to Become Insider Threat appeared first on Penetration Testing Tools.
A new Android banking trojan known as Klopatra has infected more than three thousand smartphones within just a
The post Klopatra: New Android RAT Uses Hidden VNC and Commercial Obfuscation to Hijack European Banking Accounts appeared first on Penetration Testing Tools.
Red Hat, the American developer of enterprise Linux solutions, has confirmed a cybersecurity incident shortly after a group
The post Red Hat Confirms Breach After Hackers Steal 570GB of Client Network Blueprints and Auth Tokens from GitLab appeared first on Penetration Testing Tools.
CERT-UA has detected a new targeted campaign against Ukraine in which operators distribute malicious XLL modules inside ZIP
The post CERT-UA Warns: New Espionage Campaign Distributes CABINETRAT Backdoor via Signal Messenger XLL Files appeared first on Penetration Testing Tools.
The Chinese company Anker, maker of Eufy security cameras, launched an unusual campaign in late 2024: it offered
The post Eufy Paid Users $2 Per Video of Staged Thefts to Train AI Security Cameras appeared first on Penetration Testing Tools.
The French cybersecurity firm SEKOIA has uncovered a smishing campaign in which attackers exploit vulnerabilities in Milesight industrial
The post Exploited Routers: Flaw in Milesight Industrial Devices Used for Mass Smishing in Europe appeared first on Penetration Testing Tools.
Google has released the stable version of Chrome 141.0.7390.54/55 for Windows, macOS, and Linux. The update will roll
The post Chrome 141 Stable Released: Fixes High-Severity WebGPU and Video Heap Overflow Flaws appeared first on Penetration Testing Tools.
The head of Instagram, Adam Mosseri, has decided to publicly dispel a long-standing myth: that Meta secretly activates
The post Meta Denies Microphone Spying, Confirms AI Chat Data Will Now Be Used for Targeted Ads appeared first on Penetration Testing Tools.
Researchers from Johns Hopkins University and several other institutions have demonstrated a novel, server-side attack against Intel SGX
The post Web3 Crisis: Sub-$1k Hardware Attack Fully Extracts Intel SGX Attestation Key, Compromising Encrypted Blockchains appeared first on Penetration Testing Tools.
Against the backdrop of heated debate surrounding the OpenAI–Nvidia partnership in both the media and financial markets, a
The post OpenAI Says the World Needs 10 Billion GPUs for an ‘Always-On’ AI “Supermind” appeared first on Penetration Testing Tools.
A developer operating under the handle 0xr0BIT has released a new Windows security-audit tool called TaskHound. It is
The post TaskHound: New Open-Source Tool Audits Windows Scheduled Tasks for Privileged Credentials and Tier-0 Risks appeared first on Penetration Testing Tools.
PhoneSploit Pro An All-In-One hacking tool is written in Python to remotely exploit Android devices using ADB (Android Debug
The post PhoneSploit-Pro: remotely exploit Android devices using ADB and Metasploit-Framework appeared first on Penetration Testing Tools.
