A critical vulnerability in the WatchGuard Fireware operating system allows attackers to execute arbitrary code on affected devices
The post Urgent Patch: Critical WatchGuard Firewall Flaw Exposes 76,000 Devices to RCE appeared first on Penetration Testing Tools.
Hackers have unleashed a new self-propagating malware dubbed GlassWorm, which first infiltrated the Visual Studio Code extension ecosystem
The post The Invisible Worm: GlassWorm Spreads Via VS Code Extensions and Blockchain C2 appeared first on Penetration Testing Tools.
Kuba Gretzky originally sought to make the internet a safer place — yet his creation achieved the opposite.
The post The MFA Killer: How One Programmer’s Tool Became a $100M Cybercrime Weapon appeared first on Penetration Testing Tools.
For the first time, the U.S. Department of Homeland Security has formally demanded that OpenAI disclose the identity
The post First Known Case: Feds Force OpenAI to Disclose ChatGPT User Identity appeared first on Penetration Testing Tools.
Across the Asia-Pacific region and Japan, a new breed of cybercrime is taking shape—one where attackers operate as
The post The New E-Crime: AI-Driven Ransomware and Billion-Dollar Asian Underworlds appeared first on Penetration Testing Tools.
The Japanese company Ryohin Keikaku, owner of the Muji brand, has suspended operations of its online store following
The post Muji Suspends Online Store After Ransomware Cripples Logistics Partner appeared first on Penetration Testing Tools.
Developers using the Cursor and Windsurf IDEs are currently exposed to exploitation through at least 94 known vulnerabilities
The post Warning: AI IDEs Cursor and Windsurf Expose Users to 94 Chromium Flaws appeared first on Penetration Testing Tools.
In early 2025, a developer named Jay Gibson (name changed for security reasons) received a chilling notification on
The post The Hunter Hunted: Spyware Targets the Developer Who Built Its Exploits appeared first on Penetration Testing Tools.
LinkedInDumper Python 3 script to dump company employees from LinkedIn Voyager API. The results contain firstname, lastname, position
The post LinkedInDumper: dump employee information from LinkedIn Voyager API appeared first on Penetration Testing Tools.
A malicious file was discovered in the downloads section of Xubuntu.org, the official website of the Ubuntu distribution
The post Fake Xubuntu Installer Found Stealing Crypto on Official Website appeared first on Penetration Testing Tools.
XSS Exploitation Tool It is a penetration testing tool that focuses on the exploitation of Cross-Site Scripting vulnerabilities.
The post XSS Exploitation Tool: the exploitation of Cross-Site Scripting vulnerabilities appeared first on Penetration Testing Tools.
The South Korean government has officially confirmed a cyberattack on the nation’s key infrastructure—two months after the incident
The post Security Crisis: South Korea Confirms Major Hack of Government Document System appeared first on Penetration Testing Tools.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning that a vulnerability in the Windows
The post CISA Urges Immediate Patching: Critical Windows SMB Flaw Under Active Attack appeared first on Penetration Testing Tools.
The Everest ransomware group has claimed responsibility for the attack on Collins Aerospace, which caused widespread disruption of
The post Everest Ransomware Claims Responsibility for European Airport Chaos appeared first on Penetration Testing Tools.
The Israeli company NSO Group, best known for developing the Pegasus spyware, has officially lost its right to
The post Legal Earthquake: US Court Permanently Bans NSO Group from Hacking WhatsApp appeared first on Penetration Testing Tools.
The Tor Project team has released Tor Browser 15.0a4, whose most notable change is the complete removal of
The post Security First: Tor Browser Strips All AI and ML Components from Firefox appeared first on Penetration Testing Tools.
A total of 269,000 F5 BIG-IP devices have been found exposed to remote access on the internet, despite
The post Critical Risk: 269,000 F5 BIG-IP Devices Exposed After Nation-State Hack appeared first on Penetration Testing Tools.
Google has officially acknowledged the failure of its long-running privacy initiative in the Chrome browser, announcing the termination
The post Google Officially Kills Privacy Sandbox Project After Years of Failure appeared first on Penetration Testing Tools.
Since the disclosure of two critical vulnerabilities in 7-Zip, the situation has escalated sharply: functional proof-of-concept exploits are
The post Critical 7-Zip Exploit Now Public: Immediate Patching Required appeared first on Penetration Testing Tools.
Opera has opened access to its experimental browser, Neon, for users who previously joined the waiting list—while simultaneously
The post Opera’s AI Browser Neon Debuts as a Confusing, $20-a-Month Experiment appeared first on Penetration Testing Tools.
