Penetration Testing Tools - Metepreter.org

Telephone-based fraud schemes masquerading as customer support from well-known brands are rapidly gaining traction among cybercriminals. According to researchers at Cisco Talos, attackers are increasingly employing a method known as TOAD (Telephone-Oriented Attack Delivery),...

The post TOAD Attacks Surge: Reverse Phishing Campaigns Trick Victims into Calling Scammers for RAT Delivery appeared first on Penetration Testing Tools.

Australian airline Qantas has suffered a significant cybersecurity incident after malicious actors gained access to a third-party platform containing customer data, the company announced on Monday evening. Qantas, the nation’s largest carrier—operating both domestic...

The post Qantas Data Breach: Up to 6 Million Customers’ Personal Info Exposed in Third-Party Contact Centre Attack appeared first on Penetration Testing Tools.

An international cryptocurrency fraud network has been dismantled in Spain, with more than 5,000 victims identified across the globe over the past several years. According to law enforcement estimates, the perpetrators managed to launder...

The post €460M Crypto Fraud Busted: Europol & Allies Arrest 5, Dismantle Global Money Laundering Ring appeared first on Penetration Testing Tools.

Google has found itself at the center of a major legal battle that culminated in a California jury ordering the tech giant to pay over $314 million to Android smartphone users in the state....

The post Google Hit with $314M Verdict: Jury Rules Android Secretly Used Cellular Data for Tracking appeared first on Penetration Testing Tools.

Anthropic has encountered a critical vulnerability in one of its AI-related projects. The flaw, identified as CVE-2025-49596, affects the Model Context Protocol (MCP) Inspector tool and has been assigned a CVSS severity score of...

The post Critical MCP Inspector Flaw (CVE-2025-49596, CVSS 9.4): Unauthenticated RCE Threatens AI Dev Machines via Browser appeared first on Penetration Testing Tools.

A newly discovered technique in Windows allows malicious scripts to be executed without triggering any user warnings. This method, known as FileFix, has been refined to exploit a vulnerability in how browsers handle saved...

The post FileFix: New Windows Technique Bypasses Mark of the Web for Silent Script Execution appeared first on Penetration Testing Tools.

Google has once again drawn the attention of cybersecurity experts following its implementation of a new user data protection mechanism in the Chrome browser—AppBound Cookie Encryption. Although the initiative reflects an ambitious stride toward...

The post Chrome Cookie Encryption Bypassed: “C4 Attack” Exploits Padding Oracle to Steal Cookies appeared first on Penetration Testing Tools.

The Damn Vulnerable Model Context Protocol (DVMCP) is an educational project designed to demonstrate security vulnerabilities in MCP implementations. It contains 10 challenges of increasing difficulty that showcase different types of vulnerabilities and attack...

The post Damn Vulnerable MCP: Educational Project Exposes Critical Security Flaws in AI Protocol appeared first on Penetration Testing Tools.

Cybercriminals have launched a new wave of attacks targeting WordPress websites—so meticulously concealed that the campaign was only recently uncovered. Security experts at Sucuri have discovered that compromised websites are being used as silent...

The post Stealthy WordPress Malware Uncovered: Multi-Stage RAT Injects via Header.php, Hides Traces appeared first on Penetration Testing Tools.

The U.S. Department of Justice has announced the uncovering of a vast scheme in which fraudulent IT specialists from North Korea secured employment with American companies by posing as citizens of other countries. According...

The post DOJ Dismantles North Korean IT Job Scam: Stolen Identities & Laundering Funded DPRK Weapons appeared first on Penetration Testing Tools.

The International Criminal Court (ICC) in The Hague has once again come under the crosshairs of cyber attackers. The judicial body reported that it had been the target of a deliberate and coordinated cyberattack....

The post International Criminal Court Hit by “Sophisticated and Targeted” Cyberattack appeared first on Penetration Testing Tools.

Microsoft has announced its intention to discontinue password support within the Authenticator app starting August 1, 2025. This move forms part of the company’s broader global initiative to shift away from traditional login methods...

The post Microsoft Authenticator Ends Password Support: Full Phase-Out by August 1, 2025 appeared first on Penetration Testing Tools.

Google has released security updates for its Chrome browser to address a critical vulnerability for which an active exploit is already in circulation. The issue, tracked as CVE-2025-6554, is classified as a “Type Confusion”...

The post Urgent Chrome Zero-Day Alert: CVE-2025-6554 (Type Confusion) Actively Exploited in the Wild appeared first on Penetration Testing Tools.

Proton has officially joined the legal battle against Apple, accusing the tech giant of violating antitrust laws and undermining the interests of developers, users, and data privacy. In its complaint filed with the U.S....

The post Proton Sues Apple Over “Illegal Monopoly”: App Store Antitrust Battle Escalates in US Court appeared first on Penetration Testing Tools.

The Government of Canada has officially ordered the cessation of operations of Hikvision Canada Inc. within its territory, citing concerns over national security. The announcement followed the conclusion of a multi-phase review conducted under...

The post Canada Bans Hikvision Operations Nationwide Citing National Security Threat appeared first on Penetration Testing Tools.

U.S. cyber divisions, including the FBI and NSA, have issued an urgent advisory warning of potential cyberattacks targeting the nation’s critical infrastructure by hacker groups affiliated with Iran. While experts note that there is...

The post CISA, FBI, NSA Warn: Iran-Linked Cyber Actors May Target US Critical Infrastructure appeared first on Penetration Testing Tools.

The FBI held a closed-door briefing for members of the U.S. Congress to bolster mobile device security after the contact list from the personal smartphone of White House Chief of Staff Susie Wiles fell...

The post FBI Warns Congress: White House Chief of Staff’s Phone Hacked, Senator Slams “Inadequate” Mobile Security Advice appeared first on Penetration Testing Tools.

The Swiss foundation Radix, engaged in healthcare-related initiatives, has fallen victim to a ransomware attack. As a result of the cyber intrusion, the perpetrators exfiltrated and encrypted data, which was later disseminated on the...

The post Radix Ransomware Attack: Swiss Health Foundation Breach Exposes Federal Government Data on Dark Web appeared first on Penetration Testing Tools.

The largest reseller of Apple products in Northern Europe—Humac—has fallen victim to a cyberattack, a fact revealed following the publication of company data on the dark web portal operated by the Kraken group. The...

The post Apple Reseller Humac Hacked: Kraken Group Leaks Sensitive Company Data on Dark Web appeared first on Penetration Testing Tools.

Hackers affiliated with Iran have resurfaced once again—this time claiming to have accessed a trove of new emails belonging to former President Donald Trump and his inner circle. According to Reuters, the breach allegedly...

The post Iranian Hackers “Robert” Threaten New Leak of 100GB of Trump Aides’ Emails After Recent Airstrikes appeared first on Penetration Testing Tools.