An international law enforcement operation has successfully dismantled Tycoon 2FA, one of the most formidable phishing-as-a-service platforms in
The post The Fall of a Phishing Giant: How International Law Enforcement Crushed the Tycoon 2FA Empire appeared first on Penetration Testing Tools.
Artificial intelligence tools are now a core part of everyday workflows — from browsers that summarize web pages to automated agents that help users make decisions online. As these tools become more capable, attackers are learning how to turn them against the very people they are designed to serve. A method called indirect prompt injection […]
The post Hackers Can Use Indirect Prompt Injection Allows Adversaries to Manipulate AI Agents with Content appeared first on Cyber Security News.
In a recent dossier, OX Research delineated how a mundane email dispatched to a corporate address can precipitate
The post The “Phantom” Character: How a Single Email Can Seize Full Control of Your FreeScout Helpdesk appeared first on Penetration Testing Tools.
For several years, the Silver Dragon syndicate has orchestrated a clandestine cyber offensive against state apparatuses and prominent
The post The Google Drive Shadow: Unmasking Silver Dragon’s “GearDoor” Backdoor and the Silent Return of APT41 appeared first on Penetration Testing Tools.
Business email compromise (BEC) and funds transfer fraud combined for 58% of all cyber insurance claims filed in 2025, according to data from Coalition covering more than 100,000 policyholders across the United States, Canada, the United Kingdom, Australia, and Germany. BEC was the single most common claim type at 31%, with frequency rising 15% year over year to 0.47%. Average losses per BEC incident dropped 28% to $27,000, a decline attributed to faster detection and … More →
The post Backup strategies are working, and ransomware gangs are responding with data theft appeared first on Help Net Security.
While the majority of the corporate world remains preoccupied with the latest vulnerabilities, a cadre of Chinese threat
The post The Evoxt Labyrinth: Unmasking the New Subterranean Infrastructure of China’s PlugX Syndicates appeared first on Penetration Testing Tools.