Cyber espionage in Asia is intensifying: researchers at Seqrite Labs have unveiled new insights into the operations of the group UNG0002, also known as Unknown Group 0002. This obscure yet technically adept entity is...
The post UNG0002: Stealthy South Asian APT Group Unleashes New Malware in Broad Cyberespionage Campaigns Across Asia appeared first on Penetration Testing Tools.
AI-powered programming tools are rapidly gaining popularity, and one of the most prominent—Cursor—has introduced a new YOLO mode (short for “you only live once”) that enables its agent to execute complex sequences of actions...
The post Cursor AI’s “YOLO Mode” Exposed: Security Firm Warns of Easy Bypasses, Data Deletion, and RCE Risks appeared first on Penetration Testing Tools.
Following a wave of criticism sparked by a recent ProPublica report alleging that Microsoft had engaged engineers based in China to support cloud systems tied to the U.S. Department of Defense, the company has...
The post Microsoft Halts China-Based Support for US DoD Cloud After ProPublica Expose & Pentagon Backlash appeared first on Penetration Testing Tools.
Apple has announced that, effective immediately, users in South Korea can add the widely used Tmoney transit card to their Apple Wallet. With this integration, commuters can effortlessly ride subways, buses, and other public...
The post Apple Wallet Now Supports Tmoney: South Korea Commuters Tap to Pay with iPhone & Apple Watch appeared first on Penetration Testing Tools.
Amid escalating tensions between Iran and Israel, cybersecurity experts at Lookout have uncovered a new Android-based spyware known as DCHSpy, which has been linked to Iran’s Ministry of Intelligence and Security (MOIS). This malicious...
The post DCHSpy Android Spyware Linked to Iran’s MuddyWater APT, Exploits Starlink Brand Amid Conflict appeared first on Penetration Testing Tools.
A few days ago, we reported on the critical zero-day vulnerability CVE-2025-53770 in Microsoft SharePoint Server, an enhanced iteration of the previously identified flaw CVE-2025-49706. At the time, it was known that the issue...
The post SharePoint Under Siege: New Zero-Day (CVE-2025-53770) Actively Compromises 100+ Global Organizations appeared first on Penetration Testing Tools.
The CrushFTP service has encountered a newly discovered critical vulnerability, already being exploited in active attacks. Designated CVE-2025-54309 and assigned a CVSS severity score of 9.0, the flaw stems from improper handling of AS2...
The post CrushFTP Zero-Day (CVE-2025-54309) Actively Exploited via AS2 Flaw – Patch Now! appeared first on Penetration Testing Tools.
The hacking collective known as EncryptHub—also tracked as LARVA-208 and Water Gamayun—has launched a new wave of attacks specifically targeting developers within the Web3 ecosystem. Their aim: to infect victims with data-stealing malware capable...
The post EncryptHub’s New Web3 Attack: Fake AI Platforms Deploy Fickle Stealer to Rob Crypto Devs appeared first on Penetration Testing Tools.
Cybercriminals affiliated with the group PoisonSeed have devised a method to circumvent FIDO2 protection—not by breaching the technology itself, but by cleverly exploiting one of its legitimate features: cross-device authentication. Through this technique, attackers...
The post FIDO2 Bypass Uncovered: Hackers Exploit Cross-Device Authentication with QR Code Phishing appeared first on Penetration Testing Tools.
The Chinese firm SDIC Intelligence Xiamen Information Co., Ltd. (formerly Meiya Pico), renowned for its work in digital forensics and information security technologies, has developed a mobile tool named Massistant for data extraction from...
The post Massistant: China’s New Mobile Forensics Tool Harvests Data from Seized Devices appeared first on Penetration Testing Tools.
Coercer A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through many methods. Features Automatically detects open SMB pipes on the remote machine. Calls one by one all...
The post Coercer: automatically coerce a Windows server to authenticate on an arbitrary machine appeared first on Penetration Testing Tools.
Earlier this year, Microsoft published a study exposing a sweeping campaign involving the distribution of infostealers—malicious software designed to exfiltrate user data. According to the report, over one million devices were compromised, with the...
The post Piracy’s Hidden Cost: FMovies Linked to Massive Infostealer Campaign Compromising 1 Million+ Devices appeared first on Penetration Testing Tools.
Three malicious scripts have been discovered in the Arch User Repository (AUR)—a community-driven repository for Arch Linux user packages—used to deploy the CHAOS RAT trojan. These scripts, uploaded by a user operating under the...
The post Arch Linux Users Beware: Malicious AUR Packages Deployed CHAOS RAT Trojan appeared first on Penetration Testing Tools.
Until recently, victims of the Phobos and 8Base ransomware families had virtually no recourse for recovering their encrypted data without paying a ransom. These strains were considered among the most resilient and widely deployed...
The post Free Decryption Tool Released for Phobos and 8Base Ransomware: End of the Line for These Notorious Threats appeared first on Penetration Testing Tools.
Hewlett-Packard Enterprise has issued a critical security advisory concerning a severe vulnerability in Aruba Instant On access points. Embedded credentials have been discovered within the devices, enabling malicious actors to bypass standard authentication and...
The post Critical Flaw (CVE-2025-37103) in Aruba Instant On APs: Hardcoded Credentials Allow Full Admin Takeover – Patch Now! appeared first on Penetration Testing Tools.
Hackers have successfully injected malicious code into popular npm packages by leveraging a phishing campaign against project maintainers. The attackers orchestrated a targeted campaign aimed at developers stewarding key projects and managed to steal...
The post npm Supply Chain Attack Exploited in the Wild – Phishing Steals Maintainer Tokens, Injects Malware into Popular Packages appeared first on Penetration Testing Tools.
A critical vulnerability has been discovered in Microsoft SharePoint Server, now actively exploited as part of a widespread cyberattack campaign. The flaw, identified as CVE-2025-53770, carries a staggering severity score of 9.8 out of...
The post Critical SharePoint Zero-Day (CVE-2025-53770) Actively Exploited in the Wild appeared first on Penetration Testing Tools.
A team of analysts at Kaspersky Lab has uncovered an exceptionally sophisticated piece of malware embedded within the Exchange infrastructure of governmental institutions. Based on forensic logs and the nature of the executable code,...
The post GhostContainer: Kaspersky Uncovers Elite APT Backdoor Infiltrating Asian Government Exchange Servers appeared first on Penetration Testing Tools.
Wiz, a cybersecurity firm specializing in cloud infrastructure protection, has uncovered a critical vulnerability in the NVIDIA Container Toolkit, identified as CVE-2025-23266 and rated 9.0 on the CVSS scale. Dubbed “NVIDIAScape,” the flaw poses...
The post NVIDIAScape: Critical Container Escape (CVE-2025-23266, CVSS 9.0) Threatens 37% of AI Cloud Environments appeared first on Penetration Testing Tools.
In April 2025, cybersecurity experts from Cisco Talos uncovered a new threat vector: cybercriminals exploiting public repositories on GitHub to host malicious payloads used in distributing the Amadey trojan. According to researchers, the creation...
The post GitHub Weaponized: Cisco Talos Uncovers Massive MaaS Operation Distributing Amadey, Loaders, and Infostealers appeared first on Penetration Testing Tools.
