The Damn Vulnerable Model Context Protocol (DVMCP) is an educational project designed to demonstrate security vulnerabilities in MCP implementations. It contains 10 challenges of increasing difficulty that showcase different types of vulnerabilities and attack...
The post Damn Vulnerable MCP: Educational Project Exposes Critical Security Flaws in AI Protocol appeared first on Penetration Testing Tools.
Cybercriminals have launched a new wave of attacks targeting WordPress websites—so meticulously concealed that the campaign was only recently uncovered. Security experts at Sucuri have discovered that compromised websites are being used as silent...
The post Stealthy WordPress Malware Uncovered: Multi-Stage RAT Injects via Header.php, Hides Traces appeared first on Penetration Testing Tools.
The U.S. Department of Justice has announced the uncovering of a vast scheme in which fraudulent IT specialists from North Korea secured employment with American companies by posing as citizens of other countries. According...
The post DOJ Dismantles North Korean IT Job Scam: Stolen Identities & Laundering Funded DPRK Weapons appeared first on Penetration Testing Tools.
The International Criminal Court (ICC) in The Hague has once again come under the crosshairs of cyber attackers. The judicial body reported that it had been the target of a deliberate and coordinated cyberattack....
The post International Criminal Court Hit by “Sophisticated and Targeted” Cyberattack appeared first on Penetration Testing Tools.
Microsoft has announced its intention to discontinue password support within the Authenticator app starting August 1, 2025. This move forms part of the company’s broader global initiative to shift away from traditional login methods...
The post Microsoft Authenticator Ends Password Support: Full Phase-Out by August 1, 2025 appeared first on Penetration Testing Tools.
Google has released security updates for its Chrome browser to address a critical vulnerability for which an active exploit is already in circulation. The issue, tracked as CVE-2025-6554, is classified as a “Type Confusion”...
The post Urgent Chrome Zero-Day Alert: CVE-2025-6554 (Type Confusion) Actively Exploited in the Wild appeared first on Penetration Testing Tools.
Proton has officially joined the legal battle against Apple, accusing the tech giant of violating antitrust laws and undermining the interests of developers, users, and data privacy. In its complaint filed with the U.S....
The post Proton Sues Apple Over “Illegal Monopoly”: App Store Antitrust Battle Escalates in US Court appeared first on Penetration Testing Tools.
The Government of Canada has officially ordered the cessation of operations of Hikvision Canada Inc. within its territory, citing concerns over national security. The announcement followed the conclusion of a multi-phase review conducted under...
The post Canada Bans Hikvision Operations Nationwide Citing National Security Threat appeared first on Penetration Testing Tools.
U.S. cyber divisions, including the FBI and NSA, have issued an urgent advisory warning of potential cyberattacks targeting the nation’s critical infrastructure by hacker groups affiliated with Iran. While experts note that there is...
The post CISA, FBI, NSA Warn: Iran-Linked Cyber Actors May Target US Critical Infrastructure appeared first on Penetration Testing Tools.
The FBI held a closed-door briefing for members of the U.S. Congress to bolster mobile device security after the contact list from the personal smartphone of White House Chief of Staff Susie Wiles fell...
The post FBI Warns Congress: White House Chief of Staff’s Phone Hacked, Senator Slams “Inadequate” Mobile Security Advice appeared first on Penetration Testing Tools.
The Swiss foundation Radix, engaged in healthcare-related initiatives, has fallen victim to a ransomware attack. As a result of the cyber intrusion, the perpetrators exfiltrated and encrypted data, which was later disseminated on the...
The post Radix Ransomware Attack: Swiss Health Foundation Breach Exposes Federal Government Data on Dark Web appeared first on Penetration Testing Tools.
The largest reseller of Apple products in Northern Europe—Humac—has fallen victim to a cyberattack, a fact revealed following the publication of company data on the dark web portal operated by the Kraken group. The...
The post Apple Reseller Humac Hacked: Kraken Group Leaks Sensitive Company Data on Dark Web appeared first on Penetration Testing Tools.
Hackers affiliated with Iran have resurfaced once again—this time claiming to have accessed a trove of new emails belonging to former President Donald Trump and his inner circle. According to Reuters, the breach allegedly...
The post Iranian Hackers “Robert” Threaten New Leak of 100GB of Trump Aides’ Emails After Recent Airstrikes appeared first on Penetration Testing Tools.
Google has invested in a project that does not yet exist, but one day may replicate the power of the stars. The tech giant has announced an agreement to purchase 200 megawatts of energy...
The post Google Bets Big on Fusion: Signs Historic Deal for 200MW of Clean Energy from Planned Reactor appeared first on Penetration Testing Tools.
Perhaps the most critical component of an AWS infrastructure is the policy document describing the actions allowed or denied to a resource. IAM can become a messy kitchen as misconfigurations will introduce gaps in...
The post dAWShund: New Tool Suite to Visualize & Secure AWS IAM Permissions appeared first on Penetration Testing Tools.
With the upgraded version of Siri still absent, Bloomberg reports that Apple may be considering a strategic shift—potentially partnering with OpenAI or Anthropic to enhance Siri’s capabilities using third-party large language models. Apple had...
The post Apple Eyes OpenAI & Anthropic: Claude & ChatGPT Models May Power Next-Gen Siri appeared first on Penetration Testing Tools.
Renowned analyst Ming-Chi Kuo has indicated that Apple is planning to launch an entry-level MacBook powered by the A18 Pro chip, while also expanding its portfolio of wearable visual devices—potentially including the long-rumored smart...
The post Apple’s Ambitious Roadmap: Cheaper A18 Pro MacBooks, Vision Pro Upgrades, & Smart Glasses Launching by 2028 appeared first on Penetration Testing Tools.
Rumors of an imminent Windows 12 release have proven premature. Instead, Microsoft has officially confirmed that this year will bring a new version of Windows 11, designated 25H2. The update is already available to...
The post Windows 11 25H2 Confirmed: New Annual Update Arriving H2 2025, Debunks Windows 12 Rumors appeared first on Penetration Testing Tools.
The cryptocurrency project Resupply has found itself at the epicenter of a cyber incident following a sophisticated exploit that enabled an attacker to engineer a debt hole totaling 10 million reUSD. The breach affected...
The post Resupply Crypto Exploit: $10M Debt Hole Created Via Smart Contract Logic Flaw appeared first on Penetration Testing Tools.
The United States Federal Bureau of Investigation has issued an official warning regarding the escalating operations of the hacker collective known as Scattered Spider, which has now begun actively targeting the aviation sector. According...
The post FBI Warns: Scattered Spider Unleashes Social Engineering & Ransomware on Aviation Sector appeared first on Penetration Testing Tools.
