The popular Chrome extension FreeVPN.One, installed by more than 100,000 users and marked with a verification check, has been exposed as spyware. Researchers from Koi Security discovered that it secretly captures screenshots of user...
The post Danger: “Verified” Chrome VPN Extension Exposed as Screen-Capturing Spyware appeared first on Penetration Testing Tools.
In its latest Fastly Threat Insights report, researchers analyzed more than 6.5 trillion monthly web requests to uncover emerging patterns in AI bot traffic. This rapidly expanding segment of automated systems is already exerting...
The post AI Bots Are Now Flooding the Web, Straining Servers and Skewing Analytics appeared first on Penetration Testing Tools.
The website automation platform Lovable has found itself at the center of widespread abuse. Researchers from Proofpoint have documented a sharp increase in cases where its features, originally intended for legitimate web projects, were...
The post The Dark Side of Automation: How a Website Builder Became a Phishing Machine appeared first on Penetration Testing Tools.
IBM X-Force specialists have reported the emergence of a new loader, QuirkyLoader, which since late 2024 has been employed to distribute a wide array of well-known malware families, including Agent Tesla, AsyncRAT, FormBook, MassLogger,...
The post QuirkyLoader: The New A-List Malware Loader Hiding in Plain Sight appeared first on Penetration Testing Tools.
Hackers successfully exploited recently discovered vulnerabilities in local Microsoft SharePoint servers, resulting in the leakage of personal data in the United Kingdom. Within days of the flaws being disclosed, three British organizations reported breaches...
The post UK Data Breach: Hackers Exploit SharePoint Flaws, Leaking Confidential Data appeared first on Penetration Testing Tools.
Experts at Guardio Labs have unveiled a novel method of deceiving artificial intelligence, dubbed PromptFix. This technique embeds malicious instructions within a counterfeit CAPTCHA on a webpage. When browsers equipped with autonomous AI capabilities...
The post PromptFix: The AI Exploit That Tricks Your Browser into Phishing Scams appeared first on Penetration Testing Tools.
Microsoft has urgently released out-of-band updates for Windows 10 and Windows 11 to remedy a severe malfunction introduced by the August security rollup. The flaw disrupted the operation of system reset and recovery tools:...
The post Microsoft Emergency Patch: August Windows Update Breaks System Recovery appeared first on Penetration Testing Tools.
Popular browser extensions used for password management have been found vulnerable to a novel attack technique known as DOM-based extension clickjacking. The method was unveiled by independent researcher Marek Tot at DEF CON 33....
The post Major Flaw Exposes Password Managers to “One-Click” Data Theft appeared first on Penetration Testing Tools.
Elon Musk’s company xAI has found itself at the center of a scandal after it was revealed that user conversations with the chatbot Grok had been inadvertently exposed to the public. By clicking the...
The post Grok’s Privacy Crisis: 370,000 Private Conversations Exposed on Google appeared first on Penetration Testing Tools.
In the United States, a recruiter conducting a live video interview encountered a bot impersonating a job applicant. This incident highlighted the rapid evolution of AI-driven fraud schemes: no longer limited to generating resumes,...
The post AI Job Applicants: The New Fraud Wave Impersonating Candidates in Video Interviews appeared first on Penetration Testing Tools.
Experts at Kaspersky Lab have uncovered a new remote access trojan, GodRAT, which is being distributed through .scr files disguised as financial documents. Until March 2025, attackers relied on Skype to deliver the malware,...
The post GodRAT Emerges: A New Remote Access Trojan Poses a Threat to Businesses appeared first on Penetration Testing Tools.
Thailand’s Cyber Police, in collaboration with the local telecom operator AIS, carried out a large-scale operation dubbed “KHAO SAN”, during which two young Thai nationals were arrested for executing tasks on behalf of a...
The post Bangkok’s “Phantom Cell Tower” Busted: Inside the Mobile Phishing Scam appeared first on Penetration Testing Tools.
Palo Alto Networks CEO Nikesh Arora has sounded the alarm over the dawn of a new wave of “browser wars.” Speaking during the company’s Q4 2025 earnings call, he observed that Microsoft, Google, OpenAI,...
The post A New “Browser War” Is Coming: How AI Agents Are Reshaping Cybersecurity appeared first on Penetration Testing Tools.
Apple has released critical security updates for iOS, iPadOS, and macOS addressing a newly discovered zero-day vulnerability already being actively exploited in the wild. Tracked as CVE-2025-43300, the flaw affects the ImageIO framework and...
The post Update Now: Apple Patches Critical Zero-Day Vulnerability Found in the Wild appeared first on Penetration Testing Tools.
Inotiv, a U.S.-based company headquartered in West Lafayette, Indiana, has disclosed a serious cybersecurity incident in a filing with the U.S. Securities and Exchange Commission. On August 8, 2025, the organization detected unauthorized access...
The post Inotiv Under Siege: Ransomware Attack Encrypts Biomedical Research Systems appeared first on Penetration Testing Tools.
The Australian telecommunications provider TPG Telecom has reported a serious security incident affecting the infrastructure of its subsidiary brand iiNet, which offers Australians fixed-line and mobile internet, telephony, and television services. An unidentified attacker...
The post TPG Telecom Data Breach: How One Hack Exposed 300,000 Customers appeared first on Penetration Testing Tools.
A vulnerability in the widely used AI deployment tool Ollama exposed users to the risk of drive-by attacks, enabling malicious actors to surreptitiously interfere with the local application through a specially crafted website. Exploitation...
The post Flawed AI Tool: How a Simple Website Could Have Hijacked Your Ollama App appeared first on Penetration Testing Tools.
A hacker who targeted websites across North America, Yemen, and Israel, stealing the credentials of millions of users, has been sentenced to prison. 26-year-old Al-Taheri Al-Mashriki, from Rotherham, South Yorkshire, was arrested in August...
The post The Spider Team Hacker: How a UK Man Stole 4 Million Passwords appeared first on Penetration Testing Tools.
The United Kingdom has formally accused North Korea of stealing £17 million ($22.8 million) in cryptocurrency from Lykke, a London-registered exchange. The breach forced the platform to suspend operations, cease activity altogether, and ultimately...
The post North Korea’s Digital Heist: The £17M Crypto Theft That Brought Down an Exchange appeared first on Penetration Testing Tools.
The book From Day Zero to Zero Day, published by No Starch Press, has been released, offering a comprehensive introduction to the fundamentals of vulnerability research. The author presented it at DEF CON 33...
The post Beyond the Cookie Jar: Uncovering Privacy Flaws in Google’s New Ad Tech appeared first on Penetration Testing Tools.
