Six human rights organizations have filed a formal complaint with the European Commission against Alphabet, Google’s parent company, accusing it of violating the Digital Markets Act (DMA)—a cornerstone piece of EU legislation governing the...
The post Google Accused of Hiding Uninstall Options for Pre-installed Android Apps, Violating EU DMA appeared first on Penetration Testing Tools.
pretender pretender is a tool developed by RedTeam Pentesting to obtain machine-in-the-middle positions via spoofed local name resolution and DHCPv6 DNS takeover attacks. pretender primarily targets Windows hosts, as it is intended to be used...
The post pretender: relaying attacks featuring DHCPv6 DNS takeover appeared first on Penetration Testing Tools.
Cervantes is an open-source, collaborative platform designed specifically for pentesters and red teams. It serves as a comprehensive management tool, streamlining the organization of projects, clients, vulnerabilities, and reports in a single, centralized location....
The post cervantes: open-source collaborative platform for pentesters or red teams appeared first on Penetration Testing Tools.
Clorox has filed a lawsuit against the global IT services provider Cognizant, accusing the company of gross negligence that allegedly led to a devastating cyberattack in August 2023. According to the complaint, Cognizant—tasked with...
The post Clorox Sues Cognizant for $380M, Alleges Gross Negligence Led to Devastating Cyberattack appeared first on Penetration Testing Tools.
Amazon was forced to urgently withdraw a compromised version of its AI-powered programming assistant, Q, after a malicious instruction was covertly embedded into the system. This rogue directive prompted the assistant to exploit command-line...
The post Amazon Q Pulled After Malicious Pull Request Instructs AI to Delete User Files and AWS Resources appeared first on Penetration Testing Tools.
The cybercriminal group known as Mimo, previously recognized for its campaigns deploying cryptocurrency miners, has shifted its tactics, now targeting new vectors — notably the popular e-commerce platform Magento and misconfigured Docker instances. The...
The post Mimo Strikes Magento & Docker: Evolved Cybercrime Group Unleashes Stealthy Cryptojacking & Proxyjacking appeared first on Penetration Testing Tools.
Amid the growing popularity of Android smartphones in developing regions and the increasing accessibility of third-party app stores, cybercriminals have launched a large-scale campaign that combines two highly dangerous tactics—credential theft and click fraud—for...
The post Android Malware: New Campaign Blends Click Fraud & Credential Theft via Fake Apps appeared first on Penetration Testing Tools.
Microsoft has reversed its decision to end support for Windows 10 and now offers users a free one-year extension of security updates. This reprieve benefits nearly 700 million individuals who continue to rely on...
The post Microsoft Reverses Course: Free Windows 10 Security Updates Extended for One Year! appeared first on Penetration Testing Tools.
ACRStealer, a notorious information-stealing malware, has once again come under the spotlight following a series of enhancements that have significantly improved its resilience against detection and analysis. Over the past year—particularly since the beginning...
The post ACRStealer’s Stealthy Evolution: New Variants Use Heaven’s Gate & Low-Level NTAPIs to Evade Detection appeared first on Penetration Testing Tools.
Hackers have ramped up their attacks on vulnerable Linux servers with exposed SSH access, deploying the SVF Botnet—a simple yet effective malicious framework designed for conducting DDoS attacks and cryptocurrency mining. This revelation comes...
The post SVF Botnet Strikes: New Linux DDoS Threat Leverages Discord for Covert Command and Control appeared first on Penetration Testing Tools.
Experts at SEQRITE Labs have uncovered a large-scale cyber-espionage campaign dubbed CargoTalon, specifically targeting personnel within a key enterprise of Russia’s aviation industry. The operation employs highly targeted phishing techniques, disguised as essential logistics...
The post CargoTalon: New Cyber-Espionage Campaign Targets Russian Aviation with Stealthy DLL Implants appeared first on Penetration Testing Tools.
Researchers have uncovered a stealthy backdoor within WordPress, cunningly disguised as a system file within the mu-plugins directory—a special location designated for must-use plugins. This strategic placement enables threat actors to establish a persistent...
The post Stealthy WordPress Backdoor Found Hiding in Must-Use Mu-Plugins Directory for Persistent Access appeared first on Penetration Testing Tools.
The U.S. National Nuclear Security Administration (NNSA), a division of the Department of Energy tasked with maintaining and safeguarding the nation’s nuclear arsenal, has found itself at the center of one of the most...
The post US Nuclear Agency Hit by SharePoint Zero-Day: Over 400 Orgs Breached as Ransomware Threat Escalates appeared first on Penetration Testing Tools.
On July 22, 2025, Mozilla unveiled the Firefox 141 update, a release focused on enhancing browser security. According to security bulletin MFSA 2025-56, the update addresses 18 vulnerabilities, including flaws in the JavaScript engine,...
The post Firefox 141 Released with Patches for 18 Vulnerabilities, Including High-Severity RCE Flaws appeared first on Penetration Testing Tools.
A major incident has rocked the npm ecosystem: the widely-used package eslint-config-prettier suddenly received an update devoid of any corresponding changes on GitHub. Developers quickly grew suspicious—and with good reason. The package’s maintainer later...
The post npm Supply Chain Attack Exposes Devs to “Scavenger” Malware Via Phished Accounts appeared first on Penetration Testing Tools.
A surge of cyberattacks has been recorded across the United States, attributed to the Interlock group, which employs a double extortion strategy targeting companies and critical infrastructure entities. This warning was jointly issued by...
The post #StopRansomware: CISA & FBI Warn of Interlock Ransomware Surging, Hits US Healthcare Giants appeared first on Penetration Testing Tools.
Google has officially unveiled a new experimental feature within its search engine, enabling users to delegate the task of calling local businesses to artificial intelligence and receive relevant information without any direct involvement. Instead...
The post Google’s AI Now Calls Businesses for You: A New Era of Search Automation or Digital Noise? appeared first on Penetration Testing Tools.
Following a sweeping law enforcement operation in May—which dismantled over 2,300 domains and disrupted portions of its infrastructure—the malicious Lumma platform is once again exhibiting a resurgence in activity. Despite the significant blow, the...
The post Lumma Stealer Resurfaces After Takedown: New Stealth Tactics Target Users Via Fake Cracks, CAPTCHAs & GitHub appeared first on Penetration Testing Tools.
China’s Ministry of State Security has issued two high-profile warnings, alleging the deliberate implantation of backdoors into both software and hardware components—across terrestrial and coastal infrastructure. The warnings span a broad spectrum of threats,...
The post China Alleges Widespread Foreign Backdoors in Software, Hardware, and Subsea Espionage appeared first on Penetration Testing Tools.
VulnLab A web vulnerability lab project developed by Yavuzlar. Vulnerabilities SQL Injection Cross-Site Scripting (XSS) Command Injection Insecure Direct Object References (IDOR) Cross-Site Request Forgery (CSRF) XML External Entity (XXE) Insecure Deserialization File Upload...
The post VulnLab: web vulnerability lab project appeared first on Penetration Testing Tools.
