Hackers have ramped up their attacks on vulnerable Linux servers with exposed SSH access, deploying the SVF Botnet—a simple yet effective malicious framework designed for conducting DDoS attacks and cryptocurrency mining. This revelation comes...
The post SVF Botnet Strikes: New Linux DDoS Threat Leverages Discord for Covert Command and Control appeared first on Penetration Testing Tools.
Experts at SEQRITE Labs have uncovered a large-scale cyber-espionage campaign dubbed CargoTalon, specifically targeting personnel within a key enterprise of Russia’s aviation industry. The operation employs highly targeted phishing techniques, disguised as essential logistics...
The post CargoTalon: New Cyber-Espionage Campaign Targets Russian Aviation with Stealthy DLL Implants appeared first on Penetration Testing Tools.
Researchers have uncovered a stealthy backdoor within WordPress, cunningly disguised as a system file within the mu-plugins directory—a special location designated for must-use plugins. This strategic placement enables threat actors to establish a persistent...
The post Stealthy WordPress Backdoor Found Hiding in Must-Use Mu-Plugins Directory for Persistent Access appeared first on Penetration Testing Tools.
The U.S. National Nuclear Security Administration (NNSA), a division of the Department of Energy tasked with maintaining and safeguarding the nation’s nuclear arsenal, has found itself at the center of one of the most...
The post US Nuclear Agency Hit by SharePoint Zero-Day: Over 400 Orgs Breached as Ransomware Threat Escalates appeared first on Penetration Testing Tools.
On July 22, 2025, Mozilla unveiled the Firefox 141 update, a release focused on enhancing browser security. According to security bulletin MFSA 2025-56, the update addresses 18 vulnerabilities, including flaws in the JavaScript engine,...
The post Firefox 141 Released with Patches for 18 Vulnerabilities, Including High-Severity RCE Flaws appeared first on Penetration Testing Tools.
A major incident has rocked the npm ecosystem: the widely-used package eslint-config-prettier suddenly received an update devoid of any corresponding changes on GitHub. Developers quickly grew suspicious—and with good reason. The package’s maintainer later...
The post npm Supply Chain Attack Exposes Devs to “Scavenger” Malware Via Phished Accounts appeared first on Penetration Testing Tools.
A surge of cyberattacks has been recorded across the United States, attributed to the Interlock group, which employs a double extortion strategy targeting companies and critical infrastructure entities. This warning was jointly issued by...
The post #StopRansomware: CISA & FBI Warn of Interlock Ransomware Surging, Hits US Healthcare Giants appeared first on Penetration Testing Tools.
Google has officially unveiled a new experimental feature within its search engine, enabling users to delegate the task of calling local businesses to artificial intelligence and receive relevant information without any direct involvement. Instead...
The post Google’s AI Now Calls Businesses for You: A New Era of Search Automation or Digital Noise? appeared first on Penetration Testing Tools.
Following a sweeping law enforcement operation in May—which dismantled over 2,300 domains and disrupted portions of its infrastructure—the malicious Lumma platform is once again exhibiting a resurgence in activity. Despite the significant blow, the...
The post Lumma Stealer Resurfaces After Takedown: New Stealth Tactics Target Users Via Fake Cracks, CAPTCHAs & GitHub appeared first on Penetration Testing Tools.
China’s Ministry of State Security has issued two high-profile warnings, alleging the deliberate implantation of backdoors into both software and hardware components—across terrestrial and coastal infrastructure. The warnings span a broad spectrum of threats,...
The post China Alleges Widespread Foreign Backdoors in Software, Hardware, and Subsea Espionage appeared first on Penetration Testing Tools.
VulnLab A web vulnerability lab project developed by Yavuzlar. Vulnerabilities SQL Injection Cross-Site Scripting (XSS) Command Injection Insecure Direct Object References (IDOR) Cross-Site Request Forgery (CSRF) XML External Entity (XXE) Insecure Deserialization File Upload...
The post VulnLab: web vulnerability lab project appeared first on Penetration Testing Tools.
A newly evolved strain of the Coyote banking trojan has adopted an unconventional method of user surveillance on Windows systems. Malicious actors have learned to exploit Microsoft’s UI Automation (UIA) framework—originally designed to aid...
The post Coyote Banking Trojan Exploits Microsoft UI Automation for Stealthy Credential Theft appeared first on Penetration Testing Tools.
Mexican organizations remain the persistent targets of an enduring cybercriminal campaign involving modified versions of the AllaKore RAT and SystemBC malware. According to analysts at Arctic Wolf Labs, the attacks are orchestrated by a...
The post Greedy Sponge Targets Mexico: New AllaKore RAT & SystemBC Campaign Evades Detection appeared first on Penetration Testing Tools.
mx-takeover mx-takeover focuses on DNS MX records and detects misconfigured MX records. It currently supports three-technique. These are, MX domains that will expire soon Unregistered MX domains Domains that point to not currently in...
The post mx-takeover: detects misconfigured MX records appeared first on Penetration Testing Tools.
Security researcher Sergey Bliznyuk of Positive Technologies has published a detailed analysis of critical vulnerabilities in the VGAuth component of VMware Tools, which enable a low-privileged local user to gain full SYSTEM-level access on...
The post Flaws in VMware Tools VGAuth Allow Local SYSTEM Privilege Escalation on Windows Guest Machines appeared first on Penetration Testing Tools.
The Paris Prosecutor’s Office has announced the arrest in Ukraine of an alleged administrator of the Russian-language forum XSS.is, a site long recognized as one of the largest hubs of the cybercriminal underworld. The...
The post Kingpin of Notorious XSS.is Cybercrime Forum Arrested in Ukraine After Europol-Led Sting appeared first on Penetration Testing Tools.
Open-source software forms the bedrock of today’s digital infrastructure, powering 77% of all applications and valued at over $12 trillion. Yet its widespread adoption renders it an increasingly attractive target for supply chain attacks,...
The post Google Launches OSS Rebuild: A New Weapon Against Open-Source Supply Chain Attacks appeared first on Penetration Testing Tools.
Microsoft has confirmed that three China-linked threat groups were behind the recent wave of attacks targeting on-premises SharePoint Server installations. According to the company’s report, since early July, the vulnerabilities identified as CVE-2025-53770 and...
The post Microsoft Confirms China-Backed APTs Actively Exploiting SharePoint Zero-Days (CVE-2025-53770, -53771) appeared first on Penetration Testing Tools.
A newly uncovered malicious campaign involving the infostealer DeerStealer has been identified by researchers at ANY.RUN. Threat actors are employing a sophisticated tactic—combining Windows shortcut files (LNK) with trusted system utilities known as Living-off-the-Land...
The post DeerStealer: New Malware Uses Stealthy LNK & LOLBins for Undetectable Data Theft appeared first on Penetration Testing Tools.
In 2023, one of the United Kingdom’s oldest transport companies—established 158 years ago—declared bankruptcy following a devastating ransomware attack. The cyber assault brought the operations of Knights of Old (also known as KNP) to...
The post Weak Password Destroys 158-Year-Old UK Transport Company: Akira Ransomware Claims 700 Jobs appeared first on Penetration Testing Tools.
