The United States Federal Bureau of Investigation has issued an official warning regarding the escalating operations of the hacker collective known as Scattered Spider, which has now begun actively targeting the aviation sector. According...
The post FBI Warns: Scattered Spider Unleashes Social Engineering & Ransomware on Aviation Sector appeared first on Penetration Testing Tools.
The hacker group UAC-0226 continues to aggressively evolve its malicious tool GIFTEDCROOK, which initially functioned as a browser data-stealing utility but has now acquired advanced capabilities, enabling the targeted exfiltration of confidential documents and...
The post Arctic Wolf Exposes “GIFTEDCROOK”: China-Linked APT Launches Evolving Cyber-Espionage on Ukraine Military appeared first on Penetration Testing Tools.
The Chinese hacker collective known as Silver Fox, also operating under the alias Void Arachne, has once again drawn the attention of cybersecurity experts. According to Netskope, a new malicious campaign has been uncovered...
The post Silver Fox Unleashes Sainbox RAT & Hidden Rootkit Via Fake Software Installers appeared first on Penetration Testing Tools.
FrogPost is a powerful Chrome extension for testing and analyzing the security of postMessage communications between iframes. It helps developers and security professionals identify vulnerabilities in message-handling implementations. Key Features Live monitor of cross-origin postMessage traffic Automatic detection...
The post FrogPost: postMessage Security Testing Tool appeared first on Penetration Testing Tools.
ESET researchers have identified a new wave of cyberattacks exploiting data from contactless payments via NFC technology. Initially targeting clients of Czech banks, this malicious campaign has now begun to spread rapidly across the...
The post NFC Fraud Explodes 35x: New Attacks Hijack Contactless Payments via NFCGate Malware appeared first on Penetration Testing Tools.
Bluetooth-enabled devices produced by a dozen renowned manufacturers have been found vulnerable to attacks capable of transforming wireless headsets or speakers into espionage tools. This alarming revelation was presented by experts from ERNW during...
The post Bluetooth Alert: Critical Flaws in Airoha Chips Turn Headphones into Spy Devices appeared first on Penetration Testing Tools.
Tensions have once again flared within the Linux kernel development community, this time centering on the Bcachefs file system — a project promoted as a reliable solution that “won’t eat your data.” While disputes...
The post Linux Kernel Drama: Torvalds Withdraws Bcachefs Support for 6.17 After Clash Over Feature Submissions appeared first on Penetration Testing Tools.
The United Kingdom has confirmed its first fatality directly linked to a cyberattack on the National Health Service (NHS). The incident, which occurred in June of last year, severely disrupted hospital operations across southeast...
The post UK Records First Cyberattack-Linked Death: Patient Dies Amid NHS Ransomware Chaos appeared first on Penetration Testing Tools.
Microsoft has released a new Windows 11 update (Build KB5060838) for participants of the Windows Insider Program in the Dev Channel. This update introduces both publicly available enhancements and features that are being gradually...
The post Windows 11 25H2 Dev Build Unveils Deeper 1Password Integration for Seamless Passkey Management appeared first on Penetration Testing Tools.
Owners of Android smartphones will soon benefit from enhanced protection against one of the most insidious yet dangerous threats in mobile communication — network impersonation. With the introduction of Android 16, Google is implementing...
The post Android 16 Unleashes Stingray Protection: New Security Features Combat Network Impersonation appeared first on Penetration Testing Tools.
Nicholas Michael Kloster, a resident of Kansas City, has found himself at the center of a high-profile criminal case, culminating in his guilty plea to a series of cybercrimes. According to the U.S. Department...
The post Hacker Pleads Guilty: Breached Orgs to Promote Cybersecurity Services, Faces Prison appeared first on Penetration Testing Tools.
Experts at Rapid7 have disclosed a critical vulnerability affecting 689 Brother printer models and 53 models from other manufacturers, including Fujifilm, Toshiba, and Konica Minolta. The flaw lies in a predictable algorithm used to...
The post Urgent Printer Alert: Critical Flaw (CVE-2024-51978, CVSS 9.8) Exposes Brother & Other Printers to Remote Takeover appeared first on Penetration Testing Tools.
The social engineering technique known as ClickFix—based on deceptive CAPTCHA prompts—has witnessed a dramatic surge in popularity among cybercriminals over the past year. According to ESET, between July 2024 and June 2025, the number...
The post ClickFix Attacks Skyrocket 517%: New “FileFix” Tactic Emerges to Deploy Stealthy Malware appeared first on Penetration Testing Tools.
jxscout is a tool designed to help security researchers analyze and find vulnerabilities in JavaScript code. It works with your favorite proxy (Burp or Caido), capturing requests and saving optimized versions locally for easy analysis...
The post Jxscout: Unleash JavaScript’s Hidden Vulnerabilities with This Powerful Analysis Tool appeared first on Penetration Testing Tools.
RemoteMonologue is a Windows credential harvesting technique that enables remote user compromise by leveraging the Interactive User RunAs key and coercing NTLM authentications via DCOM. Features 🔹 Authentication Coercion via DCOM (-dcom) Targets three DCOM...
The post RemoteMonologue: New Windows Technique Weaponizes DCOM for NTLM Credential Harvesting appeared first on Penetration Testing Tools.
In a sweeping espionage campaign dubbed LapDogs, over a thousand small office and home office devices were compromised. Researchers from the STRIKE team at SecurityScorecard reported that the attack was linked to Chinese threat...
The post “LapDogs” Unmasked: China-Linked Actors Build Covert ORB Network on 1,000+ SOHO Devices for Espionage appeared first on Penetration Testing Tools.
The leading cybersecurity agencies in the United States—CISA and the NSA—have issued a joint report urging software developers to adopt so-called memory-safe programming languages. These are technologies inherently designed to protect against critical memory-related...
The post CISA, FBI, NSA Urge Software Industry: Adopt Memory-Safe Languages to Drastically Cut Vulnerabilities appeared first on Penetration Testing Tools.
On Friday evening, a surprising announcement introduced Tyr—a new graphics driver for the Linux kernel, written in Rust. Designed to support modern Arm Mali GPUs, the driver interfaces with the Direct Rendering Manager. Despite...
The post Linux Gains “Tyr”: New Rust-Written Graphics Driver for Arm Mali GPUs Unveiled appeared first on Penetration Testing Tools.
Microsoft has released the preview update KB5060829 for Windows 11 version 24H2, encompassing 38 technical enhancements, including refinements to the taskbar and a new tool for seamless data migration between devices. Classified as an...
The post Windows 11 24H2 Preview (KB5060829) Unveils Seamless PC Migration & Taskbar Improvements appeared first on Penetration Testing Tools.
For nearly a year, a hacker collective has been orchestrating a large-scale campaign targeting the financial sector across Africa. Experts from Unit 42 at Palo Alto Networks have sounded the alarm, tracking this operation...
The post African Financial Institutions Targeted: “CL-CRI-1014” IAB Uses Open-Source Tools & Forged Signatures for Covert Access appeared first on Penetration Testing Tools.
