The Tomiris group launched a new wave of cyber-espionage in early 2025, targeting high-level political and diplomatic institutions.
The post Tomiris APT Infiltrates Governments Via Phishing, Uses Telegram/Discord for C2 Espionage appeared first on Penetration Testing Tools.
OpenAI has disclosed a security incident at the third-party web-analytics provider Mixpanel that affected a subset of users
The post OpenAI Users Warned of Phishing Risk After Mixpanel Analytics Provider Breach appeared first on Penetration Testing Tools.
Microsoft is tightening the security of Microsoft Entra ID sign-ins, planning to block all third-party script execution on
The post Microsoft Entra ID to Block All Third-Party Scripts on Login Page via Strict CSP appeared first on Penetration Testing Tools.
Apple Podcasts has begun launching itself spontaneously, displaying peculiar religious and “educational” programs and, in some cases, directing
The post Apple Podcasts Auto-Launch Flaw Exposes Users to XSS Attacks via Malicious Shows appeared first on Penetration Testing Tools.
The Japanese brewing giant Asahi has revealed that a September cyberattack resulted in one of the most significant
The post Asahi Cyberattack: Qilin Ransomware Exposes 1.5M People, Cripples Production appeared first on Penetration Testing Tools.
Google continues to recalibrate the terms of its free AI access amid surging demand. The company has reduced
The post Google Cuts Free Daily Quota for Gemini 3 Pro and Nano Banana Pro AI Models appeared first on Penetration Testing Tools.
Expanding Microsoft Teams’ capabilities for working with external users brings not only convenience, but also new vulnerabilities. The
The post Teams Guest Phishing Bypass: Attackers Exploit External Tenants to Defeat Microsoft Defender appeared first on Penetration Testing Tools.
The “Bloody Wolf” group is expanding its targeted campaign across Central Asia, deploying NetSupport RAT and impersonating government
The post Bloody Wolf Hackers Impersonate Government Agencies to Deploy NetSupport RAT in Central Asia appeared first on Penetration Testing Tools.
GreyNoise Labs has unveiled GreyNoise IP Check, an online service that allows users to determine whether their IP
The post Is Your IP Hacked? GreyNoise Launches Free IP Check to Detect Botnet Activity appeared first on Penetration Testing Tools.
WhatsApp is preparing to part ways with the two most prominent AI assistants on the market — ChatGPT
The post WhatsApp Business API Ban: ChatGPT and Copilot Forced to Exit by January 2026 appeared first on Penetration Testing Tools.
Scottish researchers have unveiled a prototype quantum network that merges two independent networks into a single, flexible system
The post Quantum Internet Breakthrough: Scientists Route Entanglement on Demand with $100 Optical Fiber appeared first on Penetration Testing Tools.
During AWS’s major outage in October, Fortinet specialists uncovered a new botnet, ShadowV2, built on Mirai-derived malware and
The post New Mirai-Like Botnet ‘ShadowV2’ Conducts Trial Run During AWS Outage appeared first on Penetration Testing Tools.
Myanmar’s military is loudly proclaiming its “fight against scammers,” detonating buildings inside the notorious KK Park complex on
The post Myanmar’s KK Park ‘Crackdown’ Exposed as Propaganda: Core Scam Infrastructure Intact appeared first on Penetration Testing Tools.
The Foaster research group has published an extensive comparative study examining the political preferences of six leading artificial
The post AI Votes Moderate Left: Study Reveals Structural Political Bias in GPT-5, Gemini, & Grok appeared first on Penetration Testing Tools.
RedExt is a sophisticated browser data analysis framework designed for authorized red team operations. It combines a Manifest
The post RedExt: New Red Team Tool Uses Chrome Extension for Covert Browser Data Exfiltration appeared first on Penetration Testing Tools.
RingReaper is a simple post-exploitation agent for Linux designed for those who need to operate stealthily, minimizing the chances
The post RingReaper: Stealthy Linux Agent Abuses io_uring to Bypass EDR System Call Monitoring appeared first on Penetration Testing Tools.
The hacker collective known as Scattered LAPSUS$ Hunters — which has spent this year extorting dozens of corporations
The post Confirmed: 15-Year-Old Jordanian is The Leader of Scattered LAPSUS$ Hunters appeared first on Penetration Testing Tools.
Hackers breached U.S. radio stations and broadcast fabricated alerts and streams of obscenities live on air, prompting the
The post Hackers Breach U.S. Radio Stations to Broadcast Fake EAS Tones & Obscenities appeared first on Penetration Testing Tools.
A malicious extension has been discovered in the Chrome catalog — an add-on that, without the owner’s knowledge,
The post Malicious ‘Crypto Copilot’ Chrome Extension Steals Hidden Fee from Solana Swaps appeared first on Penetration Testing Tools.
Censys researchers have detailed a new web-attack technique known as EtherHiding, in which attackers conceal malicious code inside
The post EtherHiding: New Stealth Attack Hides Malware C2 in Binance Smart Chain Smart Contracts appeared first on Penetration Testing Tools.
