Group-IB’s Threat Intelligence team has published a detailed analysis of a new cyber-espionage campaign very likely attributable to
The post High-Value Targets: MuddyWater APT Used Compromised VPN Mailbox in Stealth Campaign appeared first on Penetration Testing Tools.
Beginning November 3, 2025, all developers submitting new Firefox extensions will be required to specify in their manifest.json
The post Mozilla Demands New Firefox Extensions Disclose Data Collection Practices appeared first on Penetration Testing Tools.
Beginning with the October 2025 Windows security updates, File Explorer now automatically blocks the preview of files downloaded
The post Windows Blocks File Previews to Stop NTLM Credential Leaks appeared first on Penetration Testing Tools.
Amazon has published a comprehensive technical report detailing the outage that paralyzed major online platforms and triggered a
The post The Global Cascade: AWS Outage Caused by Automated DNS Race Condition appeared first on Penetration Testing Tools.
The Fedora community has officially adopted a comprehensive policy governing the use of artificial intelligence in the creation
The post Fedora Adopts Groundbreaking AI Policy: Full Accountability for Code Contributions appeared first on Penetration Testing Tools.
StegoScan.py is a powerful, next-generation tool for automated steganography detection in websites, web servers, and local directories, integrating
The post StegoScan.py: The AI-Powered Tool That Finds Secrets Hidden in Files and Websites appeared first on Penetration Testing Tools.
On October 22, 2025, OpenBSD 7.8 was released —the project’s 59th stable edition, once again featuring the pufferfish
The post OpenBSD 7.8 Released: Massive Performance Boost with Parallel TCP Stack and Raspberry Pi 5 Support appeared first on Penetration Testing Tools.
In April of this year, a cyberattack crippled the operations of Juan F. Luis Hospital in the U.S.
The post $800K Weekly: Hospital Cyberattack Forces 5 Months of Manual Operation appeared first on Penetration Testing Tools.
Researchers from Team Z3 have withdrawn their planned demonstration of a WhatsApp vulnerability at the Pwn2Own Ireland 2025
The post $1M WhatsApp Zero-Click Exploit Withdrawn at Pwn2Own, Shared with Meta appeared first on Penetration Testing Tools.
Jewett-Cameron Trading, a manufacturer of metal and wooden fencing, has informed the U.S. Securities and Exchange Commission (SEC)
The post Ransomware Steals Meeting Videos and Financial Data Ahead of SEC Filing appeared first on Penetration Testing Tools.
The electronic display boards of Los Angeles’s public transit network were hacked and used to broadcast alarming messages.
The post Transit Terror: LA Metro Displays Hacked to Broadcast Bomb Warning appeared first on Penetration Testing Tools.
On the second day of Pwn2Own Ireland 2025, participants delivered an impressive display of skill, uncovering 56 new
The post Hacker Teams Win $792K as Samsung Galaxy S25 is Hacked at Pwn2Own appeared first on Penetration Testing Tools.
The developers of BIND, the world’s most widely used domain name resolution software, have issued a warning about
The post DNS Warning: Critical BIND Flaws Revive Cache Poisoning Attack Threat appeared first on Penetration Testing Tools.
Against the backdrop of escalating digital threats, cybersecurity experts have turned their attention to a sharp rise in
The post Ramp and Dump: Brokerage Attacks Surge Fivefold with Sophisticated Scams appeared first on Penetration Testing Tools.
In recent weeks, the activity of the Vidar Stealer malware has surged dramatically — its new version 2.0
The post The New King of Infostealers: Vidar 2.0 Emerges with Polymorphic Evasion appeared first on Penetration Testing Tools.
In recent years, cyberspace has become a theater of covert conflict, where the actions of one state can
The post China Claims NSA Sabotaged National Time Center with 42 Cyber Weapons appeared first on Penetration Testing Tools.
Over the past two years, Kaspersky Lab researchers have been tracking a little-known espionage campaign dubbed PassiveNeuron. Initial
The post PassiveNeuron APT: New Espionage Campaign Targets Global Windows Servers appeared first on Penetration Testing Tools.
A multi-stage phishing campaign known as Tykit has been targeting Microsoft 365 corporate users, actively employed to steal
The post Tykit Phishing: SVG Malware Used to Steal Microsoft 365 Credentials appeared first on Penetration Testing Tools.
Hackers have begun actively exploiting a critical vulnerability in Adobe Commerce and Magento Open Source platforms, despite the
The post SessionReaper: Critical Magento Flaw Actively Exploited by Hackers appeared first on Penetration Testing Tools.
A novel vulnerability was discovered in Microsoft 365 Copilot that permitted covert exfiltration of user data via an
The post Data Leak in Microsoft Copilot: Emails Exfiltrated via Hidden Mermaid Diagram appeared first on Penetration Testing Tools.
