Automation of IT infrastructure management through artificial intelligence, as revealed in a recent study by RSAC Labs and George Mason University, may carry substantial risks. The researchers found that AIOps solutions—systems leveraging models akin...
The post AIOps Under Threat: Researchers Demonstrate How to Poison AI to Hack IT Infrastructure appeared first on Penetration Testing Tools.
No AI product in history has stirred such a tidal wave of anticipation as OpenAI’s long-awaited GPT-5. Yet, following its high-profile launch last week, the model swiftly found itself under fire—a troubling omen for...
The post GPT-5 Under Fire: OpenAI’s Latest Model Faces Backlash and “Jailbreak” Flaws appeared first on Penetration Testing Tools.
Since its emergence in the spring of 2024, the ransomware-as-a-service (RaaS) group Embargo has rapidly secured a prominent position in the cybercriminal landscape. According to TRM Labs, wallets linked to the operation may have...
The post Embargo Ransomware Emerges as a Major Threat, Raking in Over $34M in Ransoms appeared first on Penetration Testing Tools.
A hidden system prompt for GPT-5 has surfaced online, published on GitHub. This set of internal rules defines what ChatGPT may and may not do, which types of data it can retain, and which...
The post GPT-5’s Leaked System Prompt Reveals Strict New Privacy Rules appeared first on Penetration Testing Tools.
A wave of SMS fraud sweeping across the United States and beyond has entered a new and more insidious phase. Behind seemingly mundane yet convincing messages about unpaid fines or failed deliveries lies a...
The post Magic Mouse: The Evolution of a Global SMS Phishing Epidemic appeared first on Penetration Testing Tools.
The Debian GNU/Hurd development team has announced the release of version 2025. While not an official release of the core Debian distribution, it marks the official publication of the GNU/Hurd port, synchronized with the...
The post Debian GNU/Hurd 2025 Is Here with Full 64-Bit Support After 2 Years appeared first on Penetration Testing Tools.
Security experts at SafeBreach have disclosed the details of a vulnerability in the Windows Remote Procedure Call (RPC) protocol, patched by Microsoft in the July 2025 security update. Tracked as CVE-2025-49760 with a CVSS...
The post our Windows System Is Not Safe: New ‘EPM Poisoning’ Attack Hijacks RPC Protocol appeared first on Penetration Testing Tools.
Although former design chief Jony Ive has long since departed from Apple, his visionary “single block of glass” iPhone concept still appears to guide the company’s long-term design philosophy. Recently, a newly filed Apple...
The post Apple Patent Reveals a ‘Six-Sided Glass’ iPhone Concept appeared first on Penetration Testing Tools.
A vulnerability was discovered in the online access system for auto dealers of one of the world’s largest car manufacturers—uncovered simply by examining the page’s code. Security researcher Eitan Zwer of Harness reported that...
The post Just Two Flaws in a Car Manufacturer’s Portal Allowed a Researcher to Unlock Cars and Expose Data appeared first on Penetration Testing Tools.
Researchers at Forcepoint X-Labs have identified a new malware campaign targeting macOS users. The attack employs an enhanced ClickFix technique—combining phishing with social engineering—to steal data from cryptocurrency wallets, browser accounts, and confidential files....
The post New ‘Odyssey Stealer’ Malware Hijacks macOS, Steals Crypto with ClickFix appeared first on Penetration Testing Tools.
At DEF CON 33, researchers from SafeBreach unveiled a new attack technique dubbed Win-DDoS, capable of transforming thousands of publicly accessible domain controllers (DCs) worldwide into a powerful botnet for large-scale DDoS attacks. The...
The post New ‘Win-DDoS’ Attack Turns Windows Servers Into a Global Botnet appeared first on Penetration Testing Tools.
Researchers at Eclypsium have uncovered critical vulnerabilities in the Lenovo 510 FHD and Lenovo Performance FHD webcams that allow them to be transformed into BadUSB-style attack devices. The issue, dubbed BadCam, was presented at...
The post Your Webcam Can Be a Hacker’s Weapon: New ‘BadCam’ Attack Hijacks Lenovo Devices appeared first on Penetration Testing Tools.
Linus Torvalds delivered a sharp rebuke to the initial batch of RISC-V patches proposed for inclusion in Linux 6.17, citing both their untimely submission and the presence of what he called “garbage” changes unrelated...
The post Linus Torvalds Rejects ‘Garbage’ RISC-V Code, Delays It for Linux 6.17 appeared first on Penetration Testing Tools.
After more than two years of development, the Debian Project has unveiled a new stable release of its operating system—Debian 13, codenamed trixie. It will receive updates and security fixes for five years, thanks...
The post Debian 13 ‘trixie’ Is Here: What’s New in the Universal Operating System appeared first on Penetration Testing Tools.
In 2024, Americans over the age of 60 lost an astronomical $700 million to online fraud—a record high in the entire history of monitoring by the U.S. Federal Trade Commission (FTC). The latest Consumer...
The post Record-Breaking Fraud: Older Americans Lost $700 Million to Scams in 2024 appeared first on Penetration Testing Tools.
After Grok-4 was compromised in just two days, GPT-5 fell within a mere 24 hours to the same group of researchers. Almost simultaneously, the SPLX testing team (formerly SplxAI) declared: “Out-of-the-box GPT-5 is practically...
The post GPT-5 Hacked in 24 Hours: Researchers Expose Critical Flaws in OpenAI’s New Model appeared first on Penetration Testing Tools.
A recently patched vulnerability in WinRAR, identified as CVE-2025-8088, was exploited in targeted phishing attacks even before a fix became available. The flaw, classified as a Directory Traversal vulnerability and addressed only in WinRAR...
The post Hackers Exploited a New WinRAR Flaw Before It Was Patched appeared first on Penetration Testing Tools.
Experts at Claroty have uncovered a series of critical vulnerabilities in Axis Communications’ video surveillance product line which, if successfully exploited, could grant an attacker complete control over the affected devices. At risk are...
The post Critical Flaws in Axis Video Surveillance Expose Corporate Networks to Takeover appeared first on Penetration Testing Tools.
The group behind the SocGholish malware has intensified its use of the Parrot TDS and Keitaro TDS traffic distribution systems to filter visitors and redirect them to malicious destinations. According to Silent Push, the...
The post SocGholish Malware Evolves, Using Traffic Distribution Systems to Target Victims appeared first on Penetration Testing Tools.
U.S. law enforcement has revealed details of an international operation that dismantled the core infrastructure of the BlackSuit ransomware gang, notorious for a series of devastating cyberattacks. Nearly two weeks ago, the group’s dark...
The post Dismantling a Ransomware Empire: Law Enforcement Takes Down BlackSuit appeared first on Penetration Testing Tools.
