In the ongoing development of Linux 6.17, the volume of Rust code and the number of associated abstractions continue to grow. As with recent releases, Rust is steadily establishing itself within the kernel as...
The post The Rust Invasion: Linux Kernel 6.17 Sees Major Rust Code Additions for Drivers & Infrastructure appeared first on Penetration Testing Tools.
Linux kernel version 6.17 introduces a new processor vulnerability management system—Attack Vector Controls—engineered by AMD’s David Kaplan. This enhancement aims to streamline the configuration of CPU vulnerability mitigations for system administrators and advanced Linux...
The post Linux Kernel 6.17 Revolutionizes CPU Security with “Attack Vector Controls” from AMD appeared first on Penetration Testing Tools.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has announced the public release of Thorium—a powerful analytical platform tailored for experts in digital forensics and malware analysis. This innovative solution, developed in collaboration with...
The post CISA Unleashes Thorium: A Powerful New Platform for Automated Malware & Forensic Analysis at Scale appeared first on Penetration Testing Tools.
The GreyNoise team has uncovered a disquieting pattern: in 80% of cases, anomalous spikes in suspicious internet activity occur prior to the official disclosure of new vulnerabilities (CVEs). These are not coincidences or random...
The post The Six-Week Window: New Report Finds 80% of Cyberattacks Begin Before CVE Disclosure appeared first on Penetration Testing Tools.
TripleCross TripleCross is a Linux eBPF rootkit that demonstrates the offensive capabilities of the eBPF technology. TripleCross is inspired by previous implant designs in this area, notably the works of Jeff Dileo at DEFCON...
The post TripleCross: Linux eBPF rootkit appeared first on Penetration Testing Tools.
Threat actors operating under the name ShinyHunters have orchestrated a series of cyberattacks targeting major corporations, including Qantas, Allianz Life, LVMH, and Adidas. Each incident centers around attempts to infiltrate client Salesforce environments through...
The post The ShinyHunters Salesforce Attack: Vishing & OAuth Abuse Blamed for Qantas, Allianz, LVMH Breaches appeared first on Penetration Testing Tools.
Attacks linked to the Storm-2603 group continue to raise serious concerns within the cybersecurity community. This relatively obscure yet well-documented group, reportedly associated with China, has been implicated in the exploitation of recently discovered...
The post Storm-2603 Unleashes Warlock & LockBit Ransomware with Custom AK47 C2 Framework appeared first on Penetration Testing Tools.
Beginning in October 2025, Microsoft will implement sweeping measures to insulate Excel from potentially hazardous sources. A new default policy will block external links to certain file types, affecting all Excel users through a...
The post Microsoft to Block External Links in Excel, Phased Rollout Begins October 2025 appeared first on Penetration Testing Tools.
In late 2024, a new ransomware strain named FunkSec emerged on the cybercrime scene. It quickly drew attention due to its aggressive tactics and unconventional implementation. Within a short span, dozens of organizations across...
The post The End of FunkSec: Free Decryptor Released for Ransomware Victims After AI-Assisted Group Goes Dormant appeared first on Penetration Testing Tools.
A new report from SentinelOne casts a revealing light on a lesser-known yet extensive facet of China’s cyber-espionage apparatus: the contractor infrastructure tied to the threat group Silk Typhoon (also known as Hafnium), which...
The post SentinelOne Exposes China’s Contractor Network, Linking MSS & Hafnium to 15+ Stealthy Surveillance Patents appeared first on Penetration Testing Tools.
Microsoft has announced sweeping enhancements to its vulnerability rewards program for the .NET platform, significantly broadening its scope and increasing compensation for valid discoveries. Security researchers can now earn up to $40,000 for critical...
The post Microsoft Revamps .NET Bug Bounty Program, Offering Up to $40K for Critical Flaws appeared first on Penetration Testing Tools.
The new Linux kernel version 6.17 introduces substantial enhancements to the EXT4 file system, significantly boosting the performance of servers equipped with numerous CPU cores and running large volumes of containers. These advancements refine...
The post Linux Kernel 6.17 Delivers “Wild Gains” for EXT4: Major Performance Boosts for Servers & Containers appeared first on Penetration Testing Tools.
Engineers at Google DeepMind have unveiled AlphaEarth Foundations, a sophisticated artificial intelligence model capable of generating a digital representation of the Earth’s surface at an impressive resolution of 10×10 meters. Unlike conventional systems designed...
The post Google’s “Virtual Satellite” Is Here: AlphaEarth AI Model Maps the Planet in Unprecedented Detail appeared first on Penetration Testing Tools.
The organizers of the world’s premier hacking competition, Pwn2Own, have announced a reward that has instantly shifted the industry’s spotlight: a staggering $1 million will be awarded for the successful demonstration of a full-fledged...
The post The $1M Zero-Click Challenge: Pwn2Own Offers Record-Breaking Bounty for a WhatsApp Exploit appeared first on Penetration Testing Tools.
A critical vulnerability has been discovered in the Cursor source code editor, an AI-powered tool designed to assist programmers. The flaw, identified as CVE-2025-54135 and dubbed CurXecute, affects nearly all versions of the IDE...
The post Critical Flaw in Cursor AI: Prompt Injection Allows Remote Code Execution appeared first on Penetration Testing Tools.
Since mid-July, a surge in ransomware attacks leveraging the Akira strain has been observed, specifically targeting SonicWall devices. According to cybersecurity firm Arctic Wolf, threat actors have been actively exploiting SSL VPN connections on...
The post New Akira Ransomware Wave Hits SonicWall Devices, Zero-Day Vulnerability Suspected appeared first on Penetration Testing Tools.
Email protection mechanisms, originally conceived as a bulwark against malicious links, have ironically become unwitting allies to cybercriminals. Researchers have uncovered a troubling trend: threat actors are increasingly exploiting “link wrappers” provided by platforms...
The post Phishing Attacks Weaponize Security Tools by Abusing Proofpoint & Intermedia Link Wrapping appeared first on Penetration Testing Tools.
In the autumn of 2024, the InfoSect bug hunting team prepared a remote code execution attack targeting the Synology TC500 IP camera for entry in the Pwn2Own Ireland competition. The exploitation hinged on a...
The post The Pwn2Own Exploit That Never Was: A Format String Flaw in Synology IP Cameras Allowed Remote Code Execution appeared first on Penetration Testing Tools.
JSubFinder JSubFinder is a tool written in golang to search webpages & javascript for hidden subdomains and secrets in the given URL. Developed with BugBounty hunters in mind JSubFinder takes advantage of Go’s amazing...
The post jsubfinder: earch webpages & javascript for hidden subdomains and secrets in the given URL appeared first on Penetration Testing Tools.
A critical vulnerability has been discovered in the widely used WordPress theme “Alone — Charity Multipurpose Non-profit”, which is already being exploited by malicious actors to compromise websites. Tracked as CVE-2025-5394, the flaw has...
The post Critical RCE Flaw in “Alone” WordPress Theme Actively Exploited, Allowing Full Site Takeover appeared first on Penetration Testing Tools.
