Aggregator

A newly released open-source project has drawn the attention of the technical community for its attempt to circumvent

The post LazyHook: New Framework Uses Hardware Breakpoints to Bypass EDR Stealthily appeared first on Penetration Testing Tools.

The emergence of a new malicious tool within the React2Shell attack chain has become a notable development amid

The post Next-Gen Malware: EtherRAT Uses Ethereum Smart Contract for Stealth C2 appeared first on Penetration Testing Tools.

Researchers at Securonix have uncovered a multi-layered malware campaign designed to surreptitiously deploy the NetSupport RAT remote access

The post Fileless Evasion: Multi-Stage Campaign Deploys NetSupport RAT via Obfuscated HTA appeared first on Penetration Testing Tools.

Security researchers have disclosed a .NET vulnerability that could affect a wide range of enterprise products and lead

The post Unpatched .NET RCE Flaw Lets Attackers Write Files via SOAP—Microsoft Blames Developers appeared first on Penetration Testing Tools.

Attackers are actively exploiting a newly discovered zero-day vulnerability in Gogs—a widely used self-hosted Git service—for which no

The post 700+ Instances Hacked: Gogs Zero-Day CVE-2025-8110 Under Active Exploitation appeared first on Penetration Testing Tools.

Cisco Talos has uncovered a new DeadLock ransomware campaign in which attackers exploit a vulnerable Baidu Antivirus driver

The post DeadLock Ransomware Uses BYOVD to Kill EDR and Erase Backups Stealthily appeared first on Penetration Testing Tools.

A previously obscure Linux backdoor known as GhostPenguin has emerged from the shadows thanks to automated threat hunting,

The post AI Hunters Expose GhostPenguin: A Stealthy Linux Backdoor Undetected for Months appeared first on Penetration Testing Tools.

The cybercriminal group GrayBravo, formerly known as TAG-150, continues to evolve at a rapid pace, demonstrating a high

The post CastleLoader PhaaS: GrayBravo Escalates Attacks on Logistics & Booking.com appeared first on Penetration Testing Tools.

GhostFrame is a newly emerged phishing tool that, in just three months, has already powered more than one

The post GhostFrame: The Invisible Phishing-as-a-Service That Powered Over a Million Attacks appeared first on Penetration Testing Tools.

You must login to view this content

You must login to view this content