Aggregator
Upbit Solana Hack: 100 Billion Tokens Stolen, Exchange Delay Avoids Penalties
Hackers siphoned more than 100 billion tokens from Upbit in just 54 minutes, exploiting a flaw in Solana
The post Upbit Solana Hack: 100 Billion Tokens Stolen, Exchange Delay Avoids Penalties appeared first on Penetration Testing Tools.
Sauron: Fast Active Directory Tool Maps Credential Privileges and Nested Groups in Seconds
Sauron Fast context enumeration for newly obtained Active Directory credentials. Why Sauron? When you obtain fresh credentials (password
The post Sauron: Fast Active Directory Tool Maps Credential Privileges and Nested Groups in Seconds appeared first on Penetration Testing Tools.
Google Titans & MIRAS: New Architecture for 2M+ Token Long-Term AI Memory
Google has unveiled a new architecture for processing long sequences, Titans, along with a theoretical framework, MIRAS, which
The post Google Titans & MIRAS: New Architecture for 2M+ Token Long-Term AI Memory appeared first on Penetration Testing Tools.
国产厂商推出的NanoKVM切换器被发现内置麦克风 但内置原因没人知道
Gartner发布红色预警:立即封锁AI浏览器,严防企业数据“裸奔”;英国警方人脸识别系统被曝存在种族偏见,误判率相差百倍|牛览
别等告警刷屏了!87%的未知APT,正在被这套AI架构精准捕获
Zero-JS Clickjacking: SVG Filters Exploit iFrames to Steal Cross-Origin Data
Estonian security researcher Lira Rebane has unveiled an unconventional clickjacking technique that hinges on a fusion of SVG
The post Zero-JS Clickjacking: SVG Filters Exploit iFrames to Steal Cross-Origin Data appeared first on Penetration Testing Tools.
少数派 × 暖风家|大湾区首家墨水屏综合体验中心即将上线
Apple & Google Issue New Spyware Alerts, Targeting Intellexa Zero-Day Victims
The world’s largest technology companies have begun issuing notifications to users who may have been targeted by state-linked
The post Apple & Google Issue New Spyware Alerts, Targeting Intellexa Zero-Day Victims appeared first on Penetration Testing Tools.
Cloudflare Outage Caused by Frantic Patching of Critical React2Shell (CVE-2025-55182) Flaw
Cloudflare’s global infrastructure has suffered a second major outage in less than a month — and it has
The post Cloudflare Outage Caused by Frantic Patching of Critical React2Shell (CVE-2025-55182) Flaw appeared first on Penetration Testing Tools.
银狐组织最新ValleyRAT样本分析
FBI Warns: Deepfake Kidnapping Scams Use AI to Fabricate Image ‘Proof’ for Extortion
Malefactors are increasingly exploiting photographs and video clips sourced from open platforms, presenting them as “evidence” of an
The post FBI Warns: Deepfake Kidnapping Scams Use AI to Fabricate Image ‘Proof’ for Extortion appeared first on Penetration Testing Tools.
Covert Backdoor: Array AG Gateway Exploit Allows Command Execution
Hacker groups have exploited a security gap in Array AG Series corporate gateways, implanting covert management micro-programs and
The post Covert Backdoor: Array AG Gateway Exploit Allows Command Execution appeared first on Penetration Testing Tools.
CRITICAL ALERT: Apache Tika XXE Flaw (CVSS 10.0) Allows File Read via PDF Files
On 4 December 2025, the Apache Software Foundation disclosed a critical vulnerability — CVE-2025-66516, rated the maximum CVSS
The post CRITICAL ALERT: Apache Tika XXE Flaw (CVSS 10.0) Allows File Read via PDF Files appeared first on Penetration Testing Tools.
Google Launches Gemini 3 Pro: Next-Gen Multimodal AI That Reasons Spatially & Converts Documents to Code
Google has unveiled Gemini 3 Pro — a new generation of multimodal models that not only see images
The post Google Launches Gemini 3 Pro: Next-Gen Multimodal AI That Reasons Spatially & Converts Documents to Code appeared first on Penetration Testing Tools.
Linux 6.19: Kernel Gains Foundational PCIe Link Encryption for AMD SEV-TIO
Over the weekend, one of the most compelling updates in recent months landed in the Linux 6.19 branch:
The post Linux 6.19: Kernel Gains Foundational PCIe Link Encryption for AMD SEV-TIO appeared first on Penetration Testing Tools.
奶牛快传正在与123云盘进行战略合作沟通 后续可能会由123云盘提供服务?
HackRF Pro Updates: Sensitivity and Noise Figure Measurements + Free Stuff Program
IDEsaster: 30+ Vulnerabilities Found in AI-IDEs Allow Silent RCE and Data Theft
More than thirty vulnerabilities have been uncovered in popular AI-enhanced development environments, all of which allow attackers —
The post IDEsaster: 30+ Vulnerabilities Found in AI-IDEs Allow Silent RCE and Data Theft appeared first on Penetration Testing Tools.