The new malicious distribution tool GhostFrame has spread with remarkable speed throughout the cybercriminal ecosystem, becoming the source
The post GhostFrame: Stealthy Iframe Phishing Toolkit Fuels 1 Million+ Covert Attacks appeared first on Penetration Testing Tools.
Two China-linked hacking groups began exploiting a critical vulnerability in React Server Components just hours after it became
The post China APTs Exploiting React Server RCE (CVE-2025-55182) Hours After Disclosure appeared first on Penetration Testing Tools.
Cloudflare’s services suffered yet another disruption on Friday morning, rendering LinkedIn, Zoom, Downdetector, and a number of other
The post Cloudflare Outage 2.0: Faulty React Patch Configuration Disrupts Major Websites appeared first on Penetration Testing Tools.
At the end of November, a team of bug hunters uncovered an infection chain that began with a
The post Developer Alert: Fake VS Code Extension Deploys OctoRAT via Multi-Stage Anivia Loader appeared first on Penetration Testing Tools.
Nearly two years after the debut of the 14.0 branch, the FreeBSD project has unveiled a major new
The post FreeBSD 15.0 Arrives: New 4-Year Lifecycle, pkgbase Updates, and Massive ZFS/Jail Upgrades appeared first on Penetration Testing Tools.
An international fraud operation has culminated in a sweeping blow against a vast crypto-scam network that laundered more
The post Global Crackdown Dismantles Crypto-Scam Network, Laundering Over €700 Million appeared first on Penetration Testing Tools.
Google has released the Android 16 QPR2 update, introducing substantial refinements across the interface, developer tooling, and system
The post Android 16 QPR2: New Minor SDK Brings 3-Hour OTP SMS Delay & Icon Customization appeared first on Penetration Testing Tools.
Chinese cyber-espionage actors have spent years burrowed, undetected, within the networks of critical organizations, infiltrating infrastructure with sophisticated
The post Chinese APT Deploys Cross-Platform ‘Brickstorm’ Backdoor, Burrows for Years in Critical Networks appeared first on Penetration Testing Tools.
ChromeAlone is a browser implant that can be used in place of conventional implants like Cobalt Strike or
The post ChromeAlone: Stealthy Browser Implant Steals Sessions and Phishes for YubiKeys appeared first on Penetration Testing Tools.
The GoldFactory group has launched a new wave of attacks targeting mobile-banking users across Southeast Asia. Disguising themselves
The post GoldFactory Malware Injects FriHook/SkyHook into Banking Apps to Exploit 11K SE Asia Users appeared first on Penetration Testing Tools.
The scale of DDoS attacks continues to surge at a breathtaking pace, and effective protection is increasingly defined
The post Record DDoS Attack: Cloudflare Mitigates Massive 29.7 Tbps Assault from AISURU Botnet appeared first on Penetration Testing Tools.
Australia is preparing to enforce a nationwide ban on social media use by teenagers under 16, and major
The post Australia Enforces Nationwide Social Media Ban for Under-16s; YouTube & Lemon8 React appeared first on Penetration Testing Tools.
Microsoft has quietly patched a long-standing flaw in Windows that had been exploited in real-world attacks for several
The post Microsoft Finally Patches LNK Flaw (CVE-2025-9491) Exploited by Spies Since 2017 appeared first on Penetration Testing Tools.
The American telecommunications firm Securus Technologies has trained a new AI model on years’ worth of recorded prison
The post Securus Trains AI on Years of Inmate Calls to Detect ‘Intent’ for Criminal Activity appeared first on Penetration Testing Tools.
Indian authorities have abandoned plans to compel smartphone manufacturers to pre-install the state-run “cybersecurity” application Sanchar Saathi on
The post Policy U-Turn: India Drops Mandatory Sanchar Saathi App After Privacy Backlash appeared first on Penetration Testing Tools.
Microsoft (MSFT) and its partner OpenAI are developing a new large-scale language model, Garlic, designed to strengthen the
The post OpenAI ‘Garlic’ LLM: Secret Model Reportedly Beats Gemini 3 in Coding/Reasoning appeared first on Penetration Testing Tools.
Linux 6.18 is the final major release of 2025, and it is highly likely to become the next
The post Linux 6.18 LTS: Rust-Based Android Binder Lands as bcachefs is Removed from Mainline appeared first on Penetration Testing Tools.
OAuthSeeker is an red team tool for performing phishing attacks using malicious OAuth applications to compromise user identities within
The post OAuthSeeker: Red Team Tool for OAuth Phishing Attacks Against Azure and Office365 appeared first on Penetration Testing Tools.
A joint investigation by BCA LTD, NorthScan, and ANY.RUN has revealed, in real time, one of North Korea’s
The post Lazarus Exposed: Real-Time Sting Tracks North Korean Hackers Recruiting Remote Employees appeared first on Penetration Testing Tools.
A new case of software supply-chain compromise has been uncovered on the crates.io platform: a malicious Rust package
The post Rust Crates.io Hack: ‘evm-units’ Package Infected 7K Web3 Developer Workstations appeared first on Penetration Testing Tools.
