CERT-UA has detected a new targeted campaign against Ukraine in which operators distribute malicious XLL modules inside ZIP
The post CERT-UA Warns: New Espionage Campaign Distributes CABINETRAT Backdoor via Signal Messenger XLL Files appeared first on Penetration Testing Tools.
The Chinese company Anker, maker of Eufy security cameras, launched an unusual campaign in late 2024: it offered
The post Eufy Paid Users $2 Per Video of Staged Thefts to Train AI Security Cameras appeared first on Penetration Testing Tools.
The French cybersecurity firm SEKOIA has uncovered a smishing campaign in which attackers exploit vulnerabilities in Milesight industrial
The post Exploited Routers: Flaw in Milesight Industrial Devices Used for Mass Smishing in Europe appeared first on Penetration Testing Tools.
Google has released the stable version of Chrome 141.0.7390.54/55 for Windows, macOS, and Linux. The update will roll
The post Chrome 141 Stable Released: Fixes High-Severity WebGPU and Video Heap Overflow Flaws appeared first on Penetration Testing Tools.
The head of Instagram, Adam Mosseri, has decided to publicly dispel a long-standing myth: that Meta secretly activates
The post Meta Denies Microphone Spying, Confirms AI Chat Data Will Now Be Used for Targeted Ads appeared first on Penetration Testing Tools.
Researchers from Johns Hopkins University and several other institutions have demonstrated a novel, server-side attack against Intel SGX
The post Web3 Crisis: Sub-$1k Hardware Attack Fully Extracts Intel SGX Attestation Key, Compromising Encrypted Blockchains appeared first on Penetration Testing Tools.
Against the backdrop of heated debate surrounding the OpenAI–Nvidia partnership in both the media and financial markets, a
The post OpenAI Says the World Needs 10 Billion GPUs for an ‘Always-On’ AI “Supermind” appeared first on Penetration Testing Tools.
A developer operating under the handle 0xr0BIT has released a new Windows security-audit tool called TaskHound. It is
The post TaskHound: New Open-Source Tool Audits Windows Scheduled Tasks for Privileged Credentials and Tier-0 Risks appeared first on Penetration Testing Tools.
PhoneSploit Pro An All-In-One hacking tool is written in Python to remotely exploit Android devices using ADB (Android Debug
The post PhoneSploit-Pro: remotely exploit Android devices using ADB and Metasploit-Framework appeared first on Penetration Testing Tools.
A newly identified cyber-espionage group, Phantom Taurus, linked to China, has spent the past two and a half
The post Phantom Taurus: New Chinese APT Emerges with Fileless NET-STAR Backdoor Targeting Global Governments and Telecoms appeared first on Penetration Testing Tools.
Researchers at Varonis have reported the emergence of a new toolkit named MatrixPDF, which enables attackers to transform
The post MatrixPDF: New Toolkit Turns Ordinary PDFs Into Interactive Phishing Lures That Bypass Gmail appeared first on Penetration Testing Tools.
The Chinese company DeepSeek has unveiled an experimental version of its language model, DeepSeek-V3.2-Exp, which for the first
The post DeepSeek Unveils Sparse Attention: A New LLM Architecture That Slashes AI API Costs by 50% appeared first on Penetration Testing Tools.
Researchers at Tenable have disclosed three vulnerabilities in Google’s Gemini AI, flaws that enabled data theft and remote
The post Gemini Trifecta: Three Flaws Allowed Hackers to Exploit Google’s AI for Stealthy Data Theft appeared first on Penetration Testing Tools.
Zed Industries has released a public beta of its code editor for Windows—a pivotal milestone for the Rust-based
The post VS Code Rival Zed Hits Windows Public Beta, Bringing Rust-Powered Speed to the #1 Dev Platform appeared first on Penetration Testing Tools.
The global financial system is undergoing one of its most profound shifts in decades. SWIFT, the backbone of
The post SWIFT Launches Blockchain-Based Infrastructure to Transform Global Cross-Border Payments appeared first on Penetration Testing Tools.
More than 48,000 Cisco ASA and Firepower Threat Defense (FTD) firewalls remain unprotected against two critical vulnerabilities that
The post 48,000 Cisco Firewalls Remain Exposed to Active Zero-Day Attacks, Shadowserver Finds appeared first on Penetration Testing Tools.
A team of researchers has developed a simple hardware tool that calls into question the very foundations of
The post $50 Hardware Attack Bypass: Researchers Expose Critical Flaw in Intel SGX and AMD SEV-SNP Trusted Computing appeared first on Penetration Testing Tools.
Fraudsters have discovered a new method of targeting elderly users by exploiting fake Facebook events and a malicious
The post Datzbro Trojan: Spyware-Banking Malware Hijacks Seniors’ Devices with Fake Facebook Lures appeared first on Penetration Testing Tools.
Broadcom has patched a critical privilege escalation vulnerability in VMware Aria Operations and VMware Tools, which had been
The post VMware Zero-Day (CVE-2025-41244) Exploited by Chinese APT UNC5174 Since October 2024 appeared first on Penetration Testing Tools.
A cybercriminal group known as Lunar Spider executed a sprawling operation that began with a single click on
The post Lunar Spider Campaign: Single Click Leads to Two-Month Intrusion and Domain Admin Theft appeared first on Penetration Testing Tools.
