Hackers siphoned more than 100 billion tokens from Upbit in just 54 minutes, exploiting a flaw in Solana
The post Upbit Solana Hack: 100 Billion Tokens Stolen, Exchange Delay Avoids Penalties appeared first on Penetration Testing Tools.
Sauron Fast context enumeration for newly obtained Active Directory credentials. Why Sauron? When you obtain fresh credentials (password
The post Sauron: Fast Active Directory Tool Maps Credential Privileges and Nested Groups in Seconds appeared first on Penetration Testing Tools.
Google has unveiled a new architecture for processing long sequences, Titans, along with a theoretical framework, MIRAS, which
The post Google Titans & MIRAS: New Architecture for 2M+ Token Long-Term AI Memory appeared first on Penetration Testing Tools.
Estonian security researcher Lira Rebane has unveiled an unconventional clickjacking technique that hinges on a fusion of SVG
The post Zero-JS Clickjacking: SVG Filters Exploit iFrames to Steal Cross-Origin Data appeared first on Penetration Testing Tools.
The world’s largest technology companies have begun issuing notifications to users who may have been targeted by state-linked
The post Apple & Google Issue New Spyware Alerts, Targeting Intellexa Zero-Day Victims appeared first on Penetration Testing Tools.
Cloudflare’s global infrastructure has suffered a second major outage in less than a month — and it has
The post Cloudflare Outage Caused by Frantic Patching of Critical React2Shell (CVE-2025-55182) Flaw appeared first on Penetration Testing Tools.
Malefactors are increasingly exploiting photographs and video clips sourced from open platforms, presenting them as “evidence” of an
The post FBI Warns: Deepfake Kidnapping Scams Use AI to Fabricate Image ‘Proof’ for Extortion appeared first on Penetration Testing Tools.
Hacker groups have exploited a security gap in Array AG Series corporate gateways, implanting covert management micro-programs and
The post Covert Backdoor: Array AG Gateway Exploit Allows Command Execution appeared first on Penetration Testing Tools.
On 4 December 2025, the Apache Software Foundation disclosed a critical vulnerability — CVE-2025-66516, rated the maximum CVSS
The post CRITICAL ALERT: Apache Tika XXE Flaw (CVSS 10.0) Allows File Read via PDF Files appeared first on Penetration Testing Tools.
Google has unveiled Gemini 3 Pro — a new generation of multimodal models that not only see images
The post Google Launches Gemini 3 Pro: Next-Gen Multimodal AI That Reasons Spatially & Converts Documents to Code appeared first on Penetration Testing Tools.
Over the weekend, one of the most compelling updates in recent months landed in the Linux 6.19 branch:
The post Linux 6.19: Kernel Gains Foundational PCIe Link Encryption for AMD SEV-TIO appeared first on Penetration Testing Tools.
More than thirty vulnerabilities have been uncovered in popular AI-enhanced development environments, all of which allow attackers —
The post IDEsaster: 30+ Vulnerabilities Found in AI-IDEs Allow Silent RCE and Data Theft appeared first on Penetration Testing Tools.
Singularity is a powerful Linux Kernel Module (LKM) rootkit designed for modern 6.x kernels. It provides comprehensive stealth capabilities
The post Singularity: Advanced Linux Kernel Rootkit Uses ftrace to Bypass EDR and eBPF appeared first on Penetration Testing Tools.
NVIDIA has announced the most significant update to the CUDA platform since its inception in 2006. With CUDA
The post NVIDIA CUDA 13.1: ‘CUDA Tile’ Abstraction Simplifies High-Level GPU Programming appeared first on Penetration Testing Tools.
The latest cycle of updates within the Linux distribution ecosystem closes the year with a notable milestone: Alpine
The post Alpine Linux 3.23 Released: Adopts 6.18 LTS Kernel & Unveils APK 3.0 Package Manager appeared first on Penetration Testing Tools.
Researchers at Striker STAR Labs have detailed a new attack against agent-based browsers that can turn an ordinary
The post Zero-Click Threat: New Attacks Turn AI Browsers into Google Drive Wipers appeared first on Penetration Testing Tools.
Chinese phishing groups that inundate users with endless SMS alerts about a “delivery problem” or an “unpaid fine”
The post Phishing Kits Steal Cards, Bind to Apple Pay/Google Wallet via Fake Stores appeared first on Penetration Testing Tools.
The new malicious distribution tool GhostFrame has spread with remarkable speed throughout the cybercriminal ecosystem, becoming the source
The post GhostFrame: Stealthy Iframe Phishing Toolkit Fuels 1 Million+ Covert Attacks appeared first on Penetration Testing Tools.
Two China-linked hacking groups began exploiting a critical vulnerability in React Server Components just hours after it became
The post China APTs Exploiting React Server RCE (CVE-2025-55182) Hours After Disclosure appeared first on Penetration Testing Tools.
Cloudflare’s services suffered yet another disruption on Friday morning, rendering LinkedIn, Zoom, Downdetector, and a number of other
The post Cloudflare Outage 2.0: Faulty React Patch Configuration Disrupts Major Websites appeared first on Penetration Testing Tools.
