Redis, one of the most widely used in-memory caching and database systems, has faced a startling revelation: a
The post Critical 10/10 Flaw in Redis Existed Undetected for 13 Years appeared first on Penetration Testing Tools.
A new habit has emerged in the world of programming—one that is rapidly evolving into a challenge for
The post “Vibe Coding” Warning: AI-Generated Code Is Making Software Unsafe appeared first on Penetration Testing Tools.
The French Prosecutor’s Office has launched an investigation into Apple’s Siri voice assistant following allegations of unlawful data
The post French Prosecutors Investigate Apple’s Siri for Unlawful Data Collection appeared first on Penetration Testing Tools.
The Storm-1175 group, linked to the operators behind the Medusa ransomware, has been actively exploiting a critical vulnerability
The post Medusa Ransomware Group Actively Exploiting Critical GoAnywhere Flaw appeared first on Penetration Testing Tools.
A fire at South Korea’s national data center has reduced the country’s digital infrastructure to ashes, serving as
The post South Korea Data Center Fire Destroys National Digital Infrastructure appeared first on Penetration Testing Tools.
LinkedIn has once again found itself confronting large-scale attempts to harvest user data — this time, the company
The post LinkedIn Sues ProAPIs Over Massive Data Scraping Operation appeared first on Penetration Testing Tools.
WPAxFuzz This tool is capable of fuzzing either any management, control, or data frame of the 802.11 protocol
The post WPAxFuzz: full-featured open-source Wi-Fi fuzzer appeared first on Penetration Testing Tools.
A team of Romanian researchers has unveiled an autonomous patrol robot capable of simultaneously monitoring its surroundings and
The post ARGUS: Autonomous Cyber-Physical Security Robot Merges AI Vision with Network Intrusion Detection appeared first on Penetration Testing Tools.
Amid China’s long-standing campaign against cross-border fraud, authorities have delivered a verdict in one of the most high-profile
The post China Sentences 16 to Death for Myanmar Fraud Syndicates and “Hidden Tiger Villa” Massacre appeared first on Penetration Testing Tools.
The Free Software Foundation (FSF) celebrated its 40th anniversary by unveiling a series of initiatives that will shape
The post FSF Unveils LibrePhone Project to Bring Complete Computing Freedom to Mobile Devices appeared first on Penetration Testing Tools.
The U.S. Army has resolved critical cybersecurity flaws in the prototype of its new Next Generation Command and
The post US Army NGC2 Prototype Had “Critical Deficiencies” in Zero Trust Security Before Ivy Sting Trials appeared first on Penetration Testing Tools.
Discord has confirmed that attackers gained access to the personal data of some users after breaching one of
The post Discord Data Breach: Hackers Steal User IDs and Government ID Images from Third-Party Contractor appeared first on Penetration Testing Tools.
A group calling itself Scattered LAPSUS$ Hunters has reemerged after months of silence and multiple arrests of its
The post Hacker Alliance Demands $989M Ransom, Threatens to Leak 1 Billion Salesforce Records appeared first on Penetration Testing Tools.
Researchers at StrikeReady uncovered a targeted campaign exploiting a zero-day in the Zimbra Collaboration Suite (ZCS) — a
The post Zimbra Zero-Day (CVE-2025-27915) Actively Exploited to Steal Credentials via Malicious Calendar Invites appeared first on Penetration Testing Tools.
Oracle has warned of a zero-day vulnerability in E-Business Suite, designated CVE-2025-61882, that permits unauthenticated remote arbitrary code
The post Oracle EBS Zero-Day CVE-2025-61882 (CVSS 9.8) Being Actively Exploited by Clop Ransomware appeared first on Penetration Testing Tools.
The LayerX team has disclosed the mechanics of a novel attack dubbed CometJacking, which exploits the AI-enabled Comet
The post CometJacking Attack Hijacks Perplexity’s AI Browser to Steal Gmail and Calendar Data with One Click appeared first on Penetration Testing Tools.
The hacker group Confucius, active in South Asia since at least 2013, has intensified malicious operations against Pakistani
The post Confucius APT Targets Pakistan with WooperStealer and New Python-Based Anondoor Backdoor appeared first on Penetration Testing Tools.
Researcher RyotaK of GMA Flatt Security discovered a serious vulnerability in the Unity game engine—tracked as CVE-2025-59489—which allows
The post Critical Unity Flaw CVE-2025-59489 Exposes Games Built Since 2017 to Local Code Execution appeared first on Penetration Testing Tools.
In a complex attack chain that blends malicious advertising, DNS-based control, and multi-stage delivery schemes, researchers at Infoblox
The post Detour Dog: Stealthy DNS Malware Campaign Hijacks 30,000+ Websites to Deliver Strela Stealer appeared first on Penetration Testing Tools.
AI-Powered CAPTCHA Solver This project is a Python-based command-line tool that uses large multimodal models (LMMs) like OpenAI’s
The post AI CAPTCHA Solver: New Tool Uses GPT-4o and Gemini to Beat Various Web Security Challenges appeared first on Penetration Testing Tools.
