Microsoft has introduced a long-anticipated feature in Windows 11 that allows administrators to remove preinstalled Microsoft Store applications via official Group Policy. The new functionality, titled Remove Default Microsoft Store Packages, is already available...
The post Windows 11 Gets Native App Removal: Bye-Bye Bloatware via Group Policy appeared first on Penetration Testing Tools.
A researcher at Positive Technologies has uncovered a critical vulnerability in the implementation of the NTFS file system, which enables a local attacker to escalate privileges to SYSTEM by leveraging a specially crafted virtual...
The post Critical NTFS Vulnerability (CVE-2025-49689) Uncovered: Local Attacker Can Gain SYSTEM Privileges in Windows 11 appeared first on Penetration Testing Tools.
An attack on the Visual Studio Code extension known as Ethcode has compromised the security of more than 6,000 developers worldwide. The incident stemmed from the insertion of malicious code into this widely used...
The post Ethcode Compromised: Over 6,000 Devs Hit by Malicious VS Code Extension appeared first on Penetration Testing Tools.
Microsoft has just released Windows 11 Beta Build 22631.5696 (KB5062663) to address several known system issues. These fixes are expected to arrive later this month as part of an optional update for the stable...
The post Windows 11 Beta Build 22631.5696: Critical Fixes for ReFS & Printing appeared first on Penetration Testing Tools.
GPOHound is a tool for dumping and analysing Group Policy Objects (GPOs) extracted from the SYSVOL share. It provides a structured, formalized format to help uncover misconfigurations, insecure settings, and privilege escalation paths in...
The post GPOHound: Offensive GPO dumping and analysis tool appeared first on Penetration Testing Tools.
Apache Tomcat webshell application for RCE A webshell application and interactive shell for pentesting Apache Tomcat servers. Features Webshell plugin for Apache Tomcat. Execute system commands via an API with ?action=exec. Download files from the...
The post Apache Tomcat webshell application for RCE appeared first on Penetration Testing Tools.
Gallia Gallia is an extendable pentesting framework with the focus on the automotive domain. The scope of the toolchain is conducting penetration tests from a single ECU up to whole cars, with the main...
The post gallia: comprehensive penetration testing toolchain for cars appeared first on Penetration Testing Tools.
At first glance, it appeared to be a typical browser extension — a sleek interface, a simple and intuitive color-picking function, high user ratings, and hundreds of glowing reviews. Yet behind this seemingly benign...
The post RedDirection Campaign: 2.3 Million Users Hit by Malicious Chrome & Edge Extensions appeared first on Penetration Testing Tools.
Parrot Security OS 6.4 has been officially released, marking the final iteration of the sixth generation of this cybersecurity-focused Linux distribution. The development team has refreshed core components, introduced new tools, and begun preparations...
The post Parrot Security OS 6.4 Released: The Final 6.x Iteration with New Tools & Debian 13 Prep appeared first on Penetration Testing Tools.
As electric vehicles steadily weave themselves into the fabric of everyday life, the essential infrastructure that powers them—charging stations—faces a mounting and deeply concerning threat. A study by security researcher Brandon Perry reveals that...
The post EV Charging Under Attack: New Vulnerabilities Threaten Vehicles & Grids appeared first on Penetration Testing Tools.
On the second Tuesday of July, Microsoft released its customary Patch Tuesday update package, addressing 137 vulnerabilities across a range of the company’s products. Among them, a particularly notable zero-day vulnerability in Microsoft SQL...
The post Microsoft’s July Patch Tuesday: 137 Fixes & a Publicly Disclosed SQL Server Zero-Day appeared first on Penetration Testing Tools.
As of July 7, Android users began encountering an unexpected expansion in the capabilities of Gemini, the system-integrated artificial intelligence. It now has access to widely used apps such as WhatsApp, Messages, and Phone—even...
The post Android Privacy Alert: Google Gemini Now Accesses Your WhatsApp, Messages & Calls appeared first on Penetration Testing Tools.
According to a report by Morphisec, the Iranian threat group Pay2Key.I2P has intensified its operations amid escalating tensions in the Middle East. The group is now offering larger payouts to hacker affiliates who participate...
The post Iranian Ransomware Group Pay2Key.I2P Escalates Attacks on US & Israel appeared first on Penetration Testing Tools.
BaitTrap is a large-scale campaign designed to deceive users through counterfeit news websites, spanning over 50 countries and fueling a surge in online investment fraud. Identified by CTM360, these deceptive domains—referred to as BNS...
The post BaitTrap Exposed: 17,000+ Fake News Sites Fueling Global Investment Scams appeared first on Penetration Testing Tools.
After 13 months of development, the stable release of Wayland 1.24 has been officially published—a protocol for interprocess communication and a suite of libraries powering modern graphical environments in Linux. This new version maintains...
The post Wayland 1.24 Released: Enhancing Linux Graphics & Compatibility appeared first on Penetration Testing Tools.
Malicious software has once again surfaced on the official Google Play Store, masquerading as an innocuous utility. This time, the campaign targeted North America, where the Android banking trojan known as Anatsa—also referred to...
The post Warning: Anatsa Banking Trojan Hits 90,000 Android Users Via Google Play appeared first on Penetration Testing Tools.
Researchers from Intel, Idaho State University, and the University of Illinois at Urbana-Champaign have unveiled a novel method for compromising language models—one capable of circumventing even the most advanced safety mechanisms. Their technique, dubbed...
The post InfoFlood: The New AI Vulnerability Bypassing LLM Safety appeared first on Penetration Testing Tools.
Malicious actors are increasingly leveraging digitally signed drivers to carry out stealthy attacks on the Windows kernel, circumventing standard security mechanisms and enhancing their ability to remain undetected. Despite the presence of safeguards such...
The post Signed Drivers Fueling Kernel Attacks: 620+ Malicious Drivers & 80+ Compromised Certs Target Windows appeared first on Penetration Testing Tools.
The hacker collective known as DragonForce, responsible for a series of high-profile cyberattacks targeting British retail giants such as Marks & Spencer, Harrods, and Co-Op, has now ignited an all-out confrontation with the rival...
The post Ransomware War Ignites: DragonForce & RansomHub Clash Threatens Businesses with Re-Extortion appeared first on Penetration Testing Tools.
A new threat has emerged in the realm of AI-assisted programming, known as “slopsquatting.” This attack has become particularly dangerous amid the surging popularity of AI coding assistants like Claude Code CLI, OpenAI Codex...
The post AI Coding Assistants Under Attack: “Slopsquatting” Malware Exploits AI Hallucinations for Supply Chain Compromise appeared first on Penetration Testing Tools.
