In Phnom Penh, Cambodia, law enforcement authorities have dismantled a large-scale cyber fraud operation. On October 11, 2025,
The post Cambodia Raids Transnational Cyber Fraud Center in Phnom Penh Skyscraper, Detaining 80 Suspects appeared first on Penetration Testing Tools.
In Spain, authorities have concluded a large-scale operation targeting one of the most active cybercriminal groups operating within
The post Crime-as-a-Service Syndicate Dismantled: Spain Arrests “GoogleXcoder,” Alleged Leader of GXC Team appeared first on Penetration Testing Tools.
The notorious Aisuru botnet continues to grow in destructive power — it now commands over 300,000 infected IoT
The post Aisuru Botnet Unleashes Record 29.6 Tbps DDoS Attack, Abusing 100,000+ US ISP Devices appeared first on Penetration Testing Tools.
Microsoft has reminded users that support for the Home and Pro editions of Windows 11 version 23H2 will
The post Windows 11 Version 23H2 Reaches End-of-Support Next Month: Auto-Upgrade to 24H2 Imminent appeared first on Penetration Testing Tools.
BreachForums, a website long associated with the publication of stolen data, has once again gone offline. This time,
The post FBI Seizes BreachForums Domain Hours Before Scattered Spider Data Leak Deadline appeared first on Penetration Testing Tools.
New York is currently experiencing a surge in SMS phishing scams disguised as notifications from the so-called “Inflation
The post New York Issues Warning on ‘Inflation Refund’ SMS Phishing Scam Stealing SSNs and Financial Data appeared first on Penetration Testing Tools.
The long-awaited release of Linux Mint Debian Edition 7, built upon Debian GNU/Linux 13 “Trixie”, has finally arrived
The post Linux Mint Debian Edition 7 “Gigi” Arrives with Linux 6.12 LTS, OEM Installation Support appeared first on Penetration Testing Tools.
BerylEnigma A CTF + penetration testing toolkit, mainly to achieve some common encryption and coding functions, in the
The post BerylEnigma: CTF + penetration testing toolkit appeared first on Penetration Testing Tools.
Analysts at Huntress have detected active exploitation attempts targeting a newly discovered vulnerability in CentreStack and TrioFox products
The post Exploited Zero-Day: Critical Gladinet/Triofox Flaw CVE-2025-11371 Allows RCE via LFI appeared first on Penetration Testing Tools.
Apple has significantly expanded its bug bounty program dedicated to strengthening the security of the iOS ecosystem. At
The post Apple Ups Bounty to $5 Million for Zero-Click Spyware Exploits appeared first on Penetration Testing Tools.
The ClayRat espionage campaign is evolving rapidly and increasingly targeting Android users. According to Zimperium, the malware is
The post ClayRat Spyware Campaign Targets Android Users via Fake Apps and Aggressive Self-Propagation appeared first on Penetration Testing Tools.
Attackers have begun abusing the DFIR tool Velociraptor to stage ransomware deployments of LockBit and Babuk. Cisco Talos
The post Ransomware Group Storm-2603 Abuses Velociraptor for Stealthy LockBit/Babuk Attacks appeared first on Penetration Testing Tools.
According to a new report from Microsoft Threat Intelligence, the financially motivated group Storm-2657 is conducting large-scale attacks
The post Storm-2657 Hackers Steal University Salaries by Hijacking Workday HR Accounts appeared first on Penetration Testing Tools.
Researchers at FireTail have discovered the resurrection of an old-class flaw — ASCII Smuggling — now resurfacing in
The post ASCII Smuggling Attack Bypasses Filters, Forcing Gemini to Obey Invisible Commands from Calendar Invites appeared first on Penetration Testing Tools.
Two critical vulnerabilities discovered in the 7-Zip archiver allowed remote execution of arbitrary code when processing ZIP files.
The post Critical 7-Zip Flaws Allow Remote Code Execution via Malicious ZIP Files appeared first on Penetration Testing Tools.
In June 2025, a researcher operating under the pseudonym rick disclosed a critical vulnerability in GitHub Copilot dubbed
The post GitHub Copilot Zero-Click CamoLeak Exposed: CVE-2025-59145 (CVSS 9.6) Allowed Silent Data Theft from Private Repos appeared first on Penetration Testing Tools.
Wiz researchers have recently disclosed a critical vulnerability in Redis affecting version 8.2.1 and earlier releases. Tracked as
The post Critical Redis Lua Flaw (CVE-2025-49844) Rated CVSS 10.0 Allows Remote Code Execution appeared first on Penetration Testing Tools.
Researchers have identified a large-scale wave of attacks orchestrated by the RondoDox botnet, which employs the so-called “exploit
The post RondoDox Botnet Firing ‘Exploit Shotgun’: Targets 56 Vulnerabilities Across 30+ Router and IoT Vendors appeared first on Penetration Testing Tools.
Forescout specialists recorded a targeted intrusion in September against a honeypot simulating the control system of a water-treatment
The post Hacktivist Group TwoNet Exposed: Fabricated Water Utility Attack After Breaching OT Honeypot with Default Credentials appeared first on Penetration Testing Tools.
A new vulnerability has been discovered in OpenSSH — CVE-2025-61984 — which permits remote code execution (RCE) by
The post OpenSSH ProxyCommand Flaw CVE-2025-61984 Bypasses Filters, Allowing RCE via Crafted Usernames appeared first on Penetration Testing Tools.
