A vulnerability was discovered in the online access system for auto dealers of one of the world’s largest car manufacturers—uncovered simply by examining the page’s code. Security researcher Eitan Zwer of Harness reported that...
The post Just Two Flaws in a Car Manufacturer’s Portal Allowed a Researcher to Unlock Cars and Expose Data appeared first on Penetration Testing Tools.
Researchers at Forcepoint X-Labs have identified a new malware campaign targeting macOS users. The attack employs an enhanced ClickFix technique—combining phishing with social engineering—to steal data from cryptocurrency wallets, browser accounts, and confidential files....
The post New ‘Odyssey Stealer’ Malware Hijacks macOS, Steals Crypto with ClickFix appeared first on Penetration Testing Tools.
At DEF CON 33, researchers from SafeBreach unveiled a new attack technique dubbed Win-DDoS, capable of transforming thousands of publicly accessible domain controllers (DCs) worldwide into a powerful botnet for large-scale DDoS attacks. The...
The post New ‘Win-DDoS’ Attack Turns Windows Servers Into a Global Botnet appeared first on Penetration Testing Tools.
Researchers at Eclypsium have uncovered critical vulnerabilities in the Lenovo 510 FHD and Lenovo Performance FHD webcams that allow them to be transformed into BadUSB-style attack devices. The issue, dubbed BadCam, was presented at...
The post Your Webcam Can Be a Hacker’s Weapon: New ‘BadCam’ Attack Hijacks Lenovo Devices appeared first on Penetration Testing Tools.
Linus Torvalds delivered a sharp rebuke to the initial batch of RISC-V patches proposed for inclusion in Linux 6.17, citing both their untimely submission and the presence of what he called “garbage” changes unrelated...
The post Linus Torvalds Rejects ‘Garbage’ RISC-V Code, Delays It for Linux 6.17 appeared first on Penetration Testing Tools.