Beginning in October 2025, Microsoft will implement sweeping measures to insulate Excel from potentially hazardous sources. A new default policy will block external links to certain file types, affecting all Excel users through a...
The post Microsoft to Block External Links in Excel, Phased Rollout Begins October 2025 appeared first on Penetration Testing Tools.
In late 2024, a new ransomware strain named FunkSec emerged on the cybercrime scene. It quickly drew attention due to its aggressive tactics and unconventional implementation. Within a short span, dozens of organizations across...
The post The End of FunkSec: Free Decryptor Released for Ransomware Victims After AI-Assisted Group Goes Dormant appeared first on Penetration Testing Tools.
A new report from SentinelOne casts a revealing light on a lesser-known yet extensive facet of China’s cyber-espionage apparatus: the contractor infrastructure tied to the threat group Silk Typhoon (also known as Hafnium), which...
The post SentinelOne Exposes China’s Contractor Network, Linking MSS & Hafnium to 15+ Stealthy Surveillance Patents appeared first on Penetration Testing Tools.
Microsoft has announced sweeping enhancements to its vulnerability rewards program for the .NET platform, significantly broadening its scope and increasing compensation for valid discoveries. Security researchers can now earn up to $40,000 for critical...
The post Microsoft Revamps .NET Bug Bounty Program, Offering Up to $40K for Critical Flaws appeared first on Penetration Testing Tools.
The new Linux kernel version 6.17 introduces substantial enhancements to the EXT4 file system, significantly boosting the performance of servers equipped with numerous CPU cores and running large volumes of containers. These advancements refine...
The post Linux Kernel 6.17 Delivers “Wild Gains” for EXT4: Major Performance Boosts for Servers & Containers appeared first on Penetration Testing Tools.
Engineers at Google DeepMind have unveiled AlphaEarth Foundations, a sophisticated artificial intelligence model capable of generating a digital representation of the Earth’s surface at an impressive resolution of 10×10 meters. Unlike conventional systems designed...
The post Google’s “Virtual Satellite” Is Here: AlphaEarth AI Model Maps the Planet in Unprecedented Detail appeared first on Penetration Testing Tools.
The organizers of the world’s premier hacking competition, Pwn2Own, have announced a reward that has instantly shifted the industry’s spotlight: a staggering $1 million will be awarded for the successful demonstration of a full-fledged...
The post The $1M Zero-Click Challenge: Pwn2Own Offers Record-Breaking Bounty for a WhatsApp Exploit appeared first on Penetration Testing Tools.
A critical vulnerability has been discovered in the Cursor source code editor, an AI-powered tool designed to assist programmers. The flaw, identified as CVE-2025-54135 and dubbed CurXecute, affects nearly all versions of the IDE...
The post Critical Flaw in Cursor AI: Prompt Injection Allows Remote Code Execution appeared first on Penetration Testing Tools.
Since mid-July, a surge in ransomware attacks leveraging the Akira strain has been observed, specifically targeting SonicWall devices. According to cybersecurity firm Arctic Wolf, threat actors have been actively exploiting SSL VPN connections on...
The post New Akira Ransomware Wave Hits SonicWall Devices, Zero-Day Vulnerability Suspected appeared first on Penetration Testing Tools.
Email protection mechanisms, originally conceived as a bulwark against malicious links, have ironically become unwitting allies to cybercriminals. Researchers have uncovered a troubling trend: threat actors are increasingly exploiting “link wrappers” provided by platforms...
The post Phishing Attacks Weaponize Security Tools by Abusing Proofpoint & Intermedia Link Wrapping appeared first on Penetration Testing Tools.
In the autumn of 2024, the InfoSect bug hunting team prepared a remote code execution attack targeting the Synology TC500 IP camera for entry in the Pwn2Own Ireland competition. The exploitation hinged on a...
The post The Pwn2Own Exploit That Never Was: A Format String Flaw in Synology IP Cameras Allowed Remote Code Execution appeared first on Penetration Testing Tools.
JSubFinder JSubFinder is a tool written in golang to search webpages & javascript for hidden subdomains and secrets in the given URL. Developed with BugBounty hunters in mind JSubFinder takes advantage of Go’s amazing...
The post jsubfinder: earch webpages & javascript for hidden subdomains and secrets in the given URL appeared first on Penetration Testing Tools.
A critical vulnerability has been discovered in the widely used WordPress theme “Alone — Charity Multipurpose Non-profit”, which is already being exploited by malicious actors to compromise websites. Tracked as CVE-2025-5394, the flaw has...
The post Critical RCE Flaw in “Alone” WordPress Theme Actively Exploited, Allowing Full Site Takeover appeared first on Penetration Testing Tools.
In their relentless pursuit of artificial intelligence, companies are neglecting the very foundation of digital resilience—security. This stark conclusion emerges from an IBM analysis of cyberattack data collected over the past year, revealing that...
The post IBM Study: 97% of Breached Firms Lacked Basic AI Safeguards, Exposing Critical Data appeared first on Penetration Testing Tools.
crAPI At a high level, the crAPI application is modeled as a B2C application that allows any user to get their car servicing done by a car mechanic. A user can create an account...
The post crAPI: help you to understand the ten most critical API security risks appeared first on Penetration Testing Tools.
Google is pushing the boundaries of cybersecurity with a bold new initiative: the public beta release of Device Bound Session Credentials (DBSC), a feature designed to shield users from session cookie theft. Originally introduced...
The post Google Launches DBSC Public Beta: New Feature Binds Sessions to Devices to Combat Cookie Theft appeared first on Penetration Testing Tools.
cats REST API fuzzer and negative testing tool. Run thousands of self-healing API tests within minutes with no coding effort! Comprehensive: tests are generated automatically based on a large number of scenarios and cover...
The post cats: REST API Fuzzer and negative testing tool appeared first on Penetration Testing Tools.
Researchers at Bitdefender have disclosed two critical vulnerabilities in the firmware of Dahua smart surveillance cameras. These flaws, rooted in the ONVIF protocol implementation and the file upload mechanism, enable attackers to gain full...
The post Critical Buffer Overflow Flaws in Dahua IP Cameras Expose Devices to RCE appeared first on Penetration Testing Tools.
Hackers infiltrated a bank’s internal network by installing a Raspberry Pi mini-computer equipped with a 4G modem, enabling remote access to the ATM system in an attempt to steal funds. This was revealed by...
The post Group-IB Exposes How Hackers Use Linux Bind Mounts (MITRE T1564.013) to Hide ATM Attack appeared first on Penetration Testing Tools.
Experts at Darktrace have identified a targeted cyberattack against an American chemical company, in which the perpetrators exploited a critical vulnerability in the SAP NetWeaver platform. Tracked as CVE-2025-31324, the flaw stemmed from an...
The post SAP NetWeaver Flaw Exploited: Auto-Color Linux Backdoor Targets US Chemical Company appeared first on Penetration Testing Tools.
