hoaxshell is a Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell, based on the following concept: This c2 concept (which could be implemented by...
The post hoaxshell: A Windows reverse shell payload generator and handler appeared first on Penetration Testing Tools.
Google has released an emergency update for its Chrome browser, addressing six security vulnerabilities—one of which is already being actively exploited in the wild. The flaws affect critical components related to Chrome’s graphics engine...
The post Emergency Chrome Update: Google Patches Actively Exploited Zero-Day Allowing Sandbox Escape appeared first on Penetration Testing Tools.
MITRE has unveiled a new cybersecurity framework titled AAD APT (Adversarial Actions in Digital Asset Payment Technologies), specifically designed to counter vulnerabilities within digital financial systems, including cryptocurrencies. This initiative extends the principles established...
The post MITRE Unveils AADAPT: A New Cybersecurity Framework to Combat Digital Asset Threats appeared first on Penetration Testing Tools.
In a recent analysis based on the examination of 10 million real-world compromised passwords, researchers at Specops have laid bare the ongoing vulnerability of corporate networks stemming from human error. The passwords were drawn...
The post The Password Crisis: 98.5% of Corporate Passwords Are Insecure, Leaving Networks Vulnerable appeared first on Penetration Testing Tools.
Meta has addressed a security vulnerability in its Meta AI chatbot that allowed users to access private prompts and AI-generated responses intended for other individuals. The issue was responsibly disclosed by security researcher Sandeep...
The post Meta AI Chatbot Exposed: Critical Flaw Leaked Private Prompts and Responses appeared first on Penetration Testing Tools.
The latest iteration of the Android malware known as Konfety has grown even more insidious. Researchers at Zimperium zLabs have uncovered a refined variant that employs unconventional ZIP archive structures and encrypted, runtime-loaded code....
The post Konfety Malware Evolves: New Android Variant Uses Malformed ZIPs & Encrypted Code to Evade Detection appeared first on Penetration Testing Tools.
Abacus Market, once the largest Western darknet marketplace supporting Bitcoin transactions, has vanished from the internet without warning. All signs suggest a classic “exit scam,” where platform administrators abscond with users’ funds. An alternative...
The post Abacus Market Vanishes: Was it a $300M+ Crypto Exit Scam or Covert Law Enforcement Takedown? appeared first on Penetration Testing Tools.
A cybercriminal collective has launched a new Ransomware-as-a-Service (RaaS) platform known as GLOBAL GROUP, actively targeting organizations across Australia, Brazil, Europe, and the United States since early June 2025. According to EclecticIQ, the operation...
The post GLOBAL GROUP: AI-Powered Ransomware Threatens Global Critical Infrastructure appeared first on Penetration Testing Tools.
Government institutions across Southeast Asia have found themselves at the center of a new cyber-espionage campaign aimed at harvesting sensitive information through a previously unknown Windows malware tool known as HazyBeacon. Tracked by Palo...
The post HazyBeacon: New Windows Backdoor Uses AWS Lambda for Stealthy Cyber-Espionage in Southeast Asia appeared first on Penetration Testing Tools.
AsyncRAT, first introduced on GitHub in January 2019, has evolved into one of the most formidable tools in the cybercriminal arsenal. Its open-source architecture, written in C#, has laid the foundation for a multitude...
The post AsyncRAT’s Dark Evolution: How Open-Source Code Fuels a Growing Malware Empire appeared first on Penetration Testing Tools.
A former U.S. Army servicemember has pleaded guilty to orchestrating an extensive scheme involving the hacking of telecommunications companies, extortion, and the sale of stolen data. Cameron John Wagenius, 21, who last served in...
The post Ex-US Army Soldier “kiberphant0m” Pleads Guilty to $1M Telecom Hacking & Extortion appeared first on Penetration Testing Tools.
Cloudflare recorded a dramatic decline in the number of DDoS attacks during the second quarter of 2025, mitigating 7.3 million incidents—down sharply from the 20.5 million reported in the first quarter. However, despite the...
The post Cloudflare Q2 2025: DDoS Attack Volume Drops, But Hyper-Volumetric Assaults Skyrocket appeared first on Penetration Testing Tools.
Hackers have devised a method to conceal malware in places where detection is nearly impossible—in DNS records that map domain names to IP addresses. This technique enables the delivery of malicious binaries without relying...
The post Hidden in Plain Sight: Hackers Conceal Malware and AI Prompts in DNS Records appeared first on Penetration Testing Tools.
Bolthole A proof-of-concept ClickOnce payload for Red Teams to establish initial access in authorized penetration tests. Overview Bolthole provides operators with: Reverse SSH tunnel into the target environment CMD shell access as the executing...
The post Bolthole: New ClickOnce Payload Offers Red Teams Stealthy Initial Access appeared first on Penetration Testing Tools.
The United Kingdom’s National Cyber Security Centre (NCSC) has unveiled a new program titled the Vulnerability Research Initiative (VRI), aimed at deepening collaboration with independent experts in vulnerability discovery. This initiative seeks to bolster...
The post NCSC Launches Initiative to Boost UK Cyber Defenses with External Experts appeared first on Penetration Testing Tools.
The Central Bureau of Investigation (CBI) of India has announced the dismantling of a transnational cybercriminal syndicate responsible for large-scale tech support scams. The operation, codenamed Chakra V, was carried out on July 7,...
The post Global Scam Ring SHUT DOWN: CBI Nabs Tech Support Fraudsters appeared first on Penetration Testing Tools.
The Trump administration is planning to allocate $1 billion over the next four years toward offensive operations in cyberspace. These funds will be disbursed through the Department of Defense as part of a sweeping...
The post US Cyber Warfare Shift: A $1 Billion Gamble appeared first on Penetration Testing Tools.
There is no shortage of protective tools today, yet unfortunately, the number of threats continues to outpace them—particularly those that operate subtly and invisibly, penetrating the very core mechanisms of an operating system. Detecting...
The post COMmander: Unmasking Hidden Threats in Windows with Deep RPC/COM Monitoring appeared first on Penetration Testing Tools.
The Open-Ended Working Group (OEWG) on security and the use of information and communication technologies (ICTs) in the context of international security has concluded its work in New York. After nearly five years of...
The post UN’s OEWG Concludes: Paving the Way for a Permanent Global Cybersecurity Mechanism appeared first on Penetration Testing Tools.
A counterfeit extension for the Cursor AI development environment, masquerading as a legitimate Ethereum utility, has resulted in a major cybersecurity incident—a Russian cryptocurrency developer lost half a million dollars due to the extension’s...
The post Crypto Dev Loses $500K to Fake Cursor AI Extension: A New Supply Chain Threat appeared first on Penetration Testing Tools.
