Whether you’re a developer, security engineer, or just a curious person, Cloud Snitch is guaranteed to teach you something and take your relationship with your cloud to the next level. Cloud Snitch provides a...
The post Cloud Snitch: New Open-Source Tool Reveals Hidden Activity & Bolsters Least Privilege in Your AWS Accounts appeared first on Penetration Testing Tools.
Since July 2024, Russia has been the target of a large-scale, highly targeted cyber campaign employing a previously unknown espionage tool named Batavia. According to Kaspersky Lab, the attacks have been directed at industrial...
The post Batavia Spyware Unmasked: Covert Campaign Hits Russian Industrial & Scientific Orgs via Phishing Emails appeared first on Penetration Testing Tools.
The emergence of a new tool known as RingReaper has sparked concern among cybersecurity experts and penetration testing teams alike. This program leverages a legitimate yet highly potent Linux kernel feature called io_uring to...
The post RingReaper: New Linux Tool Leverages io_uring Kernel Feature to Bypass EDR & Stealthily Control Systems appeared first on Penetration Testing Tools.
Since 2023, the RedDrip Team has been meticulously monitoring the activities of one of the most elusive cyber espionage groups. This threat actor, armed with an unknown Exchange exploitation chain, distinguishes itself through substantial...
The post NightEagle APT Unleashed: Zero-Day Exchange Exploit Targets China’s Strategic Industries with Fileless Malware appeared first on Penetration Testing Tools.
A hacker group with affiliations beyond Pakistan has once again drawn attention following its attacks on Indian government entities. According to researchers at Recorded Future, the activity is attributed to the cyber threat group...
The post Pakistan-Aligned APT36 Unleashes DRAT V2: New Delphi RAT Targets Indian Government appeared first on Penetration Testing Tools.
Security researchers have uncovered critical vulnerabilities in SMBClient for macOS that affect both user space and the operating system kernel. These flaws potentially allow for remote execution of arbitrary code and the termination of...
The post Critical macOS SMBClient Flaws Allow Remote Code Execution & Kernel Crashes appeared first on Penetration Testing Tools.
In recent months, cybersecurity experts have observed a dramatic surge in the malicious exploitation of domains within the .es top-level domain (TLD). Over the past six months alone, the number of such incidents has...
The post Spain’s .es Domain Surges 19x in Cybercrime Use: Now Third Most Popular for Phishing & RATs appeared first on Penetration Testing Tools.
Experts at Wiz have identified a new wave of attacks targeting TeamCity servers—a widely used platform for orchestrating CI/CD workflows. Threat actors exploited a misconfigured Java Debug Wire Protocol (JDWP) interface, enabling remote command...
The post Exposed JDWP Debug Ports Under Attack: Cryptominers Infiltrating Java Apps in Hours appeared first on Penetration Testing Tools.
Nimhawk is an advanced command and control (C2) framework that builds upon the exceptional foundation laid by Cas van Cooten (@chvancooten) with his NimPlant project. Cas’s innovative work in developing a lightweight implant written in Nim has been...
The post Nimhawk: Advanced Nim-Based C2 Framework Revolutionizes Red Team Operations appeared first on Penetration Testing Tools.
A newly emerged botnet known as hpingbot, identified by the NSFOCUS Fuying Lab‘s global threat monitoring system, has rapidly become one of the most prominent cyber threats since its appearance in early June 2025....
The post Hpingbot Unleashed: New Go-Based Botnet Leverages Pastebin & Hping3 for Stealthy Attacks appeared first on Penetration Testing Tools.
A pivotal moment has arrived in the operating system market. For the first time, the latest version of Windows has surpassed its predecessor in user share—a milestone that signals a broader shift across the...
The post Windows 11 Finally Overtakes Windows 10 in User Share as EOL Deadline Looms appeared first on Penetration Testing Tools.
Another relic of the past is being permanently retired from the legendary operating system. Microsoft has initiated the process of removing PowerShell 2.0—a long-obsolete version of the command-line tool—from Windows 11. This iteration first...
The post Microsoft is Finally Removing PowerShell 2.0 from Windows 11: Boosting Security, Retiring Legacy Tool appeared first on Penetration Testing Tools.
Exercise caution if you’re planning to play Call of Duty: WWII via Game Pass on PC. Users have begun reporting a critical vulnerability that allows hackers to remotely execute commands on another player’s computer....
The post Call of Duty: WWII Game Pass PC Hit by Critical RCE Exploit, Players Warned to Stay Away appeared first on Penetration Testing Tools.
As a result of a data breach caused by TalentHook, tens of millions of job seekers’ resumes were left openly accessible online. The incident was first reported by the Cybernews team, which discovered a...
The post TalentHook Data Breach Exposes 26 Million Job Seekers’ Resumes Via Misconfigured Azure Cloud appeared first on Penetration Testing Tools.
The world of cybersecurity is typically dominated by seasoned professionals with years of experience. Yet, on occasion, the most unexpected discoveries emerge from those who haven’t even reached adulthood. Dylan became the youngest security...
The post Rising Star: Meet Dylan, Microsoft’s Youngest Security Researcher & Bug Bounty Rule Changer at 13 appeared first on Penetration Testing Tools.
Spanish authorities have dismantled a large-scale investment fraud scheme that inflicted losses exceeding $11.8 million (more than €10 million). The coordinated operation was carried out simultaneously in Barcelona, Madrid, Mallorca, and Alicante, resulting in...
The post Spain Busts €10M+ Crypto Fraud Ring: 21 Arrested in Major International Investment Scam appeared first on Penetration Testing Tools.
Experts at Koi Security have identified over 40 malicious extensions for the Mozilla Firefox browser, specifically crafted to steal data from cryptocurrency wallets. These add-ons pose a significant threat to the security of users’...
The post Firefox Crypto Wallet Alert: Over 40 Malicious Extensions Found Stealing Seed Phrases & Funds appeared first on Penetration Testing Tools.
Millions of Linux-based systems across the globe have been exposed to serious risk due to a newly discovered critical vulnerability in the sudo utility—one that enables attackers to gain superuser privileges and seize full...
The post Critical Sudo Flaws (CVE-2025-32463, CVSS 9.3): Root Privilege Escalation Via –chroot & –host Options, PoC Available appeared first on Penetration Testing Tools.
Researchers at the University of North Carolina have developed a novel method for deceiving artificial intelligence systems tasked with image analysis. The technique, dubbed RisingAttacK, can effectively render objects invisible to AI, even when...
The post RisingAttacK: New Method Renders Objects “Invisible” to AI Image Analysis Systems appeared first on Penetration Testing Tools.
The French cybersecurity agency has announced a large-scale cyberattack targeting key sectors of the nation. Government institutions, telecommunications firms, media organizations, the financial sector, and transport entities were all placed in the crosshairs. The...
The post ANSSI Exposes “Houken”: China-Linked APT Exploiting Ivanti CSA Zero-Days & Deploying Linux Rootkits appeared first on Penetration Testing Tools.
