ESET researchers have identified a new wave of cyberattacks exploiting data from contactless payments via NFC technology. Initially targeting clients of Czech banks, this malicious campaign has now begun to spread rapidly across the...
The post NFC Fraud Explodes 35x: New Attacks Hijack Contactless Payments via NFCGate Malware appeared first on Penetration Testing Tools.
Bluetooth-enabled devices produced by a dozen renowned manufacturers have been found vulnerable to attacks capable of transforming wireless headsets or speakers into espionage tools. This alarming revelation was presented by experts from ERNW during...
The post Bluetooth Alert: Critical Flaws in Airoha Chips Turn Headphones into Spy Devices appeared first on Penetration Testing Tools.
Tensions have once again flared within the Linux kernel development community, this time centering on the Bcachefs file system — a project promoted as a reliable solution that “won’t eat your data.” While disputes...
The post Linux Kernel Drama: Torvalds Withdraws Bcachefs Support for 6.17 After Clash Over Feature Submissions appeared first on Penetration Testing Tools.
The United Kingdom has confirmed its first fatality directly linked to a cyberattack on the National Health Service (NHS). The incident, which occurred in June of last year, severely disrupted hospital operations across southeast...
The post UK Records First Cyberattack-Linked Death: Patient Dies Amid NHS Ransomware Chaos appeared first on Penetration Testing Tools.
Microsoft has released a new Windows 11 update (Build KB5060838) for participants of the Windows Insider Program in the Dev Channel. This update introduces both publicly available enhancements and features that are being gradually...
The post Windows 11 25H2 Dev Build Unveils Deeper 1Password Integration for Seamless Passkey Management appeared first on Penetration Testing Tools.
Owners of Android smartphones will soon benefit from enhanced protection against one of the most insidious yet dangerous threats in mobile communication — network impersonation. With the introduction of Android 16, Google is implementing...
The post Android 16 Unleashes Stingray Protection: New Security Features Combat Network Impersonation appeared first on Penetration Testing Tools.
Nicholas Michael Kloster, a resident of Kansas City, has found himself at the center of a high-profile criminal case, culminating in his guilty plea to a series of cybercrimes. According to the U.S. Department...
The post Hacker Pleads Guilty: Breached Orgs to Promote Cybersecurity Services, Faces Prison appeared first on Penetration Testing Tools.
Experts at Rapid7 have disclosed a critical vulnerability affecting 689 Brother printer models and 53 models from other manufacturers, including Fujifilm, Toshiba, and Konica Minolta. The flaw lies in a predictable algorithm used to...
The post Urgent Printer Alert: Critical Flaw (CVE-2024-51978, CVSS 9.8) Exposes Brother & Other Printers to Remote Takeover appeared first on Penetration Testing Tools.
The social engineering technique known as ClickFix—based on deceptive CAPTCHA prompts—has witnessed a dramatic surge in popularity among cybercriminals over the past year. According to ESET, between July 2024 and June 2025, the number...
The post ClickFix Attacks Skyrocket 517%: New “FileFix” Tactic Emerges to Deploy Stealthy Malware appeared first on Penetration Testing Tools.
jxscout is a tool designed to help security researchers analyze and find vulnerabilities in JavaScript code. It works with your favorite proxy (Burp or Caido), capturing requests and saving optimized versions locally for easy analysis...
The post Jxscout: Unleash JavaScript’s Hidden Vulnerabilities with This Powerful Analysis Tool appeared first on Penetration Testing Tools.
RemoteMonologue is a Windows credential harvesting technique that enables remote user compromise by leveraging the Interactive User RunAs key and coercing NTLM authentications via DCOM. Features 🔹 Authentication Coercion via DCOM (-dcom) Targets three DCOM...
The post RemoteMonologue: New Windows Technique Weaponizes DCOM for NTLM Credential Harvesting appeared first on Penetration Testing Tools.
In a sweeping espionage campaign dubbed LapDogs, over a thousand small office and home office devices were compromised. Researchers from the STRIKE team at SecurityScorecard reported that the attack was linked to Chinese threat...
The post “LapDogs” Unmasked: China-Linked Actors Build Covert ORB Network on 1,000+ SOHO Devices for Espionage appeared first on Penetration Testing Tools.
The leading cybersecurity agencies in the United States—CISA and the NSA—have issued a joint report urging software developers to adopt so-called memory-safe programming languages. These are technologies inherently designed to protect against critical memory-related...
The post CISA, FBI, NSA Urge Software Industry: Adopt Memory-Safe Languages to Drastically Cut Vulnerabilities appeared first on Penetration Testing Tools.
On Friday evening, a surprising announcement introduced Tyr—a new graphics driver for the Linux kernel, written in Rust. Designed to support modern Arm Mali GPUs, the driver interfaces with the Direct Rendering Manager. Despite...
The post Linux Gains “Tyr”: New Rust-Written Graphics Driver for Arm Mali GPUs Unveiled appeared first on Penetration Testing Tools.
Microsoft has released the preview update KB5060829 for Windows 11 version 24H2, encompassing 38 technical enhancements, including refinements to the taskbar and a new tool for seamless data migration between devices. Classified as an...
The post Windows 11 24H2 Preview (KB5060829) Unveils Seamless PC Migration & Taskbar Improvements appeared first on Penetration Testing Tools.
For nearly a year, a hacker collective has been orchestrating a large-scale campaign targeting the financial sector across Africa. Experts from Unit 42 at Palo Alto Networks have sounded the alarm, tracking this operation...
The post African Financial Institutions Targeted: “CL-CRI-1014” IAB Uses Open-Source Tools & Forged Signatures for Covert Access appeared first on Penetration Testing Tools.
Researchers at Varonis Threat Labs have uncovered a new phishing campaign in which attackers exploit a little-known Microsoft 365 feature known as Direct Send. Originally intended for sending emails from internal devices such as...
The post Microsoft 365 “Direct Send” Abused: Phishing Campaign Spoofs Internal Users, Bypasses Security appeared first on Penetration Testing Tools.
Cisco has released critical security updates to address two severe vulnerabilities in its network security products. Both issues affect Cisco Identity Services Engine (ISE) and its associated component, the ISE Passive Identity Connector (ISE-PIC)....
The post Urgent Cisco ISE/ISE-PIC Alert: Two Critical RCE Flaws (CVSS 10.0) Allow Unauthenticated Root Access appeared first on Penetration Testing Tools.
ZigStrike is a robust shellcode loader developed in Zig, offering a variety of injection techniques and anti-sandbox features. It leverages compile-time capabilities for efficient shellcode allocation, demonstrating proven success in bypassing advanced security solutions. ZigStrike...
The post ZigStrike: New Zig-Based Shellcode Loader Revolutionizes EDR Evasion with Advanced Injection Techniques appeared first on Penetration Testing Tools.
Loki is a stage-1 command and control (C2) framework written in Node.js, built to script-jack vulnerable Electron apps MITRE ATT&CK T1218.015. Developed for red team operations, Loki enables evasion of security software and bypasses application...
The post Loki: Node.js Command & Control for Script-Jacking Vulnerable Electron Applications appeared first on Penetration Testing Tools.
