The world’s largest online black markets may no longer reside in the dark web, but openly on Telegram
The post The Dark Side of Telegram: Inside the $2B/Month Crypto Laundering Bazaars appeared first on Penetration Testing Tools.
Microsoft has released an out-of-band update to address a Message Queuing issue that emerged after the December 2025
The post Emergency Patch: Microsoft Issues Out-of-Band Fix for Broken MSMQ Infrastructure appeared first on Penetration Testing Tools.
SAMLSmith is a C# tool for generating custom SAML responses and implementing Silver SAML and Golden SAML attacks.
The post Forging the Keys: Inside SAMLSmith, the C# Framework for Golden & Silver SAML Attacks appeared first on Penetration Testing Tools.
The developers of Mullvad VPN have announced GotaTun, their own implementation of the WireGuard protocol written in Rust.
The post The End of Crashes: Mullvad’s New GotaTun Rust Engine Slashes VPN Failures by 97% appeared first on Penetration Testing Tools.
A critical vulnerability in the globally used workflow automation platform n8n allows attackers to execute arbitrary code remotely.
The post Automation Crisis: Critical 9.9 CVSS Flaw Exposes 103K n8n Instances to Full Takeover appeared first on Penetration Testing Tools.
U.S. law enforcement authorities have announced the seizure of a domain used in a large-scale scheme to steal
The post The Ad Trap Closed: DOJ Seizes Global Control Hub Behind $28M Bank Fraud appeared first on Penetration Testing Tools.
Threat actors have begun repurposing a legitimate server monitoring tool as a ready-made platform for remotely controlling systems
The post The Admin’s Shadow: How Hackers Turned the Nezha Monitoring Tool into a Stealth RAT appeared first on Penetration Testing Tools.
A malicious package named lotusbail has been uncovered in the npm repository, masquerading as a library for working
The post The Silent Sync: How the “lotusbail” npm Package Hijacks WhatsApp Accounts appeared first on Penetration Testing Tools.
Spotify has blocked a number of accounts after the Anna’s Archive team publicly released a dataset collected from
The post Spotify Cracks Down After Anna’s Archive Publishes Massive Music Dataset appeared first on Penetration Testing Tools.
OpenAI has released a security update for ChatGPT Atlas, a browser equipped with a built-in “agent mode” that
The post Agent Under Fire: OpenAI Hardens ChatGPT Atlas Against “Invisible” Resignation Attacks appeared first on Penetration Testing Tools.
Founding is a tool that processes shellcode in .bin, .exe, or .dll formats, applying advanced obfuscation or encryption techniques to generate stealthy binaries with sophisticated
The post Founding: The Next-Gen Loader Generator for Advanced Evasion appeared first on Penetration Testing Tools.
Direct navigation—when a user manually types a website address into the browser—has become markedly more dangerous. Researchers at
The post The Typosquat Trap: Why 90% of Parked Domains Now Redirect to Malware appeared first on Penetration Testing Tools.
The U.S. Department of Justice has brought charges against dozens of individuals in connection with a wave of
The post The $40M Jackpot: DOJ Charges 54 in Nationwide Ploutus ATM Malware Blitz appeared first on Penetration Testing Tools.
Nigerian authorities have arrested an individual believed to be one of the developers behind RaccoonO365, a phishing-as-a-service platform
The post The Raccoon’s End: Nigerian Police Arrest Mastermind Behind RaccoonO365 PhaaS appeared first on Penetration Testing Tools.
U.S. President Donald Trump has signed a new executive order that sets the trajectory of American space policy
The post Ensuring Space Superiority: Trump’s 2025 Order Reboots the Moon, Mars, and Nuclear Frontier appeared first on Penetration Testing Tools.
Italy’s antitrust authority has imposed a substantial fine on Apple, ordering the company to pay €98.6 million—approximately $115
The post The Double-Consent Trap: Italy Slaps Apple with $116M Fine Over Privacy Monopoly appeared first on Penetration Testing Tools.
The Argentine football giant Club Atlético River Plate (CARP) has become a target of extortion by the Qilin
The post Offside on the Dark Web: Qilin Ransomware Targets Argentine Giant River Plate appeared first on Penetration Testing Tools.
Proofpoint is warning of a surge in phishing attacks in which attackers hijack corporate Microsoft 365 accounts not
The post The Trusted Trap: How Hackers Weaponize Microsoft’s Own Login Flows to Bypass MFA appeared first on Penetration Testing Tools.
After nearly five years of apparent dormancy, the Iranian threat group Infy—also known as Prince of Persia—has resurfaced.
The post Thunder & Lightning Return: Iran’s Infy APT Resurfaces with Advanced Foudre Exploits appeared first on Penetration Testing Tools.
The group behind one of the most notorious ransomware distribution services, RansomHouse, has significantly strengthened the technical sophistication
The post Level Up: RansomHouse Deploys the “Mario” Encryptor to Crush ESXi Hypervisors appeared first on Penetration Testing Tools.
