A new tool has surfaced on the dark web, quickly drawing the attention of security professionals—and not for
The post The Pitch-Black Bot: DIG AI Emerges as the Dark Web’s Uncensored Malware Engine appeared first on Penetration Testing Tools.
WatchGuard has warned customers of a critical vulnerability in its Firebox firewalls that is already being actively exploited
The post Perimeter Breach: Critical Zero-Day CVE-2025-14733 Exploited to Hijack WatchGuard Firewalls appeared first on Penetration Testing Tools.
Researchers have uncovered a vulnerability in the UEFI firmware implementations used on motherboards from several major manufacturers, including
The post Critical UEFI Flaw Bypasses All Early-Boot Protections appeared first on Penetration Testing Tools.
TrapFlagForSyscalling: Bypass user-land hooks by syscall tampering via the Trap Flag The Trap Flag (TF) is a special bit in
The post The Single-Step Sniper: Bypassing EDR Hooks with TrapFlagForSyscalling appeared first on Penetration Testing Tools.
The U.S. Treasury is cautiously suggesting that the ransomware market may be beginning to cool. In a new
The post The Extortion Deficit: Ransomware Payments Plunge by 33% as Victims Refuse to Pay appeared first on Penetration Testing Tools.
Groups operating in the interests of the DPRK continue to aggressively expand their infrastructure for cyber espionage, financial
The post Shared Shadows: Hunt.io Uncovers the Unified Staging Grounds of Lazarus and Kimsuky appeared first on Penetration Testing Tools.
The leak of a fourth episode linked to the APT35 hacking group—also known as Charming Kitten—dramatically reshapes perceptions
The post The Accounting of Intrusion: How the “Episode 4” Leak Exposed APT35’s Bureaucratic Machine appeared first on Penetration Testing Tools.
The Tor Project has published its Form 990 tax filings and an independent audit of its financial statements
The post Onions & Audit Trails: How the Tor Project is Decoupling from Government Funding appeared first on Penetration Testing Tools.
Check Point researchers have uncovered a new campaign known as the so-called YouTube Ghost Network—a web of hijacked
The post Vectored Overloading: New “Ghost Network” Hijacks YouTube to Deploy Stealthy GachiLoader appeared first on Penetration Testing Tools.
A newly discovered vulnerability in FreeBSD components responsible for IPv6 configuration allows an attacker on the same local
The post Router Risk: New FreeBSD Flaw Exploits IPv6 to Grant Remote Code Execution appeared first on Penetration Testing Tools.
BruteForceAI is an advanced penetration testing tool that revolutionizes traditional brute-force attacks by integrating Large Language Models (LLM)
The post Brute Force Reimagined: How BruteForceAI Uses LLMs to Crack Complex Login Forms appeared first on Penetration Testing Tools.
The struggle for leadership in AI is increasingly shifting from research labs to mass-market products. Just one day
The post The Flash Flip: Google’s New Gemini 3 Flash Topples GPT-5.2 in Key AI Benchmarks appeared first on Penetration Testing Tools.
Android is expanding its pilot program to combat phone scams in which fraudsters persuade victims to enable screen
The post Breaking the Spell: Android’s New 30-Second Safety Brake Stops Screen-Sharing Scammers appeared first on Penetration Testing Tools.
Cisco has warned that threat actors are already exploiting a critical vulnerability in its widely deployed products, one
The post Unpatched & Rooted: China-Linked Hackers Exploit Cisco Zero-Day to Hijack Secure Email Gateways appeared first on Penetration Testing Tools.
Arctic Wolf reports the first confirmed intrusions into customer networks in which attackers logged into FortiGate devices via
The post The SSO Trap: How a “Default” Feature is Granting Attackers Admin Access to FortiGate Devices appeared first on Penetration Testing Tools.
French law enforcement authorities have arrested a 22-year-old man suspected of orchestrating a recent cyberattack against the country’s
The post Retaliation Strike: 22-Year-Old Arrested After BreachForums Hacks French Ministry of Interior appeared first on Penetration Testing Tools.
Researchers at iVerify have identified a new Android remote access trojan dubbed Cellik, which blends the capabilities of
The post The Play Store Predator: New Cellik Spyware Can Trojanize Any App With One Click appeared first on Penetration Testing Tools.
The Kimwolf botnet has drawn intense scrutiny after researchers at QiAnXin XLab reported that it had infected more
The post Taming the Wolf: How the 1.8 Million-Strong Kimwolf Botnet Overtook Google Traffic appeared first on Penetration Testing Tools.
Since early December 2025, SOC teams in Japan have been observing a wave of attacks exploiting React2Shell (CVE-2025-55182)—a
The post Beyond the Shell: Critical React2Shell Exploit Hits Japan to Deploy Stealthy ZnDoor RAT appeared first on Penetration Testing Tools.
GroupPolicyBackdoor is a python utility for Group Policy Objects (GPOs) manipulation and exploitation. GPO attack vectors can very often
The post GPO Stealth: Turn Active Directory Into Your C2 With the New GroupPolicyBackdoor Framework appeared first on Penetration Testing Tools.
