Researchers at FortiGuard Labs have documented a new campaign deploying the MostereRAT remote access trojan, which targets Windows
The post MostereRAT: The New Trojan Using Legitimate Tools to Attack appeared first on Penetration Testing Tools.
Researchers at Silent Push have uncovered infrastructure linked to the Chinese cyber-espionage groups Salt Typhoon and UNC4841. The
The post Salt Typhoon: New Evidence Reveals Years of Chinese Cyber-Espionage appeared first on Penetration Testing Tools.
Researchers at Arctic Wolf have reported a new campaign, dubbed GPUGate, in which adversaries exploit Google Ads and
The post GPUGate: The Supply Chain Attack That Hides Malware in Plain Sight appeared first on Penetration Testing Tools.
An independent researcher named Alexander Popov has unveiled a novel exploitation technique for a critical Linux kernel vulnerability,
The post A Pwnie-Winning Exploit Shows How to Hack the Linux Kernel appeared first on Penetration Testing Tools.
At least eighteen widely used JavaScript packages on NPM—with a combined weekly download volume exceeding two billion—were briefly
The post Phishing Attack Compromises 18 Popular NPM Packages appeared first on Penetration Testing Tools.
Insikt Group has published a comprehensive study on two influence networks that were active during the conflict between
The post The AI Propaganda War: Inside the India-Pakistan Influence Networks appeared first on Penetration Testing Tools.
A newly disclosed vulnerability in the HTTP/2 protocol, dubbed MadeYouReset (CVE-2025-8671), was revealed on August 13, 2025. The
The post MadeYouReset: A New HTTP/2 Flaw That Could Lead to DoS Attacks appeared first on Penetration Testing Tools.
Anthropic has announced an expansion of regional restrictions governing access to its services. Previously, availability was curtailed in
The post Anthropic Blocks Foreign Subsidiaries to Prevent AI Misuse appeared first on Penetration Testing Tools.
A critical vulnerability has been identified in Apache Jackrabbit, exposing systems to remote code execution and the potential
The post Critical Apache Jackrabbit Flaw Could Lead to Corporate Compromise appeared first on Penetration Testing Tools.
In mid-August, researchers encountered a new ransomware strain, Cephalus, in two separate incidents. Following the recent emergence of
The post Cephalus: The New Ransomware Strain Using Legitimate Binaries to Attack appeared first on Penetration Testing Tools.
The Australian Institute of Criminology has unveiled a comprehensive study exposing the inner workings of ransomware syndicates and
The post Anatomy of a Ransomware Gang: How Short-Lived Criminal Groups Inflict Massive Damage appeared first on Penetration Testing Tools.
In recent months, specialists at Acronis TRU have observed a surge in attacks where adversaries deploy counterfeit installers
The post Hackers Are Using a Fake ScreenConnect to Deliver Multiple RATs appeared first on Penetration Testing Tools.
Penelope is a powerful shell handler built as a modern netcat replacement for RCE exploitation, aiming to simplify,
The post Penelope: The Modern Shell Handler That’s Redefining RCE Exploitation appeared first on Penetration Testing Tools.
Two security researchers, operating under the pseudonyms BobDaHacker and BobTheShoplifter, have claimed to uncover “catastrophic” vulnerabilities in the
The post A “Catastrophic” Flaw in Burger King’s Parent Company Exposed appeared first on Penetration Testing Tools.
A critical vulnerability, CVE-2025-42957, has been identified in SAP S/4HANA, carrying a near-maximum CVSS score of 9.9. The
The post Critical SAP S/4HANA Flaw Exposes Systems to Full Compromise appeared first on Penetration Testing Tools.
On August 20, Apple released an unscheduled security update for all major platforms—iOS, iPadOS, macOS, and others. The
The post Apple Issues Urgent Patch for Zero-Click Image Flaw appeared first on Penetration Testing Tools.
PortSwigger researcher Gareth Hayes has unveiled a novel technique for stealing data directly from HTML attributes using inline
The post CSS Injection Can Now Steal Data with Just One Line of Code appeared first on Penetration Testing Tools.
Security researcher Matthew Bryant has introduced a new tool called Thermoptic—an HTTP proxy that disguises network requests as
The post Thermoptic: The New HTTP Proxy That Makes Your Traffic Vanish appeared first on Penetration Testing Tools.
The Seqrite Labs APT-Team has uncovered a new campaign targeting Kazakhstan’s energy sector. Tracked since April 2025, the
The post Anatomy of a Cyberattack: Inside the Campaign Against Kazakhstan’s Energy Sector appeared first on Penetration Testing Tools.
Andrew Ferguson, Chairman of the U.S. Federal Trade Commission (FTC), sent a letter to Google CEO Sundar Pichai
The post Why the FTC’s Accusations Against Gmail’s Spam Filter Are Misguided appeared first on Penetration Testing Tools.
