The new Linux 6.17 kernel introduces a unified standard for the so-called “performance button” increasingly found on gaming laptops. This key now has an assigned unique code—KEY_PERFORMANCE—allowing Linux systems to properly recognize it and...
The post Linux 6.17 Kernel Gets a Performance Boost for Gaming Laptops appeared first on Penetration Testing Tools.
Akira ransomware attacks are growing ever more sophisticated: threat actors have begun exploiting a legitimate Intel CPU tuning driver to disable Windows’ built-in protections. The driver in question—rwdrv.sys, part of the ThrottleStop utility—is registered...
The post Akira Ransomware Uses Intel Driver to Bypass Windows Defender appeared first on Penetration Testing Tools.
In a new apartment in Tel Aviv, the lights suddenly switch off, smart blinds rise on their own, and the water heater powers up—without the tenants’ knowledge. This is not part of a “smart...
The post Your ‘Smart’ Home Is Not Safe: Gemini Attack Turns a Calendar Invite into a Physical Threat appeared first on Penetration Testing Tools.
At the Black Hat USA conference in Las Vegas, Naor Haziz, a researcher at Sweet Security, unveiled an attack dubbed ECScape, capable of completely undermining the trust-based security model of Amazon ECS. The vulnerability...
The post Cloud Chaos: New ‘ECScape’ Attack Threatens Amazon’s Container Service appeared first on Penetration Testing Tools.
Six years ago, researchers at PortSwigger first identified a fundamental flaw in the HTTP/1.1 protocol—one that enables HTTP Request Smuggling attacks. Despite being publicly known since 2019, the vulnerability remains unresolved and continues to...
The post HTTP/1.1 Must Die: Why This 6-Year-Old Vulnerability Is Still a Major Threat appeared first on Penetration Testing Tools.
Hackers have breached the electronic case management system of the U.S. federal courts, gaining access to confidential information, including the identities of protected witnesses. The incident, which affected multiple district courts across several states,...
The post Hackers Breach U.S. Federal Courts, Exposing Confidential Witness Identities appeared first on Penetration Testing Tools.
Google has officially confirmed that hackers gained unauthorized access to one of its corporate Salesforce databases and exfiltrated data related to small and medium-sized business clients. The disclosure appears in an updated June bulletin...
The post Hackers Breach Google’s Salesforce Database, Exfiltrating Client Data appeared first on Penetration Testing Tools.
Meta is waging an intense campaign against organized scam networks in Southeast Asia, where dozens of fraudulent schemes operate in parallel. In just the first half of the year, more than 6.8 million WhatsApp...
The post Meta’s New WhatsApp Features Combat Rising Group Chat Scams appeared first on Penetration Testing Tools.
The Kimsuky group has once again found itself at the center of attention following a campaign that deftly combined social engineering tactics with sophisticated techniques for bypassing Windows security mechanisms. Their targets included South...
The post Sophisticated Kimsuky Campaign: New Malware Bypasses Windows Defender appeared first on Penetration Testing Tools.
TeamFiltration TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts. See the Example Attack flow at the bottom of this readme for a general introduction into how TeamFiltration works! This tool has...
The post TeamFiltration: enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts appeared first on Penetration Testing Tools.
The concept of connecting large language models to external data sources is swiftly transitioning from experimental novelty to everyday practice. Today, ChatGPT is capable not only of engaging in conversation, but also of interacting...
The post Your Data Is Not Safe: The ‘AgentFlayer’ Attack That Steals Secrets From ChatGPT appeared first on Penetration Testing Tools.
toxssin toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by...
The post toxssin: POST-XSS exploitation tool appeared first on Penetration Testing Tools.
The NetBSD team has officially announced the commencement of preparations for the release of version 11: a dedicated code branch has been created, and the project has now entered the phase of active testing....
The post NetBSD 11: The OS That Never Forgets Your Old Hardware appeared first on Penetration Testing Tools.
Microsoft has unveiled an autonomous artificial intelligence system capable of analyzing and classifying software without any human intervention. The prototype, named Project Ire, is designed to detect malicious code at scale. According to Microsoft...
The post Project Ire: Microsoft’s AI System That Hunts Malware Without Humans appeared first on Penetration Testing Tools.
The top spot in HackerOne’s global ranking is no longer held by a human, but by a machine. Behind the alias “XBOW” is not a living researcher, but an AI-driven system that has already...
The post Human Hackers Dethroned: An AI Takes Top Spot on HackerOne appeared first on Penetration Testing Tools.
Trust in familiar IT tools is increasingly being weaponized by malicious actors: remote monitoring and management (RMM) solutions—originally designed for administration and support—are now leveraged for attacks, covert control, and data exfiltration. Security professionals...
The post Legitimate Tools, Malicious Intent: How Attackers Weaponize RMM Software appeared first on Penetration Testing Tools.
Google has released a series of urgent security updates for Android, addressing multiple critical vulnerabilities, including two actively exploited flaws within Qualcomm components. This round of patches places particular emphasis on CVE-2025-21479 (rated 8.6...
The post Urgent: Google Patches Actively Exploited Flaws in Android Devices appeared first on Penetration Testing Tools.
Although humans have traditionally been regarded as the weakest link in the cybersecurity chain, a new study by Canadian researchers reveals that even untrained individuals can effectively detect malicious software when provided with minimal...
The post Your Best Defense: New Study Shows Humans Can Spot Malware With Minimal Training appeared first on Penetration Testing Tools.
Over the past year, a social engineering technique known as ClickFix has witnessed a meteoric rise, propelled by a fusion of unique delivery methods, persuasive narratives, and sophisticated evasion tactics. According to analysts at...
The post ClickFix: The Evolving Social Engineering Trick That’s Replacing Fake Updates appeared first on Penetration Testing Tools.
The AI-powered code editor Cursor was recently found vulnerable to an attack technique dubbed “MCPoison” by the Check Point research team. This flaw enabled remote execution of arbitrary code on a developer’s machine, provided...
The post AI Code Editor Vulnerability: A ‘Trusted’ Flaw Led to Remote Code Execution appeared first on Penetration Testing Tools.
