Threat actors are increasingly weaponizing MSHTA, a legacy Windows utility, as a highly efficient conduit to execute malicious
The post Living Off the HTA Land: How Hackers Weaponize a 1999 Windows Utility for Silent Malware Delivery appeared first on Information Security News.
A critical authentication bypass vulnerability facilitating unauthenticated remote code execution (RCE) has been isolated within the ChromaDB architecture.
The post ChromaToast Exploit: Unpatched CVSS 10.0 Flaw Grants Pre-Auth RCE in ChromaDB Python Server appeared first on Information Security News.
During the previous summer season, the sovereign nation of Luxembourg suffered a catastrophic, near-total collapse of its domestic
The post The Silent Blackout: Unpatched Huawei Router Zero-Day Crushed Luxembourg’s Telecom Grid appeared first on Information Security News.
The npm ecosystem has been subjected to a massive, highly coordinated supply-chain assault. Within a compressed one-hour envelope,
The post Shai-Hulud Malware Hits @antv Ecosystem, Poisoning Hundreds of npm Packages appeared first on Information Security News.
The Linux ecosystem has been destabilized by successive operational waves for several weeks; scarcely had the industry turbulence
The post Bypassing the Guardrails: New “DirtyDecrypt” Linux Flaw Overwrites Root Files in Memory appeared first on Information Security News.
Threat intelligence architects at Point Wild have dissectively mapped a contemporary XWorm V7.4 infection pipeline, demonstrating how a
The post Under the PyInstaller Mask: Point Wild Exposes XWorm V7.4 Stealth Loader and AMSI Bypass appeared first on Information Security News.
In April 2026, threat intelligence specialists at Cato CTRL neutralized a sophisticated network intrusion attempt targeting a major
The post China-Linked Hackers Deploy “TencShell” Backdoor via Faux Web Font Files appeared first on Information Security News.
The exfiltration of administrative credentials and volatile session tokens increasingly manifests not as a rudimentary brute-force incursion, but
The post The Zero-Detection Shadow: Unit 42 Exposes Advanced Gremlin Stealer Hijacking Live Browser WebSockets appeared first on Information Security News.
The highly popular Nx Console extension for Visual Studio Code has been compromised via a weaponized supply-chain injection.
The post Developer Alert: Poisoned Nx Console VS Code Extension Steals AWS, npm, and GitHub Tokens appeared first on Information Security News.
Interpol has coordinated the apprehension of over 200 individuals implicated in a sophisticated cybercrime matrix operating across the
The post Net Closed: Interpol’s Operation Ramz Bags 200 Cybercriminals and Smashes 53 Command Servers appeared first on Penetration Testing Tools.
The United States Federal Bureau of Investigation (FBI) has issued an official warning regarding the cascading aftermath of
The post Extortion in the Classroom: FBI Warns of ShinyHunters Cyber Attack on National Distance-Learning Platform appeared first on Penetration Testing Tools.
A novel exploitation technique has surfaced on macOS, designed to deceive users via a counterfeit “security update.” The
The post The Script Editor Trap: New macOS “Reaper” Malware Bypasses Terminal Defenses to Steal Keychains appeared first on Penetration Testing Tools.
Popular browser extensions have historically been perceived as benign, utilitarian artifacts—innocuous implements such as color droppers, ad-blockers, or
The post Phoenix Invicta Extension Malware Strips CSP Headers to Bypass Manifest V3 appeared first on Penetration Testing Tools.
American fueling stations have fallen victim to a coordinated cyber-infiltration campaign. Unidentified adversaries breached the telemetry frameworks responsible
The post Suspected Iranian Hackers Breach US Gas Station Fuel Monitoring Systems appeared first on Penetration Testing Tools.
A novel exploitation framework designed to escalate execution privileges within the Windows environment, designated as Eris, has emerged
The post The SNEK Initiative Drops “Eris”: New Post-Exploit Framework Abuses Windows Fax Service for SYSTEM Root appeared first on Penetration Testing Tools.
A constellation of severe vulnerabilities sweeping across ubiquitous server frameworks and third-party extensions has emerged as the focal
The post VulnCheck Warns of Active Cisco Zero-Day and Massive Server Exploitation Wave appeared first on Penetration Testing Tools.
Linus Torvalds has once again given voice to a sentiment that had been quietly permeating the developer community
The post Linus Torvalds Slams AI Bug Hunters for Clogging Linux Security Pipelines appeared first on Penetration Testing Tools.
Forensic specialists from Sysdig have intercepted an anomalous command architecture governing a malicious network, wherein the adversaries abandoned
The post NATS-as-C2: Critical Langflow Exploit Exploded to Fuel “LLMjacking” and Cloud Credential Theft appeared first on Penetration Testing Tools.
Adversaries initiated a targeted reconnaissance campaign against vulnerable PraisonAI nodes less than four hours following the public disclosure
The post Critical Pre-Auth Flaw CVE-2026-44338 Exploited to Hijack Autonomous AI Agents appeared first on Penetration Testing Tools.
The KDE ecosystem has secured a grant totaling €1,285,200 from the Sovereign Tech Fund, a German public-interest entity
The post KDE Secures €1.2M Sovereign Tech Fund Grant to Build a Windows Alternative appeared first on Penetration Testing Tools.
