A cyber incident at Almaviva, a key contractor for Italy’s national railway group FS Italiane, has resulted in
The post Massive 2.3 TB Leak: Italian Railway Contractor Almaviva Confirms Data Breach appeared first on Penetration Testing Tools.
LdrShuffle Stealthy code execution via modification of the EntryPoint of loaded modules at runtime. Summary Windows processses have various modules
The post LdrShuffle: Stealthy Code Execution via DLL EntryPoint Overwriting appeared first on Penetration Testing Tools.
The chatbot Grok’s peculiar behaviour has once again drawn public attention. This publicly accessible model, embedded directly into
The post Grok Goes Full Fanboy: Chatbot’s Absurd Bias Towards Elon Musk Goes Viral appeared first on Penetration Testing Tools.
A large-scale TamperedChef campaign has once again drawn the attention of security researchers, as attackers continue distributing malware
The post TamperedChef Campaign Uses Forged Certificates to Distribute Malware via Fake Installers appeared first on Penetration Testing Tools.
Unwanted programs disguised as gaming software have once again drawn the attention of cybersecurity researchers. The Tsundere botnet,
The post Tsundere Botnet Masquerades as Valorant/CS2, Uses Ethereum Smart Contract for C2 appeared first on Penetration Testing Tools.
GreyNoise has recorded a dramatic surge in automated requests targeting Palo Alto Networks’ GlobalProtect authentication portals. The scale
The post Forty-Fold Spike in Probing Targets Palo Alto GlobalProtect Login Portals appeared first on Penetration Testing Tools.
Google has expanded the capabilities of its Gemini AI service by adding an image-verification tool to both the
The post Google Gemini Gets New Image Verification Tool to Detect AI-Generated Content appeared first on Penetration Testing Tools.
Google has unveiled an enhanced version of its image-generation system, Nano Banana Pro — an evolution of last
The post Google Unveils Nano Banana Pro: 4K AI Images, Perfect Text, and Gemini 3 Core appeared first on Penetration Testing Tools.
During a discussion of Palo Alto Networks’ results for the first quarter of 2026, CEO Nikesh Arora offered
The post Palo Alto CEO Warns of Quantum Computing Risk by 2029; Launches Enterprise Browser appeared first on Penetration Testing Tools.
Cl0p struck a blow against Oracle by exploiting a critical zero-day vulnerability in the E-Business Suite. Researchers report
The post Cl0p Zero-Day Hits Oracle E-Business Suite (CVE-2025-61882), Compromising Global Giants appeared first on Penetration Testing Tools.
Google has disclosed a years-long intelligence operation revealing that APT24, a China-linked threat group, had been deploying a
The post APT24 Used ‘BadAudio’ Malware in 3-Year Espionage Campaign Hitting 1,000+ Sites appeared first on Penetration Testing Tools.
Two founders of the cryptocurrency service Samourai Wallet have received actual prison sentences for laundering more than $237
The post Samourai Wallet Founders Sentenced to Prison for Laundering $237 Million in Crypto appeared first on Penetration Testing Tools.
BitlockMove Lateral Movement via Bitlocker DCOM & COM Hijacking. This Proof of Concept (PoC) for Lateral Movement abuses
The post BitlockMove: New PoC for Covert Lateral Movement via BitLocker DCOM Hijacking appeared first on Penetration Testing Tools.
AMD has begun adding support for new graphics cards to the AMDGPU Linux driver, but the identity of
The post AMD Patches Hint at Next-Gen RDNA 5 or Enhanced GPU Architecture in Linux Driver appeared first on Penetration Testing Tools.
Microsoft is introducing native Sysmon support in Windows, marking a significant shift in the security landscape. Capabilities that
The post Microsoft Integrates Sysmon Natively into Windows 11 & Server 2025 appeared first on Penetration Testing Tools.
A widespread infection of outdated ASUS routers has become the focal point of a new covert campaign that
The post Operation WrtHug: 50,000+ Outdated ASUS Routers Hacked for Covert Botnet appeared first on Penetration Testing Tools.
In recent days it has become apparent that FortiWeb had been accumulating issues the manufacturer chose not to
The post FortiWeb Alert: New Authenticated Command Injection Flaw (CVE-2025-58034) Actively Exploited appeared first on Penetration Testing Tools.
A recently disclosed vulnerability in the 7-Zip archiver is already being weaponized in real-world attacks, according to a
The post Urgent Patch: 7-Zip Flaw (CVE-2025-11001) Actively Exploited for Code Execution appeared first on Penetration Testing Tools.
A new wave of attacks targeting infrastructure built around modern machine-learning systems has been uncovered by the Oligo
The post ShadowRay 2.0: AI Orchestration Framework Ray Hacked for Autonomous Cryptojacking appeared first on Penetration Testing Tools.
Experts in cybersecurity report the emergence of a new automated credential-theft toolkit whose sophistication continues to evolve. In
The post Sneaky 2FA Toolkit Upgraded: Uses ‘Browser-in-the-Browser’ to Steal Credentials appeared first on Penetration Testing Tools.
