A novel vulnerability was discovered in Microsoft 365 Copilot that permitted covert exfiltration of user data via an
The post Data Leak in Microsoft Copilot: Emails Exfiltrated via Hidden Mermaid Diagram appeared first on Penetration Testing Tools.
In one of Vilnius’s districts, Lithuanian police carried out a large-scale operation to dismantle a bot farm operating
The post Police Dismantle Massive SIM Box Bot Farm Used to Power Global Fraud appeared first on Penetration Testing Tools.
A major security breach has struck the Typus Finance platform, resulting in the theft of approximately $3.44 million
The post Typus Finance Suspends All Contracts After $3.44M DeFi Oracle Exploit appeared first on Penetration Testing Tools.
Google has embarked on one of the most ambitious projects in its history — a full-scale migration of
The post Google’s Billion-Dollar Pivot: AI-Assisted Migration to Arm Architecture appeared first on Penetration Testing Tools.
The U.S. Immigration and Customs Enforcement (ICE) has been using WhatsApp as a tool for surveillance. According to
The post ICE is Using WhatsApp Metadata to Track Suspect Networks, Court Order Reveals appeared first on Penetration Testing Tools.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a newly discovered flaw in the Windows SMB
The post CISA: Critical Windows SMB Flaw Under Active Attack with Public Exploit appeared first on Penetration Testing Tools.
The Paragon investigation continues to gain momentum, as prosecutors in Rome and Naples intensify their questioning of officials
The post Intelligence Crisis: Italian Spy Chiefs Questioned in Paragon Cyber Probe appeared first on Penetration Testing Tools.
The Internet Archive is preparing to celebrate a historic milestone: in October 2025, its Wayback Machine will reach
The post One Trillion Pages: The Wayback Machine Reaches a Historic Archiving Milestone appeared first on Penetration Testing Tools.
The American electronics distributor Avnet has confirmed a data breach, but stated that the stolen information cannot be
The post Avnet Confirms 1.3TB Data Breach, Claims Stolen Files Are “Unreadable” appeared first on Penetration Testing Tools.
Recent posts on the Telegram channel “SLSH 6.0” have enabled researchers from Unit 42 to trace the continued
The post Beyond Ransomware: Scattered LAPSUS$ Hunters Launches Encryption-Free Extortion-as-a-Service appeared first on Penetration Testing Tools.
The French non-profit initiative DNS0.EU, which provided European users with a free and secure domain name resolution service,
The post Citing Lack of Resources, EU’s Privacy-Focused DNS0.EU Shuts Down appeared first on Penetration Testing Tools.
Security researchers at Socket have uncovered a large-scale spam campaign orchestrated through WhatsApp Web, revealing 131 Chrome extensions
The post WhatsApp Web Swamped by 131 Spam Bots Hidden as Chrome Extensions appeared first on Penetration Testing Tools.
A critical vulnerability in the WatchGuard Fireware operating system allows attackers to execute arbitrary code on affected devices
The post Urgent Patch: Critical WatchGuard Firewall Flaw Exposes 76,000 Devices to RCE appeared first on Penetration Testing Tools.
Hackers have unleashed a new self-propagating malware dubbed GlassWorm, which first infiltrated the Visual Studio Code extension ecosystem
The post The Invisible Worm: GlassWorm Spreads Via VS Code Extensions and Blockchain C2 appeared first on Penetration Testing Tools.
Kuba Gretzky originally sought to make the internet a safer place — yet his creation achieved the opposite.
The post The MFA Killer: How One Programmer’s Tool Became a $100M Cybercrime Weapon appeared first on Penetration Testing Tools.
For the first time, the U.S. Department of Homeland Security has formally demanded that OpenAI disclose the identity
The post First Known Case: Feds Force OpenAI to Disclose ChatGPT User Identity appeared first on Penetration Testing Tools.
Across the Asia-Pacific region and Japan, a new breed of cybercrime is taking shape—one where attackers operate as
The post The New E-Crime: AI-Driven Ransomware and Billion-Dollar Asian Underworlds appeared first on Penetration Testing Tools.
The Japanese company Ryohin Keikaku, owner of the Muji brand, has suspended operations of its online store following
The post Muji Suspends Online Store After Ransomware Cripples Logistics Partner appeared first on Penetration Testing Tools.
Developers using the Cursor and Windsurf IDEs are currently exposed to exploitation through at least 94 known vulnerabilities
The post Warning: AI IDEs Cursor and Windsurf Expose Users to 94 Chromium Flaws appeared first on Penetration Testing Tools.
In early 2025, a developer named Jay Gibson (name changed for security reasons) received a chilling notification on
The post The Hunter Hunted: Spyware Targets the Developer Who Built Its Exploits appeared first on Penetration Testing Tools.
