Experts at Claroty have uncovered a series of critical vulnerabilities in Axis Communications’ video surveillance product line which, if successfully exploited, could grant an attacker complete control over the affected devices. At risk are...
The post Critical Flaws in Axis Video Surveillance Expose Corporate Networks to Takeover appeared first on Penetration Testing Tools.
The group behind the SocGholish malware has intensified its use of the Parrot TDS and Keitaro TDS traffic distribution systems to filter visitors and redirect them to malicious destinations. According to Silent Push, the...
The post SocGholish Malware Evolves, Using Traffic Distribution Systems to Target Victims appeared first on Penetration Testing Tools.
U.S. law enforcement has revealed details of an international operation that dismantled the core infrastructure of the BlackSuit ransomware gang, notorious for a series of devastating cyberattacks. Nearly two weeks ago, the group’s dark...
The post Dismantling a Ransomware Empire: Law Enforcement Takes Down BlackSuit appeared first on Penetration Testing Tools.
Microsoft, in coordination with federal agencies, has issued a warning about a newly discovered, high-severity vulnerability in hybrid Exchange Server deployments that could allow an attacker with existing access to an on-premises server to...
The post New Exchange Flaw Lets Hackers Take Over Your Cloud Environment appeared first on Penetration Testing Tools.
A researcher operating under the pseudonym dead1nfluence has discovered that the Internet Archive contains over 130,000 recorded conversations with popular chatbots — including Claude, Grok, ChatGPT, and others. This finding suggests that with improper...
The post Your Private Chats Aren’t Private: Over 130,000 Chatbot Conversations Exposed on the Internet Archive appeared first on Penetration Testing Tools.
Researchers at Google have unveiled an enhanced method for exploiting the Retbleed vulnerability — a flaw that enables the extraction of arbitrary data from the memory of any process on affected systems. This weakness...
The post Google Reveals a Far More Dangerous ‘Retbleed’ Exploit for AMD CPUs appeared first on Penetration Testing Tools.
A new tool for disabling EDR systems has emerged in the cybercriminal underground, which Sophos researchers regard as an evolution of the EDRKillShifter utility. Its use has already been documented in attacks by eight...
The post New EDR Killer Tool Allows Ransomware to Cripple Security Solutions appeared first on Penetration Testing Tools.
At the Black Hat conference in Las Vegas, representatives from VisionSpace Technologies demonstrated that disabling a satellite or altering its trajectory can be achieved far more easily — and at a fraction of the...
The post Hacking Satellites Is Easier Than Ever: Critical Flaws Found in Open-Source Space Software appeared first on Penetration Testing Tools.
Radio communications used by intelligence agencies, law enforcement, and military forces across dozens of countries have been found vulnerable to interception — and the flaw lies not only in outdated algorithms, but also in...
The post Broken by Design: Critical Flaws Found in TETRA Radio Encryption appeared first on Penetration Testing Tools.
AppShark Appshark is a static analysis tool for Android apps. Its goal is to analyze very large apps (Douyin currently has 1.5 million methods). Appshark supports the following features: JSON-based customized scanning rules to...
The post appshark: scan vulnerabilities in an Android app appeared first on Penetration Testing Tools.
Cybersecurity researchers have uncovered 11 malicious Go packages designed to download additional components from remote servers and execute them on both Windows and Linux systems. According to Socket researcher Olivia Brown, during execution the...
The post Supply Chain Alert: Malicious Go Packages Found Targeting Windows and Linux appeared first on Penetration Testing Tools.
Two malicious packages have been discovered in the NPM ecosystem, disguised as libraries for building bots and automated services using the WhatsApp Business API. Identified by researchers at Socket, these modules mimicked popular WhatsApp...
The post Your Code Is Not Safe: Malicious NPM Packages Are Deleting Files appeared first on Penetration Testing Tools.
The new Linux 6.17 kernel introduces a unified standard for the so-called “performance button” increasingly found on gaming laptops. This key now has an assigned unique code—KEY_PERFORMANCE—allowing Linux systems to properly recognize it and...
The post Linux 6.17 Kernel Gets a Performance Boost for Gaming Laptops appeared first on Penetration Testing Tools.
Akira ransomware attacks are growing ever more sophisticated: threat actors have begun exploiting a legitimate Intel CPU tuning driver to disable Windows’ built-in protections. The driver in question—rwdrv.sys, part of the ThrottleStop utility—is registered...
The post Akira Ransomware Uses Intel Driver to Bypass Windows Defender appeared first on Penetration Testing Tools.
In a new apartment in Tel Aviv, the lights suddenly switch off, smart blinds rise on their own, and the water heater powers up—without the tenants’ knowledge. This is not part of a “smart...
The post Your ‘Smart’ Home Is Not Safe: Gemini Attack Turns a Calendar Invite into a Physical Threat appeared first on Penetration Testing Tools.
At the Black Hat USA conference in Las Vegas, Naor Haziz, a researcher at Sweet Security, unveiled an attack dubbed ECScape, capable of completely undermining the trust-based security model of Amazon ECS. The vulnerability...
The post Cloud Chaos: New ‘ECScape’ Attack Threatens Amazon’s Container Service appeared first on Penetration Testing Tools.
Six years ago, researchers at PortSwigger first identified a fundamental flaw in the HTTP/1.1 protocol—one that enables HTTP Request Smuggling attacks. Despite being publicly known since 2019, the vulnerability remains unresolved and continues to...
The post HTTP/1.1 Must Die: Why This 6-Year-Old Vulnerability Is Still a Major Threat appeared first on Penetration Testing Tools.
Hackers have breached the electronic case management system of the U.S. federal courts, gaining access to confidential information, including the identities of protected witnesses. The incident, which affected multiple district courts across several states,...
The post Hackers Breach U.S. Federal Courts, Exposing Confidential Witness Identities appeared first on Penetration Testing Tools.
Google has officially confirmed that hackers gained unauthorized access to one of its corporate Salesforce databases and exfiltrated data related to small and medium-sized business clients. The disclosure appears in an updated June bulletin...
The post Hackers Breach Google’s Salesforce Database, Exfiltrating Client Data appeared first on Penetration Testing Tools.
Meta is waging an intense campaign against organized scam networks in Southeast Asia, where dozens of fraudulent schemes operate in parallel. In just the first half of the year, more than 6.8 million WhatsApp...
The post Meta’s New WhatsApp Features Combat Rising Group Chat Scams appeared first on Penetration Testing Tools.
