In August 2025, researchers from Huntress observed a cyberattack involving the abuse of the legitimate server-monitoring tool Nezha,
The post China-Linked Hackers Weaponize Nezha Monitoring Tool and Log Poisoning to Deploy Gh0st RAT on 100+ Systems appeared first on Penetration Testing Tools.
The popular design tool Figma has faced a potential security threat due to a vulnerability in the Model
The post High-Severity Figma MCP Flaw CVE-2025-53967 Allows Remote Command Injection via Fallback Mechanism appeared first on Penetration Testing Tools.
The ClamAV 1.5.0 antivirus engine has been released, introducing one of the most significant updates in recent years
The post ClamAV 1.5.0 Released: Major Update Adds FIPS Mode Support and Switches Cache Hashing to SHA-256 appeared first on Penetration Testing Tools.
A critical vulnerability has been discovered in the popular WordPress theme Service Finder, allowing attackers to gain unauthorized
The post Critical WordPress Flaw CVE-2025-5947 (CVSS 9.8) Under Active Exploitation for Admin Takeover appeared first on Penetration Testing Tools.
Nearly a year after the incident, a Florida-based medical company has disclosed the full scale of a major
The post Medical Data Breach: Florida Firm Discloses Patient Info Stolen in Nov 2024 Attack — Nearly a Year Later appeared first on Penetration Testing Tools.
According to a LayerX report, thousands of corporate users are inputting personal and payment data into ChatGPT prompts—often
The post Shadow AI Leakage: Study Finds 77% of Employees Paste Sensitive Data into ChatGPT from Unsecured Accounts appeared first on Penetration Testing Tools.
Crassus Windows privilege escalation discovery tool Why “Crassus”? Accenture made a tool called Spartacus, which finds DLL hijacking opportunities
The post Crassus: Windows privilege escalation discovery tool appeared first on Penetration Testing Tools.
Jaguar Land Rover has announced the gradual resumption of operations at its factories following a massive cyberattack that
The post Jaguar Land Rover Resumes Production After Cyberattack, Launches Supplier Bailout with UK Government-Backed Loan appeared first on Penetration Testing Tools.
The threat actor known as BatShadow, linked to Vietnam, has launched a new malicious campaign targeting job seekers
The post BatShadow APT Launches Vampire Bot Campaign, Targeting Job Seekers with Malicious Samsung Lures appeared first on Penetration Testing Tools.
A drone that falls under the control of malicious actors can transform in a fraction of a second
The post SHIELD: New AI System Enables Drones to Detect and Recover from Cyberattacks Mid-Flight in Under a Second appeared first on Penetration Testing Tools.
promptfoo is an open-source CLI and library for evaluating and red-teaming LLM apps. With promptfoo, you can: Build
The post promptfoo: The Open-Source Tool for LLM Evaluation and Red Teaming appeared first on Penetration Testing Tools.
A network of hackers linked to North Korea has stolen more than $2 billion worth of crypto assets
The post North Korea Steals a Record $2 Billion in Crypto Heists This Year appeared first on Penetration Testing Tools.
A privilege escalation vulnerability in Microsoft Windows systems is once again being actively exploited, the U.S. Cybersecurity and
The post CISA Warns: Old Windows Flaw (CVE-2021-43226) Exploited in New Attacks appeared first on Penetration Testing Tools.
The Scattered Lapsus$ Hunters group has resurfaced — this time with a bizarre and unorthodox extortion tactic. The
The post Bizarre Extortion: Scattered Lapsus$ Hunters Offer Bounty to Spam Victims appeared first on Penetration Testing Tools.
The OpenSSH development team has announced the release of OpenSSH 10.1, marking a new stable version of the
The post OpenSSH 10.1 Released: Security Fixes and Post-Quantum Warnings appeared first on Penetration Testing Tools.
The developers of Redox OS, an operating system written entirely in Rust, have enabled multithreading support by default
The post Redox OS Now Faster: Multithreading Enabled by Default appeared first on Penetration Testing Tools.
Google DeepMind has unveiled CodeMender — a groundbreaking AI agent designed to automatically detect and repair vulnerabilities in
The post Google DeepMind Unveils CodeMender, An AI That Automatically Fixes Security Bugs appeared first on Penetration Testing Tools.
The DeFi platform Abracadabra.money has once again fallen victim to cybercriminals—its third successful breach in just two years.
The post Abracadabra.money Hacked Again: $1.7M Stolen in Third Exploit appeared first on Penetration Testing Tools.
Redis, one of the most widely used in-memory caching and database systems, has faced a startling revelation: a
The post Critical 10/10 Flaw in Redis Existed Undetected for 13 Years appeared first on Penetration Testing Tools.
A new habit has emerged in the world of programming—one that is rapidly evolving into a challenge for
The post “Vibe Coding” Warning: AI-Generated Code Is Making Software Unsafe appeared first on Penetration Testing Tools.
