The Tails project has released a new version of its security- and privacy-focused operating system. Update 6.18 introduces a significant enhancement that enables users to circumvent internet censorship—even in the most heavily monitored regions....
The post Tails 6.18 Unveiled: New WebTunnel Bridges Bypass Internet Censorship appeared first on Penetration Testing Tools.
RESTler What is RESTler? RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. For a given cloud service...
The post restler-fuzzer: first stateful REST API fuzzing tool appeared first on Penetration Testing Tools.
Amid the looming end of support for Windows 10 in October 2025 and the stringent hardware requirements imposed by Windows 11, many users find themselves in search of viable alternatives. One of the most...
The post Operese: New Rust Tool Simplifies Windows 10 to Linux Migration Before EOL Hits appeared first on Penetration Testing Tools.
An unusual attack targeting Linux servers has unveiled a new echelon of malware obfuscation—and possibly, its artificial origin. Researchers at AquaSec have documented a threat dubbed Koske, which hides within seemingly innocuous images of...
The post Koske Malware: AI-Generated Cryptojacker Hides in Panda Images, Targets Linux Servers with Rootkit Stealth appeared first on Penetration Testing Tools.
Law enforcement agencies have conducted a sweeping international operation to dismantle the digital infrastructure of one of the most prolific ransomware enterprises of the past decade—BlackSuit. This cybercriminal syndicate was responsible for hundreds of...
The post Operation Checkmate: BlackSuit Ransomware Sites Seized, But Is “Chaos” Their Next Rebrand? appeared first on Penetration Testing Tools.
The wave of attacks targeting vulnerabilities in Microsoft SharePoint continues to escalate, reaching levels of sophistication and scale not witnessed since the mass infections orchestrated by LockBit. According to Microsoft, the breaches are attributed...
The post SharePoint Under Siege: China-Linked Storm-2603 Unleashes Warlock Ransomware After Zero-Day Exploitation appeared first on Penetration Testing Tools.
Researchers at CYFIRMA have issued a warning about a new wave of cyberattacks leveraging malicious Android applications disguised as legitimate banking clients. These apps are designed to steal user credentials, intercept messages, and execute...
The post New Android Banking Malware Targets Indian Banks: Steals Credentials, Intercepts OTPs via Fake Apps appeared first on Penetration Testing Tools.
ropr ropr is a blazing fast multithreaded ROP Gadget finder What is an ROP Gadget? ROP (Return Oriented Programming) Gadgets are small snippets of a few assembly instructions typically ending in a ret instruction which...
The post ropr: blazing fast multithreaded ROP Gadget finder appeared first on Penetration Testing Tools.
In the first half of 2025, researchers observed the active exploitation of a new malware loader known as CastleLoader. Since its emergence, this tool has become a central element in the distribution infrastructure for...
The post CastleLoader Unleashed: New Stealthy Malware Loader Leverages ClickFix & Fake GitHub for Widespread Infections appeared first on Penetration Testing Tools.
TerraformGoat TerraformGoat is HuoCorp research lab’s “Vulnerable by Design” multi-cloud deployment tool. Currently, supported cloud vendors include Alibaba Cloud, Tencent Cloud, Huawei Cloud, Amazon Web Services, Google Cloud Platform, and Microsoft Azure. Scenarios ID...
The post TerraformGoat: “Vulnerable by Design” multi cloud deployment tool appeared first on Penetration Testing Tools.
The Leak Zone forum — widely known as a hub for publishing and distributing hacked databases, stolen credentials, and pirated software — has ironically become the source of a major data breach. According to...
The post Leak Zone Forum’s Own Elasticsearch Database Exposed, Revealing 22M+ User Records appeared first on Penetration Testing Tools.
An Arizona woman has been sentenced to eight and a half years in prison for operating a covert “laptop farm” from her home, which enabled North Korean IT operatives to impersonate American tech professionals...
The post US Woman Jailed 8.5 Years for Running “Laptop Farm” That Enabled North Korean IT Spies to Infiltrate 300+ US Firms appeared first on Penetration Testing Tools.
Six human rights organizations have filed a formal complaint with the European Commission against Alphabet, Google’s parent company, accusing it of violating the Digital Markets Act (DMA)—a cornerstone piece of EU legislation governing the...
The post Google Accused of Hiding Uninstall Options for Pre-installed Android Apps, Violating EU DMA appeared first on Penetration Testing Tools.
pretender pretender is a tool developed by RedTeam Pentesting to obtain machine-in-the-middle positions via spoofed local name resolution and DHCPv6 DNS takeover attacks. pretender primarily targets Windows hosts, as it is intended to be used...
The post pretender: relaying attacks featuring DHCPv6 DNS takeover appeared first on Penetration Testing Tools.
Cervantes is an open-source, collaborative platform designed specifically for pentesters and red teams. It serves as a comprehensive management tool, streamlining the organization of projects, clients, vulnerabilities, and reports in a single, centralized location....
The post cervantes: open-source collaborative platform for pentesters or red teams appeared first on Penetration Testing Tools.
Clorox has filed a lawsuit against the global IT services provider Cognizant, accusing the company of gross negligence that allegedly led to a devastating cyberattack in August 2023. According to the complaint, Cognizant—tasked with...
The post Clorox Sues Cognizant for $380M, Alleges Gross Negligence Led to Devastating Cyberattack appeared first on Penetration Testing Tools.
Amazon was forced to urgently withdraw a compromised version of its AI-powered programming assistant, Q, after a malicious instruction was covertly embedded into the system. This rogue directive prompted the assistant to exploit command-line...
The post Amazon Q Pulled After Malicious Pull Request Instructs AI to Delete User Files and AWS Resources appeared first on Penetration Testing Tools.
The cybercriminal group known as Mimo, previously recognized for its campaigns deploying cryptocurrency miners, has shifted its tactics, now targeting new vectors — notably the popular e-commerce platform Magento and misconfigured Docker instances. The...
The post Mimo Strikes Magento & Docker: Evolved Cybercrime Group Unleashes Stealthy Cryptojacking & Proxyjacking appeared first on Penetration Testing Tools.
Amid the growing popularity of Android smartphones in developing regions and the increasing accessibility of third-party app stores, cybercriminals have launched a large-scale campaign that combines two highly dangerous tactics—credential theft and click fraud—for...
The post Android Malware: New Campaign Blends Click Fraud & Credential Theft via Fake Apps appeared first on Penetration Testing Tools.
Microsoft has reversed its decision to end support for Windows 10 and now offers users a free one-year extension of security updates. This reprieve benefits nearly 700 million individuals who continue to rely on...
The post Microsoft Reverses Course: Free Windows 10 Security Updates Extended for One Year! appeared first on Penetration Testing Tools.
