NVIDIA has issued a warning about a newly discovered vulnerability in its graphics processing units, dubbed GPUHammer. This attack, rooted in the well-known RowHammer technique, enables malicious actors to corrupt data belonging to other...
The post GPUHammer: New NVIDIA Vulnerability Threatens AI Models with Data Corruption appeared first on Penetration Testing Tools.
A hacker who siphoned $40 million in cryptocurrency from the decentralized exchange GMX has returned nearly the entire haul in exchange for a $5 million payout. The breach ranked among the largest in DeFi...
The post $40 Million Crypto Heist: GMX Hacker Returns Funds for $5M Bounty, Dodges Legal Battle appeared first on Penetration Testing Tools.
Microsoft has unveiled a new feature for Windows 11 that could prove to be a true lifeline for users when their computer suddenly fails to boot. This innovation, known as Quick Machine Recovery—or simply...
The post Windows 11 Gets “Quick Machine Recovery”: Microsoft’s New AI-Powered Auto-Fix for Boot Failures appeared first on Penetration Testing Tools.
Cybercriminals have begun leveraging GitHub to disseminate dangerous spyware disguised as a free VPN service. The malicious campaign, uncovered by researchers at Cyfirma, masqueraded as a program called “Free VPN for PC.” Instead of...
The post Warning: “Free VPN for PC” on GitHub is a Trap for Lumma Stealer Spyware appeared first on Penetration Testing Tools.
Apple has finally begun integrating support for RCS (Rich Communication Services) into its messaging system, yet it still falls short of offering full end-to-end encryption on the iPhone. Although the company pledged in March...
The post iOS 26 Beta 3: Apple Adds RCS Support, But Encryption Still Missing appeared first on Penetration Testing Tools.
GoExec is a new take on some of the methods used to gain remote execution on Windows devices. GoExec implements a number of largely unrealized execution methods and provides significant OPSEC improvements overall. Goexec supports...
The post GoExec: Next-Gen Remote Execution Tool Boosts OPSEC for Windows Attacks appeared first on Penetration Testing Tools.
Spanish police have begun casting a wary eye on users of Google Pixel smartphones, suspecting potential ties to criminal activity. In Catalonia, law enforcement officials report a growing trend of drug traffickers relying specifically...
The post GrapheneOS Under Scrutiny: Why Privacy-Focused Pixels Are Raising Police Suspicions appeared first on Penetration Testing Tools.
One of the world’s largest steel manufacturing conglomerates, the Japanese company Nippon Steel, has reported a large-scale cyberattack during which hackers gained unauthorized access to data belonging to clients, employees, and business partners. The...
The post Nippon Steel Hit by Zero-Day Cyberattack, Exposing Data of 100K+ Employees & Partners appeared first on Penetration Testing Tools.
Researchers at Huntress have observed active exploitation of a critical vulnerability in Wing FTP Server—a mere day after its public disclosure. The flaw, tracked as CVE-2025-47812, received the highest possible severity rating (CVSS 10.0),...
The post Critical Wing FTP Server Flaw (CVSS 10.0) Under Active Exploitation: Patch Now! appeared first on Penetration Testing Tools.
Jack Dorsey, co-founder of Twitter and head of Block, recently unveiled his latest endeavor—Bitchat, a messaging application envisioned as a fully decentralized communication tool, independent of traditional internet infrastructure. Instead of relying on conventional...
The post Jack Dorsey’s Bitchat: Decentralized Promise, Centralized Security Concerns appeared first on Penetration Testing Tools.
The research laboratory Security Explorations has unveiled the results of a months-long investigation exposing critical vulnerabilities at the core of eSIM technology. The focus of their analysis was a GSMA-certified eUICC card developed by...
The post Critical Flaws Expose eSIMs to Cloning and Mass Surveillance, Threatening Global Mobile Security appeared first on Penetration Testing Tools.
McDonald’s hiring system was found to be secured by a password so trivial that even a child might guess it—”123456.” Two elementary vulnerabilities granted access to the personal data of over 64 million job...
The post McDonald’s “123456” Password Exposes 64 Million Job Applicants’ Data appeared first on Penetration Testing Tools.
Four vulnerabilities within the Bluetooth stack BlueSDK, developed by OpenSynergy and collectively named PerfektBlue, pose a serious security threat to millions of vehicles. These flaws allow remote code execution on targeted devices and potentially...
The post PerfektBlue: Critical Bluetooth Flaws Expose Millions of Cars to Remote Hacks appeared first on Penetration Testing Tools.
Researchers have uncovered a new packer, Ducex, which conceals one of the most formidable mobile malware threats— the Triada Trojan—through advanced encryption and obfuscation techniques. Its analysis in the interactive sandbox environment ANY.RUN reveals...
The post Ducex Packer: The New Shield for Triada Android Trojan Evading Detection appeared first on Penetration Testing Tools.
A federal court in New York has issued a harsh ruling in a high-profile cryptocurrency theft case. Nicholas Truglia, previously convicted for his role in the cyberattack targeting entrepreneur Michael Terpin’s digital assets, has...
The post Crypto Thief Gets 12 Years: Court Cracks Down on $20M SIM Swap Fraud appeared first on Penetration Testing Tools.
Domain Coverage Analysis Tool Tool for analyzing domain security based on various data sources: LDAP domain dump NTDS.dit dump Hashcat output List modules uv run main.py -l Available modules: – reversible_encryption – passwords_reuse –...
The post Coverage: A Python-based tool for analyzing Active Directory security appeared first on Penetration Testing Tools.
A lightweight, ergonomic framework for building bug bounty-ready Cybersecurity AIs (CAIs). Why CAI? The cybersecurity landscape is undergoing a dramatic transformation as AI becomes increasingly integrated into security operations. We predict that by 2028, AI-powered...
The post Cybersecurity AI: An open Bug Bounty-ready Artificial Intelligence appeared first on Penetration Testing Tools.
Experts at SentinelOne have reported the discovery of new traces of activity linked to the ZuRu malware, which specifically targets macOS users. Its primary method of distribution is the impersonation of popular macOS applications—most...
The post ZuRu Malware: New Wave of Attacks Targets macOS Users via Fake Apps appeared first on Penetration Testing Tools.
DeviceCodePhishing This is a novel technique that leverages the well-known Device Code phishing approach. It dynamically initiates the flow as soon as the victim opens the phishing link and instantly redirects them to the...
The post DeviceCodePhishing: A New Automated Tool Bypasses MFA & FIDO for Azure Entra Users appeared first on Penetration Testing Tools.
Activision has disabled the Microsoft Store version of Call of Duty: WWII after hackers began exploiting a critical vulnerability that enabled remote access to players’ computers. The affected users were those who installed the...
The post Call of Duty: WWII Pulled from Microsoft Store Due to Critical RCE Hack appeared first on Penetration Testing Tools.
