A seemingly innocuous file transmitted via a support chat escalated into a significant crisis for DigiCert. An adversary
The post The Support Chat Trap: How a “Customer Screenshot” Led to a Critical Code-Signing Breach at DigiCert appeared first on Penetration Testing Tools.
In an ironic twist of fate, hackers attempted to coerce the architects of Grand Theft Auto, only to
The post The Billion-Dollar Blunder: How Hackers Inadvertently Sent Rockstar Games Stock Soaring with GTA Revenue Leaks appeared first on Penetration Testing Tools.
The Wasabi Protocol was divested of millions of dollars within mere minutes, a catastrophe precipitated not by a
The post Zero Delay, Total Loss: How a Compromised Key and a Disabled Timelock Cost Wasabi Protocol $5 Million appeared first on Penetration Testing Tools.
DLLHijackHunter is an automated Windows DLL hijacking detection tool that goes beyond static analysis. It discovers, validates, and confirms
The post Beyond Static Analysis: Hunt, Filter, and Confirm Hijacks with DLLHijackHunter appeared first on Penetration Testing Tools.
Trellix, a preeminent titan in the cybersecurity industry, has disclosed a breach of its internal source code repository.
The post Trellix Investigates Unauthorized Breach of Internal Source Code Repository appeared first on Penetration Testing Tools.
WhatsApp has remediated two vulnerabilities within its messaging architecture following disclosures through Meta’s bug bounty program. Both flaws
The post WhatsApp Patches “NUL Byte” Flaw and AI Media Exploits Across Windows, iOS, and Android appeared first on Penetration Testing Tools.
Wireshark has undergone a monumental security refinement, with developers remediating over forty vulnerabilities. A subset of these defects
The post Wireshark Remediates 40+ Flaws to Block Remote Code Execution via Malicious Packets appeared first on Penetration Testing Tools.
Adversaries have once again targeted the npm supply chain, though this incursion pursued a surgical and perilous objective:
The post Desert Power in the Code: How the “Mini Shai-Hulud” Malware Burrows into SAP’s npm Supply Chain appeared first on Penetration Testing Tools.
Canonical has been besieged by a protracted DDoS offensive targeting its web infrastructure, resulting in widespread disruption to
The post Pro-Iran “313 Team” Paralyses Ubuntu Infrastructure with Massive DDoS and Extortion Demands appeared first on Penetration Testing Tools.
Architects of artificial intelligence security standards are increasingly confronted by a predicament as formidable as the threats themselves:
The post Ending the AI Regulation Maze: Tech Giants and Security Titans Launch MOSAIC to Harmonize Global Standards appeared first on Penetration Testing Tools.
malware-check Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations. Analyzes source code,
The post Binary to Behavior: Decode Threats with the Unified “Malware-Check” Analysis Engine appeared first on Penetration Testing Tools.
Log Horizon connects to your Microsoft Sentinel workspace (and optionally Defender XDR), goes through every log table you’re ingesting,
The post Earning Their Keep: Audit Your Microsoft Sentinel Log Value with “Log Horizon” appeared first on Penetration Testing Tools.
The video hosting vanguard Vimeo has disclosed a security transgression impacting its user repository, precipitated by a compromise
The post Vimeo Revokes Access Following Security Breach at Third-Party Partner Anodot appeared first on Penetration Testing Tools.
The seemingly mundane git push command has emerged as a significantly more treacherous vector than conventionally presumed. A
The post The Poisoned Push: How a Hidden Flaw in Git Metadata Exposed GitHub to Remote Code Execution appeared first on Penetration Testing Tools.
MAPS Cloud Scanner A research tool for interacting with Windows Defender’s MAPS (Microsoft Active Protection Service) cloud-based file reputation and
The post Peering into the Cloud: Decode Windows Defender’s MAPS Protocol with the MAPS Cloud Scanner appeared first on Penetration Testing Tools.
Checkmarx is grappling with a distressing sequel to its March security breach, as data exfiltrated from a private
The post Supply Chain Fallout: LAPSUS$ Leaks 96GB of Stolen Checkmarx Data Following TeamPCP Breach appeared first on Penetration Testing Tools.
Corporate correspondence has once again emerged as a convenient portal for adversaries. In this nascent campaign, the assailants
The post The “Snow” Storm: How UNC6692 Uses Microsoft Teams and Email Bombing to Breach Corporate Fortresses appeared first on Penetration Testing Tools.
The GlassWorm campaign has resurfaced within the developer community, though the adversaries have adopted a more surreptitious operational
The post The Trojan Update: How “GlassWorm” Developers are Using Sleeper Extensions to Hijack Workspaces appeared first on Penetration Testing Tools.
The ubiquitous Python library elementary-data has emerged as a conduit for the exfiltration of sensitive developer telemetry. The
The post The Poisoned Pipeline: How a GitHub Actions Flaw Infiltrated the Popular “Elementary-Data” Library appeared first on Penetration Testing Tools.
A clandestine Android dropper, masquerading as a mundane PDF reader, has once again infiltrated the Google Play Store.
The post The PDF Trap: How the Anatsa Banking Trojan Infiltrated Google Play’s Top 200 Tools appeared first on Penetration Testing Tools.
