Researchers at VUSec have unveiled Training Solo, a study that calls into question the very foundations of defenses
The post Training Solo: New Spectre-v2 Attack Bypasses Kernel and Hypervisor Defenses appeared first on Penetration Testing Tools.
Gladinet has released a security update for its enterprise CentreStack solution that remedies a local file inclusion (LFI)
The post Zero-Day Alert: Attackers Exploit New Flaw to Bypass CentreStack RCE Patch appeared first on Penetration Testing Tools.
Microsoft has revoked more than two hundred digital certificates that had been exploited in attacks involving the Rhysida
The post Microsoft Revokes 200+ Certificates Used to Disguise Rhysida Ransomware appeared first on Penetration Testing Tools.
An advertisement has surfaced on the dark web offering three terabytes of data allegedly stolen from two major
The post Dark Web Alert: Massive Data Leak from Russian SMS Aggregators Threatens Global Accounts appeared first on Penetration Testing Tools.
In recent weeks, a surge of phishing campaigns has emerged in which attackers impersonate popular password managers —
The post Phishing Campaign Targets Master Passwords of Top Managers appeared first on Penetration Testing Tools.
Microsoft has released its Digital Defense Report 2025, documenting a sharp surge in attacks targeting digital identities, the
The post The AI-Powered Threat: Microsoft Reveals Surge in Identity and Nation-State Attacks appeared first on Penetration Testing Tools.
Microsoft has unveiled a new tool designed to assess the effectiveness of artificial intelligence in cybersecurity. The platform,
The post Beyond Chatbots: Microsoft’s New Tool Measures if AI Can Think Like a Cyber Analyst appeared first on Penetration Testing Tools.
The October security updates for Windows 11 unexpectedly disrupted local HTTP/2 connections, causing applications to malfunction when attempting
The post Critical Windows 11 Update Breaks Localhost HTTP/2 Connections appeared first on Penetration Testing Tools.
The U.S. cybersecurity agency CISA has added a critical, actively exploited flaw in Adobe Experience Manager to its
The post CISA Warning: Critical Adobe Flaw Rated 10/10 Under Active Attack appeared first on Penetration Testing Tools.
Synacktiv researchers have documented a novel GNU/Linux rootkit, LinkPro, uncovered during an investigation into an AWS infrastructure compromise.
The post Stealth Innovation: LinkPro Linux Rootkit Hides via eBPF and Activates with Magic TCP Packet on Kubernetes Nodes appeared first on Penetration Testing Tools.
PolarDNS is a specialized authoritative DNS server written in Python 3.x, originally developed as a tool for security
The post PolarDNS Tool Enables Security Research by Generating Malformed and Non-Compliant DNS Responses appeared first on Penetration Testing Tools.
ScrapPY: PDF Scraping Made Easy ScrapPY is a Python utility for scraping manuals, documents, and other sensitive PDFs
The post ScrapPY: generate wordlists that can be utilized by offensive security tools appeared first on Penetration Testing Tools.
The end of support for Windows 10 has become an environmental disaster long foretold. On October 16, Microsoft
The post Windows 10 EOL Sparks E-Waste Crisis: 400 Million PCs Lose Security Support, Fueling Obsolescence appeared first on Penetration Testing Tools.
Researchers at Trend Micro have documented a large-scale operation codenamed ZeroDisco, in which attackers weaponized a critical flaw
The post Operation ZeroDisco: Critical Cisco SNMP Flaw (CVE-2025-20352) Used to Implant Linux Rootkits and Inject “Disco” Password appeared first on Penetration Testing Tools.
The internal announcement system at Harrisburg International Airport in Pennsylvania was temporarily disabled after unidentified individuals gained unauthorized
The post Harrisburg Airport PA System Hacked to Broadcast “Free Palestine” and Anti-Trump Political Message appeared first on Penetration Testing Tools.
Over the past two decades, China’s vulnerability research industry has evolved from a disorganized network of enthusiasts into
The post From Hobbyists to State Pipeline: China Centralizes Vulnerability Research and Bans Foreign Hacking Contests appeared first on Penetration Testing Tools.
RPC Investigator RPC Investigator (RPCI) is a .NET/C# Windows Forms UI application that provides an advanced discovery and
The post RPC Investigator: advanced discovery and analysis interface to Windows RPC endpoints appeared first on Penetration Testing Tools.
F5 has disclosed a serious cybersecurity incident involving the compromise of its internal systems, including the BIG-IP development
The post F5 Networks Breached by Nation-State Actor, BIG-IP Source Code and Undisclosed Vulnerabilities Stolen appeared first on Penetration Testing Tools.
A sweeping international investigation by Lighthouse Reports and thirteen media partners across Europe, Africa, and Asia has uncovered
The post Global Spy Shock: Altamides Surveillance Tool Tracked 14,000 Phones by Exploiting SS7 Protocol for Over a Decade appeared first on Penetration Testing Tools.
Mozilla is preparing to launch a built-in VPN service for Firefox, with testing already underway among a randomly
The post Firefox Begins Beta for Free Built-in VPN to Boost Privacy Amid UK Online Safety Act Enforcement appeared first on Penetration Testing Tools.
